Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b8/6d5d75-4d1e-4697-b1d3-36e344abc9d3/1/4OPiiAif3NLb7N2-v86-2wgbNg8.roa
File: 4OPiiAif3NLb7N2-v86-2wgbNg8.roa (raw, json)
Hash identifier: GxKvt59rrDtClQoctkydLc4uvE9BePkSRC0vzq+CRws=
Subject key identifier: E0:E3:E2:88:08:9F:DC:D2:DB:EC:DD:BE:BF:CE:BE:DB:08:1B:36:0F
Certificate issuer: /CN=e37ee1eced19f8a0a3a635bfaa264293e3437795
Certificate serial: 357307D1
Authority key identifier: E3:7E:E1:EC:ED:19:F8:A0:A3:A6:35:BF:AA:26:42:93:E3:43:77:95
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/437h7O0Z-KCjpjW_qiZCk-NDd5U.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/b8/6d5d75-4d1e-4697-b1d3-36e344abc9d3/1/4OPiiAif3NLb7N2-v86-2wgbNg8.roa
Signing time: Wed 20 Apr 2022 10:10:58 +0000
ROA not before: Wed 20 Apr 2022 10:10:58 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 203622
IP address blocks: 46.32.166.0/24 maxlen: 24
46.32.165.0/24 maxlen: 24
46.32.164.0/24 maxlen: 24
46.32.160.0/24 maxlen: 24
46.32.162.0/24 maxlen: 24
46.32.161.0/24 maxlen: 24
46.32.167.0/24 maxlen: 24
46.32.170.0/24 maxlen: 24
46.32.171.0/24 maxlen: 24
46.32.177.0/24 maxlen: 24
46.32.179.0/24 maxlen: 24
46.32.178.0/24 maxlen: 24
46.32.174.0/24 maxlen: 24
46.32.173.0/24 maxlen: 24
46.32.176.0/24 maxlen: 24
46.32.175.0/24 maxlen: 24
46.32.191.0/24 maxlen: 24
46.32.188.0/24 maxlen: 24
46.32.190.0/24 maxlen: 24
46.32.189.0/24 maxlen: 24
Validation: Failed, RFC 3779 resource not subset of parent's resources
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 896731089 (0x357307d1)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=e37ee1eced19f8a0a3a635bfaa264293e3437795
Validity
Not Before: Apr 20 10:10:58 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=e0e3e288089fdcd2dbecddbebfcebedb081b360f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d1:17:8c:47:be:0e:56:d8:c6:b0:d0:b0:58:06:
3a:a5:80:f6:04:ee:8b:43:2d:4d:37:d3:0d:d1:fe:
a3:84:12:55:88:dd:3c:0a:e8:26:11:4e:b1:11:2f:
d3:3b:6f:67:03:7d:d6:1b:13:8c:ed:9f:20:46:61:
d7:b7:49:6d:82:2a:5d:ee:fe:12:03:8f:b5:0a:bf:
fa:fb:bb:db:25:4c:08:e6:b2:d6:15:ad:48:c7:4f:
f8:62:db:f3:14:55:4d:ad:05:53:0d:65:ee:1c:6c:
3d:d1:b2:3b:68:14:84:30:6d:29:3d:0c:48:0f:67:
9f:89:3f:dd:97:47:45:70:1d:6e:e8:b6:25:1d:ec:
cd:4a:98:92:fd:1b:5e:b9:6d:b9:a6:fd:f8:5f:fb:
93:93:25:df:2a:eb:38:86:43:6c:83:58:ae:b6:24:
b1:6f:1e:68:d6:0a:45:53:47:12:34:48:fb:0b:28:
05:84:10:bd:b8:87:02:90:3e:0f:fe:60:ea:57:49:
b4:da:1a:c3:9d:b6:53:6f:3b:ca:f0:62:a3:80:be:
d5:ad:02:61:71:5f:ec:4b:ae:54:bf:c0:53:a6:10:
41:5d:2b:5f:42:86:84:20:fc:b4:5d:47:d0:a9:b8:
86:e0:f0:2e:9a:2e:ec:5d:5e:50:79:85:a4:ce:5e:
81:a9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E0:E3:E2:88:08:9F:DC:D2:DB:EC:DD:BE:BF:CE:BE:DB:08:1B:36:0F
X509v3 Authority Key Identifier:
keyid:E3:7E:E1:EC:ED:19:F8:A0:A3:A6:35:BF:AA:26:42:93:E3:43:77:95
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/437h7O0Z-KCjpjW_qiZCk-NDd5U.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b8/6d5d75-4d1e-4697-b1d3-36e344abc9d3/1/4OPiiAif3NLb7N2-v86-2wgbNg8.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/b8/6d5d75-4d1e-4697-b1d3-36e344abc9d3/1/437h7O0Z-KCjpjW_qiZCk-NDd5U.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
46.32.160.0-46.32.162.255
46.32.164.0/22
46.32.170.0/23
46.32.173.0-46.32.179.255
46.32.188.0/22
Signature Algorithm: sha256WithRSAEncryption
4e:5a:58:e9:ab:b6:bf:92:6f:10:96:fd:b6:ed:5d:a9:ad:0d:
4d:d2:14:8a:c9:ed:7a:2e:5d:47:bd:d3:e0:79:0a:1c:4b:28:
9d:6a:cb:61:91:84:18:13:a9:42:f1:44:d8:40:b3:30:8f:bb:
3c:56:ac:49:e9:21:6f:6b:4f:af:b0:25:ff:cf:b5:9e:31:ef:
86:08:c1:ec:c2:8b:75:c7:32:0a:5b:09:4b:f4:11:3e:78:da:
d5:9d:d8:10:39:53:83:ef:41:f0:93:59:ba:56:11:e1:01:fd:
81:50:34:d9:9b:bd:c7:a9:70:45:75:38:d2:36:9a:d1:8f:91:
1d:1e:d8:5d:e8:75:6c:16:84:bd:ec:fd:f5:a4:eb:f7:31:39:
91:db:bf:e0:db:a3:c2:b7:43:c4:0d:11:c0:b0:dd:7b:9a:46:
74:89:cc:e8:63:af:f1:fe:01:cd:c5:b8:02:bd:ef:45:bc:b7:
68:1a:2c:69:9e:88:4d:12:ce:c2:9e:47:87:d8:55:c0:7b:a6:
cb:96:1c:66:7e:89:9f:d2:ca:71:8d:0e:6b:0e:59:d2:77:a9:
c7:54:49:f5:9d:b2:94:bb:77:41:1e:6b:93:0a:ba:d6:75:f0:
d3:32:e0:71:69:8e:6d:d0:5a:9d:6d:b1:cc:04:23:0c:a2:51:
83:04:df:1b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jul 20 00:06:39 2023 by rpki-client on console-ams.rpki-client.org