Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b0/a66a29-51cc-4ba9-884f-f17613ea49e7/1/zfgaA9nLVaCO3RRqhIGVrVw6C1M.roa
File: zfgaA9nLVaCO3RRqhIGVrVw6C1M.roa (raw, json)
Hash identifier: 3LdAb/E1U4G1OfwTefiZBZH2x2+6TwcYnmlTQuz0bgk=
Subject key identifier: CD:F8:1A:03:D9:CB:55:A0:8E:DD:14:6A:84:81:95:AD:5C:3A:0B:53
Certificate issuer: /CN=11dd0ebff5ba38a8758b794d04d62905194a3266
Certificate serial: 03A9F080
Authority key identifier: 11:DD:0E:BF:F5:BA:38:A8:75:8B:79:4D:04:D6:29:05:19:4A:32:66
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Ed0Ov_W6OKh1i3lNBNYpBRlKMmY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/b0/a66a29-51cc-4ba9-884f-f17613ea49e7/1/zfgaA9nLVaCO3RRqhIGVrVw6C1M.roa
Signing time: Tue 07 Jun 2022 09:18:21 +0000
ROA not before: Tue 07 Jun 2022 09:18:21 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 34458
IP address blocks: 46.20.108.0/24 maxlen: 24
46.20.106.0/24 maxlen: 24
46.20.111.0/24 maxlen: 24
46.20.110.0/24 maxlen: 24
46.20.97.0/24 maxlen: 24
46.20.98.0/24 maxlen: 24
46.20.104.0/24 maxlen: 24
46.20.105.0/24 maxlen: 24
46.20.101.0/24 maxlen: 24
185.160.194.0/24 maxlen: 24
185.100.170.0/24 maxlen: 24
185.100.171.0/24 maxlen: 24
185.100.168.0/24 maxlen: 24
185.100.169.0/24 maxlen: 24
185.169.222.0/24 maxlen: 24
185.169.221.0/24 maxlen: 24
185.169.223.0/24 maxlen: 24
Validation: Failed, RFC 3779 resource not subset of parent's resources
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 61468800 (0x3a9f080)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=11dd0ebff5ba38a8758b794d04d62905194a3266
Validity
Not Before: Jun 7 09:18:21 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=cdf81a03d9cb55a08edd146a848195ad5c3a0b53
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:93:a7:7f:c9:32:44:3e:69:69:96:c3:61:e8:9d:
9b:91:ed:f9:dd:fd:1f:b4:1b:fc:fe:04:3c:25:b7:
71:7d:0e:c7:6c:82:c3:80:78:bb:0b:96:2e:4c:7b:
14:c8:fa:4c:e7:52:58:4b:c2:a2:ce:0f:bf:bc:ec:
5d:73:30:24:82:4c:14:bd:8e:65:b3:51:85:4e:10:
99:e6:f5:58:4e:a6:c7:81:85:39:73:e1:b2:cd:d4:
e2:f0:e1:94:5c:ab:67:f6:ae:6c:d3:ae:da:cd:c1:
7d:ae:c6:71:42:3b:ce:c5:dd:cf:53:f8:57:05:00:
4c:2a:23:47:1a:7d:63:e6:73:08:67:43:85:06:ae:
30:d7:41:24:28:f8:6d:a8:34:45:0b:f7:6c:ce:e3:
ff:3b:e7:36:c2:fa:e8:e8:cb:f2:59:44:eb:fa:16:
67:d2:f3:34:32:40:bb:c5:19:24:8e:3f:17:92:b0:
14:07:93:66:fd:2d:28:d1:76:a1:d1:b9:37:07:24:
b3:2d:d0:7c:4f:08:f9:0b:ab:bd:97:7f:03:cd:39:
a3:75:58:cd:f3:a0:09:0a:09:47:f3:30:39:0d:2c:
70:58:0a:e9:f1:8c:c6:90:fe:37:c2:97:ce:47:33:
e1:07:a5:e2:08:3a:29:db:11:b2:25:11:7a:c0:b9:
fd:af
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
CD:F8:1A:03:D9:CB:55:A0:8E:DD:14:6A:84:81:95:AD:5C:3A:0B:53
X509v3 Authority Key Identifier:
keyid:11:DD:0E:BF:F5:BA:38:A8:75:8B:79:4D:04:D6:29:05:19:4A:32:66
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Ed0Ov_W6OKh1i3lNBNYpBRlKMmY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b0/a66a29-51cc-4ba9-884f-f17613ea49e7/1/zfgaA9nLVaCO3RRqhIGVrVw6C1M.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/b0/a66a29-51cc-4ba9-884f-f17613ea49e7/1/Ed0Ov_W6OKh1i3lNBNYpBRlKMmY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
46.20.97.0-46.20.98.255
46.20.101.0/24
46.20.104.0-46.20.106.255
46.20.108.0/24
46.20.110.0/23
185.100.168.0/22
185.160.194.0/24
185.169.221.0-185.169.223.255
Signature Algorithm: sha256WithRSAEncryption
a6:12:4c:41:9a:0d:cd:ce:35:6f:2d:08:d2:23:a6:c7:f2:72:
b3:2a:96:45:d2:ea:2a:7e:d2:51:28:1b:43:29:50:b8:53:36:
aa:ac:9b:de:60:dd:77:e2:78:a4:21:6a:0c:25:eb:ec:58:bb:
4a:da:4e:c7:cf:b1:ca:43:3d:d2:01:a4:fc:54:8c:d9:a1:6c:
90:c4:82:d8:84:d2:55:1c:45:d9:ee:52:7c:41:0c:b0:7b:a1:
13:81:3d:fa:77:41:d5:2a:1d:e4:5d:5e:29:75:ba:10:da:f3:
52:d2:93:09:cd:3f:8e:63:26:9e:41:53:42:24:14:e0:f3:30:
a0:88:7b:2b:40:df:61:65:02:dd:d6:ae:09:9b:94:ca:33:64:
32:72:8b:43:cd:b9:ca:6e:d5:bd:2c:b7:83:30:a0:51:29:ff:
00:82:bd:3f:22:56:98:fb:cf:9c:0e:80:74:97:1d:87:8f:dd:
0c:cc:cd:6f:6a:70:d1:09:4d:d4:87:85:5d:87:5f:3b:ec:38:
7d:b9:b6:91:f3:ab:5d:71:a4:2c:58:f0:02:aa:18:4f:35:0f:
9b:1e:fe:85:96:97:00:82:f3:58:a9:89:28:81:71:04:24:ac:
2b:17:10:5f:3d:c3:64:4c:b2:41:21:a6:3a:b5:b6:94:68:65:
63:78:d6:45
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:50:09 2024 by rpki-client on console-fra.rpki-client.org