Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/03/913a3a-f550-46f0-acc7-cd3ca5975712/1/SwenuKwccqkGbFK9RdMqfeyubgQ.roa
File: SwenuKwccqkGbFK9RdMqfeyubgQ.roa (raw, json)
Hash identifier: /d19paSBo2qOsTlddJq8kieedyVvU060oVVEG8Id3OQ=
Subject key identifier: 4B:07:A7:B8:AC:1C:72:A9:06:6C:52:BD:45:D3:2A:7D:EC:AE:6E:04
Certificate issuer: /CN=22c4ac3e3c43d70d05349c815baadd38ad775e9d
Certificate serial: 1C927670
Authority key identifier: 22:C4:AC:3E:3C:43:D7:0D:05:34:9C:81:5B:AA:DD:38:AD:77:5E:9D
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/IsSsPjxD1w0FNJyBW6rdOK13Xp0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/03/913a3a-f550-46f0-acc7-cd3ca5975712/1/SwenuKwccqkGbFK9RdMqfeyubgQ.roa
Signing time: Sat 01 Jan 2022 01:02:55 +0000
ROA not before: Sat 01 Jan 2022 01:02:55 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 397373
IP address blocks: 194.180.36.0/22 maxlen: 24
193.222.96.0/22 maxlen: 24
193.47.60.0/22 maxlen: 24
194.55.184.0/22 maxlen: 24
194.48.248.0/22 maxlen: 24
Validation: Failed, RFC 3779 resource not subset of parent's resources
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 479360624 (0x1c927670)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=22c4ac3e3c43d70d05349c815baadd38ad775e9d
Validity
Not Before: Jan 1 01:02:55 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=4b07a7b8ac1c72a9066c52bd45d32a7decae6e04
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b3:3c:c7:3b:3c:72:8b:b2:61:ac:35:25:b9:ef:
68:cc:a6:06:c5:31:35:43:95:6f:2c:18:4f:05:02:
79:66:35:f4:a1:d7:ef:ba:94:c5:f7:08:62:95:dd:
42:87:b0:a1:93:f9:f6:4f:b6:60:7b:ed:fb:f7:eb:
9c:c1:98:ae:29:b8:db:b7:6a:cf:3e:5f:54:c8:3c:
5f:40:47:e5:a7:1c:79:3e:04:14:cf:58:a4:32:e1:
1a:02:c8:f2:a8:a1:81:41:49:50:86:ad:1d:9a:9a:
b5:a0:5e:08:95:5a:94:68:1a:48:d3:38:91:41:84:
93:d0:51:d7:4b:39:c8:cd:35:b7:1a:d8:b9:4c:1f:
1e:2b:34:36:f1:78:54:38:8b:d5:70:1d:25:d7:57:
24:6c:ce:6c:64:ea:9a:f9:bc:82:10:e6:db:19:ca:
05:ff:a3:cc:50:cf:0c:29:fd:37:97:43:d8:6d:6b:
d5:2c:45:f2:ae:5b:14:b0:2b:f5:14:42:45:24:ca:
0e:52:a5:76:fd:f8:20:17:5f:54:b5:55:13:44:00:
39:01:cc:b9:c3:e0:87:41:9e:04:20:a4:a4:51:a2:
5b:95:74:a6:a3:02:f6:16:a6:84:ff:df:9c:5d:4f:
d0:d0:10:0c:e8:9c:36:ad:44:c6:4d:2a:3b:72:43:
8a:e7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
4B:07:A7:B8:AC:1C:72:A9:06:6C:52:BD:45:D3:2A:7D:EC:AE:6E:04
X509v3 Authority Key Identifier:
keyid:22:C4:AC:3E:3C:43:D7:0D:05:34:9C:81:5B:AA:DD:38:AD:77:5E:9D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/IsSsPjxD1w0FNJyBW6rdOK13Xp0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/03/913a3a-f550-46f0-acc7-cd3ca5975712/1/SwenuKwccqkGbFK9RdMqfeyubgQ.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/03/913a3a-f550-46f0-acc7-cd3ca5975712/1/IsSsPjxD1w0FNJyBW6rdOK13Xp0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
193.47.60.0/22
193.222.96.0/22
194.48.248.0/22
194.55.184.0/22
194.180.36.0/22
Signature Algorithm: sha256WithRSAEncryption
38:ea:90:16:be:69:7e:22:64:bf:fb:18:68:97:89:08:75:37:
8e:e7:ff:12:47:eb:1a:fc:8b:41:77:cd:52:46:d1:e8:0a:39:
59:fe:54:44:14:a9:7c:2a:2c:ab:61:e2:8f:03:fc:dc:4d:7d:
81:17:28:c1:22:1d:cb:10:1a:b2:5a:00:d2:75:0f:be:de:c0:
9b:93:08:58:d5:c8:8b:2b:a4:a2:f2:f3:9e:57:6d:21:25:c1:
f6:49:20:06:99:38:77:5f:08:29:f8:a6:6e:71:34:ad:8a:1a:
c5:cf:3f:de:fc:83:2f:fb:8e:81:bc:96:84:74:62:14:be:71:
47:1e:80:05:6f:b0:4c:f4:39:37:42:01:f4:6a:56:69:98:41:
6b:51:ad:82:80:65:c0:b3:02:c5:2e:1f:af:ea:a0:73:db:ec:
d7:33:a3:5f:97:53:4c:c0:17:53:4c:d0:66:57:83:b9:f7:e6:
c5:21:45:b3:60:51:ee:fd:2f:6c:88:d5:59:91:d8:0f:f7:09:
d8:67:73:9f:0a:9f:c9:d6:8a:fd:c7:fa:90:92:1a:78:0f:2f:
bd:6e:fa:e3:9e:37:39:cc:3a:4b:70:7d:e6:87:0d:fe:48:72:
af:74:5f:50:16:76:1c:54:21:c9:19:15:b9:4b:f3:98:22:45:
31:08:a6:f4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 18:50:33 2024 by rpki-client on console-ams.rpki-client.org