Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/66/1bb45a-551c-4967-95ca-77344bcc9191/1/iw_WiLIadJHs-NWjX91l1CcgnHo.roa
File: iw_WiLIadJHs-NWjX91l1CcgnHo.roa (raw, json)
Hash identifier: KcbOjekKMkzhYYN5tYl+qyNrL/7zkBP8TF50PBnOdJI=
Subject key identifier: 8B:0F:D6:88:B2:1A:74:91:EC:F8:D5:A3:5F:DD:65:D4:27:20:9C:7A
Certificate issuer: /CN=3c4ed942e5c742e77bfb9beb954f872534f52848
Certificate serial: 018457AF2A43817242287A09862A2AFE8004
Authority key identifier: 3C:4E:D9:42:E5:C7:42:E7:7B:FB:9B:EB:95:4F:87:25:34:F5:28:48
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/PE7ZQuXHQud7-5vrlU-HJTT1KEg.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/66/1bb45a-551c-4967-95ca-77344bcc9191/1/iw_WiLIadJHs-NWjX91l1CcgnHo.roa
Signing time: Tue 08 Nov 2022 14:40:08 +0000
ROA not before: Tue 08 Nov 2022 14:40:08 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 61317
IP address blocks: 62.182.175.0/24 maxlen: 24
194.15.152.0/22 maxlen: 24
Validation: Failed, RFC 3779 resource not subset of parent's resources
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:84:57:af:2a:43:81:72:42:28:7a:09:86:2a:2a:fe:80:04
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=3c4ed942e5c742e77bfb9beb954f872534f52848
Validity
Not Before: Nov 8 14:40:08 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=8b0fd688b21a7491ecf8d5a35fdd65d427209c7a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a3:0c:c2:1d:d7:f6:b9:45:06:04:85:8f:7c:bc:
d7:d4:fb:05:76:ef:86:3d:55:4b:24:00:bb:6f:f6:
ae:e4:4a:ee:af:53:ae:28:8b:fb:2d:21:87:6d:be:
a9:ca:23:2e:06:27:8c:90:f6:86:a8:95:28:c2:8e:
25:79:7a:65:63:a9:78:71:a7:6e:8b:c4:f7:b1:ba:
80:0b:f6:20:a9:38:18:ca:06:f9:48:af:af:6e:60:
79:46:be:97:84:af:29:8f:df:ab:55:7b:00:53:65:
68:34:6a:e0:04:8d:ae:c5:64:62:e7:0d:07:a0:f5:
eb:86:05:52:ac:23:89:c6:6a:f4:07:eb:ea:41:4f:
74:c6:e8:e1:3b:0a:1a:ed:81:eb:c8:dd:f5:19:44:
c3:09:b7:f5:69:47:ce:99:56:9e:e0:9b:17:72:44:
b2:53:9e:e6:99:83:18:dc:cc:dd:20:a4:d7:24:43:
2f:3f:29:fa:00:13:f5:6d:cb:6d:69:46:0c:a0:0e:
8c:c5:40:89:00:d3:59:81:9a:12:99:e7:ca:70:9e:
7e:3f:b8:79:bb:dc:a2:36:4a:c7:b9:b1:c9:07:7b:
be:f1:3a:8c:9e:aa:b0:35:d1:01:fb:89:7c:7d:70:
5f:bc:bb:ba:34:9e:e2:d7:90:1a:c2:9d:21:49:d2:
b1:67
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
8B:0F:D6:88:B2:1A:74:91:EC:F8:D5:A3:5F:DD:65:D4:27:20:9C:7A
X509v3 Authority Key Identifier:
keyid:3C:4E:D9:42:E5:C7:42:E7:7B:FB:9B:EB:95:4F:87:25:34:F5:28:48
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/PE7ZQuXHQud7-5vrlU-HJTT1KEg.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/66/1bb45a-551c-4967-95ca-77344bcc9191/1/iw_WiLIadJHs-NWjX91l1CcgnHo.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/66/1bb45a-551c-4967-95ca-77344bcc9191/1/PE7ZQuXHQud7-5vrlU-HJTT1KEg.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
62.182.175.0/24
194.15.152.0/22
Signature Algorithm: sha256WithRSAEncryption
61:fb:b8:d0:f1:e6:0b:d6:3f:c6:af:f3:a6:02:6d:d6:17:ef:
a0:35:ba:4d:8a:59:25:99:73:9e:ed:43:23:3b:49:fd:80:0a:
3a:34:80:59:f6:cb:71:16:84:cb:20:ba:38:4a:d9:94:c3:ac:
b0:80:d9:88:20:c3:6a:78:a1:f7:c7:db:9a:18:b2:1d:b4:d9:
a7:e1:c1:12:2a:7d:2d:ba:3f:5b:6b:00:a8:58:62:80:8e:b8:
cf:ec:38:c9:ac:a4:fc:d8:8c:13:c1:4e:76:2c:f8:c8:c3:54:
08:31:f1:00:ce:e0:55:94:a4:a1:aa:13:ab:14:b4:73:1f:ec:
fc:cb:af:cb:39:49:53:4f:c7:1e:52:74:8c:e1:05:da:b9:07:
c7:d1:26:f0:1b:07:a1:67:f2:70:88:59:2b:c8:06:a9:49:85:
01:cc:76:2a:19:19:f2:a6:e9:e4:32:15:43:4a:61:c2:52:b9:
92:1f:14:76:8f:07:ed:4d:3f:18:1a:94:24:f1:a1:96:f7:d3:
95:0f:53:57:ec:19:83:2f:42:db:5e:43:04:d7:f5:dd:95:d1:
37:7f:82:be:d7:46:19:b2:b4:b2:0e:1e:e5:73:c2:67:e4:b9:
92:bb:f2:2d:cc:eb:15:8a:12:94:cd:45:b6:87:61:6b:11:f9:
31:ba:86:7f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:33:04 2024 by rpki-client on console-fra.rpki-client.org