Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/7e/680324-ee1f-40f2-88df-196931962d3c/1/WAFPsq9zHlNOSpLORotVLhyYPgg.roa
File: WAFPsq9zHlNOSpLORotVLhyYPgg.roa (raw, json)
Hash identifier: 8ojqbgd5KaM0OK3mqzpYIEntr4jFTCQdrWbV3Z+o95w=
Subject key identifier: 58:01:4F:B2:AF:73:1E:53:4E:4A:92:CE:46:8B:55:2E:1C:98:3E:08
Certificate issuer: /CN=7f7734dfea120657412ea867ddbc7b84d132bf78
Certificate serial: 0182AD95C759729071197DD1BD0E33EDCBA5
Authority key identifier: 7F:77:34:DF:EA:12:06:57:41:2E:A8:67:DD:BC:7B:84:D1:32:BF:78
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/f3c03-oSBldBLqhn3bx7hNEyv3g.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/7e/680324-ee1f-40f2-88df-196931962d3c/1/WAFPsq9zHlNOSpLORotVLhyYPgg.roa
Signing time: Wed 17 Aug 2022 20:54:10 +0000
ROA not before: Wed 17 Aug 2022 20:54:10 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 34984
IP address blocks: 146.19.252.0/24 maxlen: 24
Validation: Failed, RFC 3779 resource not subset of parent's resources
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:82:ad:95:c7:59:72:90:71:19:7d:d1:bd:0e:33:ed:cb:a5
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=7f7734dfea120657412ea867ddbc7b84d132bf78
Validity
Not Before: Aug 17 20:54:10 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=58014fb2af731e534e4a92ce468b552e1c983e08
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:88:e9:56:20:56:72:cd:15:c6:e2:ce:b9:eb:73:
c9:d5:00:c9:2b:29:d1:bc:7d:44:d2:d4:3a:8d:69:
e0:f6:77:3a:67:4d:25:83:26:e6:a7:54:4a:dd:6a:
f3:20:c7:51:ab:2e:e2:d6:27:19:7a:04:a6:4f:cd:
e4:76:fe:a3:7a:8d:d0:93:4d:14:cd:e8:5c:32:87:
a7:0e:1a:71:03:87:f5:ba:3f:20:7e:99:3b:60:3a:
71:e2:13:e1:b5:60:bf:72:43:5b:1a:46:50:b9:f1:
4b:81:fb:75:09:a8:8d:a0:90:47:46:58:5c:53:d0:
96:40:e9:ac:ad:c7:9a:76:20:8b:ad:82:8d:84:53:
b1:16:5a:03:86:1b:2a:13:17:84:f2:e3:ff:4a:6b:
5d:15:2a:7b:a3:83:75:22:80:f1:56:3b:7e:1d:fb:
b6:2b:6a:3c:70:36:50:f9:cb:7b:4f:2e:e3:87:80:
cc:95:9a:80:5d:8f:d3:16:ab:92:ea:a9:48:16:d2:
60:de:56:6f:36:a8:93:b0:38:68:2a:1d:5e:6d:dd:
95:7a:8b:a8:69:e7:03:48:a4:33:6b:99:ef:ac:0a:
dc:34:82:93:d0:b6:54:03:b7:fa:45:7b:04:1c:0a:
cc:bc:10:76:d5:8d:17:0f:f9:bc:65:75:69:8d:37:
c3:b3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
58:01:4F:B2:AF:73:1E:53:4E:4A:92:CE:46:8B:55:2E:1C:98:3E:08
X509v3 Authority Key Identifier:
keyid:7F:77:34:DF:EA:12:06:57:41:2E:A8:67:DD:BC:7B:84:D1:32:BF:78
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/f3c03-oSBldBLqhn3bx7hNEyv3g.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/7e/680324-ee1f-40f2-88df-196931962d3c/1/WAFPsq9zHlNOSpLORotVLhyYPgg.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/7e/680324-ee1f-40f2-88df-196931962d3c/1/f3c03-oSBldBLqhn3bx7hNEyv3g.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
146.19.252.0/24
Signature Algorithm: sha256WithRSAEncryption
0d:05:c3:96:b1:e5:db:8e:8d:29:74:05:75:0f:b6:f1:4f:f9:
8f:97:bd:9e:27:c0:1a:23:3e:5e:f5:8b:07:9f:c4:c4:f2:e4:
bf:48:a8:99:9d:d6:28:1b:7d:c4:28:1e:8d:c0:21:73:40:05:
93:16:46:57:6a:ba:69:05:09:ca:af:2d:ac:67:03:ea:af:cf:
21:a7:ca:c6:9d:af:d3:cd:c1:d5:4d:25:7d:52:66:38:1e:c6:
c7:91:4e:df:c8:e0:be:a8:c2:db:6b:35:18:3a:00:1f:c6:70:
ad:47:c1:e0:36:52:4c:2b:d5:a4:9d:3b:78:8d:d8:24:b4:e1:
b2:27:e5:17:29:bb:ea:9e:a3:c8:97:09:eb:c1:24:13:6e:39:
14:ee:67:81:53:09:c7:05:d0:fd:9b:23:b2:e9:03:42:07:1e:
e8:4d:55:7c:9d:52:cc:90:7d:c8:b7:12:5a:4d:43:f0:72:20:
aa:a6:53:be:18:aa:9a:e6:0c:3e:d9:31:e3:16:02:26:5d:36:
a8:06:49:a3:9a:0b:0d:3a:b6:ba:4c:f5:a1:c4:2e:34:39:dc:
45:90:d2:0a:da:82:b6:21:e0:e5:d8:9e:5d:60:3c:40:fd:be:
2e:a3:68:79:1d:06:8a:cb:0d:70:33:6f:cf:00:b6:85:3c:ab:
b6:c2:75:71
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:36:29 2024 by rpki-client on console-fra.rpki-client.org