Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/2b/81fd1a-47a7-45d8-be74-3ac9e56c3089/1/W3WFeHaKLtKbag6QD6K0QQAoe8g.roa
File: W3WFeHaKLtKbag6QD6K0QQAoe8g.roa (raw, json)
Hash identifier: ZhvQxaH3rE5VuNwL04Hxute9/kfc8iMnouYjAbmFtwM=
Subject key identifier: 5B:75:85:78:76:8A:2E:D2:9B:6A:0E:90:0F:A2:B4:41:00:28:7B:C8
Certificate issuer: /CN=8bab30683859ec7e0206fe9265363e8e3971a9a8
Certificate serial: 018221CDABEF7BD85BB9DD8CE428F665DCA2
Authority key identifier: 8B:AB:30:68:38:59:EC:7E:02:06:FE:92:65:36:3E:8E:39:71:A9:A8
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/i6swaDhZ7H4CBv6SZTY-jjlxqag.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/2b/81fd1a-47a7-45d8-be74-3ac9e56c3089/1/W3WFeHaKLtKbag6QD6K0QQAoe8g.roa
Signing time: Thu 21 Jul 2022 17:28:23 +0000
ROA not before: Thu 21 Jul 2022 17:28:23 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 1239
IP address blocks: 194.50.206.0/23 maxlen: 23
194.50.200.0/23 maxlen: 23
195.138.96.0/19 maxlen: 24
45.140.32.0/22 maxlen: 22
194.242.22.0/23 maxlen: 23
45.151.196.0/22 maxlen: 22
194.180.238.0/24 maxlen: 24
91.242.105.0/24 maxlen: 24
91.242.100.0/23 maxlen: 23
91.242.108.0/22 maxlen: 22
91.242.120.0/21 maxlen: 21
45.143.252.0/22 maxlen: 22
45.150.180.0/22 maxlen: 22
185.173.244.0/22 maxlen: 24
185.145.80.0/22 maxlen: 22
62.182.100.0/23 maxlen: 23
91.242.64.0/22 maxlen: 22
Validation: Failed, RFC 3779 resource not subset of parent's resources
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:82:21:cd:ab:ef:7b:d8:5b:b9:dd:8c:e4:28:f6:65:dc:a2
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=8bab30683859ec7e0206fe9265363e8e3971a9a8
Validity
Not Before: Jul 21 17:28:23 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=5b758578768a2ed29b6a0e900fa2b44100287bc8
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:81:c3:7a:a0:d2:52:74:12:6c:08:d9:ad:fe:82:
be:2a:23:8e:6d:8b:90:d4:02:97:0c:bb:07:9b:45:
52:e4:42:af:0b:d9:c0:84:1b:63:6e:de:f1:23:28:
7b:dc:19:32:e5:87:34:ad:ef:16:ab:4e:5b:02:f1:
e4:20:4d:2c:77:8d:e7:3b:ec:11:80:e5:38:38:ce:
71:7b:c7:d0:88:45:a2:7f:8c:de:ac:3b:80:16:61:
bf:33:d4:16:12:c2:d0:47:85:d1:3c:44:ba:6b:cf:
97:47:6f:ea:e5:29:7e:5e:3a:dd:06:1c:bb:dd:57:
f2:03:91:ae:18:35:64:b7:37:60:ef:d7:a6:32:ea:
59:ef:d0:34:7a:45:fe:c5:22:35:29:3d:ba:26:34:
f4:68:b0:e6:59:0c:ed:3d:17:b5:f6:67:e5:ff:c3:
64:c4:92:33:f7:6b:5d:a3:a2:63:95:9d:47:ea:7f:
1a:c8:09:88:f8:c2:c2:96:72:63:72:e9:a7:c6:68:
29:88:35:4d:bc:86:09:95:73:c8:46:1a:7b:fc:ed:
9f:5f:b8:a8:0c:2c:c1:fd:13:04:7e:b2:09:5b:54:
05:c3:7b:3b:2f:bd:c6:71:7d:51:1f:98:bb:e4:f8:
b9:4e:4f:95:7b:8d:66:42:07:80:ac:19:20:df:eb:
44:e5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
5B:75:85:78:76:8A:2E:D2:9B:6A:0E:90:0F:A2:B4:41:00:28:7B:C8
X509v3 Authority Key Identifier:
keyid:8B:AB:30:68:38:59:EC:7E:02:06:FE:92:65:36:3E:8E:39:71:A9:A8
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/i6swaDhZ7H4CBv6SZTY-jjlxqag.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/2b/81fd1a-47a7-45d8-be74-3ac9e56c3089/1/W3WFeHaKLtKbag6QD6K0QQAoe8g.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/2b/81fd1a-47a7-45d8-be74-3ac9e56c3089/1/i6swaDhZ7H4CBv6SZTY-jjlxqag.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
45.140.32.0/22
45.143.252.0/22
45.150.180.0/22
45.151.196.0/22
62.182.100.0/23
91.242.64.0/22
91.242.100.0/23
91.242.105.0/24
91.242.108.0/22
91.242.120.0/21
185.145.80.0/22
185.173.244.0/22
194.50.200.0/23
194.50.206.0/23
194.180.238.0/24
194.242.22.0/23
195.138.96.0/19
Signature Algorithm: sha256WithRSAEncryption
01:a2:52:28:cc:62:5e:78:e5:c3:80:dc:ce:c2:4f:9d:f5:95:
20:72:71:8c:0f:36:3b:d9:82:d6:d7:47:7b:5c:3d:8a:02:05:
a1:3b:e6:53:d9:ea:f2:ef:bf:f2:26:d8:3d:4b:80:c9:13:ab:
37:04:2a:9d:5e:a3:85:29:a2:4b:76:66:3c:56:a2:84:af:04:
86:d3:44:0c:bd:8b:e5:ca:71:29:79:8f:10:16:a2:68:ad:fd:
97:9a:07:3c:22:d3:da:6d:a0:51:b2:76:3f:67:be:fb:99:ea:
ad:02:f8:e8:b9:3b:2e:92:10:d3:f1:c8:84:4e:8f:34:53:f6:
57:de:4d:f2:cc:73:5e:91:0d:ef:9d:33:fd:21:cb:50:cd:96:
74:d5:14:72:81:35:45:5f:94:2c:5b:e2:4e:bf:90:8a:54:b3:
15:90:1b:33:cc:f7:46:d1:c3:1f:c1:9a:82:a1:37:d2:cc:6b:
8e:07:c0:04:bb:21:a1:6a:b9:8e:43:98:7d:94:12:41:f2:34:
d3:61:9f:55:2f:04:8d:60:ac:aa:2a:a1:4d:a8:a6:da:67:b6:
66:47:e3:d7:a3:54:dd:ca:01:27:55:97:71:b6:b5:a9:3d:a6:
9b:95:4f:5c:3e:86:7a:42:8b:47:f8:b8:23:f5:47:82:2c:34:
d7:ee:ad:0e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 19:00:26 2024 by rpki-client on console-ams.rpki-client.org