Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/1c/5b0222-ed64-4f55-b45b-0059f737ef05/1/wc6FCgF-Jv21icdmP6oh5hUtioQ.roa
File: wc6FCgF-Jv21icdmP6oh5hUtioQ.roa (raw, json)
Hash identifier: BmOCMQr17F1j0nMhTkz0y0yFQqu97H0iMUnAKqIbZog=
Subject key identifier: C1:CE:85:0A:01:7E:26:FD:B5:89:C7:66:3F:AA:21:E6:15:2D:8A:84
Certificate issuer: /CN=e501815c6f98f3a2b6184afebf18ea341be882ea
Certificate serial: 38EEF698
Authority key identifier: E5:01:81:5C:6F:98:F3:A2:B6:18:4A:FE:BF:18:EA:34:1B:E8:82:EA
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/5QGBXG-Y86K2GEr-vxjqNBvoguo.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/1c/5b0222-ed64-4f55-b45b-0059f737ef05/1/wc6FCgF-Jv21icdmP6oh5hUtioQ.roa
Signing time: Fri 08 Apr 2022 12:48:06 +0000
ROA not before: Fri 08 Apr 2022 12:48:06 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 61317
IP address blocks: 185.96.168.0/23 maxlen: 24
87.251.0.0/20 maxlen: 24
87.251.16.0/22 maxlen: 24
87.251.24.0/22 maxlen: 24
87.251.20.0/22 maxlen: 24
185.203.35.0/24 maxlen: 24
Validation: Failed, RFC 3779 resource not subset of parent's resources
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 955184792 (0x38eef698)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=e501815c6f98f3a2b6184afebf18ea341be882ea
Validity
Not Before: Apr 8 12:48:06 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=c1ce850a017e26fdb589c7663faa21e6152d8a84
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:db:b0:a7:a7:18:34:46:5c:4c:e6:9a:9e:0c:1b:
6a:59:af:5f:e1:e6:3f:7a:4f:9c:df:44:a8:c8:5d:
6d:14:65:53:98:af:a2:24:8a:f7:ea:dc:a6:bf:ae:
8d:16:dc:97:50:26:68:3c:ee:3a:bc:53:9b:f3:fd:
f5:f7:f0:57:d5:7d:df:08:63:92:fb:bb:78:f6:10:
1d:0b:20:9c:30:6d:73:44:58:bf:5b:92:e0:4f:52:
2e:70:57:02:bc:fd:d7:7a:d8:79:95:a6:80:2e:89:
36:a4:3c:bb:13:e8:df:c8:fa:13:bc:e5:63:cb:ba:
1e:2d:12:dc:b2:b9:d5:47:dd:3a:54:43:e5:39:21:
f7:e5:ab:17:4a:1a:30:7b:32:07:a4:c1:19:36:75:
2a:25:2f:59:f4:63:f9:79:6d:e6:10:74:d0:19:ad:
3c:23:a2:e8:6b:6d:7e:a4:d2:40:6b:ee:5d:4d:70:
6e:f2:6f:d3:76:97:b1:48:87:8f:28:14:be:23:0a:
a4:7a:f3:7c:be:cd:ac:fc:86:56:1b:51:dc:94:fd:
18:87:b8:d6:1f:16:67:7e:24:31:31:6f:07:6d:6b:
1a:33:f5:c1:6a:e1:75:45:ab:24:fc:2b:4e:39:7b:
43:c1:9c:8e:67:35:88:9d:44:41:09:58:22:6f:c1:
61:cf
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C1:CE:85:0A:01:7E:26:FD:B5:89:C7:66:3F:AA:21:E6:15:2D:8A:84
X509v3 Authority Key Identifier:
keyid:E5:01:81:5C:6F:98:F3:A2:B6:18:4A:FE:BF:18:EA:34:1B:E8:82:EA
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/5QGBXG-Y86K2GEr-vxjqNBvoguo.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/1c/5b0222-ed64-4f55-b45b-0059f737ef05/1/wc6FCgF-Jv21icdmP6oh5hUtioQ.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/1c/5b0222-ed64-4f55-b45b-0059f737ef05/1/5QGBXG-Y86K2GEr-vxjqNBvoguo.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
87.251.0.0-87.251.27.255
185.96.168.0/23
185.203.35.0/24
Signature Algorithm: sha256WithRSAEncryption
a3:91:76:62:50:a5:3c:0c:f0:d0:bc:71:42:a2:5a:87:72:0f:
7d:8a:60:e1:98:88:f4:da:69:ae:84:cb:83:a8:2a:02:df:da:
44:b8:bf:a8:5b:df:67:0a:d8:39:64:d8:dc:54:c8:b1:46:82:
88:10:39:db:f2:bb:89:24:51:17:e4:d4:8f:20:80:9f:00:bb:
34:2c:51:41:5f:85:1d:b6:da:1b:75:a0:c4:e9:f8:33:a0:9f:
3e:31:6d:85:a0:8d:bb:f3:13:16:a5:d1:f2:cd:3b:63:3c:e6:
2f:14:52:f0:74:32:3c:5d:32:e1:1d:a5:87:b3:c9:98:43:bd:
df:6c:0e:5f:9b:4c:a0:66:1f:c2:eb:eb:49:75:fe:0a:22:86:
6f:d4:14:9b:2a:2b:71:0e:05:6b:bc:63:d7:d1:b4:c3:85:b5:
a3:79:e0:78:74:50:e1:6f:5c:f2:0b:3e:1e:ac:49:19:ea:16:
46:fd:4f:a4:19:c9:ed:11:01:af:69:70:2e:c0:a2:65:83:3b:
bf:96:49:83:9e:72:da:d1:d2:2e:32:a1:e5:bd:17:72:be:e7:
35:8b:08:3f:3e:c6:49:f7:4d:44:f6:9f:37:be:2e:24:90:3c:
87:c5:21:77:12:db:e6:d1:9f:b3:5c:45:1c:ee:7c:4c:d2:75:
9b:cc:43:a6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 18:56:59 2024 by rpki-client on console-ams.rpki-client.org