Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/01/a1a88f-1dff-4eff-826b-36de657232be/1/KWW8jV17mo4cRxPQP9rqx-SepwI.roa
File: KWW8jV17mo4cRxPQP9rqx-SepwI.roa (raw, json)
Hash identifier: AUz5wAgzwqvuK9eLPzkVIR6aLq/rRE7isUnacJCtDAg=
Subject key identifier: 29:65:BC:8D:5D:7B:9A:8E:1C:47:13:D0:3F:DA:EA:C7:E4:9E:A7:02
Certificate issuer: /CN=6d20ddd398dac8f62cc12526325f1821fb724f75
Certificate serial: 0183DFBEA3A8D115AB3653876E8596CBACC7
Authority key identifier: 6D:20:DD:D3:98:DA:C8:F6:2C:C1:25:26:32:5F:18:21:FB:72:4F:75
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/bSDd05jayPYswSUmMl8YIftyT3U.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/01/a1a88f-1dff-4eff-826b-36de657232be/1/KWW8jV17mo4cRxPQP9rqx-SepwI.roa
Signing time: Sun 16 Oct 2022 07:42:36 +0000
ROA not before: Sun 16 Oct 2022 07:42:36 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 60912
IP address blocks: 192.144.12.0/22 maxlen: 24
Validation: Failed, RFC 3779 resource not subset of parent's resources
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:83:df:be:a3:a8:d1:15:ab:36:53:87:6e:85:96:cb:ac:c7
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=6d20ddd398dac8f62cc12526325f1821fb724f75
Validity
Not Before: Oct 16 07:42:36 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=2965bc8d5d7b9a8e1c4713d03fdaeac7e49ea702
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d0:95:80:ae:ed:69:e4:b9:ff:d9:63:74:dd:76:
4e:17:66:f0:c9:d7:e4:99:7c:f3:b6:3d:21:c4:36:
fd:47:ca:d5:5b:d0:1c:43:bf:51:81:d9:87:83:a0:
0f:94:6c:8a:75:6a:8c:75:72:71:a4:21:05:69:a2:
1e:7d:df:69:09:7a:c6:39:37:6a:7e:df:d7:9c:9d:
77:e4:53:c1:7a:08:da:a2:bd:2f:30:07:b8:ec:07:
34:65:7f:ec:89:42:ab:2d:d6:e8:03:69:3a:1d:38:
47:d8:2f:37:d8:fa:e1:7b:6d:85:a6:cf:52:62:0f:
40:8f:ab:5b:6a:65:b3:cc:fa:65:e6:f1:66:31:a2:
bc:c9:05:9e:1a:0d:0f:db:80:50:4b:76:8e:93:ea:
b9:03:7d:0f:65:65:2a:a7:f9:4b:9f:6a:e0:35:16:
7e:11:1b:2a:f4:e6:02:e2:b2:9f:e5:8a:90:8f:23:
47:22:b7:ab:4a:55:fd:b6:ba:51:ac:68:68:50:00:
4e:15:75:0e:48:c5:0f:42:4a:7f:4a:56:29:7b:a7:
4b:fd:21:ea:ce:a7:3b:a8:a3:70:71:33:ae:aa:d5:
31:97:09:55:28:b5:c0:f6:c0:3b:15:d0:16:c8:43:
65:a5:1e:f8:c4:3f:1c:36:33:6e:81:f6:92:b0:81:
f9:05
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
29:65:BC:8D:5D:7B:9A:8E:1C:47:13:D0:3F:DA:EA:C7:E4:9E:A7:02
X509v3 Authority Key Identifier:
keyid:6D:20:DD:D3:98:DA:C8:F6:2C:C1:25:26:32:5F:18:21:FB:72:4F:75
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/bSDd05jayPYswSUmMl8YIftyT3U.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/01/a1a88f-1dff-4eff-826b-36de657232be/1/KWW8jV17mo4cRxPQP9rqx-SepwI.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/01/a1a88f-1dff-4eff-826b-36de657232be/1/bSDd05jayPYswSUmMl8YIftyT3U.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
