Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b0/a66a29-51cc-4ba9-884f-f17613ea49e7/1/5rJDxfXDUK2ZtkVRnWd23SsNdvg.roa
File: 5rJDxfXDUK2ZtkVRnWd23SsNdvg.roa (raw, json)
Hash identifier: ejSVbsd+gh7j2bQZoKz0SJvP0sIZLRjxlJfn3WgDFvc=
Subject key identifier: E6:B2:43:C5:F5:C3:50:AD:99:B6:45:51:9D:67:76:DD:2B:0D:76:F8
Certificate issuer: /CN=11dd0ebff5ba38a8758b794d04d62905194a3266
Certificate serial: 0183C3CDA1BC9A6A87F88E497D7E5A6C8540
Authority key identifier: 11:DD:0E:BF:F5:BA:38:A8:75:8B:79:4D:04:D6:29:05:19:4A:32:66
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Ed0Ov_W6OKh1i3lNBNYpBRlKMmY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/b0/a66a29-51cc-4ba9-884f-f17613ea49e7/1/5rJDxfXDUK2ZtkVRnWd23SsNdvg.roa
Signing time: Mon 10 Oct 2022 21:29:36 +0000
ROA not before: Mon 10 Oct 2022 21:29:36 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 34458
IP address blocks: 46.20.108.0/24 maxlen: 24
46.20.106.0/24 maxlen: 24
46.20.111.0/24 maxlen: 24
46.20.110.0/24 maxlen: 24
46.20.97.0/24 maxlen: 24
46.20.104.0/24 maxlen: 24
46.20.105.0/24 maxlen: 24
46.20.101.0/24 maxlen: 24
185.160.194.0/24 maxlen: 24
185.160.195.0/24 maxlen: 24
185.100.170.0/24 maxlen: 24
185.100.171.0/24 maxlen: 24
185.100.168.0/24 maxlen: 24
185.100.169.0/24 maxlen: 24
185.169.222.0/24 maxlen: 24
185.169.221.0/24 maxlen: 24
185.169.223.0/24 maxlen: 24
Validation: Failed, RFC 3779 resource not subset of parent's resources
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:83:c3:cd:a1:bc:9a:6a:87:f8:8e:49:7d:7e:5a:6c:85:40
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=11dd0ebff5ba38a8758b794d04d62905194a3266
Validity
Not Before: Oct 10 21:29:36 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=e6b243c5f5c350ad99b645519d6776dd2b0d76f8
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:83:72:69:56:e8:49:02:63:60:00:28:7d:8f:47:
80:d8:3f:39:77:76:22:8d:79:0d:34:d1:38:7e:a2:
60:5d:5a:ae:7f:4f:06:5d:9c:32:c9:82:93:58:7a:
4e:f4:c8:b8:e1:34:7a:8b:a0:a2:f1:65:9f:9d:2a:
98:50:c7:f8:a4:f3:23:9b:9e:2a:fd:ee:47:71:15:
40:71:26:8b:b2:be:16:72:43:ca:bd:ec:85:b9:25:
2e:ed:13:b0:fb:88:36:76:73:73:5a:98:54:da:91:
33:38:24:c2:4c:79:3c:48:3d:a3:c1:ac:2e:43:e6:
86:35:bc:02:af:5f:20:39:9b:82:fe:a2:63:1d:21:
6b:a1:8d:99:24:61:4c:76:2a:98:b6:10:a5:c7:f8:
c3:50:0f:90:96:66:56:06:49:57:52:49:72:16:5a:
3f:01:06:fb:9a:61:c4:bf:19:fa:50:8c:60:97:49:
ee:9a:27:f8:88:ff:d0:e3:00:18:dd:81:25:fa:59:
b2:28:45:b4:2a:f4:4e:ac:26:70:91:f7:0c:c8:59:
ac:7b:4c:11:64:5d:d0:81:89:5c:87:87:c4:07:e2:
f7:85:eb:be:7a:83:f8:a0:df:56:39:41:2c:cb:c7:
fc:8e:9d:f0:82:b5:63:16:63:64:d2:66:f6:17:e0:
82:b1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E6:B2:43:C5:F5:C3:50:AD:99:B6:45:51:9D:67:76:DD:2B:0D:76:F8
X509v3 Authority Key Identifier:
keyid:11:DD:0E:BF:F5:BA:38:A8:75:8B:79:4D:04:D6:29:05:19:4A:32:66
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Ed0Ov_W6OKh1i3lNBNYpBRlKMmY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b0/a66a29-51cc-4ba9-884f-f17613ea49e7/1/5rJDxfXDUK2ZtkVRnWd23SsNdvg.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/b0/a66a29-51cc-4ba9-884f-f17613ea49e7/1/Ed0Ov_W6OKh1i3lNBNYpBRlKMmY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
46.20.97.0/24
46.20.101.0/24
46.20.104.0-46.20.106.255
46.20.108.0/24
46.20.110.0/23
185.100.168.0/22
185.160.194.0/23
185.169.221.0-185.169.223.255
Signature Algorithm: sha256WithRSAEncryption
09:e5:c5:43:21:89:c8:43:0a:78:31:5d:d3:22:7e:17:5c:84:
e4:50:ca:61:08:dd:3e:52:24:f9:dd:03:33:6f:a4:e5:a4:f4:
d6:45:ce:25:32:8e:de:60:82:bc:05:31:8e:62:cb:39:0d:59:
7b:ab:7b:4b:2f:33:c0:25:a9:fb:f3:70:55:e2:d7:da:e0:f5:
1d:e3:35:7d:34:ab:67:e1:b8:56:41:19:ae:68:63:af:54:57:
b4:59:02:4c:03:94:16:cc:c9:78:b9:e0:3d:09:ed:3e:f7:0a:
e3:3f:85:ac:db:8a:80:df:a3:8f:5a:55:38:84:fd:68:e1:3b:
25:71:03:1e:89:12:de:fa:07:f2:b6:49:be:5f:03:c9:11:c0:
57:d0:b1:9d:ae:17:cf:82:a8:b5:b2:a0:d7:98:f1:cb:78:e3:
93:15:45:0c:1a:9b:2d:b3:87:19:68:b1:a8:03:0b:44:fb:1e:
e0:98:66:48:ab:b6:d9:73:21:b8:b0:21:25:6d:e2:72:79:3e:
2b:f3:22:e1:dd:04:97:55:e3:6d:68:dd:aa:34:7e:25:01:09:
38:d2:12:3e:bd:e9:ad:62:2e:dd:5e:7a:9c:77:7d:39:37:76:
3e:a2:9c:53:40:84:bf:29:97:ec:83:41:2e:41:6d:8e:4e:9b:
19:43:bd:00
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jul 20 00:02:22 2023 by rpki-client on console-fra.rpki-client.org