Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/70/405bbd-5913-4e95-8e75-fe0659176a56/1/i2q4yd66GQhqSZdJsWlsqODmbBQ.roa
File: i2q4yd66GQhqSZdJsWlsqODmbBQ.roa (raw, json)
Hash identifier: ZuM30kbPZLIiq6GaYcsmoxVUEMIle8OmwMLlVa/TyTI=
Subject key identifier: 8B:6A:B8:C9:DE:BA:19:08:6A:49:97:49:B1:69:6C:A8:E0:E6:6C:14
Certificate issuer: /CN=2ac3daa1b14850f2e61c592b2191915a5e65a478
Certificate serial: 1354D144
Authority key identifier: 2A:C3:DA:A1:B1:48:50:F2:E6:1C:59:2B:21:91:91:5A:5E:65:A4:78
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/KsPaobFIUPLmHFkrIZGRWl5lpHg.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/70/405bbd-5913-4e95-8e75-fe0659176a56/1/i2q4yd66GQhqSZdJsWlsqODmbBQ.roa
Signing time: Thu 06 Jan 2022 12:30:54 +0000
ROA not before: Thu 06 Jan 2022 12:30:54 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 31732
IP address blocks: 212.90.100.0/22 maxlen: 24
185.220.236.0/22 maxlen: 24
45.139.6.0/23 maxlen: 24
193.36.72.0/23 maxlen: 23
193.36.84.0/23 maxlen: 23
46.249.97.0/24 maxlen: 24
46.249.98.0/23 maxlen: 23
46.249.104.0/21 maxlen: 21
46.249.100.0/22 maxlen: 22
46.249.112.0/21 maxlen: 21
45.150.140.0/22 maxlen: 22
188.209.155.0/24 maxlen: 24
82.115.0.0/21 maxlen: 24
185.59.114.0/23 maxlen: 24
185.36.192.0/22 maxlen: 22
185.129.108.0/22 maxlen: 24
Validation: Failed, RFC 3779 resource not subset of parent's resources
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 324325700 (0x1354d144)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2ac3daa1b14850f2e61c592b2191915a5e65a478
Validity
Not Before: Jan 6 12:30:54 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=8b6ab8c9deba19086a499749b1696ca8e0e66c14
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a4:f1:92:c1:a0:a1:ef:3b:8e:df:54:44:6b:3a:
3f:b5:70:7d:ec:71:2e:1a:ff:e4:9d:57:f7:55:d7:
f5:8f:b2:8f:3a:b8:97:ec:5b:71:22:30:d5:f3:2d:
ed:ca:77:1c:86:22:f3:63:e9:73:e5:37:90:5f:46:
7e:c2:14:64:58:f0:43:7c:0b:b9:49:6e:e0:ef:44:
af:86:f5:e5:79:d5:b7:09:21:2f:bf:a0:15:79:9d:
08:84:75:ea:fa:f4:dd:02:f8:ad:a9:ad:0b:28:c7:
10:60:ce:54:96:6b:c1:c2:4e:d0:f1:36:9d:23:4c:
cd:bd:30:9c:4f:13:ee:b8:a0:b5:13:d8:06:d8:ef:
20:07:89:75:aa:ac:20:4f:25:99:89:2c:b0:38:cf:
7b:ba:30:1d:56:44:8a:c3:3d:9a:57:79:78:3c:d5:
68:af:a5:48:66:39:4d:1f:d2:41:db:5d:93:c4:08:
0b:77:96:cc:20:a3:14:a5:8d:7b:79:fe:59:01:57:
89:75:fc:41:c2:7b:ed:41:78:88:6a:21:13:f0:c2:
73:f4:5b:73:4a:90:a8:27:5e:d2:9a:00:fe:63:08:
31:94:c8:de:fc:c5:6c:1a:e8:b8:dd:17:b4:14:58:
48:c8:00:94:a1:d0:59:98:21:a6:db:68:3a:53:78:
ca:cf
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
8B:6A:B8:C9:DE:BA:19:08:6A:49:97:49:B1:69:6C:A8:E0:E6:6C:14
X509v3 Authority Key Identifier:
keyid:2A:C3:DA:A1:B1:48:50:F2:E6:1C:59:2B:21:91:91:5A:5E:65:A4:78
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/KsPaobFIUPLmHFkrIZGRWl5lpHg.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/70/405bbd-5913-4e95-8e75-fe0659176a56/1/i2q4yd66GQhqSZdJsWlsqODmbBQ.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/70/405bbd-5913-4e95-8e75-fe0659176a56/1/KsPaobFIUPLmHFkrIZGRWl5lpHg.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
45.139.6.0/23
45.150.140.0/22
46.249.97.0-46.249.119.255
82.115.0.0/21
185.36.192.0/22
185.59.114.0/23
185.129.108.0/22
185.220.236.0/22
188.209.155.0/24
193.36.72.0/23
193.36.84.0/23
212.90.100.0/22
Signature Algorithm: sha256WithRSAEncryption
b4:9f:38:5e:92:f2:97:7c:7c:f0:cf:d5:32:2d:ed:cd:b0:1d:
c0:6d:4b:91:7b:fd:46:a1:72:2e:00:b0:12:32:93:b3:4d:4f:
2d:3f:d3:96:79:76:39:08:c8:71:be:fd:44:c0:bb:55:f7:51:
db:67:f3:1c:94:eb:e4:c1:df:4c:d0:12:72:a3:0a:7d:1d:2a:
8c:88:08:ae:fc:bf:22:72:84:00:c9:c6:2b:8e:80:1a:15:e3:
44:32:d4:49:a2:71:69:a3:29:78:f1:c0:eb:40:22:82:d3:64:
6e:84:84:41:ef:d7:49:64:ba:ab:f5:e1:99:5a:69:60:9e:88:
19:73:43:96:a1:9d:20:e6:b1:4e:c1:7c:30:73:10:dc:0e:27:
61:d1:64:c9:e1:8c:d1:13:79:92:2c:b2:5b:ce:ab:82:3b:6a:
6e:29:f7:8c:2e:59:2d:89:33:23:e1:4c:76:15:83:28:05:86:
1d:ee:24:df:12:81:75:b0:10:c9:77:4d:9b:00:f2:5d:be:c7:
8b:16:e6:f0:d6:36:09:21:f2:7c:b8:92:41:57:56:52:27:ca:
46:ac:4d:91:87:f1:2e:69:75:d1:af:34:4f:c8:c9:67:33:4c:
dd:f2:af:d0:e8:1a:d8:b9:27:ee:56:8e:52:73:e0:09:40:9d:
87:c8:3e:b7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jul 20 00:01:24 2023 by rpki-client on console-ams.rpki-client.org