Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b0/a66a29-51cc-4ba9-884f-f17613ea49e7/1/qZPtxqQ-nEURvgi40MuzzZgfo_M.roa
File: qZPtxqQ-nEURvgi40MuzzZgfo_M.roa (raw, json)
Hash identifier: Ct1ecdHtvKBjIFEu4X9WhfKMdAe6XPPy+yLp+1LBIjU=
Subject key identifier: A9:93:ED:C6:A4:3E:9C:45:11:BE:08:B8:D0:CB:B3:CD:98:1F:A3:F3
Certificate issuer: /CN=11dd0ebff5ba38a8758b794d04d62905194a3266
Certificate serial: 01822A9634800F82D17FDED33BB39506515E
Authority key identifier: 11:DD:0E:BF:F5:BA:38:A8:75:8B:79:4D:04:D6:29:05:19:4A:32:66
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Ed0Ov_W6OKh1i3lNBNYpBRlKMmY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/b0/a66a29-51cc-4ba9-884f-f17613ea49e7/1/qZPtxqQ-nEURvgi40MuzzZgfo_M.roa
Signing time: Sat 23 Jul 2022 10:24:23 +0000
ROA not before: Sat 23 Jul 2022 10:24:23 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 34458
IP address blocks: 46.20.108.0/24 maxlen: 24
46.20.106.0/24 maxlen: 24
46.20.111.0/24 maxlen: 24
46.20.110.0/24 maxlen: 24
46.20.97.0/24 maxlen: 24
46.20.104.0/24 maxlen: 24
46.20.105.0/24 maxlen: 24
46.20.101.0/24 maxlen: 24
185.160.194.0/24 maxlen: 24
185.100.170.0/24 maxlen: 24
185.100.171.0/24 maxlen: 24
185.100.168.0/24 maxlen: 24
185.100.169.0/24 maxlen: 24
185.169.222.0/24 maxlen: 24
185.169.221.0/24 maxlen: 24
185.169.223.0/24 maxlen: 24
Validation: Failed, RFC 3779 resource not subset of parent's resources
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:82:2a:96:34:80:0f:82:d1:7f:de:d3:3b:b3:95:06:51:5e
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=11dd0ebff5ba38a8758b794d04d62905194a3266
Validity
Not Before: Jul 23 10:24:23 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=a993edc6a43e9c4511be08b8d0cbb3cd981fa3f3
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8f:f2:79:e8:4d:fb:cf:25:1d:e5:0a:c3:bf:77:
22:9e:19:31:8b:76:8d:2e:d1:8a:60:8c:f9:1b:a5:
28:71:d0:17:38:d6:92:cc:69:de:65:7d:a6:fb:9b:
44:72:d5:86:b0:30:33:f1:4a:fe:4b:3b:aa:de:b9:
e1:41:3b:93:5b:95:bf:0e:0e:83:5b:82:17:01:8e:
30:06:ab:43:f7:50:87:a5:de:93:cc:fb:b2:27:d5:
e0:3a:66:57:e0:5c:76:41:73:d4:56:c5:05:fd:1c:
df:cf:e2:8c:10:f9:65:44:65:f9:75:0c:05:d6:91:
9f:9a:0a:24:9a:33:0e:5b:c4:f1:38:bf:2b:03:40:
2c:b2:ea:0e:fe:ae:5f:71:b3:68:e0:02:e4:b3:69:
ad:00:20:fc:7a:7b:f9:13:d4:ee:f3:75:99:d0:8a:
df:a5:03:88:24:f4:4c:c2:0c:2f:db:50:ee:6d:d4:
cf:8a:cb:a7:40:8a:63:82:09:0c:79:7d:f5:34:6a:
11:1e:d6:0c:9e:42:62:d8:cd:f9:29:a4:c8:9e:05:
04:b3:44:4a:2c:19:e7:d1:e5:26:c0:1a:00:bf:7f:
6e:eb:36:31:f1:ea:df:4a:81:13:8c:fb:c3:0b:c3:
51:0a:b4:53:78:07:9c:d8:bd:02:4a:59:cb:cc:a0:
ea:6f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A9:93:ED:C6:A4:3E:9C:45:11:BE:08:B8:D0:CB:B3:CD:98:1F:A3:F3
X509v3 Authority Key Identifier:
keyid:11:DD:0E:BF:F5:BA:38:A8:75:8B:79:4D:04:D6:29:05:19:4A:32:66
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Ed0Ov_W6OKh1i3lNBNYpBRlKMmY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b0/a66a29-51cc-4ba9-884f-f17613ea49e7/1/qZPtxqQ-nEURvgi40MuzzZgfo_M.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/b0/a66a29-51cc-4ba9-884f-f17613ea49e7/1/Ed0Ov_W6OKh1i3lNBNYpBRlKMmY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
46.20.97.0/24
46.20.101.0/24
46.20.104.0-46.20.106.255
46.20.108.0/24
46.20.110.0/23
185.100.168.0/22
185.160.194.0/24
185.169.221.0-185.169.223.255
Signature Algorithm: sha256WithRSAEncryption
02:43:d7:35:17:ce:6e:2b:62:67:fd:23:a3:21:0e:4f:ee:b1:
7a:7d:c8:a5:e1:5b:16:97:40:d4:f4:2f:be:62:75:5c:22:1b:
96:04:90:6b:f6:2d:9e:4c:75:8b:d3:16:89:cd:c6:24:a5:c7:
34:9f:04:b5:56:dc:4d:b1:73:96:78:16:08:fb:e6:77:c3:5c:
df:9d:a3:51:6f:fb:c4:a8:ad:9b:a5:14:ec:c9:9f:5e:64:62:
ed:74:18:6f:94:39:19:e6:cf:5e:c3:f7:d1:52:8b:b5:1f:cd:
03:b0:d5:f8:2b:e6:ea:06:22:d5:0a:4d:42:12:48:4f:b1:2a:
f0:86:50:ae:b9:03:64:8c:74:ed:98:31:13:cd:99:2f:31:29:
cd:55:fd:1e:7e:83:42:2e:bf:48:3a:16:af:f8:5e:79:22:df:
9e:28:e0:0f:8b:40:7e:9c:10:6e:a8:48:22:81:c6:a0:c9:6c:
2f:f4:f0:44:91:8a:71:16:8b:a3:43:bf:89:52:94:ce:cf:63:
62:d2:d0:87:b5:a4:b9:29:7e:bf:e3:b3:22:ae:ad:05:4d:7f:
cf:6a:ee:90:78:07:1a:16:8e:c4:f4:91:21:7c:7e:23:c6:a3:
92:bc:ef:ca:35:5f:1a:33:71:4f:a5:0f:e9:eb:c6:40:08:81:
6f:60:19:2c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jul 20 00:02:22 2023 by rpki-client on console-fra.rpki-client.org