Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/69/e55e30-97c6-40e6-81b7-507011570ee6/1/B443dbnWVH1orqLJo2Qzu9MS9lY.roa
File: B443dbnWVH1orqLJo2Qzu9MS9lY.roa (raw, json)
Hash identifier: ZrCPxKfD/bUh9vIZj+gUfqIRK6tyFrMGnAs8bUMJ1mg=
Subject key identifier: 07:8E:37:75:B9:D6:54:7D:68:AE:A2:C9:A3:64:33:BB:D3:12:F6:56
Certificate issuer: /CN=a04845af1dc0087b274cee52a4a9e0880335435d
Certificate serial: 01856C1374E978228FEEC6F191DFE1E339FA
Authority key identifier: A0:48:45:AF:1D:C0:08:7B:27:4C:EE:52:A4:A9:E0:88:03:35:43:5D
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/oEhFrx3ACHsnTO5SpKngiAM1Q10.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/69/e55e30-97c6-40e6-81b7-507011570ee6/1/B443dbnWVH1orqLJo2Qzu9MS9lY.roa
Signing time: Sun 01 Jan 2023 06:44:52 +0000
ROA not before: Sun 01 Jan 2023 06:44:52 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 42910
IP address blocks: 46.235.11.0/24 maxlen: 32
46.235.9.0/24 maxlen: 24
46.235.8.0/24 maxlen: 32
46.235.10.0/24 maxlen: 32
46.235.15.0/24 maxlen: 24
46.235.12.0/24 maxlen: 32
46.235.13.0/24 maxlen: 24
185.113.223.0/24 maxlen: 32
185.113.220.0/22 maxlen: 32
185.23.73.0/24 maxlen: 32
185.23.72.0/24 maxlen: 32
185.23.75.0/24 maxlen: 32
185.23.74.0/24 maxlen: 32
178.210.162.0/24 maxlen: 24
178.210.161.0/24 maxlen: 24
178.210.160.0/24 maxlen: 24
178.210.165.0/24 maxlen: 24
178.210.164.0/24 maxlen: 24
178.210.163.0/24 maxlen: 24
178.210.166.0/24 maxlen: 24
178.210.172.0/24 maxlen: 24
178.210.171.0/24 maxlen: 24
178.210.170.0/24 maxlen: 24
178.210.169.0/24 maxlen: 24
178.210.168.0/24 maxlen: 24
178.210.167.0/24 maxlen: 24
178.210.176.0/24 maxlen: 24
178.210.175.0/24 maxlen: 24
178.210.174.0/24 maxlen: 24
178.210.173.0/24 maxlen: 24
178.210.177.0/24 maxlen: 24
178.210.178.0/24 maxlen: 32
178.210.179.0/24 maxlen: 32
178.210.181.0/24 maxlen: 24
178.210.180.0/24 maxlen: 24
Validation: Failed, RFC 3779 resource not subset of parent's resources
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:85:6c:13:74:e9:78:22:8f:ee:c6:f1:91:df:e1:e3:39:fa
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=a04845af1dc0087b274cee52a4a9e0880335435d
Validity
Not Before: Jan 1 06:44:52 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=078e3775b9d6547d68aea2c9a36433bbd312f656
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a6:e6:0e:ca:cf:cc:cf:d3:b9:fd:93:ad:cb:52:
4a:fb:c1:05:8a:42:45:cc:31:24:1a:5c:b4:3b:88:
18:13:12:40:d7:0f:ef:53:92:d9:6a:2c:bd:9b:80:
f4:39:ba:91:21:30:0e:d6:86:88:3b:e7:e6:1c:2e:
b2:2b:4a:00:5b:f0:67:6b:ea:41:f9:37:62:05:3f:
5f:fb:05:7b:74:33:0c:11:5c:56:57:47:28:37:c9:
3f:04:49:db:4e:4d:b5:42:58:9d:68:8d:25:2d:8c:
e6:85:ad:d9:4f:e5:98:9d:84:8c:4b:ab:bf:80:ff:
04:b1:5b:78:3b:2a:eb:cf:73:57:98:de:35:1a:b9:
ec:5f:0d:b4:43:77:fb:2e:f6:ab:03:d6:c7:7d:35:
23:78:23:ca:e8:b4:82:ed:a9:24:a6:22:33:3a:af:
9e:ef:86:6b:72:80:01:76:05:5d:e4:14:53:40:22:
3a:38:94:ec:3a:e2:a0:bd:7b:95:f7:09:30:d8:1e:
5c:ac:96:09:99:b7:de:ad:bb:25:98:ff:9d:72:6e:
59:0d:aa:4f:e4:1a:f3:49:a3:2f:72:84:a3:6a:99:
67:96:4b:de:d8:87:23:8f:07:ee:a4:a4:5f:dd:6f:
c2:d7:41:b2:ab:7c:67:89:0b:30:08:7b:89:84:45:
33:fb
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
07:8E:37:75:B9:D6:54:7D:68:AE:A2:C9:A3:64:33:BB:D3:12:F6:56
X509v3 Authority Key Identifier:
keyid:A0:48:45:AF:1D:C0:08:7B:27:4C:EE:52:A4:A9:E0:88:03:35:43:5D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/oEhFrx3ACHsnTO5SpKngiAM1Q10.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/69/e55e30-97c6-40e6-81b7-507011570ee6/1/B443dbnWVH1orqLJo2Qzu9MS9lY.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/69/e55e30-97c6-40e6-81b7-507011570ee6/1/oEhFrx3ACHsnTO5SpKngiAM1Q10.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
46.235.8.0-46.235.13.255
46.235.15.0/24
178.210.160.0-178.210.181.255
185.23.72.0/22
185.113.220.0/22
Signature Algorithm: sha256WithRSAEncryption
a9:15:2f:37:2a:72:07:64:c9:2d:90:9d:3f:a1:28:a9:e3:fb:
ae:5c:d9:93:67:85:0a:02:4e:e7:f4:15:f0:09:ac:0c:ca:19:
a3:a8:67:ed:b6:2c:86:7e:dc:69:f8:98:1e:80:89:d7:de:98:
88:7c:f5:ce:4e:59:f1:5d:4e:4d:d8:5d:f8:2c:bf:55:76:59:
a9:ba:45:c2:3e:49:ce:22:de:d3:af:d5:61:7f:c5:d0:ba:bd:
f4:b5:4d:a0:5a:5c:4f:4f:7c:39:9f:af:fd:13:0b:32:e8:0d:
33:bf:a0:aa:dd:13:7f:c9:d7:86:7f:5d:dc:f9:65:1a:ff:87:
da:21:dd:b6:83:f4:43:bf:cc:9d:4b:71:9a:79:5f:85:f8:15:
75:f5:71:ee:aa:e2:a6:3c:4f:2e:5e:3d:9a:7e:b0:aa:cc:9e:
5b:38:3f:f4:52:0b:7c:9b:88:d3:76:32:c1:ea:06:69:a7:18:
3c:21:e0:6b:91:83:a0:13:91:15:fc:32:8c:d9:28:0a:63:4d:
63:d8:cb:1a:fb:5b:a3:a8:91:63:6b:69:59:b5:61:11:d0:9c:
7a:99:bd:70:ac:c6:c1:b1:58:3c:76:1c:b2:1a:5d:ff:7c:e8:
d4:fe:03:52:39:e7:fc:5b:41:2e:72:e3:87:c7:40:4a:64:e7:
de:34:e5:75
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 19:15:56 2024 by rpki-client on console-ams.rpki-client.org