Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/69/e55e30-97c6-40e6-81b7-507011570ee6/1/7YYttvJZTU3JKruQMNLMpVNAQrE.roa
File: 7YYttvJZTU3JKruQMNLMpVNAQrE.roa (raw, json)
Hash identifier: LPATUZwqyxN0oYL4eboZjuVzHKxB7OoAmOOJ07Z+aEc=
Subject key identifier: ED:86:2D:B6:F2:59:4D:4D:C9:2A:BB:90:30:D2:CC:A5:53:40:42:B1
Certificate issuer: /CN=a04845af1dc0087b274cee52a4a9e0880335435d
Certificate serial: 018A02AA5AE0C2032B48D2515FC4CBE60193
Authority key identifier: A0:48:45:AF:1D:C0:08:7B:27:4C:EE:52:A4:A9:E0:88:03:35:43:5D
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/oEhFrx3ACHsnTO5SpKngiAM1Q10.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/69/e55e30-97c6-40e6-81b7-507011570ee6/1/7YYttvJZTU3JKruQMNLMpVNAQrE.roa
Signing time: Thu 17 Aug 2023 08:43:53 +0000
ROA not before: Thu 17 Aug 2023 08:43:53 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 42910
IP address blocks: 46.235.11.0/24 maxlen: 32
46.235.9.0/24 maxlen: 24
46.235.8.0/24 maxlen: 32
46.235.10.0/24 maxlen: 32
46.235.15.0/24 maxlen: 24
46.235.12.0/24 maxlen: 32
46.235.13.0/24 maxlen: 24
185.23.73.0/24 maxlen: 32
185.23.72.0/24 maxlen: 32
185.23.75.0/24 maxlen: 32
185.23.74.0/24 maxlen: 32
178.210.162.0/24 maxlen: 24
178.210.161.0/24 maxlen: 24
178.210.160.0/24 maxlen: 24
178.210.165.0/24 maxlen: 24
178.210.164.0/24 maxlen: 24
178.210.163.0/24 maxlen: 24
178.210.166.0/24 maxlen: 24
178.210.172.0/24 maxlen: 24
178.210.171.0/24 maxlen: 24
178.210.170.0/24 maxlen: 24
178.210.169.0/24 maxlen: 24
178.210.168.0/24 maxlen: 24
178.210.167.0/24 maxlen: 24
178.210.176.0/24 maxlen: 24
178.210.175.0/24 maxlen: 24
178.210.174.0/24 maxlen: 24
178.210.173.0/24 maxlen: 24
178.210.177.0/24 maxlen: 24
178.210.178.0/24 maxlen: 32
178.210.179.0/24 maxlen: 32
178.210.181.0/24 maxlen: 24
178.210.180.0/24 maxlen: 24
Validation: Failed, RFC 3779 resource not subset of parent's resources
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8a:02:aa:5a:e0:c2:03:2b:48:d2:51:5f:c4:cb:e6:01:93
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=a04845af1dc0087b274cee52a4a9e0880335435d
Validity
Not Before: Aug 17 08:43:53 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=ed862db6f2594d4dc92abb9030d2cca5534042b1
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:93:bc:13:30:b2:dd:d2:dc:f8:c4:20:24:7c:11:
66:be:77:30:66:58:3b:7e:7d:39:59:25:e0:3a:71:
e9:2d:90:ef:e5:e7:aa:16:6e:74:8d:fa:21:32:ec:
6e:23:cc:b8:3c:eb:58:0f:3d:5c:53:17:2e:0f:be:
ff:47:ce:45:66:a3:d0:16:39:ba:17:f5:38:d8:1b:
fd:2c:5c:84:ae:47:13:64:6c:5a:89:b8:93:f4:b6:
17:24:7c:46:60:e8:ee:3a:af:33:68:6e:f6:c2:e9:
ee:ff:99:61:95:b0:39:2a:a7:7f:2e:c7:85:73:53:
30:12:cd:20:7b:6c:3e:74:fa:ab:a5:bc:b3:a2:ad:
81:e6:4c:42:84:24:c6:a1:40:0c:7d:5c:dd:50:bd:
65:9d:98:04:3f:c1:10:5f:84:48:62:b3:8f:13:32:
d3:4e:2b:7e:80:b1:ed:2d:d7:c6:ce:87:68:4d:48:
c5:39:75:58:37:ca:e5:93:9d:2d:84:2a:d2:e3:ff:
14:3e:e5:5c:4b:95:40:0c:22:6c:e0:d4:98:21:d0:
81:62:a7:23:b5:6d:9d:86:fd:12:78:70:19:32:e1:
b2:11:10:2e:90:ce:5d:9d:c3:d5:cc:4e:63:2d:29:
e0:8c:08:e0:b8:7f:43:85:1b:e4:51:1d:79:43:aa:
ca:17
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
ED:86:2D:B6:F2:59:4D:4D:C9:2A:BB:90:30:D2:CC:A5:53:40:42:B1
X509v3 Authority Key Identifier:
