Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/01/a1a88f-1dff-4eff-826b-36de657232be/1/WYrsWg_W2_3NRtbjvaPA5Lu_OYQ.roa
File: WYrsWg_W2_3NRtbjvaPA5Lu_OYQ.roa (raw, json)
Hash identifier: 1exh04U8/JrRCqqDvQ5VDMXYYaUSJsYhpno4QeSWu58=
Subject key identifier: 59:8A:EC:5A:0F:D6:DB:FD:CD:46:D6:E3:BD:A3:C0:E4:BB:BF:39:84
Certificate issuer: /CN=6d20ddd398dac8f62cc12526325f1821fb724f75
Certificate serial: 018A6EB64906EED9611DD58BF93E00FA01E1
Authority key identifier: 6D:20:DD:D3:98:DA:C8:F6:2C:C1:25:26:32:5F:18:21:FB:72:4F:75
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/bSDd05jayPYswSUmMl8YIftyT3U.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/01/a1a88f-1dff-4eff-826b-36de657232be/1/WYrsWg_W2_3NRtbjvaPA5Lu_OYQ.roa
Signing time: Thu 07 Sep 2023 08:15:54 +0000
ROA not before: Thu 07 Sep 2023 08:15:54 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 35913
IP address blocks: 194.113.35.0/24 maxlen: 24
5.181.3.0/24 maxlen: 24
5.181.1.0/24 maxlen: 24
5.181.2.0/24 maxlen: 24
5.181.0.0/24 maxlen: 24
45.150.109.0/24 maxlen: 24
2a11:6e40::/32 maxlen: 32
2a09:fb86::/32 maxlen: 32
Validation: Failed, RFC 3779 resource not subset of parent's resources
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8a:6e:b6:49:06:ee:d9:61:1d:d5:8b:f9:3e:00:fa:01:e1
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=6d20ddd398dac8f62cc12526325f1821fb724f75
Validity
Not Before: Sep 7 08:15:54 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=598aec5a0fd6dbfdcd46d6e3bda3c0e4bbbf3984
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a3:f5:c0:c4:a1:a3:c8:d8:73:49:ef:9d:9d:ce:
e3:41:b1:2b:6f:5f:9c:4f:00:ad:66:6e:06:f3:ef:
7e:2d:6f:70:06:b6:8c:28:a7:f0:d7:2a:8f:e4:2f:
67:f8:9f:5d:83:94:0a:88:40:fc:45:c7:f1:95:22:
9c:b2:bb:b7:53:f7:56:be:25:79:b2:e7:7f:83:62:
fd:45:9e:21:78:ec:09:f9:d8:7c:c3:06:5d:b4:32:
56:f8:06:cf:f8:10:69:15:d3:64:ba:7b:8a:7d:97:
18:33:71:45:b3:d4:f3:fb:f0:d3:17:12:45:32:e1:
7d:78:9a:f9:d2:5d:71:97:63:3c:17:b3:86:6d:8f:
b6:a3:0e:d9:72:bd:6b:f4:02:82:9e:9f:8c:92:3a:
aa:25:a7:d0:ef:31:df:62:09:6c:d6:95:6b:e7:14:
93:d1:d4:1f:2e:3f:0b:31:2b:55:60:bc:60:8f:99:
1b:6f:f5:07:f7:9c:b4:1e:78:92:16:41:1e:e4:fc:
87:70:65:46:b2:c2:ef:02:17:14:c4:cf:be:24:66:
21:28:3e:a8:d2:17:23:f7:27:28:44:5b:86:7e:03:
8c:97:30:f1:2a:9a:91:fc:56:3a:23:bb:f8:1f:79:
c3:12:3b:42:81:91:5f:e4:50:ea:ef:fa:63:4f:5a:
c3:49
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
59:8A:EC:5A:0F:D6:DB:FD:CD:46:D6:E3:BD:A3:C0:E4:BB:BF:39:84
X509v3 Authority Key Identifier:
keyid:6D:20:DD:D3:98:DA:C8:F6:2C:C1:25:26:32:5F:18:21:FB:72:4F:75
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/bSDd05jayPYswSUmMl8YIftyT3U.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/01/a1a88f-1dff-4eff-826b-36de657232be/1/WYrsWg_W2_3NRtbjvaPA5Lu_OYQ.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/01/a1a88f-1dff-4eff-826b-36de657232be/1/bSDd05jayPYswSUmMl8YIftyT3U.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
5.181.0.0/22
45.150.109.0/24
194.113.35.0/24
IPv6:
2a09:fb86::/32
2a11:6e40::/32
Signature Algorithm: sha256WithRSAEncryption
7d:5a:39:76:34:c8:82:84:e0:22:63:60:26:b2:92:78:22:54:
bc:f3:a7:02:0e:ef:08:74:3e:7d:cd:20:f7:91:6a:24:42:d9:
1e:89:41:15:71:81:e6:36:32:8c:39:dd:47:af:07:40:ff:bc:
83:69:a2:ee:e2:f0:99:1e:13:23:f2:59:3f:6c:3f:be:2b:f6:
ee:3b:42:1a:3a:74:b6:10:79:53:a4:30:27:fa:f7:11:94:b6:
95:42:12:a5:8d:76:41:0d:b0:a9:ee:e7:1d:1d:cf:d3:6d:d0:
ca:94:2a:21:83:9c:71:5f:fc:c7:29:ad:90:6b:f6:56:5c:94:
46:b9:94:73:09:a9:a7:1a:88:1d:1c:72:b4:f1:87:3c:56:e6:
3e:45:83:5c:25:05:c6:ea:1b:5f:80:ee:a6:e1:7f:34:23:8b:
5b:28:fc:d2:84:61:ce:20:ca:43:5f:39:99:58:b2:ff:61:e1:
c5:38:71:2a:d8:58:1c:12:48:27:14:a0:97:e0:a0:0c:17:59:
74:07:87:ef:9e:77:b3:d6:bd:ea:94:fc:b5:30:8a:1c:42:c3:
1d:99:80:3b:d3:25:12:82:28:08:41:d6:3c:18:a9:e7:5a:e3:
cb:49:b0:d5:ca:d3:27:f7:cc:c1:27:94:58:bd:9d:4a:65:31:
47:c2:ed:b4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 18:50:00 2024 by rpki-client on console-ams.rpki-client.org