Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b0/a66a29-51cc-4ba9-884f-f17613ea49e7/1/vta8p-zHjEXSrS_1Cn70aDRI8Io.roa
File: vta8p-zHjEXSrS_1Cn70aDRI8Io.roa (raw, json)
Hash identifier: lGaNq7Q5d0LWBFXHx5HMDErgKQP24ExWduPhiFg1lA4=
Subject key identifier: BE:D6:BC:A7:EC:C7:8C:45:D2:AD:2F:F5:0A:7E:F4:68:34:48:F0:8A
Certificate issuer: /CN=11dd0ebff5ba38a8758b794d04d62905194a3266
Certificate serial: 0183217ADD9EEFEE7DB4FD82FC2804940186
Authority key identifier: 11:DD:0E:BF:F5:BA:38:A8:75:8B:79:4D:04:D6:29:05:19:4A:32:66
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Ed0Ov_W6OKh1i3lNBNYpBRlKMmY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/b0/a66a29-51cc-4ba9-884f-f17613ea49e7/1/vta8p-zHjEXSrS_1Cn70aDRI8Io.roa
Signing time: Fri 09 Sep 2022 09:00:43 +0000
ROA not before: Fri 09 Sep 2022 09:00:43 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 34458
IP address blocks: 46.20.107.0/24 maxlen: 24
46.20.108.0/24 maxlen: 24
46.20.106.0/24 maxlen: 24
46.20.111.0/24 maxlen: 24
46.20.110.0/24 maxlen: 24
46.20.97.0/24 maxlen: 24
46.20.104.0/24 maxlen: 24
46.20.105.0/24 maxlen: 24
46.20.100.0/24 maxlen: 24
46.20.101.0/24 maxlen: 24
185.160.194.0/24 maxlen: 24
185.100.170.0/24 maxlen: 24
185.100.171.0/24 maxlen: 24
185.100.168.0/24 maxlen: 24
185.100.169.0/24 maxlen: 24
185.169.222.0/24 maxlen: 24
185.169.220.0/24 maxlen: 24
185.169.221.0/24 maxlen: 24
185.169.223.0/24 maxlen: 24
Validation: Failed, RFC 3779 resource not subset of parent's resources
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:83:21:7a:dd:9e:ef:ee:7d:b4:fd:82:fc:28:04:94:01:86
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=11dd0ebff5ba38a8758b794d04d62905194a3266
Validity
Not Before: Sep 9 09:00:43 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=bed6bca7ecc78c45d2ad2ff50a7ef4683448f08a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bf:75:3a:c9:45:d4:8a:3d:8f:0e:79:7e:88:04:
f3:4c:f6:fb:bf:bb:bb:ee:21:d7:95:1c:7d:6a:10:
ea:a9:40:91:fb:a2:7c:11:fc:b1:b8:26:ed:37:25:
dd:0a:90:e6:51:32:90:5d:0e:09:6b:3b:42:aa:75:
ca:fb:4a:9d:00:6f:a3:f1:23:be:a8:56:9f:0e:7c:
e2:55:60:1b:02:20:92:40:7c:b3:ea:89:ff:b8:e8:
83:f3:9e:e3:5f:d6:23:eb:ce:f1:c9:c5:07:9a:6f:
e9:7a:64:00:42:50:45:8d:d5:f4:28:0b:6a:16:6d:
7d:04:53:b1:22:11:11:c8:99:74:41:79:35:26:0d:
43:a2:ab:81:0c:d5:4b:f5:e1:01:ca:27:16:ef:1f:
2a:c3:37:ba:dc:29:dc:32:d8:af:e1:f0:26:a8:d1:
c3:d1:8a:dd:f0:4d:24:8d:5f:9f:db:7f:1f:03:c9:
3b:26:d1:0b:bd:8f:65:29:0f:2d:ad:83:ef:e4:c3:
1e:6e:94:68:f2:46:a3:a2:f9:e2:56:7f:aa:2f:f7:
04:ff:66:ee:c1:7f:de:d2:fd:53:bd:ba:91:a8:0f:
77:c5:72:38:b4:31:7c:65:b7:f6:64:ca:7e:7a:aa:
63:50:e6:66:e6:4c:21:56:21:87:10:32:31:4a:f6:
bd:f9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
BE:D6:BC:A7:EC:C7:8C:45:D2:AD:2F:F5:0A:7E:F4:68:34:48:F0:8A
X509v3 Authority Key Identifier:
keyid:11:DD:0E:BF:F5:BA:38:A8:75:8B:79:4D:04:D6:29:05:19:4A:32:66
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Ed0Ov_W6OKh1i3lNBNYpBRlKMmY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b0/a66a29-51cc-4ba9-884f-f17613ea49e7/1/vta8p-zHjEXSrS_1Cn70aDRI8Io.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/b0/a66a29-51cc-4ba9-884f-f17613ea49e7/1/Ed0Ov_W6OKh1i3lNBNYpBRlKMmY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
46.20.97.0/24
46.20.100.0/23
46.20.104.0-46.20.108.255
46.20.110.0/23
185.100.168.0/22
185.160.194.0/24
185.169.220.0/22
Signature Algorithm: sha256WithRSAEncryption
ab:bb:2e:5f:f5:ef:e2:b8:46:9d:ef:98:9d:12:67:db:ba:04:
c3:0a:26:df:e3:e1:9a:d1:08:f6:bc:2b:e0:b1:12:39:f4:6a:
18:19:11:90:51:43:66:16:9d:e6:22:f0:42:1d:c7:90:eb:8a:
41:9c:4e:01:df:a3:d7:b0:de:9b:0d:1e:c7:1f:0d:5e:af:e9:
e0:57:f6:f6:55:ab:5d:7c:c5:30:9b:08:d2:04:de:df:65:a8:
9b:1e:d2:14:52:c7:2d:bc:af:f9:d5:e8:da:11:86:6f:60:f2:
f3:42:16:38:7d:d1:6d:c3:29:77:7c:f8:a5:20:72:0d:94:42:
06:b6:89:cf:8f:24:54:d7:d3:0c:64:8b:c9:3c:e1:49:89:c9:
ea:04:e5:57:ba:3f:26:33:ea:c9:12:65:82:92:0c:75:a5:29:
ea:31:53:c5:ac:dd:08:66:be:97:14:bd:93:8b:1f:7f:20:b7:
93:69:6c:1c:9a:af:0f:cd:31:a6:b8:94:ad:4a:3c:3c:b7:7f:
00:38:32:00:d3:02:3e:71:e5:08:ea:e5:d2:a0:06:c2:be:3c:
e7:00:a6:5a:fd:a5:28:db:cf:32:38:65:23:96:bd:86:af:f2:
a7:ec:55:6c:1e:54:f7:63:34:f2:8b:47:10:b5:46:f1:b5:f4:
df:14:75:a0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed May 7 12:36:00 2025 by rpki-client