Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/62/43ff8f-cd54-4cf1-8aaf-4be18ef128b4/1/BljUn68g1I1Fw1I1V1qBCxXi9Ec.roa
File: BljUn68g1I1Fw1I1V1qBCxXi9Ec.roa (raw, json)
Hash identifier: 7QNNSDa9Y9Cd+sXLU5UjuCyeFxHosRNpGV4rzo/KEqw=
Subject key identifier: 06:58:D4:9F:AF:20:D4:8D:45:C3:52:35:57:5A:81:0B:15:E2:F4:47
Certificate issuer: /CN=94166b704843d3d9754095c83a91b493828200a2
Certificate serial: 09FEBA8C
Authority key identifier: 94:16:6B:70:48:43:D3:D9:75:40:95:C8:3A:91:B4:93:82:82:00:A2
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/lBZrcEhD09l1QJXIOpG0k4KCAKI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/62/43ff8f-cd54-4cf1-8aaf-4be18ef128b4/1/BljUn68g1I1Fw1I1V1qBCxXi9Ec.roa
Signing time: Mon 07 Feb 2022 18:29:30 +0000
ROA not before: Mon 07 Feb 2022 18:29:30 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 834
IP address blocks: 171.22.146.0/24 maxlen: 24
91.103.120.0/21 maxlen: 24
185.235.71.0/24 maxlen: 24
95.111.128.0/19 maxlen: 24
185.149.12.0/22 maxlen: 24
89.46.96.0/22 maxlen: 24
Validation: Failed, RFC 3779 resource not subset of parent's resources
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 167688844 (0x9feba8c)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=94166b704843d3d9754095c83a91b493828200a2
Validity
Not Before: Feb 7 18:29:30 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=0658d49faf20d48d45c35235575a810b15e2f447
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b0:50:db:fd:db:b4:47:bf:8c:3d:2c:c2:ea:8c:
e0:0f:11:d6:af:1e:de:bb:71:1f:f7:08:e5:73:08:
fa:c0:64:8f:9f:04:0a:d8:bc:ec:35:04:7a:9b:ac:
45:9b:40:ca:49:07:06:0f:41:ca:8d:c6:a5:58:77:
71:2c:6b:4e:a4:95:04:67:b3:20:3c:1f:48:bb:66:
00:ed:3d:ff:32:0f:7d:de:9d:1b:5e:d7:e8:69:67:
51:ec:75:70:78:78:57:d0:1c:9f:fc:b9:7a:5d:f5:
fc:c8:fc:1d:6f:f8:8f:c3:e2:a8:ae:09:67:0c:5e:
b1:26:67:e5:3f:58:d5:1d:0a:9b:7e:8d:30:36:05:
8e:01:c5:fa:4f:b2:da:2b:3e:13:b5:9c:e8:14:d1:
99:e4:1c:af:9c:9f:d4:c3:2c:48:1c:cf:4e:02:d5:
52:65:46:b3:0e:f4:21:51:2f:92:3d:2a:90:42:4d:
18:f6:dc:2c:1e:c6:d6:21:63:31:ab:cf:b3:e3:43:
38:04:dd:76:b9:06:71:49:70:09:f7:73:63:ba:7c:
0c:6d:7c:e5:93:ab:29:e9:e8:4b:22:f2:de:a2:d2:
da:3c:a8:f0:83:14:ed:62:89:9d:d0:1d:08:36:fd:
4c:da:8a:63:93:61:02:f2:b1:c0:2b:39:9d:0b:70:
92:29
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
06:58:D4:9F:AF:20:D4:8D:45:C3:52:35:57:5A:81:0B:15:E2:F4:47
X509v3 Authority Key Identifier:
keyid:94:16:6B:70:48:43:D3:D9:75:40:95:C8:3A:91:B4:93:82:82:00:A2
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/lBZrcEhD09l1QJXIOpG0k4KCAKI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/62/43ff8f-cd54-4cf1-8aaf-4be18ef128b4/1/BljUn68g1I1Fw1I1V1qBCxXi9Ec.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/62/43ff8f-cd54-4cf1-8aaf-4be18ef128b4/1/lBZrcEhD09l1QJXIOpG0k4KCAKI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
89.46.96.0/22
91.103.120.0/21
95.111.128.0/19
171.22.146.0/24
185.149.12.0/22
185.235.71.0/24
Signature Algorithm: sha256WithRSAEncryption
37:5f:4f:bc:9a:ae:16:98:74:c6:6a:13:87:76:2a:bf:21:c8:
55:be:3d:f1:53:c7:c7:ef:f4:1d:4a:4c:c8:d2:4f:49:bf:13:
59:d4:d3:78:09:d6:64:8d:fa:b8:17:91:d1:36:5c:3e:c0:0c:
7e:29:7a:47:6e:f4:cc:2c:5d:59:44:98:5d:83:35:f0:69:3d:
8e:43:79:71:db:76:06:f6:f3:70:b4:c4:2e:6a:0e:93:c8:fb:
ba:ec:7c:a6:5e:05:21:8f:85:29:9a:9d:ca:cd:70:ec:29:53:
ed:38:17:f9:c7:df:fd:bf:b8:3d:52:33:28:b2:83:ce:9b:94:
75:f1:d7:e4:d3:ba:c9:fd:6d:46:2b:77:73:4a:8d:8e:ee:52:
4c:89:b9:f9:b6:0a:92:c1:98:58:54:f1:a4:8e:2c:f5:1f:6d:
26:66:c2:7e:ec:e5:2f:56:10:c5:10:17:49:ca:ea:0e:6a:52:
73:99:e1:52:4c:e1:1e:b9:57:a8:1a:32:e6:54:34:f3:9b:74:
49:49:18:f4:75:2d:3d:13:38:55:a1:1b:04:cc:30:96:67:8d:
7e:21:5c:a3:24:31:0e:e2:ba:23:9e:a0:43:09:a2:26:aa:fa:
3a:c2:1e:bc:14:95:8a:0d:fb:fe:ef:7c:e1:c5:ef:02:c2:02:
6b:60:94:3c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jul 20 00:00:42 2023 by rpki-client on console-ams.rpki-client.org