Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/52/c961a0-4f53-422a-b7dd-3dfa510d6b16/1/WFHQU4UBXql-ogsgBmWCEgYNKEk.roa
File: WFHQU4UBXql-ogsgBmWCEgYNKEk.roa (raw, json)
Hash identifier: 27lOcuvhky+cNAiG56B1V93fQOZXSk7+RNB6eYq0CJY=
Subject key identifier: 58:51:D0:53:85:01:5E:A9:7E:A2:0B:20:06:65:82:12:06:0D:28:49
Certificate issuer: /CN=6ddb38b343da2d119309edaa19c7a78870327ebe
Certificate serial: 1AC6F188
Authority key identifier: 6D:DB:38:B3:43:DA:2D:11:93:09:ED:AA:19:C7:A7:88:70:32:7E:BE
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/bds4s0PaLRGTCe2qGceniHAyfr4.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/52/c961a0-4f53-422a-b7dd-3dfa510d6b16/1/WFHQU4UBXql-ogsgBmWCEgYNKEk.roa
Signing time: Sun 02 Jan 2022 11:08:55 +0000
ROA not before: Sun 02 Jan 2022 11:08:55 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 207141
IP address blocks: 89.44.240.0/22 maxlen: 22
89.44.240.0/24 maxlen: 24
89.44.241.0/24 maxlen: 24
89.44.243.0/24 maxlen: 24
89.44.242.0/24 maxlen: 24
89.42.44.0/24 maxlen: 24
89.42.44.0/22 maxlen: 22
89.42.45.0/24 maxlen: 24
89.42.47.0/24 maxlen: 24
89.42.46.0/24 maxlen: 24
89.41.184.0/22 maxlen: 22
89.41.185.0/24 maxlen: 24
89.41.184.0/24 maxlen: 24
89.41.186.0/24 maxlen: 24
89.41.187.0/24 maxlen: 24
Validation: Failed, RFC 3779 resource not subset of parent's resources
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 449245576 (0x1ac6f188)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=6ddb38b343da2d119309edaa19c7a78870327ebe
Validity
Not Before: Jan 2 11:08:55 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=5851d05385015ea97ea20b2006658212060d2849
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b5:83:e3:09:53:55:ab:88:26:ad:7a:4f:5d:20:
e6:a5:ca:8b:2b:0e:6f:44:08:57:78:06:6e:76:7f:
d8:05:ce:b7:65:12:66:72:19:3d:b2:7b:e8:61:e4:
9e:87:3f:dd:36:e3:2c:91:9f:66:2c:1b:39:f6:41:
73:fc:cc:8f:8b:5f:24:29:51:ff:7a:a2:12:07:f5:
a7:b2:c7:7e:46:c5:58:17:fb:78:ce:23:5f:fa:23:
8e:c9:ed:26:b6:80:99:88:17:5f:84:57:67:86:4d:
ca:92:2c:16:58:51:43:61:13:dd:61:02:25:9e:10:
e9:7d:7e:6a:4c:1c:ec:1c:ea:4d:73:46:46:69:1b:
1d:bd:fa:b9:23:0c:9b:6b:cf:4c:2b:63:ef:ff:43:
ec:4c:69:6a:92:ed:f5:6b:a9:f5:68:4d:e4:75:e3:
6b:6f:12:f0:88:57:24:bf:88:a7:11:e3:96:d4:bb:
55:de:10:f9:2c:00:68:87:23:3d:af:80:c0:ca:e9:
ba:2d:75:10:c8:ce:cd:1b:fb:a7:a9:a0:03:89:9b:
f6:bd:0d:3c:16:b6:fc:c8:37:45:e1:38:35:d9:91:
3b:78:88:5d:7e:bf:6a:36:4e:2b:45:1d:61:8d:4e:
d2:1d:f0:e3:a5:21:1f:15:79:e1:be:70:c5:b7:ab:
be:27
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
58:51:D0:53:85:01:5E:A9:7E:A2:0B:20:06:65:82:12:06:0D:28:49
X509v3 Authority Key Identifier:
keyid:6D:DB:38:B3:43:DA:2D:11:93:09:ED:AA:19:C7:A7:88:70:32:7E:BE
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/bds4s0PaLRGTCe2qGceniHAyfr4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/52/c961a0-4f53-422a-b7dd-3dfa510d6b16/1/WFHQU4UBXql-ogsgBmWCEgYNKEk.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/52/c961a0-4f53-422a-b7dd-3dfa510d6b16/1/bds4s0PaLRGTCe2qGceniHAyfr4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
89.41.184.0/22
89.42.44.0/22
89.44.240.0/22
Signature Algorithm: sha256WithRSAEncryption
2b:45:34:51:f0:ab:ec:b9:a4:6e:b3:31:25:a2:75:9d:4a:42:
85:fc:e5:9b:d6:71:0d:ad:2f:d5:80:f8:b5:c4:32:41:ef:f3:
c9:95:05:a1:0c:93:0d:e2:51:92:f0:da:bc:56:cd:1c:f8:d7:
06:b6:98:6b:7f:9a:a6:e6:17:3c:51:db:ad:28:7f:8d:4e:3c:
d4:a0:a3:b4:7e:c9:9d:d9:7a:05:0a:b1:2a:a0:ce:0d:78:ab:
a4:ec:ae:ee:a3:08:96:17:df:4a:ed:3c:2e:c8:6e:8d:f0:47:
63:79:15:ca:7d:77:25:04:06:37:5d:86:43:85:2a:f8:e0:42:
40:0e:95:8a:10:2b:be:52:0d:91:30:56:c0:02:56:f1:c3:f2:
97:ff:91:cf:e8:33:f2:dc:e3:c6:00:77:fa:a6:ff:ce:f9:71:
13:59:32:68:89:e4:01:a4:64:a6:2d:f8:8e:34:1d:68:1f:ca:
90:92:23:a4:b2:5c:44:d6:51:c1:37:f5:92:10:ac:c7:79:f9:
e1:0d:15:09:bf:f7:df:bd:90:d7:f6:b2:0a:6d:2d:fa:7b:c7:
6c:ef:c0:19:29:dd:77:9a:64:57:3d:74:d0:2e:2e:90:12:78:
64:c4:9f:4a:13:83:81:99:37:0d:17:49:df:1e:75:e2:c1:e7:
ab:fd:a8:f2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:29:51 2024 by rpki-client on console-fra.rpki-client.org