Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a8/c61092-734a-4eef-9d67-4905243bc828/1/wxNzgsOnYnZLxbS0tmkvx_qGoJM.roa
File: wxNzgsOnYnZLxbS0tmkvx_qGoJM.roa (raw, json)
Hash identifier: OenWuqjY1zhX7QJcxW965noahA4dhxztPkTCyIJAvlw=
Subject key identifier: C3:13:73:82:C3:A7:62:76:4B:C5:B4:B4:B6:69:2F:C7:FA:86:A0:93
Certificate issuer: /CN=05b1d13c2e26e12786246a5ec4c5bea69864b20f
Certificate serial: 0186F5276D4951B884DB40A1BD626CA1E3AB
Authority key identifier: 05:B1:D1:3C:2E:26:E1:27:86:24:6A:5E:C4:C5:BE:A6:98:64:B2:0F
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/BbHRPC4m4SeGJGpexMW-pphksg8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/a8/c61092-734a-4eef-9d67-4905243bc828/1/wxNzgsOnYnZLxbS0tmkvx_qGoJM.roa
Signing time: Sat 18 Mar 2023 14:37:27 +0000
ROA not before: Sat 18 Mar 2023 14:37:27 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 43350
IP address blocks: 91.222.238.0/24 maxlen: 24
Validation: Failed, RFC 3779 resource not subset of parent's resources
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:86:f5:27:6d:49:51:b8:84:db:40:a1:bd:62:6c:a1:e3:ab
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=05b1d13c2e26e12786246a5ec4c5bea69864b20f
Validity
Not Before: Mar 18 14:37:27 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=c3137382c3a762764bc5b4b4b6692fc7fa86a093
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a0:65:76:3e:71:c6:69:76:cd:47:f8:57:95:37:
5d:c3:94:c3:e6:49:6c:60:fc:9f:40:ef:03:cd:97:
0a:71:5f:31:4b:81:17:b3:86:a3:17:11:c7:45:6c:
03:4d:43:62:81:72:9a:bc:0a:34:56:89:56:e1:b7:
fc:a9:0a:30:19:14:0a:90:cf:26:a9:0b:f0:49:bd:
d8:b1:da:a4:b6:11:1f:b6:30:0b:1e:4c:39:3f:39:
61:86:3d:99:b1:28:ae:e8:a8:e8:b4:7a:8f:89:30:
e0:e1:b7:f0:73:9d:88:39:b5:9d:6f:48:b2:01:69:
e3:cd:02:1d:aa:ba:b0:d8:20:5f:d2:94:a2:65:ae:
63:05:9b:bb:26:f2:66:cc:c1:24:77:43:3f:1f:ed:
d3:d6:14:c0:3e:60:13:05:d4:58:ed:22:25:82:50:
be:96:fd:46:01:e7:ec:52:9d:2d:45:56:97:51:23:
2b:5c:e8:b7:c7:6e:4e:1c:6e:6d:99:6c:01:a7:5b:
95:31:c3:7f:25:3d:5f:70:1b:21:03:da:9d:dd:81:
53:75:54:6a:4d:53:2a:b6:5d:b5:db:33:47:51:3b:
94:fe:13:c7:2f:84:fa:c8:f2:d1:cc:1c:59:2e:2a:
34:db:de:7b:de:f6:12:22:5a:1e:ad:35:e9:47:b1:
aa:1f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C3:13:73:82:C3:A7:62:76:4B:C5:B4:B4:B6:69:2F:C7:FA:86:A0:93
X509v3 Authority Key Identifier:
keyid:05:B1:D1:3C:2E:26:E1:27:86:24:6A:5E:C4:C5:BE:A6:98:64:B2:0F
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/BbHRPC4m4SeGJGpexMW-pphksg8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a8/c61092-734a-4eef-9d67-4905243bc828/1/wxNzgsOnYnZLxbS0tmkvx_qGoJM.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/a8/c61092-734a-4eef-9d67-4905243bc828/1/BbHRPC4m4SeGJGpexMW-pphksg8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
91.222.238.0/24
Signature Algorithm: sha256WithRSAEncryption
67:42:aa:05:c5:2e:b0:20:2a:ad:e9:d2:f1:17:79:32:96:33:
e8:30:e4:59:61:fa:a2:95:ba:d7:9f:94:33:bd:3b:1d:34:03:
aa:7e:bd:91:36:92:4e:67:9a:91:af:1e:62:92:21:1a:2a:e9:
24:7c:b8:66:81:87:c4:33:16:39:f9:c1:6b:0b:8a:28:5f:9e:
33:b7:f9:20:e8:01:df:ac:2b:69:af:4e:83:61:78:42:6a:fd:
de:c3:22:9d:9c:97:c9:bd:01:e6:7e:5f:83:73:4e:8f:90:33:
6f:e2:8e:22:91:1f:45:5d:b0:b0:9f:e6:f1:a6:cc:5c:81:91:
19:3d:36:05:6c:13:e5:02:22:88:7d:67:ff:df:b0:cc:a4:b6:
89:ad:bd:7d:14:af:92:2e:ef:08:4b:ac:a8:08:8b:0f:1c:03:
71:7f:c5:fc:03:6a:f4:d6:e9:d7:4d:c5:f3:5a:35:32:b1:48:
cb:4b:a3:20:67:d5:10:19:72:75:02:e9:a1:5a:d7:1f:7d:a4:
7b:50:a5:85:71:3d:e2:2f:6d:b7:6b:00:91:39:3c:a6:58:d0:
7d:55:22:bb:b0:3f:49:57:22:db:09:d5:de:dc:ec:7b:5c:77:
f8:cb:72:bf:79:ec:19:25:62:ab:1e:2d:3a:30:d1:71:b3:4d:
79:c2:3b:ae
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 19:37:15 2024 by rpki-client on console-ams.rpki-client.org