Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b0/a66a29-51cc-4ba9-884f-f17613ea49e7/1/YBILOqY1dui0qldZh6LKWCsxt5o.roa
File: YBILOqY1dui0qldZh6LKWCsxt5o.roa (raw, json)
Hash identifier: BAqxryquGSE7ggmX0iaE2QxNnU3TiO+IRdnGx9yho5I=
Subject key identifier: 60:12:0B:3A:A6:35:76:E8:B4:AA:57:59:87:A2:CA:58:2B:31:B7:9A
Certificate issuer: /CN=11dd0ebff5ba38a8758b794d04d62905194a3266
Certificate serial: 0353C5AF
Authority key identifier: 11:DD:0E:BF:F5:BA:38:A8:75:8B:79:4D:04:D6:29:05:19:4A:32:66
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Ed0Ov_W6OKh1i3lNBNYpBRlKMmY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/b0/a66a29-51cc-4ba9-884f-f17613ea49e7/1/YBILOqY1dui0qldZh6LKWCsxt5o.roa
Signing time: Mon 02 May 2022 13:18:30 +0000
ROA not before: Mon 02 May 2022 13:18:30 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 34458
IP address blocks: 46.20.107.0/24 maxlen: 24
46.20.108.0/24 maxlen: 24
46.20.106.0/24 maxlen: 24
46.20.111.0/24 maxlen: 24
46.20.110.0/24 maxlen: 24
46.20.97.0/24 maxlen: 24
46.20.104.0/24 maxlen: 24
46.20.105.0/24 maxlen: 24
46.20.101.0/24 maxlen: 24
185.160.194.0/24 maxlen: 24
185.100.170.0/24 maxlen: 24
185.100.171.0/24 maxlen: 24
185.100.168.0/24 maxlen: 24
185.100.169.0/24 maxlen: 24
185.169.222.0/24 maxlen: 24
185.169.221.0/24 maxlen: 24
185.169.223.0/24 maxlen: 24
Validation: Failed, RFC 3779 resource not subset of parent's resources
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 55821743 (0x353c5af)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=11dd0ebff5ba38a8758b794d04d62905194a3266
Validity
Not Before: May 2 13:18:30 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=60120b3aa63576e8b4aa575987a2ca582b31b79a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a5:1e:b9:d6:96:7d:11:ad:c2:ff:d7:58:5a:6f:
b7:5c:0b:65:01:99:2c:ee:6f:bd:54:ce:f9:24:e6:
bc:af:8f:d1:74:f2:93:f9:dc:fb:cf:f2:a0:e0:89:
82:4f:6e:f6:5b:c6:20:98:87:78:d7:3d:2f:8e:c6:
d5:0e:94:8d:22:79:7c:04:cd:45:59:54:71:2c:db:
d5:69:3d:ca:26:af:7f:80:43:49:8f:29:2c:95:df:
e6:ec:9e:f7:0a:df:6e:b1:c9:d4:09:87:3b:25:f2:
12:1d:40:f4:1e:1b:7f:9d:2a:e3:4e:85:1e:c2:a2:
c4:6d:96:95:43:10:f9:e9:f0:3f:4c:90:8c:9b:0e:
6d:6b:35:c7:65:96:5f:13:41:97:4c:03:ac:0d:3d:
a8:ac:52:d7:8b:c0:5d:39:e4:95:cd:55:0e:30:db:
ae:5e:62:35:90:23:ad:3e:61:37:f4:28:f9:98:8c:
9f:c8:3a:4d:8f:c8:c4:af:64:45:7c:ce:a9:a2:9d:
73:33:b6:2d:f9:0d:f1:a0:12:56:b8:ad:59:30:75:
be:ed:09:4b:19:97:05:51:b0:19:5b:6b:52:c7:95:
0b:8e:fc:b8:46:d8:2b:b3:3b:95:48:a1:0e:81:7b:
6c:62:ce:9a:59:6b:d7:de:09:2e:77:ac:e9:5b:c2:
50:93
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
60:12:0B:3A:A6:35:76:E8:B4:AA:57:59:87:A2:CA:58:2B:31:B7:9A
X509v3 Authority Key Identifier:
keyid:11:DD:0E:BF:F5:BA:38:A8:75:8B:79:4D:04:D6:29:05:19:4A:32:66
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Ed0Ov_W6OKh1i3lNBNYpBRlKMmY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b0/a66a29-51cc-4ba9-884f-f17613ea49e7/1/YBILOqY1dui0qldZh6LKWCsxt5o.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/b0/a66a29-51cc-4ba9-884f-f17613ea49e7/1/Ed0Ov_W6OKh1i3lNBNYpBRlKMmY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
46.20.97.0/24
46.20.101.0/24
46.20.104.0-46.20.108.255
46.20.110.0/23
185.100.168.0/22
185.160.194.0/24
185.169.221.0-185.169.223.255
Signature Algorithm: sha256WithRSAEncryption
2f:33:25:bd:d7:99:dc:f3:e4:a0:7b:ac:86:3a:d3:b8:22:e2:
b1:01:a3:97:5a:e3:65:9e:5f:9a:8a:22:a7:85:5c:72:ae:55:
25:41:a0:17:c9:e8:95:e5:77:11:b4:e4:74:db:8e:dc:b9:71:
f5:cc:ca:10:6c:23:11:b3:b0:a8:ac:ce:46:c1:d2:ee:a9:c5:
7b:33:b8:4c:6c:07:1a:57:72:e6:d6:c0:e1:28:6b:90:5c:f5:
f4:b8:d2:04:43:6b:35:11:0e:1a:35:f0:d8:77:5d:42:04:81:
fe:04:e0:4b:88:74:69:1c:5a:a7:e1:21:61:57:02:41:f1:56:
80:ea:c0:8e:ce:dc:21:7e:ab:ec:98:e1:08:ed:d3:f2:20:43:
41:99:2e:30:e0:48:a9:dd:3a:f1:40:c1:37:ba:dc:6e:2d:f0:
4a:0c:8a:10:aa:54:62:71:fa:e4:8d:83:43:06:0f:ef:d1:b0:
6e:19:ac:d1:fb:2c:d7:a3:59:cb:51:be:bb:92:ef:54:c9:50:
21:c4:14:b5:c2:22:0e:69:86:2c:a7:be:0c:42:95:d5:0c:36:
f9:05:d6:7f:77:70:f2:40:e2:50:3e:8a:fa:b0:42:d9:15:ee:
be:fe:f9:0d:7a:a6:ec:d1:3e:30:39:c5:c9:ce:10:cd:32:75:
3f:d3:c3:79
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Feb 17 07:29:54 2025 by rpki-client