Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/61/ce21b3-c4de-456d-b538-97975d34fc6c/1/JdV7tQMlW85J0ya6ng82wJyxYBQ.roa
File: JdV7tQMlW85J0ya6ng82wJyxYBQ.roa (raw, json)
Hash identifier: dSgTLZxssyb2bdtL+PZrxDD7Jm2Mzm1FC7DBOmxpRJ4=
Subject key identifier: 25:D5:7B:B5:03:25:5B:CE:49:D3:26:BA:9E:0F:36:C0:9C:B1:60:14
Certificate issuer: /CN=4148cbad1748205b4f4334bba638c64c2b21fc0e
Certificate serial: 016B2C65
Authority key identifier: 41:48:CB:AD:17:48:20:5B:4F:43:34:BB:A6:38:C6:4C:2B:21:FC:0E
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/QUjLrRdIIFtPQzS7pjjGTCsh_A4.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/61/ce21b3-c4de-456d-b538-97975d34fc6c/1/JdV7tQMlW85J0ya6ng82wJyxYBQ.roa
Signing time: Sat 01 Jan 2022 15:56:06 +0000
ROA not before: Sat 01 Jan 2022 15:56:06 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 196936
IP address blocks: 46.149.66.0/23 maxlen: 23
46.149.68.0/22 maxlen: 22
46.149.72.0/21 maxlen: 21
178.217.96.0/21 maxlen: 21
176.98.176.0/20 maxlen: 20
Validation: Failed, RFC 3779 resource not subset of parent's resources
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 23800933 (0x16b2c65)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4148cbad1748205b4f4334bba638c64c2b21fc0e
Validity
Not Before: Jan 1 15:56:06 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=25d57bb503255bce49d326ba9e0f36c09cb16014
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c1:b1:e0:79:dd:50:22:98:94:49:8d:21:24:73:
88:ed:5e:87:02:d5:18:65:5c:35:0d:60:0b:90:96:
78:9c:25:3f:23:73:e0:6a:3f:b0:c0:39:9c:f5:13:
fc:7c:76:39:44:35:a7:3a:6c:32:c1:9d:b2:a5:95:
5b:7c:30:1f:ee:c4:19:9d:44:b2:13:28:a6:de:92:
9b:cc:cd:ce:f5:0a:2a:9f:28:f5:5b:47:8a:16:c0:
df:ec:53:07:d6:7e:62:7f:bf:72:0e:b5:65:80:ee:
7b:53:e1:80:d0:53:08:01:06:da:ff:41:ad:47:64:
86:91:1d:25:94:c7:94:8f:e8:04:a9:f7:c2:73:35:
81:3d:b0:1e:17:5c:3c:47:05:ec:c2:b3:59:4e:c3:
ee:c5:41:0d:15:49:e7:bc:f6:fb:1f:4d:b9:02:b0:
d0:8a:58:68:d5:eb:40:be:e3:94:c5:39:b3:1f:c3:
29:75:84:1d:93:cf:6a:d0:23:3a:e5:25:e0:5c:cd:
9b:4f:89:1f:79:49:ba:d8:c6:f9:61:2f:0a:c0:ee:
81:c5:49:7c:3a:48:e6:c3:a1:c7:58:ce:39:dc:05:
0b:0d:6e:a0:15:ae:7b:f4:0f:e2:8d:d4:c0:b6:05:
4a:77:a1:c7:a0:ea:cd:e6:8c:73:b5:e4:11:64:c1:
6e:0b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
25:D5:7B:B5:03:25:5B:CE:49:D3:26:BA:9E:0F:36:C0:9C:B1:60:14
X509v3 Authority Key Identifier:
keyid:41:48:CB:AD:17:48:20:5B:4F:43:34:BB:A6:38:C6:4C:2B:21:FC:0E
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/QUjLrRdIIFtPQzS7pjjGTCsh_A4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/61/ce21b3-c4de-456d-b538-97975d34fc6c/1/JdV7tQMlW85J0ya6ng82wJyxYBQ.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/61/ce21b3-c4de-456d-b538-97975d34fc6c/1/QUjLrRdIIFtPQzS7pjjGTCsh_A4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
46.149.66.0-46.149.79.255
176.98.176.0/20
178.217.96.0/21
Signature Algorithm: sha256WithRSAEncryption
7f:31:45:5b:fd:87:3c:75:10:18:8d:07:1e:a6:99:04:d0:6d:
94:b4:bc:57:44:90:e5:8b:96:ae:0c:02:e3:1a:21:f9:2a:40:
38:5c:f1:03:ee:3b:4d:8c:f5:31:df:c3:08:71:00:51:3f:d3:
a0:1e:65:1d:6e:0b:75:26:8f:8a:8a:bf:51:ff:f4:f4:42:9f:
8b:88:46:f4:c1:b0:c6:b8:b9:a9:ab:ab:06:c4:1b:7a:60:ed:
60:ea:61:3b:ee:70:05:3a:4d:af:73:d9:ba:9d:ca:f4:76:4c:
ab:45:22:70:dc:0c:b1:ca:d1:78:53:9a:03:47:fa:ab:89:74:
c2:30:0f:94:ef:a2:49:b0:05:e2:38:f9:0b:1c:9a:75:ee:ab:
24:91:24:6d:5c:16:75:3c:74:2a:aa:f2:25:62:18:90:8b:c2:
58:f4:39:3a:64:81:fe:a6:f5:5f:33:79:30:71:76:15:a3:c0:
cf:bf:3a:9f:92:19:8d:1b:42:d9:f8:1d:fa:2e:9e:36:44:5e:
66:14:92:cf:4d:ac:f0:96:20:76:22:6e:60:96:f2:fb:14:37:
5a:3e:ad:66:a5:32:10:3d:24:d6:76:26:07:98:f1:55:e1:7a:
40:bf:33:59:35:8d:55:5e:44:f4:07:27:f3:86:83:08:b0:76:
c6:34:41:b3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Feb 17 07:33:17 2025 by rpki-client