Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b8/6d5d75-4d1e-4697-b1d3-36e344abc9d3/1/vh8bM50YNiwvMsAPO7gz2vEAaVU.roa
File: vh8bM50YNiwvMsAPO7gz2vEAaVU.roa (raw, json)
Hash identifier: p+YeUi8Jz9NJ7aXE4KwZ4vy7hMvo1Ha6SB3M+uOKuIQ=
Subject key identifier: BE:1F:1B:33:9D:18:36:2C:2F:32:C0:0F:3B:B8:33:DA:F1:00:69:55
Certificate issuer: /CN=e37ee1eced19f8a0a3a635bfaa264293e3437795
Certificate serial: 018857E80B3D484251FB20B320B2702377BA
Authority key identifier: E3:7E:E1:EC:ED:19:F8:A0:A3:A6:35:BF:AA:26:42:93:E3:43:77:95
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/437h7O0Z-KCjpjW_qiZCk-NDd5U.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/b8/6d5d75-4d1e-4697-b1d3-36e344abc9d3/1/vh8bM50YNiwvMsAPO7gz2vEAaVU.roa
Signing time: Fri 26 May 2023 11:53:24 +0000
ROA not before: Fri 26 May 2023 11:53:24 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 203622
IP address blocks: 46.32.166.0/24 maxlen: 24
46.32.165.0/24 maxlen: 24
46.32.164.0/24 maxlen: 24
46.32.160.0/24 maxlen: 24
46.32.162.0/24 maxlen: 24
46.32.161.0/24 maxlen: 24
46.32.167.0/24 maxlen: 24
46.32.170.0/24 maxlen: 24
46.32.171.0/24 maxlen: 24
46.32.177.0/24 maxlen: 24
46.32.179.0/24 maxlen: 24
46.32.191.0/24 maxlen: 24
46.32.188.0/24 maxlen: 24
46.32.190.0/24 maxlen: 24
46.32.189.0/24 maxlen: 24
Validation: Failed, RFC 3779 resource not subset of parent's resources
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:88:57:e8:0b:3d:48:42:51:fb:20:b3:20:b2:70:23:77:ba
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=e37ee1eced19f8a0a3a635bfaa264293e3437795
Validity
Not Before: May 26 11:53:24 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=be1f1b339d18362c2f32c00f3bb833daf1006955
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:fb:c8:d1:b2:0e:77:3b:88:03:ab:71:61:04:fa:
67:9a:ff:15:9c:94:51:28:15:ef:b8:8a:46:e3:e5:
67:c3:6b:0a:39:4f:19:ff:e8:ee:a0:0c:78:4f:3b:
e6:92:bb:60:ba:f7:e2:8b:17:8a:31:98:3a:0b:c6:
5c:1a:2e:63:4c:df:af:03:72:56:66:a5:ae:a4:b2:
f0:4e:8d:e0:de:9d:77:86:e0:bc:60:36:e8:9d:2c:
13:69:24:6a:15:84:0c:5c:12:31:d2:4f:51:de:0e:
60:97:c0:71:8a:61:3c:b4:f8:20:30:42:82:f8:8e:
ea:60:27:dc:ac:70:47:af:f1:a3:09:12:4a:a4:03:
6d:c2:f3:e5:5a:97:80:e6:b9:bb:cd:a8:63:f1:ac:
bf:43:98:5d:97:da:d0:c7:67:e3:99:e9:a9:d8:d1:
e5:94:20:35:4d:ff:a4:36:5c:c5:30:33:16:e0:b9:
7c:97:7b:8f:6b:0d:49:f5:42:09:dc:f4:1d:51:f9:
bf:fe:80:e3:39:ca:21:4d:8f:00:ff:74:20:ee:d8:
de:b0:e7:59:5b:4f:14:1e:93:b3:9d:d3:a1:35:30:
3e:70:0a:51:13:a1:5d:77:7b:e3:56:8d:f7:07:12:
ef:09:e8:97:a5:c9:81:e7:bb:eb:a8:e6:63:2d:3b:
54:f7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
BE:1F:1B:33:9D:18:36:2C:2F:32:C0:0F:3B:B8:33:DA:F1:00:69:55
X509v3 Authority Key Identifier:
keyid:E3:7E:E1:EC:ED:19:F8:A0:A3:A6:35:BF:AA:26:42:93:E3:43:77:95
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/437h7O0Z-KCjpjW_qiZCk-NDd5U.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b8/6d5d75-4d1e-4697-b1d3-36e344abc9d3/1/vh8bM50YNiwvMsAPO7gz2vEAaVU.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/b8/6d5d75-4d1e-4697-b1d3-36e344abc9d3/1/437h7O0Z-KCjpjW_qiZCk-NDd5U.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
46.32.160.0-46.32.162.255
46.32.164.0/22
46.32.170.0/23
46.32.177.0/24
46.32.179.0/24
46.32.188.0/22
Signature Algorithm: sha256WithRSAEncryption
0c:22:8c:c3:0f:15:22:6b:b4:d4:37:15:68:32:97:d7:51:93:
e4:2e:b2:3b:4f:5c:25:49:ef:46:7e:c1:14:b1:e1:8a:82:20:
c7:87:9b:9a:2b:2a:22:b7:ca:93:8b:61:6f:a2:b7:a6:7c:e7:
16:86:eb:4d:c0:dd:12:df:6b:c9:31:09:68:e4:b0:ad:52:8e:
a2:b7:c5:fd:d0:82:10:5e:3f:09:2c:18:40:1f:24:c3:48:c9:
42:84:10:d2:a2:be:15:2a:39:2a:bd:a5:67:1c:26:d3:29:22:
f4:12:d0:0e:fe:6d:12:f2:b2:00:12:61:86:08:49:1d:b0:ea:
7b:15:2e:ec:9c:73:54:87:7b:2b:8a:30:63:71:2c:dd:d8:74:
7d:15:1c:ac:60:1f:f9:49:bc:6d:65:ca:f9:fc:5d:19:d5:c8:
79:29:a6:a1:7f:5b:42:a6:e1:36:58:c8:e7:0b:7f:24:e0:0b:
d7:83:64:b2:46:46:c1:7f:b4:6a:c2:5b:6e:4b:de:fe:60:eb:
0f:86:4d:c8:ab:f4:9c:f8:ae:b4:18:47:8e:9f:84:5f:61:9d:
15:55:d4:20:61:1e:2b:c8:c8:5c:ae:c3:ed:cd:a6:a1:7a:6d:
69:9d:69:f9:a2:0d:3e:79:b7:51:a0:81:12:85:eb:93:5d:d6:
ae:de:09:c1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jul 20 00:06:39 2023 by rpki-client on console-ams.rpki-client.org