Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/15/660f1d-5753-4516-8002-e76e3e293e02/1/WFJ8qQ-wgcs8YzcRuxlUk0D93iI.roa
File: WFJ8qQ-wgcs8YzcRuxlUk0D93iI.roa (raw, json)
Hash identifier: eXzCSh9EycS+fPt6JlQi4AuYA3M2AhJrKh8PExSDseU=
Subject key identifier: 58:52:7C:A9:0F:B0:81:CB:3C:63:37:11:BB:19:54:93:40:FD:DE:22
Certificate issuer: /CN=84470af0d89d785ba18ba617dc09e3f72c5996f3
Certificate serial: 018B662E5BDB1988AF703B59EFF447DCF787
Authority key identifier: 84:47:0A:F0:D8:9D:78:5B:A1:8B:A6:17:DC:09:E3:F7:2C:59:96:F3
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/hEcK8NideFuhi6YX3Anj9yxZlvM.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/15/660f1d-5753-4516-8002-e76e3e293e02/1/WFJ8qQ-wgcs8YzcRuxlUk0D93iI.roa
Signing time: Wed 25 Oct 2023 09:33:16 +0000
ROA not before: Wed 25 Oct 2023 09:33:16 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 216106
IP address blocks: 82.206.0.0/19 maxlen: 24
Validation: Failed, RFC 3779 resource not subset of parent's resources
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8b:66:2e:5b:db:19:88:af:70:3b:59:ef:f4:47:dc:f7:87
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=84470af0d89d785ba18ba617dc09e3f72c5996f3
Validity
Not Before: Oct 25 09:33:16 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=58527ca90fb081cb3c633711bb19549340fdde22
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:97:89:4c:8d:3d:9c:bb:75:81:27:76:d8:76:1a:
d1:6f:c7:56:82:95:75:70:01:51:1b:ad:c0:83:00:
96:3f:59:ad:63:2b:fa:13:5d:5a:38:9a:68:f7:81:
61:08:72:44:e0:72:22:30:ab:a0:a8:93:55:64:b1:
80:e8:24:e5:56:17:1d:52:ab:40:55:a6:cf:3a:9d:
c5:6b:cf:0e:80:1d:59:aa:e8:e0:2e:5f:47:52:f3:
db:07:48:52:db:dc:8c:62:1f:78:1a:6c:b1:9b:26:
a6:8d:9c:c6:c3:75:d8:46:2c:ca:1b:13:1f:75:78:
11:b5:e6:59:62:5f:76:74:09:01:32:4f:c8:8a:4e:
f2:17:27:a2:95:e2:ff:86:15:c2:b0:4b:73:ad:54:
fd:bb:20:36:84:66:6f:9d:7c:50:56:4d:ac:79:29:
8f:9b:fd:5e:b1:39:0a:0e:ce:dd:5c:61:75:6b:81:
fb:98:c5:e5:42:82:fa:3a:6f:86:a6:96:34:fd:f8:
56:ac:87:ab:22:c0:6d:1c:4d:70:11:99:a0:9e:86:
24:e3:ab:78:a5:03:38:84:87:c7:ce:32:42:eb:0e:
19:f6:68:3e:cf:6e:6e:ee:88:90:d2:53:3a:22:0f:
5f:7b:5b:f7:46:28:c5:94:ca:ea:6f:40:f2:6e:3d:
d6:25
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
58:52:7C:A9:0F:B0:81:CB:3C:63:37:11:BB:19:54:93:40:FD:DE:22
X509v3 Authority Key Identifier:
keyid:84:47:0A:F0:D8:9D:78:5B:A1:8B:A6:17:DC:09:E3:F7:2C:59:96:F3
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/hEcK8NideFuhi6YX3Anj9yxZlvM.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/15/660f1d-5753-4516-8002-e76e3e293e02/1/WFJ8qQ-wgcs8YzcRuxlUk0D93iI.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/15/660f1d-5753-4516-8002-e76e3e293e02/1/hEcK8NideFuhi6YX3Anj9yxZlvM.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
82.206.0.0/19
Signature Algorithm: sha256WithRSAEncryption
3c:ea:1e:7f:22:d4:cc:00:04:fa:c5:f3:33:b5:8d:f8:88:ac:
00:28:59:0c:bf:8c:39:54:56:f2:df:00:86:3d:5d:8c:cc:89:
29:ba:07:8c:8e:31:4b:ec:ac:94:0b:23:56:0a:dc:90:39:39:
fa:dc:2d:d8:06:62:56:22:e9:fe:76:e5:92:28:a3:92:4f:a8:
7e:ed:45:3b:f4:cc:ea:25:64:86:8b:c6:2c:93:dd:99:4f:c2:
8e:e5:e6:e2:35:59:3a:35:4b:7e:01:33:e6:5c:ad:e5:0d:d6:
32:a7:85:5c:cd:6b:b9:c8:90:e5:b0:81:6b:17:0a:af:e9:92:
b2:47:c4:97:80:82:3c:82:f2:29:00:a1:fb:db:66:5b:03:13:
df:9e:5e:4b:4e:24:73:69:aa:9a:5c:8c:de:2d:d7:ea:8f:72:
fa:91:b5:fe:25:89:bf:d1:d3:2b:18:e0:02:86:99:fe:9d:92:
86:a4:7f:42:ff:e5:cf:8f:b9:4c:d0:55:57:6e:c8:e7:09:6a:
c1:39:49:3c:12:76:ea:72:0a:ac:15:7b:ad:ef:58:fa:77:e4:
fa:07:81:9c:98:82:a3:11:d4:9b:0c:16:20:c6:9c:91:9a:36:
54:9a:b6:d2:20:be:35:06:18:4b:50:d1:ad:06:df:d7:a5:1e:
ac:22:19:85
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:20:21 2024 by rpki-client on console-fra.rpki-client.org