Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/4b/62764b-9aa6-4f12-a71c-6bac34987019/1/qwvcyb5v8-hlY-LzhMl01WoRKaI.roa
File: qwvcyb5v8-hlY-LzhMl01WoRKaI.roa (raw, json)
Hash identifier: 7gfZyKWIVjG718CbIuHBDnwfXzJ5judtO8NZRR435Zk=
Subject key identifier: AB:0B:DC:C9:BE:6F:F3:E8:65:63:E2:F3:84:C9:74:D5:6A:11:29:A2
Certificate issuer: /CN=35c96065093998ba42cfba11bf0d17d3ac403d40
Certificate serial: 0223DCBE
Authority key identifier: 35:C9:60:65:09:39:98:BA:42:CF:BA:11:BF:0D:17:D3:AC:40:3D:40
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/NclgZQk5mLpCz7oRvw0X06xAPUA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/4b/62764b-9aa6-4f12-a71c-6bac34987019/1/qwvcyb5v8-hlY-LzhMl01WoRKaI.roa
Signing time: Sat 01 Jan 2022 11:55:10 +0000
ROA not before: Sat 01 Jan 2022 11:55:10 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 61317
IP address blocks: 168.220.128.0/19 maxlen: 24
198.14.16.0/20 maxlen: 24
77.223.192.0/21 maxlen: 24
Validation: Failed, RFC 3779 resource not subset of parent's resources
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 35904702 (0x223dcbe)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=35c96065093998ba42cfba11bf0d17d3ac403d40
Validity
Not Before: Jan 1 11:55:10 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=ab0bdcc9be6ff3e86563e2f384c974d56a1129a2
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bd:c3:3b:3f:10:22:8e:c8:fc:93:be:f0:e2:46:
e3:a7:26:8f:f6:83:b0:fc:d9:93:f5:fd:2f:85:3b:
18:31:f9:02:1e:6b:de:f4:a2:df:5e:b3:e7:3c:26:
55:ff:a3:14:87:d8:80:e7:24:5f:dc:29:1c:79:94:
06:44:15:67:6b:5d:23:c3:5f:86:ae:67:72:20:da:
69:27:9e:e7:a7:fc:23:2b:71:6f:22:13:49:eb:eb:
bb:42:40:3d:ae:28:d4:2d:28:c1:e6:97:ed:5d:1c:
5e:9f:8b:2d:37:27:cb:ed:9b:c0:a7:65:b3:8e:8c:
b9:39:cd:87:b7:6a:11:83:40:ed:95:06:da:58:af:
15:be:2d:68:e2:bc:18:73:74:e4:3e:17:49:ef:58:
0c:d9:62:cc:68:da:ee:fb:bd:79:85:d8:76:28:c5:
b4:ef:e7:c0:b7:eb:cb:6b:0f:f9:05:ed:c5:6a:e4:
4a:e0:88:03:b6:fe:c0:f4:07:3b:12:58:96:e0:d3:
53:49:11:db:93:8b:d8:c2:57:33:de:3c:31:79:d2:
b4:4e:89:64:3a:2f:67:13:d5:5f:66:8f:92:7b:74:
83:be:ef:6f:9f:ca:27:02:4c:0e:61:6a:b0:08:5a:
7e:41:7c:e6:23:49:dc:1f:8d:95:18:bb:e9:4d:e2:
a7:c1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
AB:0B:DC:C9:BE:6F:F3:E8:65:63:E2:F3:84:C9:74:D5:6A:11:29:A2
X509v3 Authority Key Identifier:
keyid:35:C9:60:65:09:39:98:BA:42:CF:BA:11:BF:0D:17:D3:AC:40:3D:40
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/NclgZQk5mLpCz7oRvw0X06xAPUA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/4b/62764b-9aa6-4f12-a71c-6bac34987019/1/qwvcyb5v8-hlY-LzhMl01WoRKaI.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/4b/62764b-9aa6-4f12-a71c-6bac34987019/1/NclgZQk5mLpCz7oRvw0X06xAPUA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
77.223.192.0/21
168.220.128.0/19
198.14.16.0/20
Signature Algorithm: sha256WithRSAEncryption
b1:c1:e7:ff:d0:8a:e3:15:6a:30:e5:60:64:ac:9d:c2:87:75:
89:ac:76:66:c0:08:42:0f:6c:e5:87:cf:ee:f5:55:bc:7a:d9:
48:3a:a6:f4:bd:c2:76:40:dd:39:84:39:6e:c6:31:f2:e9:3d:
ff:6e:5d:96:20:0e:bb:0b:2f:02:9f:e4:34:54:7d:88:09:38:
0a:9b:9b:9c:13:f7:2b:c4:aa:35:e3:ed:cc:32:42:2c:41:4c:
60:03:38:ee:a6:f3:1d:d0:b0:d4:85:c2:7d:24:b4:b7:90:9a:
6f:c5:fe:8a:c9:12:30:8f:d0:aa:78:b3:a0:ba:b9:a5:bb:c5:
75:19:40:08:b3:ba:a2:84:7c:56:04:5a:02:a6:d4:8b:cc:bc:
34:14:6d:ec:ae:c0:1a:3d:90:5e:17:27:c7:48:40:94:1d:f5:
09:ba:92:cb:a7:35:e8:75:82:4b:96:77:02:0a:7f:c6:cc:bc:
5c:58:6f:b9:ee:d1:62:0f:cb:11:51:60:3a:7d:d0:71:b4:80:
b2:a6:f4:0f:a7:57:cb:60:b4:5a:36:12:ff:92:37:2b:ff:dd:
4f:69:c6:f8:a8:86:27:e4:73:b6:2a:c9:47:2d:b3:59:93:4e:
f5:62:80:d6:7b:82:73:e9:46:da:7d:d3:22:32:bb:f2:5c:b1:
4e:45:32:a2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 19 23:47:41 2023 by rpki-client on console-fra.rpki-client.org