Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/1e/37bdb7-9b93-46ab-9a15-42a48dbc2521/1/wiS3qg9kAWtICo47-HS50lPzqlg.roa
File: wiS3qg9kAWtICo47-HS50lPzqlg.roa (raw, json)
Hash identifier: iIoMV3FR34RVWOANj4loKRe0EUriqDZoxzcJPxHnfys=
Subject key identifier: C2:24:B7:AA:0F:64:01:6B:48:0A:8E:3B:F8:74:B9:D2:53:F3:AA:58
Certificate issuer: /CN=3848885c9702eac1f3d01263e6d3e54449ee2154
Certificate serial: EE273B
Authority key identifier: 38:48:88:5C:97:02:EA:C1:F3:D0:12:63:E6:D3:E5:44:49:EE:21:54
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/OEiIXJcC6sHz0BJj5tPlREnuIVQ.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/1e/37bdb7-9b93-46ab-9a15-42a48dbc2521/1/wiS3qg9kAWtICo47-HS50lPzqlg.roa
Signing time: Sat 01 Jan 2022 05:55:32 +0000
ROA not before: Sat 01 Jan 2022 05:55:32 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 210767
IP address blocks: 5.183.151.0/24 maxlen: 24
188.64.139.0/24 maxlen: 24
2a11:fc0::/29 maxlen: 29
Validation: Failed, RFC 3779 resource not subset of parent's resources
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 15607611 (0xee273b)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=3848885c9702eac1f3d01263e6d3e54449ee2154
Validity
Not Before: Jan 1 05:55:32 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=c224b7aa0f64016b480a8e3bf874b9d253f3aa58
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d6:bd:21:ed:78:58:40:14:e1:13:5e:16:b5:b6:
16:11:b9:6e:6b:d4:8d:e7:6e:6d:2a:3d:66:79:71:
fa:da:43:a5:0c:9b:41:2c:f0:15:18:4f:3d:ea:3f:
6d:f1:78:cc:ce:a5:8a:a9:f5:71:6d:d7:4d:c3:57:
ac:9b:97:80:a6:ab:25:1d:38:5f:b5:96:49:49:76:
eb:bc:d1:0e:35:b4:59:6d:72:ad:7a:c3:d2:e5:0d:
49:f3:31:0d:e4:d1:34:75:32:8c:3b:41:cb:2a:0a:
dd:d9:fa:ae:79:03:cd:55:58:49:e2:cf:eb:d7:19:
55:5e:37:41:7a:db:d6:15:c1:c7:7c:7a:7b:1c:ac:
7a:6f:13:63:9a:8e:94:00:8e:23:c1:09:76:8a:e8:
8d:7c:a1:f5:f1:c1:fd:94:ee:c3:ea:3e:c5:5b:50:
8d:32:55:6d:7d:df:e5:75:11:e2:b6:1b:9a:92:93:
60:f5:1a:eb:cc:28:17:4b:18:8b:6a:56:84:65:89:
d7:01:5a:92:cc:73:62:81:2e:c6:bc:14:e2:f6:80:
87:dc:17:fc:31:8d:01:c8:0f:2d:8b:2d:ae:9f:11:
c8:fd:7f:95:b7:a4:c7:5a:89:60:56:d2:4b:b7:5b:
93:8e:68:99:f9:4c:37:97:50:2c:f1:38:46:4a:b3:
7e:69
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C2:24:B7:AA:0F:64:01:6B:48:0A:8E:3B:F8:74:B9:D2:53:F3:AA:58
X509v3 Authority Key Identifier:
keyid:38:48:88:5C:97:02:EA:C1:F3:D0:12:63:E6:D3:E5:44:49:EE:21:54
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/OEiIXJcC6sHz0BJj5tPlREnuIVQ.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/1e/37bdb7-9b93-46ab-9a15-42a48dbc2521/1/wiS3qg9kAWtICo47-HS50lPzqlg.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/1e/37bdb7-9b93-46ab-9a15-42a48dbc2521/1/OEiIXJcC6sHz0BJj5tPlREnuIVQ.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
5.183.151.0/24
188.64.139.0/24
IPv6:
2a11:fc0::/29
Signature Algorithm: sha256WithRSAEncryption
74:36:f9:ea:dc:82:c8:84:c8:67:da:c2:83:52:b9:8a:24:51:
b5:52:1b:6e:b3:05:61:5d:06:b7:99:12:97:eb:9e:05:8c:f5:
66:68:ec:36:e2:36:44:86:a6:3e:10:94:6e:2e:0d:af:32:45:
00:65:98:1a:4f:e2:7b:7b:e8:d2:47:5b:ff:c4:e7:eb:f4:f8:
8a:a4:64:ea:78:9d:a9:28:6c:3b:e4:2f:84:a3:9a:a4:fe:29:
f0:a2:ee:34:b3:a0:a1:ca:5f:76:9f:14:95:b1:a3:14:a2:44:
fc:1a:6d:6c:3a:d2:29:3f:39:a9:fa:0a:c5:42:a9:35:f7:b8:
fb:90:f8:8c:4d:93:86:a5:cc:8f:3f:02:86:0d:85:da:64:b2:
74:12:27:ca:15:fe:bf:06:fc:33:e1:db:a0:92:80:c6:05:91:
43:aa:02:1f:35:6d:b3:5e:c4:54:9e:89:2d:80:67:10:3c:be:
39:a0:65:0f:9c:18:41:9e:bd:01:60:23:44:ad:e6:7e:f5:6b:
cc:46:60:17:34:10:b6:8c:cb:8f:e8:b3:a4:1c:f0:70:0b:b9:
14:eb:1a:0c:01:07:79:59:07:ca:87:6d:70:09:85:2c:66:61:
af:f9:ce:ba:74:b0:2e:61:8f:2b:d9:c3:3b:75:79:1d:88:3f:
b9:9b:b1:c2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:21:45 2024 by rpki-client on console-fra.rpki-client.org