Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b0/a66a29-51cc-4ba9-884f-f17613ea49e7/1/GAiXsHxGsU_l0JhFrgT7n6LlTmk.roa
File: GAiXsHxGsU_l0JhFrgT7n6LlTmk.roa (raw, json)
Hash identifier: ZP1QGChmpY+vnhhDtauZKGJbAJ6ZmmRq7T9YnqUeY/s=
Subject key identifier: 18:08:97:B0:7C:46:B1:4F:E5:D0:98:45:AE:04:FB:9F:A2:E5:4E:69
Certificate issuer: /CN=11dd0ebff5ba38a8758b794d04d62905194a3266
Certificate serial: 02CA0BBC
Authority key identifier: 11:DD:0E:BF:F5:BA:38:A8:75:8B:79:4D:04:D6:29:05:19:4A:32:66
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Ed0Ov_W6OKh1i3lNBNYpBRlKMmY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/b0/a66a29-51cc-4ba9-884f-f17613ea49e7/1/GAiXsHxGsU_l0JhFrgT7n6LlTmk.roa
Signing time: Thu 10 Mar 2022 05:14:41 +0000
ROA not before: Thu 10 Mar 2022 05:14:41 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 35913
IP address blocks: 46.20.109.0/24 maxlen: 24
46.20.107.0/24 maxlen: 24
185.160.195.0/24 maxlen: 24
46.20.98.0/24 maxlen: 24
185.169.220.0/24 maxlen: 24
46.20.103.0/24 maxlen: 24
46.20.102.0/24 maxlen: 24
46.20.99.0/24 maxlen: 24
46.20.100.0/24 maxlen: 24
Validation: Failed, RFC 3779 resource not subset of parent's resources
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 46795708 (0x2ca0bbc)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=11dd0ebff5ba38a8758b794d04d62905194a3266
Validity
Not Before: Mar 10 05:14:41 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=180897b07c46b14fe5d09845ae04fb9fa2e54e69
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c2:98:c2:20:f8:9d:e9:14:a7:20:16:3a:11:b3:
86:03:0f:56:11:6a:46:45:7c:3c:5b:bc:22:b5:9b:
7d:d2:fa:8a:1e:2a:a4:11:47:21:91:8c:36:5e:fe:
80:92:9c:28:05:b9:d5:39:64:48:45:2e:61:e4:dc:
9a:1c:9f:cf:ea:5d:db:e1:2f:d7:4e:18:a2:29:18:
55:75:dd:b2:8a:d2:9b:34:b6:6b:6b:36:26:f9:24:
a4:3a:10:70:4e:22:f7:e5:a3:83:8d:cb:76:47:34:
0c:d2:0b:9b:aa:bd:ad:8c:7b:e5:4c:45:3b:9a:7f:
fb:6e:a6:91:4a:77:1b:c8:37:6f:da:43:f3:b9:fe:
3d:38:90:b9:be:1f:6a:9d:a5:d5:81:66:d6:02:c2:
fb:bd:ab:7d:40:63:4d:2a:5b:c7:df:7e:d7:92:5e:
06:d6:fc:38:1f:e2:f4:a4:ab:c7:ef:a4:34:80:e5:
b4:cf:4f:4c:a2:b2:c4:ad:71:0e:3f:2a:7e:43:30:
72:9d:47:f6:cb:9a:44:eb:96:48:98:de:52:04:72:
cb:fe:c3:ed:b3:91:3d:de:da:3f:ad:17:f3:0d:2b:
b1:a6:0f:dd:88:9e:29:2e:20:ae:60:af:79:19:4f:
d6:f9:90:68:db:8a:ff:3d:6b:36:5d:85:46:c9:0e:
35:f7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
18:08:97:B0:7C:46:B1:4F:E5:D0:98:45:AE:04:FB:9F:A2:E5:4E:69
X509v3 Authority Key Identifier:
keyid:11:DD:0E:BF:F5:BA:38:A8:75:8B:79:4D:04:D6:29:05:19:4A:32:66
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Ed0Ov_W6OKh1i3lNBNYpBRlKMmY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b0/a66a29-51cc-4ba9-884f-f17613ea49e7/1/GAiXsHxGsU_l0JhFrgT7n6LlTmk.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/b0/a66a29-51cc-4ba9-884f-f17613ea49e7/1/Ed0Ov_W6OKh1i3lNBNYpBRlKMmY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
