Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b8/6d5d75-4d1e-4697-b1d3-36e344abc9d3/1/OkC-5tKW3D5l5MF8QPy1SP8CEak.roa
File: OkC-5tKW3D5l5MF8QPy1SP8CEak.roa (raw, json)
Hash identifier: f9LBd1h/3NQ7dnPmpySbhiB1acIj24QLwbfnqrpHnLo=
Subject key identifier: 3A:40:BE:E6:D2:96:DC:3E:65:E4:C1:7C:40:FC:B5:48:FF:02:11:A9
Certificate issuer: /CN=e37ee1eced19f8a0a3a635bfaa264293e3437795
Certificate serial: 34894CE6
Authority key identifier: E3:7E:E1:EC:ED:19:F8:A0:A3:A6:35:BF:AA:26:42:93:E3:43:77:95
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/437h7O0Z-KCjpjW_qiZCk-NDd5U.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/b8/6d5d75-4d1e-4697-b1d3-36e344abc9d3/1/OkC-5tKW3D5l5MF8QPy1SP8CEak.roa
Signing time: Mon 17 Jan 2022 09:47:03 +0000
ROA not before: Mon 17 Jan 2022 09:47:03 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 203622
IP address blocks: 46.32.166.0/24 maxlen: 24
46.32.165.0/24 maxlen: 24
46.32.164.0/24 maxlen: 24
46.32.160.0/24 maxlen: 24
46.32.162.0/24 maxlen: 24
46.32.161.0/24 maxlen: 24
46.32.170.0/24 maxlen: 24
46.32.172.0/24 maxlen: 24
46.32.171.0/24 maxlen: 24
46.32.177.0/24 maxlen: 24
46.32.179.0/24 maxlen: 24
46.32.178.0/24 maxlen: 24
46.32.174.0/24 maxlen: 24
46.32.173.0/24 maxlen: 24
46.32.176.0/24 maxlen: 24
46.32.175.0/24 maxlen: 24
46.32.191.0/24 maxlen: 24
46.32.188.0/24 maxlen: 24
46.32.190.0/24 maxlen: 24
46.32.189.0/24 maxlen: 24
Validation: Failed, RFC 3779 resource not subset of parent's resources
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 881413350 (0x34894ce6)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=e37ee1eced19f8a0a3a635bfaa264293e3437795
Validity
Not Before: Jan 17 09:47:03 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=3a40bee6d296dc3e65e4c17c40fcb548ff0211a9
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d7:94:c9:2c:e8:ef:39:d6:c2:7f:29:e8:bb:ad:
47:e5:57:f3:76:61:05:30:2b:20:bd:47:12:ab:d4:
32:3e:1d:b8:e1:c3:77:26:0b:9e:ce:76:92:20:7f:
86:ea:61:7d:73:75:15:0b:81:30:90:43:55:4b:3c:
b6:04:82:45:d3:1a:f3:e5:8f:a2:bc:09:25:f4:27:
aa:38:13:c1:c5:59:4d:93:98:cf:70:22:90:88:a2:
5f:67:4f:13:ef:43:9d:67:03:7c:c6:6e:99:a8:cd:
3f:d9:33:56:50:76:a1:6b:93:c6:ef:47:b3:dd:e9:
99:40:58:23:e8:ef:96:fb:e2:db:33:55:58:49:76:
29:b9:17:26:d9:ab:e4:d7:1b:a4:51:4f:63:67:2b:
b1:a0:fa:d3:59:9d:7a:74:84:80:9e:d2:76:e8:02:
0f:93:df:bf:71:6e:e4:69:e3:74:b9:c4:fe:d9:cc:
39:52:c9:08:d6:12:a1:55:09:20:2d:19:4b:8b:90:
54:75:e1:93:06:73:27:bc:88:66:12:9d:36:43:ae:
45:3b:e5:1f:f9:9e:1b:61:c1:2b:fd:f7:02:26:b5:
74:3e:36:89:49:0a:ee:f5:25:6c:1e:70:9f:6e:45:
2b:82:71:67:9d:0f:d9:98:03:d4:fd:96:71:49:fa:
4f:d1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
3A:40:BE:E6:D2:96:DC:3E:65:E4:C1:7C:40:FC:B5:48:FF:02:11:A9
X509v3 Authority Key Identifier:
keyid:E3:7E:E1:EC:ED:19:F8:A0:A3:A6:35:BF:AA:26:42:93:E3:43:77:95
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/437h7O0Z-KCjpjW_qiZCk-NDd5U.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b8/6d5d75-4d1e-4697-b1d3-36e344abc9d3/1/OkC-5tKW3D5l5MF8QPy1SP8CEak.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/b8/6d5d75-4d1e-4697-b1d3-36e344abc9d3/1/437h7O0Z-KCjpjW_qiZCk-NDd5U.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
46.32.160.0-46.32.162.255
46.32.164.0-46.32.166.255
46.32.170.0-46.32.179.255
46.32.188.0/22
Signature Algorithm: sha256WithRSAEncryption
0e:1c:a8:92:24:59:0e:b8:7c:01:5a:02:a1:54:4b:32:2b:1c:
3d:a5:5e:17:0f:80:81:73:dc:8b:be:c0:c6:db:2e:d4:d6:c2:
f9:b0:82:34:63:04:f7:fc:7b:a2:00:8f:ab:41:d2:70:e2:46:
60:ae:3d:2a:91:46:ae:fa:a2:b9:b7:67:54:fa:78:5d:3d:79:
3c:e8:a4:a6:38:4c:dd:84:ce:91:5c:b7:65:e2:bf:62:66:f5:
86:b3:ab:1b:65:8a:ee:f3:2a:ff:4d:64:3e:bc:81:91:79:be:
96:ff:20:bf:60:63:e7:33:81:13:8c:47:7f:73:4f:5b:47:e9:
03:bc:a0:94:fc:9d:71:e5:ba:f1:be:d3:da:b8:f3:9e:ea:75:
23:ad:91:2b:f7:9e:43:d6:ab:05:a7:9f:98:b7:65:51:79:e9:
0d:6f:74:9f:4d:31:f2:05:7b:98:ca:79:27:ce:cb:50:ce:6c:
09:9b:37:6a:27:7d:b9:1e:a3:74:e1:e0:36:d3:5a:77:95:9b:
13:c4:45:9d:37:74:fd:04:fa:78:dc:ae:cc:5d:f2:f6:85:e1:
8c:7f:4f:01:d8:6b:dc:2b:92:e2:78:0a:74:e3:eb:bf:42:3d:
6b:88:50:01:24:22:bc:10:4d:08:fb:59:d8:2d:0c:c1:a9:d2:
07:0a:83:4d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jul 20 00:02:45 2023 by rpki-client on console-fra.rpki-client.org