Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/1d/409b7e-1275-43ed-af0f-52f97b277d1f/1/WajURoGMTvDSBswJVsyIQMZkn8I.roa
File: WajURoGMTvDSBswJVsyIQMZkn8I.roa (raw, json)
Hash identifier: FBC19wVRy2M/lig6JNquR9zlQzRxXIEz1C5XIoYJSgo=
Subject key identifier: 59:A8:D4:46:81:8C:4E:F0:D2:06:CC:09:56:CC:88:40:C6:64:9F:C2
Certificate issuer: /CN=52dc9c218b510c07bc6659b09fbd32afe68abfd2
Certificate serial: 018C2B55A37C182A3DA7326B0FDE698D0DC4
Authority key identifier: 52:DC:9C:21:8B:51:0C:07:BC:66:59:B0:9F:BD:32:AF:E6:8A:BF:D2
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/UtycIYtRDAe8Zlmwn70yr-aKv9I.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/1d/409b7e-1275-43ed-af0f-52f97b277d1f/1/WajURoGMTvDSBswJVsyIQMZkn8I.roa
Signing time: Sat 02 Dec 2023 16:21:21 +0000
ROA not before: Sat 02 Dec 2023 16:21:21 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 47869
IP address blocks: 109.235.48.0/21 maxlen: 21
194.110.67.0/24 maxlen: 24
37.46.192.0/21 maxlen: 24
91.205.232.0/22 maxlen: 22
91.199.50.0/24 maxlen: 24
94.185.80.0/21 maxlen: 21
31.171.131.0/24 maxlen: 24
94.228.208.0/20 maxlen: 20
2a00:dd0::/32 maxlen: 48
2a00:dd0:bbbb::/48 maxlen: 48
2a00:dd0:aaaa::/48 maxlen: 48
Validation: Failed, RFC 3779 resource not subset of parent's resources
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8c:2b:55:a3:7c:18:2a:3d:a7:32:6b:0f:de:69:8d:0d:c4
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=52dc9c218b510c07bc6659b09fbd32afe68abfd2
Validity
Not Before: Dec 2 16:21:21 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=59a8d446818c4ef0d206cc0956cc8840c6649fc2
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:91:4a:d7:d1:6f:d8:cb:c4:c1:50:c8:ca:7a:87:
10:e1:e2:94:ab:19:e1:24:7a:28:95:e5:53:5a:a8:
d8:d7:9d:93:42:9c:0e:33:f5:4c:9c:49:b1:86:e0:
9f:67:dd:4d:5e:41:66:97:5b:49:a4:d8:e8:0f:5e:
52:64:ef:d7:cb:c1:6a:3f:5a:61:97:7e:23:41:bb:
e3:27:a3:d1:5b:92:ca:36:1f:94:28:c8:07:99:c6:
ec:39:6a:0e:7c:dd:c8:f4:64:02:b5:34:22:79:6a:
07:c3:51:6c:df:1e:40:ed:2f:7c:08:96:69:21:ba:
22:7c:25:6b:39:9a:d2:82:c1:55:6c:71:2c:34:f5:
09:b6:0c:56:61:91:9f:96:01:28:9a:bd:91:db:a8:
c0:ad:4b:84:0e:a3:4e:e6:ce:b9:ea:85:93:34:16:
58:a0:fd:bd:a4:47:e8:ee:0d:28:22:a6:66:91:7a:
c2:1f:64:34:37:96:5d:20:4d:73:d5:dc:43:56:69:
5d:cd:b5:cc:06:eb:84:f7:47:85:15:a9:0f:ce:dd:
38:67:90:ae:f0:93:c9:de:87:ea:50:14:f2:91:05:
ca:fb:f3:0d:7f:b8:6f:bf:02:b1:1d:9a:14:51:22:
f6:8f:8b:0b:c9:33:0b:78:67:eb:8c:77:45:91:54:
e7:b1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
59:A8:D4:46:81:8C:4E:F0:D2:06:CC:09:56:CC:88:40:C6:64:9F:C2
X509v3 Authority Key Identifier:
keyid:52:DC:9C:21:8B:51:0C:07:BC:66:59:B0:9F:BD:32:AF:E6:8A:BF:D2
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/UtycIYtRDAe8Zlmwn70yr-aKv9I.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/1d/409b7e-1275-43ed-af0f-52f97b277d1f/1/WajURoGMTvDSBswJVsyIQMZkn8I.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/1d/409b7e-1275-43ed-af0f-52f97b277d1f/1/UtycIYtRDAe8Zlmwn70yr-aKv9I.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
31.171.131.0/24
37.46.192.0/21
91.199.50.0/24
91.205.232.0/22
94.185.80.0/21
94.228.208.0/20
109.235.48.0/21
194.110.67.0/24
IPv6:
2a00:dd0::/32
Signature Algorithm: sha256WithRSAEncryption
1d:ad:34:9c:46:96:ea:cd:70:db:24:85:84:90:82:f6:fc:79:
ca:1a:0e:ec:73:40:3b:ee:63:c0:85:f6:53:c4:ac:69:e0:1d:
32:11:2a:0a:58:92:df:c5:3b:3e:6f:ec:b0:ca:a3:ab:86:3c:
d1:18:90:1c:88:29:04:0c:4b:64:cf:51:3e:4c:32:fe:b7:90:
8e:d8:f0:40:94:49:36:28:fd:c2:21:14:18:a0:2e:7e:38:4a:
f4:5f:d8:92:80:e1:65:1b:ec:8a:8f:88:08:e1:bd:82:60:10:
aa:87:d1:85:f1:32:25:89:ae:1d:f0:d4:0d:4a:b0:c0:8d:dc:
63:41:69:bf:2a:4d:dc:6d:76:6f:f9:d5:49:fc:dc:7d:21:54:
6f:d7:22:59:4a:fb:7e:2a:d0:9b:6a:4c:bd:d7:ef:13:6b:fe:
b2:2f:27:94:4f:23:80:9d:c2:be:3b:fd:3b:ee:4b:7f:bc:31:
be:ef:5e:e9:eb:cb:a4:56:0e:3a:40:86:e0:83:2f:6f:e6:64:
33:3b:95:a4:24:4c:0e:56:b8:3c:bf:f8:1e:18:70:40:62:91:
63:41:e0:9a:a6:73:79:27:a8:64:ea:27:4b:c1:1a:49:b1:43:
95:11:3e:f3:5f:84:da:57:96:a8:d7:68:2a:fb:fb:6a:fb:39:
1d:79:97:e7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:21:40 2024 by rpki-client on console-fra.rpki-client.org