keyid:A0:48:45:AF:1D:C0:08:7B:27:4C:EE:52:A4:A9:E0:88:03:35:43:5D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/oEhFrx3ACHsnTO5SpKngiAM1Q10.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/69/e55e30-97c6-40e6-81b7-507011570ee6/1/7YYttvJZTU3JKruQMNLMpVNAQrE.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/69/e55e30-97c6-40e6-81b7-507011570ee6/1/oEhFrx3ACHsnTO5SpKngiAM1Q10.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
46.235.8.0-46.235.13.255
46.235.15.0/24
178.210.160.0-178.210.181.255
185.23.72.0/22
Signature Algorithm: sha256WithRSAEncryption
5a:cd:e5:fa:f4:20:9e:68:32:9b:b4:7f:f7:ad:96:26:16:19:
42:78:83:96:2a:8f:ee:ac:a1:7b:bb:4c:23:3f:05:85:ca:cc:
0f:aa:85:0b:4e:4b:f8:2f:ba:a1:94:bf:34:8d:23:54:9c:92:
3d:4c:69:f7:27:da:71:6d:29:a9:fa:66:f7:53:5a:4d:70:63:
ad:10:0c:4a:33:df:33:1c:23:98:6d:fa:82:86:e2:23:47:1e:
4b:cb:40:8a:6b:ff:c3:22:c7:d6:c9:2a:2d:eb:64:65:99:5c:
1a:6c:68:25:13:35:1f:84:23:b3:2e:aa:9f:b2:f2:58:dd:6d:
64:b5:b0:d5:90:49:e7:e5:20:7b:a2:44:c3:63:d9:4f:fe:41:
6f:ae:ab:76:01:b2:e3:a8:26:07:50:77:62:95:19:ac:c1:02:
95:91:1e:e4:fa:ca:c4:56:43:83:6a:03:36:f2:ac:32:7b:c2:
ef:57:ff:14:07:5b:2a:25:7a:44:65:bd:fb:dd:19:91:ba:17:
55:4e:6a:6c:ae:14:84:38:40:d3:ab:8d:eb:e5:46:8f:e0:71:
b3:c9:fc:9d:8e:92:63:5e:a0:a6:c0:17:d1:a4:a6:d1:46:43:
8a:71:78:bc:48:d6:68:dc:9a:ea:bf:0f:8f:10:ee:7c:51:a8:
63:0a:4e:ea
-----BEGIN CERTIFICATE-----
MIIFHzCCBAegAwIBAgISAYoCqlrgwgMrSNJRX8TL5gGTMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGEwNDg0NWFmMWRjMDA4N2IyNzRjZWU1MmE0YTllMDg4MDMz
NTQzNWQwHhcNMjMwODE3MDg0MzUzWhcNMjQwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EyhlZDg2MmRiNmYyNTk0ZDRkYzkyYWJiOTAzMGQyY2NhNTUzNDA0MmIxMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAk7wTMLLd0tz4xCAkfBFmvncwZlg7
fn05WSXgOnHpLZDv5eeqFm50jfohMuxuI8y4POtYDz1cUxcuD77/R85FZqPQFjm6
F/U42Bv9LFyErkcTZGxaibiT9LYXJHxGYOjuOq8zaG72wunu/5lhlbA5Kqd/LseF
c1MwEs0ge2w+dPqrpbyzoq2B5kxChCTGoUAMfVzdUL1lnZgEP8EQX4RIYrOPEzLT
Tit+gLHtLdfGzodoTUjFOXVYN8rlk50thCrS4/8UPuVcS5VADCJs4NSYIdCBYqcj
tW2dhv0SeHAZMuGyERAukM5dncPVzE5jLSngjAjguH9DhRvkUR15Q6rKFwIDAQAB
o4ICKzCCAicwHQYDVR0OBBYEFO2GLbbyWU1NySq7kDDSzKVTQEKxMB8GA1UdIwQY
MBaAFKBIRa8dwAh7J0zuUqSp4IgDNUNdMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvb0VoRnJ4M0FDSHNuVE81U3BLbmdpQU0xUTEwLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC82OS9lNTVlMzAtOTdjNi00MGU2LTgxYjct
NTA3MDExNTcwZWU2LzEvN1lZdHR2SlpUVTNKS3J1UU1OTE1wVk5BUXJFLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC82OS9lNTVlMzAtOTdjNi00MGU2LTgxYjctNTA3MDExNTcwZWU2
LzEvb0VoRnJ4M0FDSHNuVE81U3BLbmdpQU0xUTEwLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMEEGCCsGAQUFBwEHAQH/BDIwMDAuBAIAATAoMAwDBAMu6wgD
BAEu6wwDBAAu6w8wDAMEBbLSoAMEAbLStAMEArkXSDANBgkqhkiG9w0BAQsFAAOC
AQEAWs3l+vQgnmgym7R/962WJhYZQniDliqP7qyhe7tMIz8FhcrMD6qFC05L+C+6
oZS/NI0jVJySPUxp9yfacW0pqfpm91NaTXBjrRAMSjPfMxwjmG36gobiI0ceS8tA
imv/wyLH1skqLetkZZlcGmxoJRM1H4Qjsy6qn7LyWN1tZLWw1ZBJ5+Uge6JEw2PZ
T/5Bb66rdgGy46gmB1B3YpUZrMEClZEe5PrKxFZDg2oDNvKsMnvC71f/FAdbKiV6
RGW9+90ZkboXVU5qbK4UhDhA06uN6+VGj+Bxs8n8nY6SY16gpsAX0aSm0UZDinF4
vEjWaNya6r8PjxDufFGoYwpO6g==
-----END CERTIFICATE-----
Generated at Thu Mar 13 20:03:02 2025 by rpki-client