Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b0/a66a29-51cc-4ba9-884f-f17613ea49e7/1/Dch2bgjADbKciQR6zKdWk6uL8DY.roa
File: Dch2bgjADbKciQR6zKdWk6uL8DY.roa (raw, json)
Hash identifier: 3o4gHBHn1kj4s8dnoq+6+u8O9Q4LKgF3dlEUwvfKhgc=
Subject key identifier: 0D:C8:76:6E:08:C0:0D:B2:9C:89:04:7A:CC:A7:56:93:AB:8B:F0:36
Certificate issuer: /CN=11dd0ebff5ba38a8758b794d04d62905194a3266
Certificate serial: 01856D2F324FB6F121E5BA8A28F2FF301D00
Authority key identifier: 11:DD:0E:BF:F5:BA:38:A8:75:8B:79:4D:04:D6:29:05:19:4A:32:66
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Ed0Ov_W6OKh1i3lNBNYpBRlKMmY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/b0/a66a29-51cc-4ba9-884f-f17613ea49e7/1/Dch2bgjADbKciQR6zKdWk6uL8DY.roa
Signing time: Sun 01 Jan 2023 11:54:47 +0000
ROA not before: Sun 01 Jan 2023 11:54:47 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 149767
IP address blocks: 46.20.109.0/24 maxlen: 24
46.20.99.0/24 maxlen: 24
Validation: Failed, RFC 3779 resource not subset of parent's resources
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:85:6d:2f:32:4f:b6:f1:21:e5:ba:8a:28:f2:ff:30:1d:00
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=11dd0ebff5ba38a8758b794d04d62905194a3266
Validity
Not Before: Jan 1 11:54:47 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=0dc8766e08c00db29c89047acca75693ab8bf036
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:84:76:80:1a:ff:78:0a:9e:6a:58:82:3d:53:38:
ba:8e:b2:32:e8:70:b8:d4:3e:0f:d9:2f:81:d8:94:
f3:90:1e:58:d8:ad:38:6c:9b:7c:56:9c:66:8d:09:
a2:07:00:ba:38:d9:2c:c8:fe:4e:03:e3:84:1c:04:
37:bd:35:54:46:cb:bc:a2:41:cb:e2:01:10:f3:8f:
13:4b:2a:e1:4e:7a:3e:3e:1c:df:f6:26:2d:af:00:
9b:0b:90:8c:a3:56:9f:eb:0b:15:8e:ab:b8:60:ba:
f5:12:28:32:08:d2:3e:70:4d:20:c4:ce:4e:1d:67:
03:33:d4:94:03:d9:b2:2b:10:81:17:32:48:4a:0d:
86:07:57:d1:e3:01:42:34:d5:76:3b:fb:87:23:a3:
e5:00:92:fa:d3:ce:bb:1c:37:e7:ea:ec:cf:9c:06:
23:9d:5e:43:65:0e:bb:c4:51:29:de:02:8c:25:e4:
4e:01:85:b0:c9:91:df:86:55:37:6f:fc:92:ca:22:
b1:d5:37:e1:e1:d6:84:be:72:88:84:96:df:48:51:
bd:b2:b9:c8:69:f1:28:d7:cc:14:33:af:6f:8f:9e:
5d:9d:95:00:e8:46:ec:23:4b:dd:a4:61:ea:30:47:
af:36:d1:a9:19:c7:a1:9b:27:f0:e5:06:ff:3e:1c:
c5:f7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
0D:C8:76:6E:08:C0:0D:B2:9C:89:04:7A:CC:A7:56:93:AB:8B:F0:36
X509v3 Authority Key Identifier:
keyid:11:DD:0E:BF:F5:BA:38:A8:75:8B:79:4D:04:D6:29:05:19:4A:32:66
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Ed0Ov_W6OKh1i3lNBNYpBRlKMmY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b0/a66a29-51cc-4ba9-884f-f17613ea49e7/1/Dch2bgjADbKciQR6zKdWk6uL8DY.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/b0/a66a29-51cc-4ba9-884f-f17613ea49e7/1/Ed0Ov_W6OKh1i3lNBNYpBRlKMmY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
46.20.99.0/24
46.20.109.0/24
Signature Algorithm: sha256WithRSAEncryption
c0:e9:23:70:85:5a:1d:56:9d:97:da:82:a1:b2:6c:74:0b:ef:
6a:59:49:ed:39:0b:2d:5f:0f:7c:e4:a6:6a:cb:c9:47:6c:3d:
36:f6:fc:d9:7a:79:7f:7d:4a:00:ef:57:26:ad:d6:21:26:cd:
5e:aa:c9:1d:cf:59:14:3c:94:55:d2:f4:d8:a0:c5:1b:1a:83:
30:97:d0:ef:11:3e:fd:56:dd:f8:d5:a9:37:4f:0f:7b:67:17:
29:29:cf:1d:3b:80:25:cf:5f:61:1b:ba:a7:5a:e5:65:40:60:
a1:c5:0f:ca:3d:bb:42:40:90:c7:2f:f3:7b:86:8d:06:e4:33:
43:4b:66:56:7d:da:ac:50:d0:32:73:7b:16:cb:0c:48:a6:05:
6d:58:8a:d3:fd:d8:36:29:f2:52:85:49:fa:c1:3d:0d:72:8b:
00:10:2c:29:6b:15:bc:24:5f:80:23:be:05:37:54:83:05:d6:
a4:ca:03:d1:4b:90:a2:81:86:3f:3c:ed:dd:0e:1b:b8:69:c5:
2b:66:ab:f3:9c:d8:8a:8d:48:ea:0d:05:3a:89:02:ae:79:19:
d3:d2:9e:5b:79:f7:21:0b:01:70:ca:bb:63:f2:9d:cf:c9:0f:
36:e2:24:d5:3d:91:4f:16:f7:be:22:39:3e:c1:4c:ab:7f:7d:
f2:9b:6b:31
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat May 10 13:43:59 2025 by rpki-client