Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f3/664cab-ba9a-4c40-97f4-af98e49f11ae/1/T2W5V9PYiDhmGnRXu_9STZAypDA.roa
File: T2W5V9PYiDhmGnRXu_9STZAypDA.roa (raw, json)
Hash identifier: /ynhLmopCIib2cc0DXGHKaXuf1l42NzBFWYT2wfw1Ys=
Subject key identifier: 4F:65:B9:57:D3:D8:88:38:66:1A:74:57:BB:FF:52:4D:90:32:A4:30
Certificate issuer: /CN=23d480b0795617e2e26e6e18264377e7a96c78f3
Certificate serial: 04E89AA5
Authority key identifier: 23:D4:80:B0:79:56:17:E2:E2:6E:6E:18:26:43:77:E7:A9:6C:78:F3
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/I9SAsHlWF-Libm4YJkN356lsePM.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/f3/664cab-ba9a-4c40-97f4-af98e49f11ae/1/T2W5V9PYiDhmGnRXu_9STZAypDA.roa
Signing time: Sat 01 Jan 2022 04:00:46 +0000
ROA not before: Sat 01 Jan 2022 04:00:46 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 31059
IP address blocks: 46.227.160.0/23 maxlen: 23
46.227.162.0/24 maxlen: 24
46.227.164.0/24 maxlen: 24
46.227.165.0/24 maxlen: 24
46.227.166.0/24 maxlen: 24
46.227.167.0/24 maxlen: 24
193.242.176.0/22 maxlen: 22
95.143.4.0/24 maxlen: 24
95.143.0.0/21 maxlen: 24
95.143.10.0/24 maxlen: 24
95.143.11.0/24 maxlen: 24
95.143.5.0/24 maxlen: 24
95.143.8.0/23 maxlen: 23
95.143.12.0/24 maxlen: 24
95.143.13.0/24 maxlen: 24
95.143.14.0/23 maxlen: 23
185.72.224.0/24 maxlen: 24
185.72.225.0/24 maxlen: 24
185.72.226.0/24 maxlen: 24
185.72.227.0/24 maxlen: 24
2a02:1328:2::/48 maxlen: 48
Validation: Failed, RFC 3779 resource not subset of parent's resources
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 82352805 (0x4e89aa5)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=23d480b0795617e2e26e6e18264377e7a96c78f3
Validity
Not Before: Jan 1 04:00:46 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=4f65b957d3d88838661a7457bbff524d9032a430
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b9:58:8f:76:0e:48:74:ab:98:2f:7f:11:b0:96:
cd:00:e1:8c:a6:8f:8e:5f:4e:68:2d:27:61:c4:34:
a5:5c:f3:3e:31:2f:f8:b3:dc:85:97:48:ab:fa:58:
6a:49:b3:1f:47:5f:b4:87:cd:08:d8:c1:9a:c7:2c:
f9:f3:03:e1:6a:13:0f:41:0d:64:c7:f0:3c:94:28:
9e:3c:1e:f7:28:d6:8f:44:ac:ae:d1:55:e2:ee:2a:
44:43:12:7a:00:aa:50:5b:75:e0:12:1b:74:b2:4b:
0d:9a:68:d5:71:b0:8c:70:1b:eb:7b:ed:f5:11:49:
62:2e:b3:7a:d9:54:73:6c:65:9c:35:9a:fc:97:14:
e9:42:0c:d9:b7:08:3c:c9:be:29:46:d0:54:6b:b1:
39:b8:66:84:f0:1f:3d:55:79:54:2a:95:d4:5b:ff:
1a:b4:20:49:a2:99:66:7c:36:50:9b:32:72:81:9f:
5e:33:64:3c:93:0c:e5:f7:9a:58:9d:f8:b0:3b:fb:
0c:52:ac:3b:5b:e4:b8:00:a5:0f:1f:0e:e5:e5:0c:
ad:5f:52:ba:a8:92:e6:3b:a6:ad:c9:3a:77:b3:74:
ca:c5:63:dd:6c:7f:33:3f:1d:38:e3:10:d4:2c:a0:
6b:6e:23:77:ba:a1:83:8b:2d:c7:bf:7f:4d:ce:8e:
4a:39
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
4F:65:B9:57:D3:D8:88:38:66:1A:74:57:BB:FF:52:4D:90:32:A4:30
X509v3 Authority Key Identifier:
keyid:23:D4:80:B0:79:56:17:E2:E2:6E:6E:18:26:43:77:E7:A9:6C:78:F3
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/I9SAsHlWF-Libm4YJkN356lsePM.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f3/664cab-ba9a-4c40-97f4-af98e49f11ae/1/T2W5V9PYiDhmGnRXu_9STZAypDA.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/f3/664cab-ba9a-4c40-97f4-af98e49f11ae/1/I9SAsHlWF-Libm4YJkN356lsePM.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
46.227.160.0-46.227.162.255
46.227.164.0/22
95.143.0.0/20
185.72.224.0/22
193.242.176.0/22
IPv6:
2a02:1328:2::/48
Signature Algorithm: sha256WithRSAEncryption
37:4a:9f:ea:22:b4:22:1c:11:a3:4c:77:f1:7f:4d:56:46:6d:
98:43:98:42:98:c3:9b:24:d8:27:8f:7e:84:61:0c:36:5f:06:
f3:6d:9e:00:d3:52:1a:3f:63:cd:c7:d3:93:a1:dd:2d:a4:9f:
cd:57:e7:d7:1c:05:e2:56:fc:df:3c:b6:5d:0e:73:06:51:36:
1f:b1:3b:55:10:09:63:a8:6a:1c:82:83:b8:6e:a4:ce:81:d8:
66:bb:cc:68:2b:7b:4a:56:62:0f:45:10:c9:42:6f:54:f3:41:
c2:7c:95:cc:ff:67:96:5b:a7:5f:5d:f8:fd:e0:5e:a5:ea:2e:
26:db:4d:b5:e2:7a:92:c2:32:b0:07:86:10:04:8a:1b:d8:43:
c7:6e:e2:8a:ac:96:20:83:99:ac:40:52:c0:f7:6a:89:5c:3f:
aa:38:f5:5a:ae:da:66:51:dc:60:40:ae:d4:9d:7f:a8:b3:39:
7f:c4:9d:03:65:3e:23:f4:c5:11:7f:ee:dd:02:17:d8:20:1a:
73:3f:68:32:f9:3a:7e:a5:ba:89:09:e9:08:0c:72:ce:48:4d:
89:05:82:04:23:aa:a2:dd:e6:86:68:f2:6e:6f:fd:76:ca:b7:
d0:85:1c:f9:50:fd:6e:6f:53:4f:3b:69:c5:71:9b:ea:21:2c:
f3:97:f0:5c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 19:52:26 2024 by rpki-client on console-ams.rpki-client.org