Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/65/321cdc-2143-4b5c-9733-16699c96dd5e/1/WqthXmmnPnGCmjC5woSASCZxQDs.roa
File: WqthXmmnPnGCmjC5woSASCZxQDs.roa (raw, json)
Hash identifier: +Dj2iNXHDNCrM9Eemo/UofYijzi3Nog/A6r674a/g5s=
Subject key identifier: 5A:AB:61:5E:69:A7:3E:71:82:9A:30:B9:C2:84:80:48:26:71:40:3B
Certificate issuer: /CN=885b857706dac54e20ca0d11bd6416cb634203b4
Certificate serial: 0183D7371BD498F97B9BA5C87B107A7683BD
Authority key identifier: 88:5B:85:77:06:DA:C5:4E:20:CA:0D:11:BD:64:16:CB:63:42:03:B4
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/iFuFdwbaxU4gyg0RvWQWy2NCA7Q.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/65/321cdc-2143-4b5c-9733-16699c96dd5e/1/WqthXmmnPnGCmjC5woSASCZxQDs.roa
Signing time: Fri 14 Oct 2022 15:57:36 +0000
ROA not before: Fri 14 Oct 2022 15:57:36 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 30738
IP address blocks: 195.211.53.0/24 maxlen: 24
195.2.226.0/23 maxlen: 23
188.130.232.0/24 maxlen: 24
188.130.254.0/24 maxlen: 24
188.130.182.0/24 maxlen: 24
2001:1468:8000::/36 maxlen: 36
2001:1468::/32 maxlen: 33
Validation: Failed, RFC 3779 resource not subset of parent's resources
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:83:d7:37:1b:d4:98:f9:7b:9b:a5:c8:7b:10:7a:76:83:bd
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=885b857706dac54e20ca0d11bd6416cb634203b4
Validity
Not Before: Oct 14 15:57:36 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=5aab615e69a73e71829a30b9c28480482671403b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:86:ec:c9:ca:c9:6f:6e:bb:ff:84:68:f5:8b:3a:
15:06:9b:08:f2:46:33:7c:4b:6a:00:19:2f:91:ed:
d9:62:99:3a:fe:58:4e:9d:f8:80:fe:b9:0e:70:35:
62:cb:9c:a6:a1:25:38:e1:b9:44:17:f2:89:8b:0c:
e6:b3:a6:0b:c8:31:c2:c4:87:2a:a4:0d:84:0c:4c:
d2:fb:bc:ab:f4:39:7e:5f:d9:6f:18:a9:c3:64:10:
31:ae:cf:9d:c5:da:89:c2:83:e7:90:14:e0:0e:d5:
bc:89:dd:3e:a4:04:73:a8:d5:66:e9:e5:d4:d8:f5:
78:0b:de:47:e5:8e:ee:52:7b:5d:62:33:5b:ba:6a:
ad:82:35:0f:84:07:06:b4:fb:08:3a:4c:c8:d2:e6:
3c:6a:60:07:2c:72:26:78:7a:ec:73:a2:bd:56:9c:
9c:76:b5:be:38:78:c8:8b:27:bb:be:9e:8b:af:9b:
9b:0f:53:b4:8b:b8:9d:bd:ea:c7:49:26:16:74:ef:
31:ed:8e:85:13:ff:02:c8:1f:3a:bb:d2:1b:54:1f:
82:3e:c5:bb:a3:0b:e2:70:a4:cd:81:77:3b:ad:2e:
b5:06:ce:16:01:0b:e0:f3:9d:f1:2c:50:bf:d7:f2:
c8:65:60:69:e5:3c:e9:30:7d:d7:cd:14:4c:39:be:
41:01
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
5A:AB:61:5E:69:A7:3E:71:82:9A:30:B9:C2:84:80:48:26:71:40:3B
X509v3 Authority Key Identifier:
keyid:88:5B:85:77:06:DA:C5:4E:20:CA:0D:11:BD:64:16:CB:63:42:03:B4
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/iFuFdwbaxU4gyg0RvWQWy2NCA7Q.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/65/321cdc-2143-4b5c-9733-16699c96dd5e/1/WqthXmmnPnGCmjC5woSASCZxQDs.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/65/321cdc-2143-4b5c-9733-16699c96dd5e/1/iFuFdwbaxU4gyg0RvWQWy2NCA7Q.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
188.130.182.0/24
188.130.232.0/24
188.130.254.0/24
195.2.226.0/23
195.211.53.0/24
IPv6:
2001:1468::/32
Signature Algorithm: sha256WithRSAEncryption
58:63:ff:85:9c:93:57:e2:d0:95:57:c1:6d:99:64:e7:27:ad:
8b:1d:78:17:11:e9:91:36:47:a2:c6:77:f3:cd:e6:56:df:08:
b9:40:bb:48:bc:dc:a3:90:a7:57:5f:05:4a:27:65:76:e6:49:
e9:f3:ae:22:1a:b8:ef:9e:a2:d2:80:94:5a:0b:0b:0b:9e:28:
94:63:45:42:35:1a:53:c6:33:0d:5b:b5:ce:9c:91:e6:74:ec:
6d:0c:27:15:b0:d6:eb:3d:67:ba:86:9a:f2:01:01:a9:4a:21:
cb:85:29:f3:e8:ee:97:d8:04:f7:e4:c1:e1:fd:15:63:9c:b2:
b2:74:ec:33:85:b8:0a:26:52:1a:c1:e6:13:e8:4a:7c:4f:31:
b3:b6:0a:51:04:13:fb:96:3b:28:c7:1d:30:e4:0d:47:0e:19:
14:b4:09:20:5f:7d:bf:cc:86:54:32:03:39:8d:ee:14:89:95:
a5:9c:4c:b6:ef:17:78:6e:7c:86:02:cf:fc:92:54:9e:83:a6:
4d:90:96:54:cd:1a:78:66:0a:0e:09:97:19:07:a0:df:5c:a4:
5a:e8:b6:f6:dc:9b:41:4d:2a:a5:ca:2e:93:ec:8d:46:82:89:
9a:3c:8e:2c:59:97:64:49:1e:26:28:cb:60:23:07:24:99:64:
a0:41:bf:84
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jul 20 00:00:51 2023 by rpki-client on console-ams.rpki-client.org