Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/65/321cdc-2143-4b5c-9733-16699c96dd5e/1/rrC6TqgPweDlCsz_r9QZ8ZXSF_I.roa
File: rrC6TqgPweDlCsz_r9QZ8ZXSF_I.roa (raw, json)
Hash identifier: UcV3E2qbP7d6JetB6C6E1fv3qC7ARRfKWQTGekUGGoE=
Subject key identifier: AE:B0:BA:4E:A8:0F:C1:E0:E5:0A:CC:FF:AF:D4:19:F1:95:D2:17:F2
Certificate issuer: /CN=885b857706dac54e20ca0d11bd6416cb634203b4
Certificate serial: 37C3779A
Authority key identifier: 88:5B:85:77:06:DA:C5:4E:20:CA:0D:11:BD:64:16:CB:63:42:03:B4
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/iFuFdwbaxU4gyg0RvWQWy2NCA7Q.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/65/321cdc-2143-4b5c-9733-16699c96dd5e/1/rrC6TqgPweDlCsz_r9QZ8ZXSF_I.roa
Signing time: Thu 17 Mar 2022 16:38:24 +0000
ROA not before: Thu 17 Mar 2022 16:38:24 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 30738
IP address blocks: 46.8.60.0/22 maxlen: 24
195.211.53.0/24 maxlen: 24
109.248.196.0/22 maxlen: 24
195.2.226.0/23 maxlen: 23
188.130.254.0/24 maxlen: 24
188.130.182.0/24 maxlen: 24
2001:1468:8000::/36 maxlen: 36
2001:1468::/32 maxlen: 33
Validation: Failed, RFC 3779 resource not subset of parent's resources
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 935557018 (0x37c3779a)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=885b857706dac54e20ca0d11bd6416cb634203b4
Validity
Not Before: Mar 17 16:38:24 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=aeb0ba4ea80fc1e0e50accffafd419f195d217f2
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a7:d8:40:b9:03:0e:44:f5:55:37:b5:43:cf:61:
a2:15:38:a8:1a:59:4a:ba:ba:e5:33:ad:d2:9f:5b:
01:d2:5e:98:82:c2:e7:ee:33:f0:e2:28:7a:13:e5:
0f:c6:e9:a9:be:62:c8:33:9c:af:9b:9e:13:3c:53:
c7:27:3d:ea:6f:ef:93:cf:c0:2c:dd:61:c1:ae:25:
9f:f0:36:34:37:7d:5b:97:f4:33:9d:70:a8:24:bc:
03:a0:42:1c:77:69:7a:59:2d:73:1b:91:c6:0a:81:
a1:f9:51:74:49:7f:29:d0:fb:23:a5:c9:2e:90:ad:
63:99:82:ce:97:ec:ff:59:2a:52:33:12:58:2c:f0:
60:81:44:3d:e5:6d:30:49:ad:37:e4:69:a8:4f:71:
b8:05:54:93:15:8a:e4:4c:07:35:0f:2c:c1:a9:c3:
5b:31:de:0e:22:64:e1:be:3b:29:c5:d1:5f:9a:ad:
68:5f:e4:07:a0:84:c4:6d:7c:02:23:5b:ec:79:e2:
c0:84:bb:67:4d:78:e8:50:dc:45:5f:35:46:24:69:
7b:20:db:c0:00:47:e1:90:9e:9b:75:48:89:5b:bf:
fd:ec:a5:22:5d:b0:c4:dd:a0:66:40:6c:35:61:cf:
b0:ce:7b:b4:92:0d:7d:5f:bc:c6:47:e2:98:12:0b:
cb:1d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
AE:B0:BA:4E:A8:0F:C1:E0:E5:0A:CC:FF:AF:D4:19:F1:95:D2:17:F2
X509v3 Authority Key Identifier:
keyid:88:5B:85:77:06:DA:C5:4E:20:CA:0D:11:BD:64:16:CB:63:42:03:B4
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/iFuFdwbaxU4gyg0RvWQWy2NCA7Q.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/65/321cdc-2143-4b5c-9733-16699c96dd5e/1/rrC6TqgPweDlCsz_r9QZ8ZXSF_I.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/65/321cdc-2143-4b5c-9733-16699c96dd5e/1/iFuFdwbaxU4gyg0RvWQWy2NCA7Q.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
46.8.60.0/22
109.248.196.0/22
188.130.182.0/24
188.130.254.0/24
195.2.226.0/23
195.211.53.0/24
IPv6:
2001:1468::/32
Signature Algorithm: sha256WithRSAEncryption
0f:ff:d0:9e:30:82:21:eb:93:00:7f:29:50:55:72:67:c4:92:
c3:2b:dd:22:c7:55:4b:39:57:20:14:aa:41:b4:56:3d:57:74:
d2:7b:a9:89:53:7f:af:0f:7c:b7:1b:0e:3c:4b:61:4c:bd:17:
fd:23:04:9d:d4:c8:54:45:a2:53:1a:83:13:23:02:40:46:d8:
da:d2:54:ef:ac:a8:fa:ec:05:65:60:57:e0:1c:e5:c9:22:42:
18:52:fe:f9:cb:31:00:23:77:b0:15:0b:01:71:48:1c:9b:61:
c5:11:3b:fa:66:d5:04:a1:61:53:1a:6b:4c:cd:a5:ac:d5:be:
e6:87:9c:d4:e0:c3:3d:1e:81:98:cb:59:5a:aa:cf:d6:94:8e:
91:d7:bd:a7:f2:33:14:ba:a1:02:cd:f0:b8:02:44:5e:e3:75:
61:a3:c5:61:08:58:74:13:28:6e:ba:dd:99:6d:6a:a3:d3:5d:
eb:e1:af:47:0f:52:e7:d5:b4:29:0d:22:54:e0:4d:9d:d0:ec:
a4:c6:e9:f9:55:8f:ac:b2:95:53:2d:53:f0:ec:95:f1:85:b8:
6b:7a:ca:2c:b6:52:68:28:a6:34:56:89:76:2f:74:4f:69:83:
37:cc:20:0a:a1:93:8d:6f:59:fd:01:49:4d:f7:86:39:f9:63:
cf:79:f0:24
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 19:15:00 2024 by rpki-client on console-ams.rpki-client.org