Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/70/405bbd-5913-4e95-8e75-fe0659176a56/1/7ktt_S87cQdi80GbksdXtmbZZng.roa
File: 7ktt_S87cQdi80GbksdXtmbZZng.roa (raw, json)
Hash identifier: rhJCWHc0q7TQrc9nPvb9DNdKiIUuqcY5jAbD5awgyQM=
Subject key identifier: EE:4B:6D:FD:2F:3B:71:07:62:F3:41:9B:92:C7:57:B6:66:D9:66:78
Certificate issuer: /CN=2ac3daa1b14850f2e61c592b2191915a5e65a478
Certificate serial: 13D1C2E3
Authority key identifier: 2A:C3:DA:A1:B1:48:50:F2:E6:1C:59:2B:21:91:91:5A:5E:65:A4:78
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/KsPaobFIUPLmHFkrIZGRWl5lpHg.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/70/405bbd-5913-4e95-8e75-fe0659176a56/1/7ktt_S87cQdi80GbksdXtmbZZng.roa
Signing time: Fri 18 Feb 2022 23:39:31 +0000
ROA not before: Fri 18 Feb 2022 23:39:31 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 31732
IP address blocks: 212.90.100.0/22 maxlen: 24
185.220.236.0/22 maxlen: 24
188.209.155.0/24 maxlen: 24
45.139.6.0/23 maxlen: 24
193.36.72.0/23 maxlen: 23
185.59.114.0/23 maxlen: 24
46.249.97.0/24 maxlen: 24
46.249.98.0/23 maxlen: 23
46.249.104.0/21 maxlen: 21
46.249.100.0/22 maxlen: 22
185.129.108.0/22 maxlen: 24
46.249.112.0/21 maxlen: 21
Validation: Failed, RFC 3779 resource not subset of parent's resources
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 332514019 (0x13d1c2e3)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2ac3daa1b14850f2e61c592b2191915a5e65a478
Validity
Not Before: Feb 18 23:39:31 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=ee4b6dfd2f3b710762f3419b92c757b666d96678
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c3:f6:99:2d:5c:ec:08:df:0e:ce:96:2d:45:ec:
30:c9:49:42:15:1a:3b:02:40:9a:67:6d:1a:04:70:
30:04:49:95:ef:0c:74:75:d4:2c:14:42:71:58:48:
58:3e:92:0b:46:56:ce:31:bd:36:6b:4e:0d:5a:a6:
60:30:8f:94:49:58:5c:46:d0:fc:cd:68:9d:50:ea:
d2:2a:2d:33:4e:00:b3:4a:25:7a:73:e3:d1:bb:e0:
bb:90:63:14:c1:19:a0:0e:c7:76:b9:86:16:36:82:
d4:fc:de:9a:3b:62:3c:72:13:6b:4f:6d:e5:54:42:
cb:c1:6d:0a:5b:d3:f3:2b:a4:d5:f8:ee:a4:a7:21:
f6:6b:61:7d:cc:ed:03:bb:78:cb:2b:df:aa:af:0e:
6a:60:c8:da:fa:cc:f2:9d:f8:81:d4:dc:4a:03:15:
c2:a0:17:3a:42:7e:78:bc:a8:db:82:7d:d4:b8:fc:
8e:3d:1b:34:53:b3:5b:26:8e:37:94:ec:55:f8:c3:
fd:dd:9f:68:16:de:e6:2d:38:4b:91:22:69:df:57:
e4:66:88:ef:40:a3:b9:72:1c:a4:bc:f0:7f:3a:02:
9e:c9:fc:19:a2:74:62:56:ec:15:b5:d0:88:77:f3:
be:e1:c2:c7:61:8e:1d:0a:7c:e3:69:5b:0c:34:00:
3a:5f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
EE:4B:6D:FD:2F:3B:71:07:62:F3:41:9B:92:C7:57:B6:66:D9:66:78
X509v3 Authority Key Identifier:
keyid:2A:C3:DA:A1:B1:48:50:F2:E6:1C:59:2B:21:91:91:5A:5E:65:A4:78
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/KsPaobFIUPLmHFkrIZGRWl5lpHg.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/70/405bbd-5913-4e95-8e75-fe0659176a56/1/7ktt_S87cQdi80GbksdXtmbZZng.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/70/405bbd-5913-4e95-8e75-fe0659176a56/1/KsPaobFIUPLmHFkrIZGRWl5lpHg.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
45.139.6.0/23
46.249.97.0-46.249.119.255
185.59.114.0/23
185.129.108.0/22
185.220.236.0/22
188.209.155.0/24
193.36.72.0/23
212.90.100.0/22
Signature Algorithm: sha256WithRSAEncryption
27:64:57:a9:42:55:13:da:6a:10:cc:c7:b1:7c:21:09:82:9e:
49:79:43:40:59:ae:bf:7d:dd:99:80:c8:e8:b0:a3:4c:77:65:
41:21:d0:93:91:d7:0e:3b:74:c1:33:4c:38:5d:77:d2:fe:3f:
35:ac:14:d2:2f:f4:c8:ee:1f:3b:98:a0:9c:ed:62:25:d9:8a:
86:1b:2d:f6:f7:00:18:54:dc:04:7a:68:61:94:7a:3d:d6:43:
0b:a7:59:e0:62:50:38:4c:5e:35:e9:7c:0f:b8:ac:25:7f:fb:
4a:c6:5a:69:a9:54:52:fd:e5:aa:96:39:23:85:b4:8e:15:4f:
cc:ab:58:3b:89:70:64:ee:fb:9c:66:ef:98:0a:6e:b1:d6:05:
71:5e:3f:e7:0e:bf:b9:39:e5:b3:95:76:da:46:d9:08:50:1e:
0e:f8:b8:b1:ca:cf:7b:1b:59:d7:8e:1c:95:39:23:70:f0:6b:
e1:98:c6:a3:12:d7:6b:08:bf:97:a1:3d:98:da:fc:33:78:3a:
96:c1:d9:c1:09:f5:8e:3c:2b:db:52:69:18:6c:02:d3:cd:df:
97:ab:bf:b7:e6:79:ec:60:11:05:e2:f2:22:b9:a1:af:2c:a3:
39:a3:db:b8:be:6f:eb:05:7e:b7:ec:ce:a2:5a:34:63:86:8f:
90:e3:24:f8
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jul 20 00:01:24 2023 by rpki-client on console-ams.rpki-client.org