Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/70/405bbd-5913-4e95-8e75-fe0659176a56/1/EePOJxqE1iD_Y1NeOpT4c0EggJI.roa
File: EePOJxqE1iD_Y1NeOpT4c0EggJI.roa (raw, json)
Hash identifier: K65mGteZo0B2wfaEeWf7JOk+tu7G4ihigv/b1D3Cu58=
Subject key identifier: 11:E3:CE:27:1A:84:D6:20:FF:63:53:5E:3A:94:F8:73:41:20:80:92
Certificate issuer: /CN=2ac3daa1b14850f2e61c592b2191915a5e65a478
Certificate serial: 157C6402
Authority key identifier: 2A:C3:DA:A1:B1:48:50:F2:E6:1C:59:2B:21:91:91:5A:5E:65:A4:78
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/KsPaobFIUPLmHFkrIZGRWl5lpHg.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/70/405bbd-5913-4e95-8e75-fe0659176a56/1/EePOJxqE1iD_Y1NeOpT4c0EggJI.roa
Signing time: Fri 24 Jun 2022 13:45:33 +0000
ROA not before: Fri 24 Jun 2022 13:45:33 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 7018
IP address blocks: 185.220.236.0/22 maxlen: 24
45.146.240.0/23 maxlen: 24
45.146.242.0/23 maxlen: 24
213.173.32.0/22 maxlen: 24
185.36.192.0/22 maxlen: 22
185.129.116.0/22 maxlen: 24
Validation: Failed, RFC 3779 resource not subset of parent's resources
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 360473602 (0x157c6402)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2ac3daa1b14850f2e61c592b2191915a5e65a478
Validity
Not Before: Jun 24 13:45:33 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=11e3ce271a84d620ff63535e3a94f87341208092
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bd:14:7e:6a:41:19:30:d7:2d:dc:3a:79:bf:b0:
2c:17:7c:6f:d9:ea:97:b9:e8:9d:1e:5d:25:8d:50:
93:bd:70:70:30:3c:ab:ef:1e:99:62:86:6b:b9:46:
95:f1:a2:cb:31:3b:d3:8b:0b:cd:04:aa:81:dc:43:
d7:f1:c3:73:18:54:66:4c:48:2a:33:03:31:23:38:
fd:c9:17:0a:eb:e0:9d:d8:7b:cd:d3:e9:78:2c:05:
89:d6:34:d0:b9:09:10:5f:7d:b2:f0:29:f9:a4:3c:
41:ce:66:52:70:de:63:ba:31:8a:4f:97:c7:55:d9:
7d:68:ab:4b:40:60:f8:45:0f:4f:df:45:fd:6e:d5:
c2:51:06:80:c3:93:de:1c:53:0b:d5:ad:f0:5f:b5:
84:70:df:84:61:f4:b0:87:d5:54:73:74:f4:18:ca:
8b:6a:d5:17:1b:d7:97:26:41:ef:2e:f3:32:3d:e5:
73:c2:ee:0f:b5:f5:c7:ed:14:1c:07:05:a4:8e:00:
03:09:c9:6c:cc:52:61:e2:43:a1:60:ea:cb:0a:6f:
6c:b5:4d:43:67:ce:de:d6:1f:35:3e:d7:1f:0a:e4:
4f:61:41:87:74:9c:f1:44:87:19:89:d7:5d:65:b6:
09:ec:65:18:97:bc:5a:3c:16:b0:41:64:f1:a2:46:
37:2b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
11:E3:CE:27:1A:84:D6:20:FF:63:53:5E:3A:94:F8:73:41:20:80:92
X509v3 Authority Key Identifier:
keyid:2A:C3:DA:A1:B1:48:50:F2:E6:1C:59:2B:21:91:91:5A:5E:65:A4:78
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/KsPaobFIUPLmHFkrIZGRWl5lpHg.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/70/405bbd-5913-4e95-8e75-fe0659176a56/1/EePOJxqE1iD_Y1NeOpT4c0EggJI.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/70/405bbd-5913-4e95-8e75-fe0659176a56/1/KsPaobFIUPLmHFkrIZGRWl5lpHg.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
45.146.240.0/22
185.36.192.0/22
185.129.116.0/22
185.220.236.0/22
213.173.32.0/22
Signature Algorithm: sha256WithRSAEncryption
4d:6b:67:d6:db:f5:e5:cc:62:12:94:e2:34:6c:57:37:dc:6f:
60:f1:58:6e:e9:1c:9e:6c:00:50:61:47:cb:7e:f6:e0:60:56:
bd:19:65:c3:d8:c4:48:73:f2:7b:2e:8e:bc:9b:fb:37:5c:b3:
71:ed:01:52:5b:bd:e7:42:54:31:00:6c:68:d1:3c:c6:56:04:
0d:49:1f:2a:42:56:4d:e8:aa:92:f2:e2:3a:46:97:25:a9:e8:
42:c5:6c:48:15:a3:f0:ea:0c:df:57:75:85:f0:6f:76:65:fb:
90:e1:b0:22:72:e5:55:a3:27:43:f6:7e:25:14:19:a1:76:8a:
cb:e7:7a:b3:0a:8a:eb:c4:b0:36:7c:c8:cf:58:3b:39:d2:c3:
bd:2d:7e:fd:e2:9d:ed:b2:1b:b1:bd:19:f6:3e:73:b7:46:b0:
68:01:4c:c0:da:d3:58:de:90:82:a1:11:af:39:81:20:56:78:
bf:a9:55:13:37:f9:02:ef:78:42:42:39:52:3b:49:a2:af:80:
fc:aa:49:ed:57:02:23:8f:be:35:92:67:12:5f:78:e1:af:ff:
5f:cd:31:59:f2:b0:4b:3e:1c:d4:35:a9:ec:38:12:23:30:f0:
7b:51:d9:7c:f9:e9:9d:e4:93:19:c0:81:54:7c:25:e8:f8:5e:
7f:08:d6:af
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jul 20 00:01:24 2023 by rpki-client on console-ams.rpki-client.org