Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/da/2ff98e-6ff9-4233-b9f1-227e21e691e7/1/kH2jkMIj90ET_yY1QPTircj8eKE.roa
File: kH2jkMIj90ET_yY1QPTircj8eKE.roa (raw, json)
Hash identifier: PjHae0DcwuOM6EIVA26tu/MuYgBuxzjqaTdeGlHkYOg=
Subject key identifier: 90:7D:A3:90:C2:23:F7:41:13:FF:26:35:40:F4:E2:AD:C8:FC:78:A1
Certificate issuer: /CN=a68ff9229efd8d12b4273f346f8c6454ea587ecc
Certificate serial: 06D84A5C
Authority key identifier: A6:8F:F9:22:9E:FD:8D:12:B4:27:3F:34:6F:8C:64:54:EA:58:7E:CC
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/po_5Ip79jRK0Jz80b4xkVOpYfsw.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/da/2ff98e-6ff9-4233-b9f1-227e21e691e7/1/kH2jkMIj90ET_yY1QPTircj8eKE.roa
Signing time: Sat 01 Jan 2022 14:58:08 +0000
ROA not before: Sat 01 Jan 2022 14:58:08 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 43584
IP address blocks: 46.16.160.0/23 maxlen: 23
46.16.164.0/24 maxlen: 24
185.27.147.0/24 maxlen: 24
185.27.146.0/24 maxlen: 24
46.16.166.0/24 maxlen: 24
46.16.165.0/24 maxlen: 24
46.16.167.0/24 maxlen: 24
91.197.142.0/23 maxlen: 23
91.197.141.0/24 maxlen: 24
91.197.140.0/24 maxlen: 24
185.27.144.0/24 maxlen: 24
185.27.144.0/22 maxlen: 22
185.27.145.0/24 maxlen: 24
Validation: Failed, RFC 3779 resource not subset of parent's resources
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 114838108 (0x6d84a5c)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=a68ff9229efd8d12b4273f346f8c6454ea587ecc
Validity
Not Before: Jan 1 14:58:08 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=907da390c223f74113ff263540f4e2adc8fc78a1
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:96:ca:c6:0b:91:29:f7:ec:21:16:de:2e:9f:89:
68:00:08:fd:f5:1e:ca:a8:47:00:62:35:ff:b8:6f:
cd:69:35:86:d0:9e:a4:74:d2:59:85:13:ec:60:9f:
ab:35:ea:a0:3f:11:5c:55:cb:4a:da:36:28:6f:2b:
e2:dd:10:1b:59:3c:28:8d:62:a5:67:bd:80:65:68:
b1:75:40:ca:55:dc:39:53:f7:2a:64:0d:a4:42:04:
c8:f3:72:a4:5c:18:62:53:d9:5c:4c:24:22:41:61:
7d:1b:4d:b8:f2:78:e8:4a:2b:ac:0c:a3:ab:c6:2a:
26:a7:bf:d8:1c:0e:21:34:1f:0a:1f:ba:e6:f7:7b:
c6:09:ff:32:eb:b8:16:c9:5e:75:f7:7c:d7:b3:cb:
6f:bb:d2:bc:e6:61:d9:1f:6f:77:0d:0b:a2:01:26:
ac:23:e2:19:01:af:cd:3d:9d:b0:0a:e1:fc:8d:46:
25:cc:ca:7f:12:16:76:38:5e:8e:59:1d:cf:12:52:
f7:7f:10:70:24:3d:c1:a5:70:fd:86:60:03:3b:70:
90:59:04:0f:d3:ef:85:e5:76:f1:ab:84:76:6f:de:
28:6d:c1:90:bb:cb:fd:b6:5c:61:c5:59:ab:7b:38:
39:17:31:ec:b5:b4:68:07:9c:0f:58:fd:ee:cf:6f:
f7:af
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
90:7D:A3:90:C2:23:F7:41:13:FF:26:35:40:F4:E2:AD:C8:FC:78:A1
X509v3 Authority Key Identifier:
keyid:A6:8F:F9:22:9E:FD:8D:12:B4:27:3F:34:6F:8C:64:54:EA:58:7E:CC
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/po_5Ip79jRK0Jz80b4xkVOpYfsw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/da/2ff98e-6ff9-4233-b9f1-227e21e691e7/1/kH2jkMIj90ET_yY1QPTircj8eKE.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/da/2ff98e-6ff9-4233-b9f1-227e21e691e7/1/po_5Ip79jRK0Jz80b4xkVOpYfsw.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
46.16.160.0/23
46.16.164.0/22
91.197.140.0/22
185.27.144.0/22
Signature Algorithm: sha256WithRSAEncryption
73:e4:1c:88:0f:cc:a5:89:85:0d:d0:a5:ce:da:0c:3d:21:d8:
c1:f3:ae:73:38:30:ef:0e:10:f9:03:f7:58:6f:fb:68:63:93:
40:40:37:eb:e3:ea:68:12:8a:b5:11:a7:22:b5:a4:31:b0:4e:
72:50:89:84:13:fc:50:76:b0:a6:cf:f9:1c:88:4b:44:26:08:
76:7e:39:6d:ee:b7:53:0c:18:6c:89:ac:bd:ae:4b:89:6a:81:
5e:99:13:f3:e3:18:5f:50:dd:43:6e:37:69:66:90:94:1b:39:
9d:ac:8c:3b:d1:fb:72:aa:e3:3b:16:0d:00:92:c8:ea:38:fe:
f8:35:b7:3d:88:0e:93:fe:34:73:f6:02:e6:7e:70:2a:f4:ef:
5b:d3:f0:d6:f5:e9:62:17:18:16:3f:72:71:e3:22:bb:02:ea:
cf:3a:e7:21:bd:e6:f7:8c:9b:7b:4e:a9:8c:f1:e2:73:d7:ab:
25:53:e0:03:0b:51:01:f2:55:32:84:55:00:a6:82:d3:48:56:
90:24:e8:3e:cf:54:96:09:0c:b3:d6:c8:f2:37:2c:5f:c0:20:
e0:b4:dc:14:76:a6:b8:7e:41:d8:3f:56:7d:fd:17:3b:34:74:
19:59:3f:0c:e0:6f:cb:a5:36:6d:37:0b:ae:e9:4b:8b:cf:25:
44:75:a1:6e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:56:03 2024 by rpki-client on console-fra.rpki-client.org