192.144.12.0/22
Signature Algorithm: sha256WithRSAEncryption
88:91:d0:6a:b3:e1:7f:64:37:67:89:4a:7b:61:c8:32:00:8d:
0e:37:76:1c:38:5b:37:27:45:8d:a5:ca:49:40:b5:95:7f:b8:
29:ae:f0:82:1b:5b:f2:fa:ed:81:b4:cb:9d:e4:19:55:76:61:
dc:17:94:a6:3a:1a:19:e8:be:5a:71:62:1a:ad:da:98:81:3e:
f4:eb:33:4a:e9:b5:1c:83:c1:2e:a4:10:ae:53:ed:51:86:da:
c2:f5:57:d1:df:a4:51:8b:41:8a:6c:e2:64:35:87:54:bb:51:
eb:65:32:94:84:9d:0b:aa:f6:67:fd:ad:8d:37:db:55:24:6f:
51:ed:b9:7b:25:33:f9:45:c7:a0:55:47:f7:54:9f:18:b3:cf:
ac:8d:ab:ad:95:b3:c7:e4:fe:61:a3:8b:20:7b:f5:b3:32:69:
98:e8:8d:8c:9b:c3:12:45:b8:a2:11:7f:56:b5:fd:bf:48:ca:
fd:d8:6d:06:f2:9b:fe:45:86:aa:15:12:41:71:01:6d:68:5b:
a6:d4:fa:73:c2:ca:26:9d:0f:2d:26:43:94:ad:13:9e:60:b1:
57:7d:8a:e7:0c:2f:98:bf:68:90:4b:2c:d4:2f:3f:fc:91:8d:
e6:5c:a0:2b:58:07:d7:2d:a5:5a:40:31:23:04:40:bc:2c:13:
ed:e0:af:34
-----BEGIN CERTIFICATE-----
MIIE/TCCA+WgAwIBAgISAYPfvqOo0RWrNlOHboWWy6zHMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDZkMjBkZGQzOThkYWM4ZjYyY2MxMjUyNjMyNWYxODIxZmI3
MjRmNzUwHhcNMjIxMDE2MDc0MjM2WhcNMjMwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EygyOTY1YmM4ZDVkN2I5YThlMWM0NzEzZDAzZmRhZWFjN2U0OWVhNzAyMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA0JWAru1p5Ln/2WN03XZOF2bwydfk
mXzztj0hxDb9R8rVW9AcQ79RgdmHg6APlGyKdWqMdXJxpCEFaaIefd9pCXrGOTdq
ft/XnJ135FPBegjaor0vMAe47Ac0ZX/siUKrLdboA2k6HThH2C832Prhe22Fps9S
Yg9Aj6tbamWzzPpl5vFmMaK8yQWeGg0P24BQS3aOk+q5A30PZWUqp/lLn2rgNRZ+
ERsq9OYC4rKf5YqQjyNHIrerSlX9trpRrGhoUABOFXUOSMUPQkp/SlYpe6dL/SHq
zqc7qKNwcTOuqtUxlwlVKLXA9sA7FdAWyENlpR74xD8cNjNugfaSsIH5BQIDAQAB
o4ICCTCCAgUwHQYDVR0OBBYEFCllvI1de5qOHEcT0D/a6sfknqcCMB8GA1UdIwQY
MBaAFG0g3dOY2sj2LMElJjJfGCH7ck91MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvYlNEZDA1amF5UFlzd1NVbU1sOFlJZnR5VDNVLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8wMS9hMWE4OGYtMWRmZi00ZWZmLTgyNmIt
MzZkZTY1NzIzMmJlLzEvS1dXOGpWMTdtbzRjUnhQUVA5cnF4LVNlcHdJLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8wMS9hMWE4OGYtMWRmZi00ZWZmLTgyNmItMzZkZTY1NzIzMmJl
LzEvYlNEZDA1amF5UFlzd1NVbU1sOFlJZnR5VDNVLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQCwJAMMA0G
CSqGSIb3DQEBCwUAA4IBAQCIkdBqs+F/ZDdniUp7YcgyAI0ON3YcOFs3J0WNpcpJ
QLWVf7gprvCCG1vy+u2BtMud5BlVdmHcF5SmOhoZ6L5acWIardqYgT706zNK6bUc
g8EupBCuU+1RhtrC9VfR36RRi0GKbOJkNYdUu1HrZTKUhJ0LqvZn/a2NN9tVJG9R
7bl7JTP5RcegVUf3VJ8Ys8+sjautlbPH5P5ho4sge/WzMmmY6I2Mm8MSRbiiEX9W
tf2/SMr92G0G8pv+RYaqFRJBcQFtaFum1PpzwsomnQ8tJkOUrROeYLFXfYrnDC+Y
v2iQSyzULz/8kY3mXKArWAfXLaVaQDEjBEC8LBPt4K80
-----END CERTIFICATE-----
Generated at Thu Jun 6 17:16:37 2024 by rpki-client on console-fra.rpki-client.org