Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b0/a66a29-51cc-4ba9-884f-f17613ea49e7/1/qx8uuFdFh6Jq4I64w6Ft8J8AC6k.roa
File: qx8uuFdFh6Jq4I64w6Ft8J8AC6k.roa (raw, json)
Hash identifier: 0s1gHB2JHFhvNnXTmJhBNyt5dvDx54/KLf3WLgVe0IA=
Subject key identifier: AB:1F:2E:B8:57:45:87:A2:6A:E0:8E:B8:C3:A1:6D:F0:9F:00:0B:A9
Certificate issuer: /CN=11dd0ebff5ba38a8758b794d04d62905194a3266
Certificate serial: 0184FAC142788AB13E68C9E112E2681449ED
Authority key identifier: 11:DD:0E:BF:F5:BA:38:A8:75:8B:79:4D:04:D6:29:05:19:4A:32:66
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Ed0Ov_W6OKh1i3lNBNYpBRlKMmY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/b0/a66a29-51cc-4ba9-884f-f17613ea49e7/1/qx8uuFdFh6Jq4I64w6Ft8J8AC6k.roa
Signing time: Sat 10 Dec 2022 06:38:00 +0000
ROA not before: Sat 10 Dec 2022 06:38:00 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 34458
IP address blocks: 46.20.108.0/24 maxlen: 24
46.20.106.0/24 maxlen: 24
46.20.111.0/24 maxlen: 24
46.20.110.0/24 maxlen: 24
46.20.97.0/24 maxlen: 24
46.20.104.0/24 maxlen: 24
46.20.105.0/24 maxlen: 24
46.20.100.0/24 maxlen: 24
46.20.101.0/24 maxlen: 24
185.160.194.0/24 maxlen: 24
185.100.170.0/24 maxlen: 24
185.100.171.0/24 maxlen: 24
185.100.168.0/24 maxlen: 24
185.100.169.0/24 maxlen: 24
185.169.222.0/24 maxlen: 24
185.169.221.0/24 maxlen: 24
185.169.223.0/24 maxlen: 24
Validation: Failed, RFC 3779 resource not subset of parent's resources
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:84:fa:c1:42:78:8a:b1:3e:68:c9:e1:12:e2:68:14:49:ed
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=11dd0ebff5ba38a8758b794d04d62905194a3266
Validity
Not Before: Dec 10 06:38:00 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=ab1f2eb8574587a26ae08eb8c3a16df09f000ba9
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8c:4a:9a:fa:fa:9b:bd:b2:12:91:47:96:72:a1:
fe:e1:7d:9d:04:12:cf:c4:f6:76:63:8e:9d:84:98:
e5:82:e2:8f:73:6e:58:c8:f0:a3:6b:f5:e6:34:dc:
65:3c:51:1a:0f:7c:57:a6:f3:3b:d1:34:e4:32:53:
b5:c2:12:92:9e:34:a1:b8:87:2c:06:92:3b:87:72:
53:4f:21:4b:8a:0f:73:2f:f8:73:01:95:94:df:41:
3d:a6:30:5e:0b:5d:f4:1d:6a:1b:35:95:dc:c4:6a:
68:7a:95:8a:70:dc:40:fd:4f:bb:0d:d4:f0:8b:a2:
82:8f:93:2a:ae:8c:63:74:2e:1e:4c:0b:75:c4:37:
d5:09:08:c4:fb:8c:5a:c0:de:d0:66:59:52:ee:04:
8e:82:18:fa:18:02:03:de:04:52:f8:54:b3:fb:be:
c7:d3:cb:df:31:69:b8:17:4c:be:7a:40:79:9d:71:
94:71:b1:a4:f9:bc:27:3f:35:a5:3c:bd:a7:c5:43:
85:77:7e:02:be:fa:ba:a5:84:7e:91:71:7d:f5:4c:
57:82:ed:e0:23:9a:fe:e9:42:b7:17:41:a3:33:1e:
09:d8:ec:7e:a1:2c:f8:06:34:53:28:91:c2:01:09:
2b:7d:f8:80:8c:ab:cd:e6:4f:7a:cf:09:6b:53:19:
94:fb
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
AB:1F:2E:B8:57:45:87:A2:6A:E0:8E:B8:C3:A1:6D:F0:9F:00:0B:A9
X509v3 Authority Key Identifier:
keyid:11:DD:0E:BF:F5:BA:38:A8:75:8B:79:4D:04:D6:29:05:19:4A:32:66
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Ed0Ov_W6OKh1i3lNBNYpBRlKMmY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b0/a66a29-51cc-4ba9-884f-f17613ea49e7/1/qx8uuFdFh6Jq4I64w6Ft8J8AC6k.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/b0/a66a29-51cc-4ba9-884f-f17613ea49e7/1/Ed0Ov_W6OKh1i3lNBNYpBRlKMmY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
46.20.97.0/24
46.20.100.0/23
46.20.104.0-46.20.106.255
46.20.108.0/24
46.20.110.0/23
185.100.168.0/22
185.160.194.0/24
185.169.221.0-185.169.223.255
Signature Algorithm: sha256WithRSAEncryption
bc:c9:6a:46:7f:68:49:27:2b:d1:d3:bf:99:92:35:89:86:87:
cf:61:99:a0:e2:37:86:ce:66:75:64:86:a1:b1:79:69:e1:30:
60:d3:5d:06:f7:1f:0d:86:2f:2c:8b:78:c1:fc:f2:f5:7b:ab:
3d:9c:52:d0:6c:cc:72:88:13:3a:37:de:cc:91:f2:0b:ef:a7:
92:f2:b2:1b:85:26:b0:9f:c6:4a:5c:84:74:1d:ab:13:a9:59:
9b:ea:f3:d8:63:f4:8f:34:b5:e0:cc:d4:1c:9c:24:62:08:65:
d1:fe:fb:86:52:77:df:16:80:51:58:99:7a:8e:24:dc:8e:f4:
b7:0b:19:ea:15:bd:2e:e9:bb:6f:0b:b9:ac:65:ba:96:f2:d0:
1d:a0:17:58:6b:dc:5a:ac:3e:cc:1c:24:9b:42:4e:f2:d8:1a:
c8:96:c5:b0:c5:af:a0:ba:71:92:37:c7:a1:dc:0f:5f:ea:68:
4c:04:0a:38:67:78:e3:e6:d9:76:3b:d1:3c:31:85:39:ac:c2:
e7:9c:52:c9:d6:81:68:c1:23:23:8d:cb:20:45:bf:b9:40:9f:
d3:f7:49:01:a8:32:cd:8f:31:b4:42:7c:7c:be:cd:48:10:df:
f6:1c:fb:cf:cd:c8:51:ff:49:49:39:3a:7c:f1:1b:fd:bd:e2:
52:6d:06:21
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jul 20 00:06:16 2023 by rpki-client on console-ams.rpki-client.org