Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/03/913a3a-f550-46f0-acc7-cd3ca5975712/1/WTUg9qwxjkc45-DQGM3aH9LH1DQ.roa
File: WTUg9qwxjkc45-DQGM3aH9LH1DQ.roa (raw, json)
Hash identifier: twYjfHTbF8mHejnQNhuT7gHzxdTExVTpthA6N5xM1ic=
Subject key identifier: 59:35:20:F6:AC:31:8E:47:38:E7:E0:D0:18:CD:DA:1F:D2:C7:D4:34
Certificate issuer: /CN=22c4ac3e3c43d70d05349c815baadd38ad775e9d
Certificate serial: 018775C5CED8158E03716721D5F1A5E94C40
Authority key identifier: 22:C4:AC:3E:3C:43:D7:0D:05:34:9C:81:5B:AA:DD:38:AD:77:5E:9D
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/IsSsPjxD1w0FNJyBW6rdOK13Xp0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/03/913a3a-f550-46f0-acc7-cd3ca5975712/1/WTUg9qwxjkc45-DQGM3aH9LH1DQ.roa
Signing time: Wed 12 Apr 2023 14:01:50 +0000
ROA not before: Wed 12 Apr 2023 14:01:50 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 1
IP address blocks: 193.168.196.0/22 maxlen: 24
45.91.193.0/24 maxlen: 24
83.171.204.0/22 maxlen: 24
45.139.100.0/22 maxlen: 24
88.218.76.0/22 maxlen: 24
Validation: Failed, RFC 3779 resource not subset of parent's resources
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:87:75:c5:ce:d8:15:8e:03:71:67:21:d5:f1:a5:e9:4c:40
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=22c4ac3e3c43d70d05349c815baadd38ad775e9d
Validity
Not Before: Apr 12 14:01:50 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=593520f6ac318e4738e7e0d018cdda1fd2c7d434
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cf:39:c1:fb:6f:dd:02:b3:47:01:99:d2:90:70:
63:7a:34:f9:1e:53:cc:05:69:53:12:ec:8b:84:dd:
90:06:bc:ab:54:1a:90:7d:8d:b6:77:79:53:41:b0:
f3:67:0e:98:ca:c9:da:ac:ad:60:d8:6f:df:f8:5d:
d0:d1:9f:52:2c:57:29:75:2d:98:79:a7:ef:96:7c:
13:b5:99:73:00:47:f9:a2:7d:ee:5e:bd:9c:87:78:
b6:9b:14:e5:fb:c6:e2:e4:f7:2d:64:a3:0a:e6:93:
f7:34:58:67:ee:98:44:0a:07:a5:c7:7f:87:e3:d2:
25:a6:6c:dc:3d:4a:47:f5:1a:1b:28:8b:46:af:89:
be:60:46:b9:4e:74:c9:b2:27:13:52:63:98:b5:eb:
e6:6b:ec:3e:a6:d9:ee:af:de:6b:87:8c:ae:f4:d1:
f5:91:8e:7f:69:d8:81:62:a0:57:5e:cb:0c:9d:5e:
97:74:43:0a:2e:45:30:cf:0f:eb:c7:fb:36:e6:e5:
c7:2e:4f:23:30:83:a9:e9:0e:b4:2a:5a:50:30:83:
6a:f5:d1:5c:ed:d4:71:e8:d3:aa:0b:28:45:20:34:
24:8e:30:19:1b:0e:ae:24:6a:cd:87:ae:f4:0a:a5:
de:2c:0c:04:87:05:28:b3:b2:bd:d9:61:63:e7:14:
5d:09
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
59:35:20:F6:AC:31:8E:47:38:E7:E0:D0:18:CD:DA:1F:D2:C7:D4:34
X509v3 Authority Key Identifier:
keyid:22:C4:AC:3E:3C:43:D7:0D:05:34:9C:81:5B:AA:DD:38:AD:77:5E:9D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/IsSsPjxD1w0FNJyBW6rdOK13Xp0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/03/913a3a-f550-46f0-acc7-cd3ca5975712/1/WTUg9qwxjkc45-DQGM3aH9LH1DQ.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/03/913a3a-f550-46f0-acc7-cd3ca5975712/1/IsSsPjxD1w0FNJyBW6rdOK13Xp0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
45.91.193.0/24
45.139.100.0/22
83.171.204.0/22
88.218.76.0/22
193.168.196.0/22
Signature Algorithm: sha256WithRSAEncryption
79:79:af:bf:b0:04:4b:75:52:a8:e7:44:f9:86:4b:63:c1:e2:
e6:12:bb:cc:24:ed:86:20:e7:2e:9d:7c:f3:4f:b4:ee:2d:c6:
a9:bf:6c:de:88:01:37:7a:0c:58:51:84:9a:e0:ce:54:c2:23:
50:b7:71:f4:32:db:7a:cd:b9:74:93:b9:7f:30:8d:8c:3a:b4:
c6:80:ff:64:8c:01:5a:b2:48:49:53:45:88:9c:20:6e:97:69:
94:e6:d8:94:6f:4f:03:d0:6e:09:d5:4d:92:41:c1:6b:58:eb:
61:60:67:cb:5f:f8:bb:5f:fe:aa:f1:ae:07:66:48:de:d9:c4:
0a:71:08:52:da:00:a8:6d:a4:2a:bf:72:6a:2c:7d:9c:d1:72:
84:31:a5:df:32:3f:9b:23:e7:29:02:20:99:96:8e:f2:3e:cb:
16:fb:79:79:95:13:fd:38:a7:75:01:ea:d1:68:88:82:65:5a:
f0:1d:32:1c:04:e0:6b:95:b8:fd:95:2b:04:1a:26:35:79:54:
77:dc:b6:78:92:78:71:d8:ab:b9:45:9e:2b:89:50:a9:f9:36:
44:6a:6e:74:c3:4c:f3:25:17:9c:c4:2c:1f:4a:c6:40:2d:d4:
1f:0e:ee:f3:d3:11:f5:89:d3:df:3a:b8:84:1c:68:42:d9:8c:
6b:ba:db:68
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 19 23:46:38 2023 by rpki-client on console-ams.rpki-client.org