Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/59/e45ad6-e5ae-4819-9f24-f577aa46de83/1/WpSQIf6tjWUhzZEgh3ADRf4e_ws.roa
File: WpSQIf6tjWUhzZEgh3ADRf4e_ws.roa (raw, json)
Hash identifier: rwx+GM1XGuvQZznG48ZgL5nze30gVYD/J6g+mSmHX30=
Subject key identifier: 5A:94:90:21:FE:AD:8D:65:21:CD:91:20:87:70:03:45:FE:1E:FF:0B
Certificate issuer: /CN=813e051cb831d1989607bb76c0bc5693ff947b53
Certificate serial: 01860D0C797C91A36F5E39E0A694475098B7
Authority key identifier: 81:3E:05:1C:B8:31:D1:98:96:07:BB:76:C0:BC:56:93:FF:94:7B:53
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/gT4FHLgx0ZiWB7t2wLxWk_-Ue1M.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/59/e45ad6-e5ae-4819-9f24-f577aa46de83/1/WpSQIf6tjWUhzZEgh3ADRf4e_ws.roa
Signing time: Wed 01 Feb 2023 12:56:06 +0000
ROA not before: Wed 01 Feb 2023 12:56:06 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 35372
IP address blocks: 185.79.99.0/24 maxlen: 24
Validation: Failed, RFC 3779 resource not subset of parent's resources
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:86:0d:0c:79:7c:91:a3:6f:5e:39:e0:a6:94:47:50:98:b7
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=813e051cb831d1989607bb76c0bc5693ff947b53
Validity
Not Before: Feb 1 12:56:06 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=5a949021fead8d6521cd912087700345fe1eff0b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bc:fa:be:3a:3c:dd:62:a5:07:a7:c3:1d:b5:6e:
1d:87:83:14:bc:86:87:38:6b:ff:8c:3c:bf:2d:fa:
06:92:07:28:5b:ab:37:16:cc:d4:c9:4e:cd:1c:61:
b2:4b:e1:d3:05:2b:75:98:a9:23:6e:38:96:32:83:
51:26:80:06:ab:1c:0a:a0:3b:64:e4:84:d6:cd:0c:
e0:d3:5f:10:8d:4c:f7:4d:f9:fa:9b:95:fa:76:d6:
f9:fa:de:ac:b5:8e:71:79:16:01:e7:10:de:2e:ec:
7f:3e:a6:0e:28:50:61:27:12:63:e7:57:2e:6b:55:
b3:ba:ec:60:04:f0:19:44:90:45:97:ea:e5:81:52:
fe:f9:ea:a3:ff:78:94:28:0d:4e:da:70:f0:c5:6d:
ad:df:73:14:3c:c5:8a:ce:6c:81:e1:df:31:99:d5:
15:14:55:e7:65:39:a7:ba:4d:1a:19:49:88:7e:6d:
51:eb:2f:88:a3:fd:f5:c0:3f:12:a3:34:7b:63:f2:
d3:c6:ec:5d:80:e8:9e:f8:12:51:e4:96:1a:32:c6:
ea:4d:e9:d9:f7:b6:ab:ca:02:c4:00:c5:1e:f5:7b:
be:19:00:36:a6:4c:62:1f:28:0f:e4:06:e1:6b:8a:
b8:89:b7:7b:8f:7c:47:7c:2d:c6:c9:03:0e:88:70:
18:93
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
5A:94:90:21:FE:AD:8D:65:21:CD:91:20:87:70:03:45:FE:1E:FF:0B
X509v3 Authority Key Identifier:
keyid:81:3E:05:1C:B8:31:D1:98:96:07:BB:76:C0:BC:56:93:FF:94:7B:53
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/gT4FHLgx0ZiWB7t2wLxWk_-Ue1M.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/59/e45ad6-e5ae-4819-9f24-f577aa46de83/1/WpSQIf6tjWUhzZEgh3ADRf4e_ws.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/59/e45ad6-e5ae-4819-9f24-f577aa46de83/1/gT4FHLgx0ZiWB7t2wLxWk_-Ue1M.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.79.99.0/24
Signature Algorithm: sha256WithRSAEncryption
51:ce:97:7f:f2:4e:f4:62:0f:f8:71:c2:13:4b:5e:4a:29:54:
14:61:0d:37:68:41:a4:ed:b3:ac:2d:8b:b3:c2:18:f7:9b:6e:
84:fe:ac:a6:b1:14:dd:46:db:81:c4:01:76:52:dc:35:ef:19:
96:6c:58:e4:cc:8e:08:f8:b2:bf:97:ad:e9:b3:2c:0f:2d:d9:
e4:26:29:6e:cb:27:fd:ce:77:5a:f6:19:5c:09:e8:5b:67:88:
35:88:03:66:aa:8d:9f:00:a6:3f:68:46:c4:c6:fc:93:80:bb:
a5:08:3e:de:5f:52:3f:3d:be:f4:28:03:e9:b6:27:47:91:0f:
66:55:b9:63:29:ac:87:b0:06:5e:fb:76:16:34:dd:e9:da:fe:
1f:63:42:d9:8f:50:12:16:24:e2:51:87:f5:12:0f:bb:d8:ab:
5f:71:4c:24:b6:7a:69:15:b0:66:a1:ea:4c:28:27:03:ce:e0:
8f:a7:49:cf:8b:ac:7a:83:d5:89:19:e3:be:0e:df:89:25:a6:
b1:20:67:ad:cf:95:de:1a:91:8a:0d:f6:c6:dd:0c:78:75:47:
b6:6c:bd:42:e2:d8:8c:2b:04:e0:6f:28:3c:34:65:5f:dc:0a:
8e:76:7a:4a:ff:b5:e1:16:cb:22:e0:3b:1b:52:c8:e8:9c:0b:
79:7a:ba:1e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Apr 22 04:09:58 2025 by rpki-client