Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b0/a66a29-51cc-4ba9-884f-f17613ea49e7/1/ZTGbNHb4jpHaJS3VWnnv3XyAjDo.roa
File: ZTGbNHb4jpHaJS3VWnnv3XyAjDo.roa (raw, json)
Hash identifier: l629w3A7ocrgXZ3lD2/uT0xYMNlD0xEcge7GYlnYpyM=
Subject key identifier: 65:31:9B:34:76:F8:8E:91:DA:25:2D:D5:5A:79:EF:DD:7C:80:8C:3A
Certificate issuer: /CN=11dd0ebff5ba38a8758b794d04d62905194a3266
Certificate serial: 0321D95B
Authority key identifier: 11:DD:0E:BF:F5:BA:38:A8:75:8B:79:4D:04:D6:29:05:19:4A:32:66
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Ed0Ov_W6OKh1i3lNBNYpBRlKMmY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/b0/a66a29-51cc-4ba9-884f-f17613ea49e7/1/ZTGbNHb4jpHaJS3VWnnv3XyAjDo.roa
Signing time: Mon 11 Apr 2022 17:54:04 +0000
ROA not before: Mon 11 Apr 2022 17:54:04 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 147293
IP address blocks: 46.20.109.0/24 maxlen: 24
Validation: Failed, RFC 3779 resource not subset of parent's resources
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 52549979 (0x321d95b)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=11dd0ebff5ba38a8758b794d04d62905194a3266
Validity
Not Before: Apr 11 17:54:04 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=65319b3476f88e91da252dd55a79efdd7c808c3a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a6:4c:89:bf:81:8e:87:f7:ee:28:b4:b9:aa:ff:
ef:1a:19:6c:b5:72:4b:f0:82:98:dc:75:32:27:5a:
89:59:7e:61:3c:5f:04:80:fe:fc:14:0b:1e:2d:f5:
4a:66:cb:a1:f3:bd:28:9f:d0:0f:81:f8:c0:47:7c:
c2:f5:c3:72:b5:e4:7b:80:58:f0:d8:cc:69:5c:0f:
2f:25:94:44:6c:81:a7:8e:84:e1:59:33:1e:e8:91:
d7:a2:c9:f6:c8:72:cc:9a:87:23:db:bc:7e:77:71:
84:fa:53:28:1d:d2:e6:ca:71:d4:74:57:cc:f0:f6:
db:cf:ed:5d:44:66:7f:6f:d4:af:22:33:e2:d4:5c:
bc:57:af:02:f3:fd:7b:43:3f:ce:68:ac:3a:3d:0c:
a9:44:48:dd:33:25:e1:e3:18:b5:87:c8:5e:e3:a8:
b7:e8:69:99:9c:a4:a1:d8:0a:f2:f8:13:7a:12:3f:
1e:1c:df:b3:2d:06:f5:ea:4c:f0:ea:c6:af:ce:f7:
df:92:93:b3:63:06:f1:15:6b:22:9c:3d:ec:f1:1f:
b1:be:0e:cb:78:78:fb:84:3b:40:0f:d8:23:28:1b:
68:90:0d:8e:1b:c8:8c:69:68:3f:5a:58:66:dc:2d:
6d:19:ce:8d:e6:6e:29:d4:74:a4:c7:43:81:c2:f0:
f8:83
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
65:31:9B:34:76:F8:8E:91:DA:25:2D:D5:5A:79:EF:DD:7C:80:8C:3A
X509v3 Authority Key Identifier:
keyid:11:DD:0E:BF:F5:BA:38:A8:75:8B:79:4D:04:D6:29:05:19:4A:32:66
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Ed0Ov_W6OKh1i3lNBNYpBRlKMmY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b0/a66a29-51cc-4ba9-884f-f17613ea49e7/1/ZTGbNHb4jpHaJS3VWnnv3XyAjDo.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/b0/a66a29-51cc-4ba9-884f-f17613ea49e7/1/Ed0Ov_W6OKh1i3lNBNYpBRlKMmY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
46.20.109.0/24
Signature Algorithm: sha256WithRSAEncryption
a0:c6:33:4a:fb:41:3e:f5:3a:e0:f1:30:54:c5:71:4b:79:ff:
6c:bf:90:a7:f8:b6:a5:2d:04:31:f0:60:0c:70:fc:ac:1f:5d:
79:98:4e:f9:a7:9a:04:78:0e:24:9a:67:24:e3:89:8f:68:1f:
d4:cc:0e:9e:dc:23:fe:70:74:f9:51:46:f6:90:21:2f:03:c1:
65:fc:29:d7:f7:5c:be:bc:13:e8:24:c9:32:a0:3f:74:6f:45:
30:b6:d2:be:36:6c:60:75:90:b3:1b:ba:b9:3e:38:19:ce:2a:
a0:cb:38:dd:40:7f:96:32:a0:2f:a5:ac:ed:35:89:d7:f8:79:
28:b8:90:7c:51:05:f1:91:e9:3d:c9:64:f3:84:46:8b:9f:5a:
99:68:1e:2b:72:e8:42:49:1b:bb:58:f5:e2:ad:83:b9:a4:8e:
6f:b8:5d:59:c2:f7:57:05:91:96:77:c6:f8:71:1a:42:e8:7b:
90:af:fa:0e:c2:fa:2c:ae:ad:0c:17:75:88:34:c6:1a:c6:f9:
41:f8:69:bb:a3:23:23:f2:e7:23:25:66:58:f2:c3:34:af:cc:
bb:f1:f2:1a:23:e3:38:b8:0e:82:f6:50:10:6c:23:57:13:50:
bf:1f:09:33:fd:33:13:3e:97:4e:29:9b:12:bc:22:7b:54:a5:
9b:ac:cd:f4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:50:09 2024 by rpki-client on console-fra.rpki-client.org