Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5f/a9e8a6-1cf2-4c87-b49a-5228823fb97b/1/WeTBCqj49CYBNxyuGtLdL8cqcQc.roa
File: WeTBCqj49CYBNxyuGtLdL8cqcQc.roa (raw, json)
Hash identifier: 0RMDxp65Pbb+fnrdkDC307QqdQT4TjinlruqAE2aAAE=
Subject key identifier: 59:E4:C1:0A:A8:F8:F4:26:01:37:1C:AE:1A:D2:DD:2F:C7:2A:71:07
Certificate issuer: /CN=839d363b28f1c9084e1c1986876bb409b79a138c
Certificate serial: 1BF976
Authority key identifier: 83:9D:36:3B:28:F1:C9:08:4E:1C:19:86:87:6B:B4:09:B7:9A:13:8C
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/g502OyjxyQhOHBmGh2u0CbeaE4w.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/5f/a9e8a6-1cf2-4c87-b49a-5228823fb97b/1/WeTBCqj49CYBNxyuGtLdL8cqcQc.roa
Signing time: Mon 07 Feb 2022 13:56:51 +0000
ROA not before: Mon 07 Feb 2022 13:56:51 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 52000
IP address blocks: 94.45.174.0/24 maxlen: 24
94.45.181.0/24 maxlen: 24
94.45.180.0/24 maxlen: 24
Validation: Failed, RFC 3779 resource not subset of parent's resources
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 1833334 (0x1bf976)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=839d363b28f1c9084e1c1986876bb409b79a138c
Validity
Not Before: Feb 7 13:56:51 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=59e4c10aa8f8f42601371cae1ad2dd2fc72a7107
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:da:9e:6e:3a:57:e2:f6:97:00:8b:75:7c:79:71:
03:2e:34:58:51:5c:a0:76:d4:e0:e5:ed:0b:a1:27:
fa:32:67:2c:7b:6c:97:4e:9d:bf:95:b2:e5:b1:5f:
8c:49:6b:43:ca:e2:a9:26:89:30:75:64:a2:4a:8c:
de:73:32:84:f3:5e:e4:7f:5f:fc:eb:21:90:b3:8e:
e2:2d:f6:50:87:7b:7d:1c:b8:91:6a:da:02:02:21:
56:50:1c:c9:80:ab:ed:e2:b7:c2:d3:da:16:fc:08:
ca:81:0f:85:bf:76:01:a5:a0:ea:fd:cb:c1:32:6f:
a2:14:d0:5e:e0:f0:80:d3:5d:4f:1a:f3:1a:7d:f4:
d6:ed:66:4e:04:a1:fd:b6:c9:6f:fd:1f:c9:92:bc:
bc:87:26:70:87:6c:a2:f9:a8:7b:ca:ed:90:16:d6:
fd:ac:b5:58:52:a5:6d:00:ef:67:43:50:52:93:0b:
fc:d4:91:a4:14:14:76:63:55:98:b5:2e:68:10:08:
cc:57:d4:17:ab:f3:6e:12:b5:99:6a:41:2e:11:b9:
fd:22:35:d0:33:96:ec:43:f6:90:32:82:ff:c9:83:
6b:2f:8c:d9:36:6a:76:1c:ab:aa:cf:ee:c3:1a:59:
f7:83:e3:b7:e4:f3:6a:9d:54:8e:62:f5:85:b2:3f:
89:8b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
59:E4:C1:0A:A8:F8:F4:26:01:37:1C:AE:1A:D2:DD:2F:C7:2A:71:07
X509v3 Authority Key Identifier:
keyid:83:9D:36:3B:28:F1:C9:08:4E:1C:19:86:87:6B:B4:09:B7:9A:13:8C
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/g502OyjxyQhOHBmGh2u0CbeaE4w.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5f/a9e8a6-1cf2-4c87-b49a-5228823fb97b/1/WeTBCqj49CYBNxyuGtLdL8cqcQc.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/5f/a9e8a6-1cf2-4c87-b49a-5228823fb97b/1/g502OyjxyQhOHBmGh2u0CbeaE4w.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
94.45.174.0/24
94.45.180.0/23
Signature Algorithm: sha256WithRSAEncryption
af:c6:46:b2:5e:20:21:be:3b:51:cd:45:a0:de:39:b7:18:fd:
51:c3:81:db:bc:70:e6:9d:bc:cf:99:cc:51:59:bd:01:65:14:
92:c9:aa:d4:a7:f8:28:8a:ef:75:f3:05:89:84:9f:0b:7b:e6:
88:e9:15:be:fa:38:6c:65:3a:ee:3d:eb:02:3f:ff:c4:2c:35:
fc:f0:ed:80:0e:ef:99:30:f1:b8:dd:cf:80:37:39:95:28:ef:
40:ee:7f:a3:f2:9f:bd:24:73:49:c2:0b:16:38:b7:3e:ec:3e:
7a:f4:71:a6:19:06:45:1b:7c:d9:b7:1a:a4:06:90:29:07:6f:
f9:c6:b1:2a:67:be:07:b1:dc:0b:40:5b:8f:19:83:24:89:7c:
fd:00:fa:0b:3c:40:c4:23:40:40:b5:41:6f:6c:f5:cd:c4:4c:
e6:42:1b:58:92:03:e3:91:65:c3:ab:e7:85:1d:2e:1a:d1:16:
69:07:11:e6:57:41:0f:60:73:a6:54:71:58:e7:4b:0b:83:c6:
a8:7b:be:20:83:a5:6d:f7:63:c1:1e:b9:eb:1b:a7:0e:54:80:
40:f0:20:07:e1:23:1c:7f:f0:d2:14:70:87:01:9b:ee:6a:e5:
a2:d7:df:11:1f:0d:1a:8a:4a:66:f3:79:df:9c:b8:7d:df:be:
9a:4e:46:08
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jul 20 00:00:35 2023 by rpki-client on console-ams.rpki-client.org