Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/da/2ff98e-6ff9-4233-b9f1-227e21e691e7/1/EtRd4C7RaCobBn5lfXgQhVfMw64.roa
File: EtRd4C7RaCobBn5lfXgQhVfMw64.roa (raw, json)
Hash identifier: zreV2LIIncM9vkDQrdSshwvRqJ4bvUiFWfKaZRFSsuU=
Subject key identifier: 12:D4:5D:E0:2E:D1:68:2A:1B:06:7E:65:7D:78:10:85:57:CC:C3:AE
Certificate issuer: /CN=a68ff9229efd8d12b4273f346f8c6454ea587ecc
Certificate serial: 06D958D3
Authority key identifier: A6:8F:F9:22:9E:FD:8D:12:B4:27:3F:34:6F:8C:64:54:EA:58:7E:CC
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/po_5Ip79jRK0Jz80b4xkVOpYfsw.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/da/2ff98e-6ff9-4233-b9f1-227e21e691e7/1/EtRd4C7RaCobBn5lfXgQhVfMw64.roa
Signing time: Sat 01 Jan 2022 14:58:08 +0000
ROA not before: Sat 01 Jan 2022 14:58:08 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 396982
IP address blocks: 46.16.161.0/24 maxlen: 24
46.16.160.0/24 maxlen: 24
46.16.160.0/23 maxlen: 23
46.16.164.0/24 maxlen: 24
46.16.166.0/24 maxlen: 24
185.27.146.0/24 maxlen: 24
46.16.165.0/24 maxlen: 24
185.27.147.0/24 maxlen: 24
91.197.140.0/24 maxlen: 24
91.197.140.0/22 maxlen: 22
91.197.141.0/24 maxlen: 24
91.197.143.0/24 maxlen: 24
91.197.142.0/23 maxlen: 23
91.197.142.0/24 maxlen: 24
185.27.144.0/24 maxlen: 24
185.27.144.0/22 maxlen: 22
185.27.145.0/24 maxlen: 24
Validation: Failed, RFC 3779 resource not subset of parent's resources
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 114907347 (0x6d958d3)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=a68ff9229efd8d12b4273f346f8c6454ea587ecc
Validity
Not Before: Jan 1 14:58:08 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=12d45de02ed1682a1b067e657d78108557ccc3ae
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9c:2b:03:09:f2:e3:d4:03:0e:12:75:f3:cf:3d:
bb:93:4d:fd:a8:de:e7:33:b7:e9:a6:d1:6c:bb:cd:
60:83:0a:9f:a3:a5:f9:3d:4b:a6:0a:55:de:f3:5a:
21:47:28:72:2f:3c:52:11:9e:d1:87:fd:bf:80:34:
be:af:bc:be:59:09:2d:84:ba:9c:65:7c:67:6e:c2:
b0:ae:ad:a5:11:81:32:97:4f:da:96:5f:a2:49:45:
91:44:0e:d7:f4:d6:69:4d:84:40:32:e5:a4:07:c6:
d4:bd:97:22:8b:e1:a8:ac:d6:21:7f:4e:75:88:af:
34:58:7e:1b:81:3b:89:38:23:8d:8a:09:31:32:e9:
20:aa:4f:60:e3:23:13:bf:84:a0:39:b3:d2:b4:d6:
de:cc:56:ab:b2:0a:cb:5c:01:7d:1b:2f:e2:80:b2:
eb:fb:e9:45:ec:17:3e:94:fc:a3:4f:5a:db:d6:03:
df:b6:be:c4:e7:e4:e2:25:65:e6:7c:aa:dd:53:4e:
86:c3:10:ae:9a:d4:00:39:12:46:34:2d:eb:d9:a3:
46:67:0a:f7:b5:52:30:ba:36:10:b4:10:a6:4a:50:
b8:c0:be:09:7d:98:0d:fa:61:46:0e:93:37:2c:1c:
55:cf:b0:c6:45:98:73:7c:b0:38:ff:ba:30:0b:fe:
ac:b1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
12:D4:5D:E0:2E:D1:68:2A:1B:06:7E:65:7D:78:10:85:57:CC:C3:AE
X509v3 Authority Key Identifier:
keyid:A6:8F:F9:22:9E:FD:8D:12:B4:27:3F:34:6F:8C:64:54:EA:58:7E:CC
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/po_5Ip79jRK0Jz80b4xkVOpYfsw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/da/2ff98e-6ff9-4233-b9f1-227e21e691e7/1/EtRd4C7RaCobBn5lfXgQhVfMw64.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/da/2ff98e-6ff9-4233-b9f1-227e21e691e7/1/po_5Ip79jRK0Jz80b4xkVOpYfsw.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
46.16.160.0/23
46.16.164.0-46.16.166.255
91.197.140.0/22
185.27.144.0/22
Signature Algorithm: sha256WithRSAEncryption
4a:e0:55:c5:a7:b0:92:d2:ac:47:4b:7c:4a:eb:58:8e:09:5c:
50:63:d6:cf:09:81:38:c8:07:3a:3a:ce:1a:6b:14:88:07:e7:
7c:cc:3f:4f:28:0c:fb:2d:14:1b:74:85:1e:68:6a:f8:24:48:
7b:e2:08:a4:65:f5:f2:4b:5d:2e:0f:88:2d:ef:49:d7:6b:0b:
4c:7c:3c:15:fc:c6:90:2c:61:4d:68:30:83:b4:35:d8:0d:de:
68:6f:6c:3b:70:93:49:7e:14:32:59:43:fd:af:34:73:af:22:
13:f2:51:fd:69:1c:4f:54:3a:65:85:b7:cf:88:c5:31:42:8b:
69:2a:76:e5:4a:50:b2:b9:ea:58:dc:38:04:21:7a:f9:cd:bd:
d3:e2:aa:29:04:3f:3f:5f:25:f1:09:3d:80:b7:8d:91:ce:a2:
44:da:b7:3c:e2:25:5f:d6:34:33:e2:7a:a0:fb:a7:db:b4:d3:
fe:2a:f5:88:40:e5:1a:45:46:13:20:3e:7a:b0:6d:78:17:5c:
99:31:d7:02:7e:ff:23:99:03:76:ea:ab:65:3a:96:7d:7b:2e:
88:70:92:f9:99:56:1d:4f:4b:8c:2b:fc:87:ff:27:6f:57:cb:
66:1b:5d:ff:b4:b0:00:84:e0:20:d5:3b:73:73:94:bd:b2:be:
45:06:d2:4a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 19:47:24 2024 by rpki-client on console-ams.rpki-client.org