Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b0/a66a29-51cc-4ba9-884f-f17613ea49e7/1/6ty9EeCH_nfJl9QQO_CVjQirA9E.roa
File: 6ty9EeCH_nfJl9QQO_CVjQirA9E.roa (raw, json)
Hash identifier: 52n6MCz8XsPNPPbf1mzJSwjl8NGixujhT3bDfl2oN1A=
Subject key identifier: EA:DC:BD:11:E0:87:FE:77:C9:97:D4:10:3B:F0:95:8D:08:AB:03:D1
Certificate issuer: /CN=11dd0ebff5ba38a8758b794d04d62905194a3266
Certificate serial: 03655B13
Authority key identifier: 11:DD:0E:BF:F5:BA:38:A8:75:8B:79:4D:04:D6:29:05:19:4A:32:66
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Ed0Ov_W6OKh1i3lNBNYpBRlKMmY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/b0/a66a29-51cc-4ba9-884f-f17613ea49e7/1/6ty9EeCH_nfJl9QQO_CVjQirA9E.roa
Signing time: Sat 07 May 2022 09:57:37 +0000
ROA not before: Sat 07 May 2022 09:57:37 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 209181
IP address blocks: 46.20.107.0/24 maxlen: 24
Validation: Failed, RFC 3779 resource not subset of parent's resources
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 56974099 (0x3655b13)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=11dd0ebff5ba38a8758b794d04d62905194a3266
Validity
Not Before: May 7 09:57:37 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=eadcbd11e087fe77c997d4103bf0958d08ab03d1
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8c:1f:44:0b:86:f5:3c:5c:f3:f5:08:6e:74:86:
45:4c:b1:1b:eb:02:1e:87:06:9e:b5:26:1c:0c:4f:
53:8c:6f:d3:f1:2b:b0:59:e6:49:77:70:14:c9:c7:
71:16:d1:4e:6e:64:3e:f1:15:5b:8f:b0:ce:f9:09:
56:c3:78:5a:33:da:67:32:7e:66:10:ce:2a:e0:78:
e0:73:06:d2:03:7f:8b:5b:a7:07:2d:74:1d:ad:a3:
6a:30:56:f9:c7:5c:ad:21:71:de:51:45:20:b3:89:
cb:3a:2d:64:97:d1:62:92:dd:de:ff:74:c9:64:5c:
db:97:c9:74:a8:21:96:97:2e:7f:e5:7c:8a:41:56:
7f:29:06:0c:48:ca:c3:a6:a1:7e:75:af:18:c2:94:
00:36:58:02:d8:57:bc:c5:2c:86:b4:bd:53:80:7a:
f5:1e:73:19:1c:0f:40:17:d7:4c:75:1b:36:39:f2:
de:71:17:5b:99:2e:a3:a1:9b:9a:96:c7:44:21:19:
33:d7:fa:69:32:aa:53:bc:b4:a1:fd:48:2d:77:21:
06:f3:8c:65:e5:37:d3:b8:88:47:4b:d2:1c:9b:a7:
66:4c:28:63:5f:55:ca:f0:ea:6c:ef:fb:95:ca:7c:
e9:43:b4:e5:c8:03:7f:cc:34:55:43:0c:81:16:57:
ab:17
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
EA:DC:BD:11:E0:87:FE:77:C9:97:D4:10:3B:F0:95:8D:08:AB:03:D1
X509v3 Authority Key Identifier:
keyid:11:DD:0E:BF:F5:BA:38:A8:75:8B:79:4D:04:D6:29:05:19:4A:32:66
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Ed0Ov_W6OKh1i3lNBNYpBRlKMmY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b0/a66a29-51cc-4ba9-884f-f17613ea49e7/1/6ty9EeCH_nfJl9QQO_CVjQirA9E.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/b0/a66a29-51cc-4ba9-884f-f17613ea49e7/1/Ed0Ov_W6OKh1i3lNBNYpBRlKMmY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
46.20.107.0/24
Signature Algorithm: sha256WithRSAEncryption
c7:20:32:44:a1:01:ca:76:18:95:af:1d:c0:ad:a1:c8:75:ae:
43:cd:88:12:5f:64:bf:ae:c4:88:39:09:47:10:e9:31:d6:eb:
ff:68:b5:e1:43:89:f2:59:1f:43:9b:e3:2e:8b:04:9e:d3:5a:
ea:66:32:99:16:32:a2:ef:16:62:18:8a:4f:e7:3f:6b:a8:04:
5b:45:f0:81:c8:dd:cb:a6:0a:02:39:10:98:37:20:4f:16:f3:
cd:7b:15:ff:ec:fc:68:db:91:b0:25:49:36:ed:19:85:74:fd:
f6:b1:78:02:6b:c4:0b:d3:99:6a:09:20:96:09:4f:78:f0:80:
1b:37:5c:12:82:48:8c:a7:b1:44:8a:8b:f2:64:4a:37:a1:c8:
54:f2:3b:09:be:d1:a4:ee:94:05:11:90:37:d1:38:f7:a6:c8:
c7:0d:d9:15:5a:1e:15:e3:e5:9a:6e:78:e5:45:13:d4:6d:0f:
49:30:16:30:43:16:c6:aa:14:4a:89:bc:f4:c7:a6:a7:46:bd:
07:7e:59:92:6f:fa:11:12:f1:df:be:e4:0f:fa:07:07:e2:5a:
ee:7a:2c:22:71:c5:fe:99:f3:bd:b6:18:fc:d0:37:62:58:38:
c2:c4:eb:10:7d:f2:fc:5f:d2:37:07:24:18:cb:c7:cb:3c:7d:
a0:b5:81:ec
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jul 20 00:02:22 2023 by rpki-client on console-fra.rpki-client.org