Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/be/e005c2-affa-458f-aaf8-8af56e733600/1/iNELPX3d-4fk0utoMwmbCFyEyZU.roa
File: iNELPX3d-4fk0utoMwmbCFyEyZU.roa (raw, json)
Hash identifier: jgGERsCPTU/mdmrIeCKj4OHFKpqPjM1CcpCEX6NYPi0=
Subject key identifier: 88:D1:0B:3D:7D:DD:FB:87:E4:D2:EB:68:33:09:9B:08:5C:84:C9:95
Certificate issuer: /CN=4b57725b0a605d4ddcc464b70dcb3a162a5f055b
Certificate serial: 11EBB0CB
Authority key identifier: 4B:57:72:5B:0A:60:5D:4D:DC:C4:64:B7:0D:CB:3A:16:2A:5F:05:5B
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/S1dyWwpgXU3cxGS3Dcs6FipfBVs.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/be/e005c2-affa-458f-aaf8-8af56e733600/1/iNELPX3d-4fk0utoMwmbCFyEyZU.roa
Signing time: Tue 05 Apr 2022 08:46:21 +0000
ROA not before: Tue 05 Apr 2022 08:46:21 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 51407
IP address blocks: 46.32.192.0/21 maxlen: 21
46.32.192.0/23 maxlen: 23
46.32.194.0/23 maxlen: 23
37.60.144.0/23 maxlen: 23
37.60.144.0/21 maxlen: 21
46.32.198.0/23 maxlen: 23
46.32.196.0/23 maxlen: 23
37.60.148.0/23 maxlen: 23
37.60.146.0/23 maxlen: 23
37.60.150.0/23 maxlen: 23
188.227.232.0/24 maxlen: 24
188.227.235.0/24 maxlen: 24
188.227.234.0/24 maxlen: 24
Validation: Failed, RFC 3779 resource not subset of parent's resources
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 300658891 (0x11ebb0cb)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4b57725b0a605d4ddcc464b70dcb3a162a5f055b
Validity
Not Before: Apr 5 08:46:21 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=88d10b3d7dddfb87e4d2eb6833099b085c84c995
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:fa:0a:88:ac:a5:73:98:97:04:97:cd:e3:90:5b:
de:f7:e3:50:28:6f:75:f7:d7:33:60:dc:8f:c4:28:
ed:3f:11:19:78:07:c7:61:04:0c:32:0a:a7:8e:8a:
9f:b1:ab:cb:7e:81:f7:45:5c:40:88:76:c9:61:c3:
8b:a4:e8:06:ac:52:0e:0b:08:33:24:ff:15:e5:56:
9c:4a:0b:35:2b:f3:23:fd:ff:1c:a1:b0:5a:7e:50:
97:44:50:ea:de:11:f5:c9:b0:5f:bf:ed:ea:fe:6e:
05:53:91:1d:e2:17:b2:10:1e:d9:fa:e0:74:41:2f:
85:0f:37:8e:04:42:1a:de:fa:8c:ae:87:54:88:f3:
80:9c:01:27:e5:5b:50:ae:a0:1a:26:1c:d9:26:70:
e5:f5:25:c5:1c:cb:7c:64:34:f0:e8:de:68:b1:ac:
e4:2a:f4:4b:e7:6f:50:0d:01:da:7a:d4:39:5e:b1:
28:a1:d1:e1:5a:e5:7f:5c:1a:3b:fe:80:26:4e:1d:
a7:20:dc:f0:0d:d9:a3:a8:d8:f3:f3:b3:ba:0f:b0:
f1:f7:7e:89:2e:b9:68:eb:95:5d:e1:40:4a:78:dd:
33:15:ea:7d:c1:0f:04:66:ca:97:74:c9:3d:d7:14:
82:09:90:2b:ce:a4:47:8a:95:5e:9a:84:7e:1f:98:
b4:e5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
88:D1:0B:3D:7D:DD:FB:87:E4:D2:EB:68:33:09:9B:08:5C:84:C9:95
X509v3 Authority Key Identifier:
keyid:4B:57:72:5B:0A:60:5D:4D:DC:C4:64:B7:0D:CB:3A:16:2A:5F:05:5B
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/S1dyWwpgXU3cxGS3Dcs6FipfBVs.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/be/e005c2-affa-458f-aaf8-8af56e733600/1/iNELPX3d-4fk0utoMwmbCFyEyZU.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/be/e005c2-affa-458f-aaf8-8af56e733600/1/S1dyWwpgXU3cxGS3Dcs6FipfBVs.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
37.60.144.0/21
46.32.192.0/21
188.227.232.0/24
188.227.234.0/23
Signature Algorithm: sha256WithRSAEncryption
06:fb:c8:bd:c4:68:8f:23:3c:68:92:61:75:a0:9a:be:1f:3a:
03:d3:ff:dc:29:de:29:2d:df:a5:e8:c5:a0:c6:d2:4f:48:9c:
47:8a:6a:ee:c8:d0:b1:19:d1:d1:60:f8:4f:e7:81:f4:c6:da:
29:77:06:64:99:6a:59:00:dd:57:de:4a:2b:02:05:71:0d:44:
30:3d:19:26:25:8a:83:db:f9:27:03:5b:3a:d9:20:c3:bd:5f:
0b:ad:29:5c:62:77:42:5b:0c:de:45:2a:4a:ed:83:a6:4a:2b:
d0:20:f4:eb:4a:e8:cf:96:79:84:68:76:58:ef:63:d5:03:ca:
3c:5d:96:07:8c:46:82:92:a2:77:8c:84:32:5d:d2:60:96:e3:
d3:0c:62:9f:2b:58:e6:74:82:97:2e:64:66:7e:71:a3:ce:4c:
14:46:d4:ff:5f:c5:5d:25:f0:06:22:8b:12:9e:6b:2c:bc:97:
8c:43:18:98:a6:47:3c:f3:ae:eb:90:de:01:ac:36:2f:23:8c:
a1:6d:7e:2b:c8:d3:81:e5:41:8c:fc:7c:bb:86:7a:e6:39:da:
24:40:d2:1b:da:43:f2:8b:04:18:3a:41:c2:fa:4e:1f:a3:62:
3c:37:ee:9b:7f:a5:96:a3:bc:45:a5:98:f5:72:86:f6:e6:04:
c7:51:93:c3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Feb 17 08:26:00 2025 by rpki-client