Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b0/a66a29-51cc-4ba9-884f-f17613ea49e7/1/oSEcVDpSMtbPb2hrx1zPXIuJjaU.roa
File: oSEcVDpSMtbPb2hrx1zPXIuJjaU.roa (raw, json)
Hash identifier: ck+tLKhvoOka8mjxWZgAPmt53X18yJWyYvjWlMIDPas=
Subject key identifier: A1:21:1C:54:3A:52:32:D6:CF:6F:68:6B:C7:5C:CF:5C:8B:89:8D:A5
Certificate issuer: /CN=11dd0ebff5ba38a8758b794d04d62905194a3266
Certificate serial: 03BC0366
Authority key identifier: 11:DD:0E:BF:F5:BA:38:A8:75:8B:79:4D:04:D6:29:05:19:4A:32:66
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Ed0Ov_W6OKh1i3lNBNYpBRlKMmY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/b0/a66a29-51cc-4ba9-884f-f17613ea49e7/1/oSEcVDpSMtbPb2hrx1zPXIuJjaU.roa
Signing time: Wed 15 Jun 2022 09:29:45 +0000
ROA not before: Wed 15 Jun 2022 09:29:45 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 61317
IP address blocks: 46.20.98.0/24 maxlen: 24
Validation: Failed, RFC 3779 resource not subset of parent's resources
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 62653286 (0x3bc0366)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=11dd0ebff5ba38a8758b794d04d62905194a3266
Validity
Not Before: Jun 15 09:29:45 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=a1211c543a5232d6cf6f686bc75ccf5c8b898da5
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:90:fc:64:6c:ff:18:68:a8:d8:e6:17:59:96:bd:
87:06:e7:00:cb:0b:6f:95:f4:27:07:cd:3c:b3:01:
1e:f9:91:16:4d:00:d0:1a:43:ae:e2:80:d4:03:f7:
19:54:78:61:99:e4:d4:07:e2:f0:34:fe:e0:d4:d3:
1d:25:27:ce:a0:8b:71:91:9f:2a:3a:19:1f:9a:e7:
15:2a:c2:12:1f:9b:13:df:70:70:3e:c1:c9:32:9e:
63:4c:d2:0a:65:40:a9:8c:97:ae:0b:f1:92:b3:09:
a2:92:b9:23:e0:22:94:6b:3f:0a:ac:11:ca:ce:be:
ad:71:25:eb:a8:77:73:1c:92:04:e0:8b:26:16:f9:
1c:9e:c1:0b:72:67:dd:a6:dc:75:a8:b4:ed:fa:05:
92:60:14:00:a9:ce:17:33:a6:77:df:92:b8:24:c9:
07:69:dd:5e:6b:1e:59:51:24:92:d5:37:57:10:36:
91:8c:69:33:76:9d:95:6d:19:71:52:72:dd:56:f0:
72:5c:db:03:a8:cf:65:d3:a5:aa:9f:b7:2e:b2:47:
eb:c1:16:62:9d:d3:3c:e2:a2:45:38:d8:2a:a2:fc:
f1:91:b2:38:1c:f3:fb:51:84:f0:d7:6b:ab:45:f3:
96:39:b3:c4:4a:f0:d1:9e:20:66:ab:fe:c9:c8:f4:
d1:d9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A1:21:1C:54:3A:52:32:D6:CF:6F:68:6B:C7:5C:CF:5C:8B:89:8D:A5
X509v3 Authority Key Identifier:
keyid:11:DD:0E:BF:F5:BA:38:A8:75:8B:79:4D:04:D6:29:05:19:4A:32:66
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Ed0Ov_W6OKh1i3lNBNYpBRlKMmY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b0/a66a29-51cc-4ba9-884f-f17613ea49e7/1/oSEcVDpSMtbPb2hrx1zPXIuJjaU.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/b0/a66a29-51cc-4ba9-884f-f17613ea49e7/1/Ed0Ov_W6OKh1i3lNBNYpBRlKMmY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
46.20.98.0/24
Signature Algorithm: sha256WithRSAEncryption
a7:eb:0e:d7:65:13:af:29:5e:a2:e1:58:9a:92:ca:b0:52:92:
fb:d0:aa:a1:7b:c0:9d:a9:d7:2c:cb:cc:45:1f:1e:9e:b7:f1:
c8:e7:0e:8a:b4:11:bc:18:e3:1b:69:c3:bf:8f:e2:0b:6d:b3:
dc:22:61:77:9e:aa:ff:1c:29:cf:28:af:6c:47:6f:40:74:6e:
ed:6f:f7:7e:bb:53:d2:3b:7c:ed:3c:90:cb:73:3f:25:2f:da:
33:f1:3d:8e:cd:83:2a:e5:91:1f:08:f4:5d:b8:af:f7:1e:05:
21:3f:4b:f3:6b:b1:ad:b1:08:c2:68:2e:0a:18:fc:51:ec:c1:
29:7a:4d:c9:5e:cb:d4:c3:ad:df:9c:e5:1c:3d:85:2f:cd:d5:
88:59:a6:b6:f1:ce:f1:37:0d:06:30:4a:ef:97:c4:ba:37:51:
4c:1c:53:15:2a:73:72:d5:35:ec:2d:4c:ea:0d:b0:41:0d:36:
5c:96:b3:8f:a4:b3:a3:db:16:53:56:d8:b0:51:83:89:ed:98:
8b:cd:f7:f3:00:f4:f8:48:2a:0c:f6:b2:3e:db:49:08:31:4a:
b4:2a:6a:0d:6d:73:4a:79:6a:03:6a:41:91:ba:f3:42:68:91:
b0:be:20:94:86:4b:fc:e7:45:f1:14:43:fc:a9:c0:81:40:57:
75:d1:0b:af
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jul 20 00:02:22 2023 by rpki-client on console-fra.rpki-client.org