46.20.98.0-46.20.100.255
46.20.102.0/23
46.20.107.0/24
46.20.109.0/24
185.160.195.0/24
185.169.220.0/24
Signature Algorithm: sha256WithRSAEncryption
bf:71:0d:d5:a8:7a:c6:ee:6a:c8:2e:35:e4:db:90:bd:90:7d:
80:0c:16:d6:79:39:96:58:56:7a:08:f7:c9:c1:da:b9:67:51:
14:6b:9d:c3:18:07:1a:f0:85:21:32:e7:60:b2:25:4a:1d:a9:
35:a7:ec:00:60:8e:a9:ce:52:96:17:ad:97:2d:e4:04:28:a2:
eb:bc:31:31:46:8c:c6:c9:6e:49:35:86:18:55:43:70:d9:e6:
2c:5f:e4:8c:63:5d:8a:92:12:19:f5:f2:8c:61:3d:8f:d9:04:
d5:ff:19:a9:aa:ba:9b:5d:2c:a6:1a:ab:c4:a1:67:c9:c0:13:
76:c8:bd:46:c3:b4:0f:1f:99:84:5a:d7:6a:0d:08:1e:09:21:
a8:22:9f:50:3b:c4:69:0c:97:84:eb:64:ce:25:17:16:cc:bb:
86:14:03:9b:a1:c1:1f:fe:25:aa:64:e5:f8:0b:b6:94:39:82:
f0:39:6e:2e:86:ac:0f:ad:27:5a:dc:8a:86:19:68:0e:63:8e:
60:bf:cc:11:5b:4c:bb:d2:0a:96:54:a4:13:2a:35:e2:cd:b9:
fe:c1:8a:43:5d:60:ca:90:e5:23:d9:32:3c:b2:03:35:95:7a:
bd:3a:e9:e0:1b:99:04:df:62:5d:ff:58:46:15:78:13:28:08:
e6:a4:b7:cb
-----BEGIN CERTIFICATE-----
MIIFFTCCA/2gAwIBAgIEAsoLvDANBgkqhkiG9w0BAQsFADAzMTEwLwYDVQQDEygx
MWRkMGViZmY1YmEzOGE4NzU4Yjc5NGQwNGQ2MjkwNTE5NGEzMjY2MB4XDTIyMDMx
MDA1MTQ0MVoXDTIzMDcwMTAwMDAwMFowMzExMC8GA1UEAxMoMTgwODk3YjA3YzQ2
YjE0ZmU1ZDA5ODQ1YWUwNGZiOWZhMmU1NGU2OTCCASIwDQYJKoZIhvcNAQEBBQAD
ggEPADCCAQoCggEBAMKYwiD4nekUpyAWOhGzhgMPVhFqRkV8PFu8IrWbfdL6ih4q
pBFHIZGMNl7+gJKcKAW51TlkSEUuYeTcmhyfz+pd2+Ev104YoikYVXXdsorSmzS2
a2s2JvkkpDoQcE4i9+Wjg43Ldkc0DNILm6q9rYx75UxFO5p/+26mkUp3G8g3b9pD
87n+PTiQub4fap2l1YFm1gLC+72rfUBjTSpbx99+15JeBtb8OB/i9KSrx++kNIDl
tM9PTKKyxK1xDj8qfkMwcp1H9suaROuWSJjeUgRyy/7D7bORPd7aP60X8w0rsaYP
3YieKS4grmCveRlP1vmQaNuK/z1rNl2FRskONfcCAwEAAaOCAi8wggIrMB0GA1Ud
DgQWBBQYCJewfEaxT+XQmEWuBPufouVOaTAfBgNVHSMEGDAWgBQR3Q6/9bo4qHWL
eU0E1ikFGUoyZjAOBgNVHQ8BAf8EBAMCB4AwZAYIKwYBBQUHAQEEWDBWMFQGCCsG
AQUFBzAChkhyc3luYzovL3Jwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxU
L0VkME92X1c2T0toMWkzbE5CTllwQlJsS01tWS5jZXIwgY0GCCsGAQUFBwELBIGA
MH4wfAYIKwYBBQUHMAuGcHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5
L0RFRkFVTFQvYjAvYTY2YTI5LTUxY2MtNGJhOS04ODRmLWYxNzYxM2VhNDllNy8x
L0dBaVhzSHhHc1VfbDBKaEZyZ1Q3bjZMbFRtay5yb2EwgYEGA1UdHwR6MHgwdqB0
oHKGcHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvYjAv
YTY2YTI5LTUxY2MtNGJhOS04ODRmLWYxNzYxM2VhNDllNy8xL0VkME92X1c2T0to
MWkzbE5CTllwQlJsS01tWS5jcmwwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjBF
BggrBgEFBQcBBwEB/wQ2MDQwMgQCAAEwLDAMAwQBLhRiAwQALhRkAwQBLhRmAwQA
LhRrAwQALhRtAwQAuaDDAwQAuancMA0GCSqGSIb3DQEBCwUAA4IBAQC/cQ3VqHrG
7mrILjXk25C9kH2ADBbWeTmWWFZ6CPfJwdq5Z1EUa53DGAca8IUhMudgsiVKHak1
p+wAYI6pzlKWF62XLeQEKKLrvDExRozGyW5JNYYYVUNw2eYsX+SMY12KkhIZ9fKM
YT2P2QTV/xmpqrqbXSymGqvEoWfJwBN2yL1Gw7QPH5mEWtdqDQgeCSGoIp9QO8Rp
DJeE62TOJRcWzLuGFAObocEf/iWqZOX4C7aUOYLwOW4uhqwPrSda3IqGGWgOY45g
v8wRW0y70gqWVKQTKjXizbn+wYpDXWDKkOUj2TI8sgM1lXq9OungG5kE32Jd/1hG
FXgTKAjmpLfL
-----END CERTIFICATE-----
Generated at Thu Jun 6 19:38:59 2024 by rpki-client on console-ams.rpki-client.org