Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ca/d51f64-5d06-4fc0-ab69-2cd98ee53569/1/r7Ea51WgP2dJ0_42xs2DFTj3TEE.roa
File: r7Ea51WgP2dJ0_42xs2DFTj3TEE.roa (raw, json)
Hash identifier: Kwb2Y4CD/+dwzrlGrfkByEbDSVfpPvHL/mxzI/Q1DN8=
Subject key identifier: AF:B1:1A:E7:55:A0:3F:67:49:D3:FE:36:C6:CD:83:15:38:F7:4C:41
Certificate issuer: /CN=8d84404e5f8a4b117ae44e73d53c44ecdd578342
Certificate serial: 01856F42ABEBAE393946987FB902DCE5AE7E
Authority key identifier: 8D:84:40:4E:5F:8A:4B:11:7A:E4:4E:73:D5:3C:44:EC:DD:57:83:42
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/jYRATl-KSxF65E5z1TxE7N1Xg0I.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ca/d51f64-5d06-4fc0-ab69-2cd98ee53569/1/r7Ea51WgP2dJ0_42xs2DFTj3TEE.roa
Signing time: Sun 01 Jan 2023 21:35:18 +0000
ROA not before: Sun 01 Jan 2023 21:35:18 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 210560
IP address blocks: 46.243.144.0/22 maxlen: 24
Validation: Failed, RFC 3779 resource not subset of parent's resources
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:85:6f:42:ab:eb:ae:39:39:46:98:7f:b9:02:dc:e5:ae:7e
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=8d84404e5f8a4b117ae44e73d53c44ecdd578342
Validity
Not Before: Jan 1 21:35:18 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=afb11ae755a03f6749d3fe36c6cd831538f74c41
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:be:bf:58:a7:5d:80:fa:74:d8:48:1d:b6:7c:26:
bf:d2:51:a0:e7:0a:28:ff:c8:8d:10:96:52:18:d6:
f7:78:f2:c9:22:50:a2:c4:30:6e:16:8b:e8:5d:4b:
48:c6:7b:37:a2:b7:3d:be:a9:90:8f:72:68:75:a8:
30:45:03:f1:06:5b:0d:eb:0c:8a:31:2d:81:6d:42:
a0:13:27:7a:23:9f:5f:24:f2:cb:1e:45:fc:71:e5:
31:37:ea:93:59:13:7c:f3:32:ee:0b:16:11:a4:de:
73:ff:59:10:3c:8d:1c:a0:06:6c:95:47:de:69:20:
28:cb:e1:4e:b9:2f:0f:b9:9f:50:b0:6e:2e:b7:42:
a9:c0:e0:61:98:4d:91:bc:60:12:74:cc:aa:b5:d8:
59:e5:2b:f8:7b:a1:91:fa:7b:b7:20:a1:02:c5:58:
99:4d:90:52:5f:4c:05:bd:86:16:fd:71:a8:4d:b2:
b6:de:6c:ca:1c:b2:61:36:d2:f0:c2:ad:25:a3:15:
f2:9c:b3:f8:b3:67:52:b8:b6:ee:09:73:6e:da:94:
0a:9b:5c:59:e9:a9:86:05:15:f5:17:d8:70:01:d7:
03:41:a2:00:dc:91:de:6f:83:dc:f2:ce:c5:46:c8:
f6:17:fb:6b:20:22:87:bd:29:8a:5f:94:13:cb:26:
f9:09
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
AF:B1:1A:E7:55:A0:3F:67:49:D3:FE:36:C6:CD:83:15:38:F7:4C:41
X509v3 Authority Key Identifier:
keyid:8D:84:40:4E:5F:8A:4B:11:7A:E4:4E:73:D5:3C:44:EC:DD:57:83:42
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/jYRATl-KSxF65E5z1TxE7N1Xg0I.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ca/d51f64-5d06-4fc0-ab69-2cd98ee53569/1/r7Ea51WgP2dJ0_42xs2DFTj3TEE.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/ca/d51f64-5d06-4fc0-ab69-2cd98ee53569/1/jYRATl-KSxF65E5z1TxE7N1Xg0I.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
46.243.144.0/22
Signature Algorithm: sha256WithRSAEncryption
23:55:fe:d2:5f:aa:e2:ea:04:be:c8:a3:df:65:28:39:99:d1:
d1:5d:ee:3c:8a:3d:80:e3:eb:60:f1:47:4c:1f:d7:09:4d:82:
81:26:22:59:65:38:da:6d:db:01:45:cc:63:db:5c:b9:ce:e6:
0c:98:57:af:cf:27:2c:2f:e8:5a:4c:76:29:a8:d1:6c:fd:57:
03:be:a4:66:75:e7:5d:3e:f5:6d:87:a2:7e:03:cc:79:f4:e6:
eb:21:be:b8:fe:f6:67:42:7d:ee:52:9e:20:4b:58:ba:55:89:
87:a5:54:38:3e:21:4d:d4:c5:9e:70:a9:7d:57:12:b6:f4:15:
c0:6c:fc:c6:b9:36:c8:b1:c4:43:e1:00:55:60:55:54:c6:34:
a5:f4:75:11:ec:eb:b8:58:cd:c7:bc:83:19:30:22:05:19:c1:
ef:cb:a4:6f:ec:41:96:60:03:89:8d:c2:65:b4:4f:b9:c7:f8:
d3:9a:7e:88:9e:6f:87:b3:33:3f:7a:f9:46:93:cf:ba:3f:28:
4e:41:07:13:09:ac:82:ca:d5:26:49:07:f1:c3:8f:5e:6e:57:
d4:53:af:fd:e2:d8:5e:d5:6e:6a:52:4c:62:91:84:f5:fc:b9:
d3:85:9b:af:e7:41:4f:56:2e:d9:07:a5:34:2d:2a:78:79:87:
b8:2e:a6:ae
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:53:58 2024 by rpki-client on console-fra.rpki-client.org