Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ab/7282b4-7f11-4ee0-abea-e13e5579c5dc/1/pWKML8sBSuysSy-ON3YFhw-ywfI.roa
File: pWKML8sBSuysSy-ON3YFhw-ywfI.roa (raw, json)
Hash identifier: jDZAy5ByKLm6yI6p7IyeLLiU4PVhj8LdVNj36PKPrME=
Subject key identifier: A5:62:8C:2F:CB:01:4A:EC:AC:4B:2F:8E:37:76:05:87:0F:B2:C1:F2
Certificate issuer: /CN=43d5ba0815c9f5193f80989ee893acacc4ba8849
Certificate serial: 133295D2
Authority key identifier: 43:D5:BA:08:15:C9:F5:19:3F:80:98:9E:E8:93:AC:AC:C4:BA:88:49
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Q9W6CBXJ9Rk_gJie6JOsrMS6iEk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ab/7282b4-7f11-4ee0-abea-e13e5579c5dc/1/pWKML8sBSuysSy-ON3YFhw-ywfI.roa
Signing time: Wed 16 Feb 2022 12:05:47 +0000
ROA not before: Wed 16 Feb 2022 12:05:47 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 51964
IP address blocks: 57.251.0.0/16 maxlen: 24
57.246.0.0/16 maxlen: 24
Validation: Failed, RFC 3779 resource not subset of parent's resources
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 322082258 (0x133295d2)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=43d5ba0815c9f5193f80989ee893acacc4ba8849
Validity
Not Before: Feb 16 12:05:47 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=a5628c2fcb014aecac4b2f8e377605870fb2c1f2
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ac:a5:1f:25:65:99:c3:94:e8:88:3b:5f:64:d6:
e5:d0:cd:10:0b:88:11:54:93:d5:92:87:6c:cc:51:
10:f7:43:06:4d:24:c0:6e:ed:bc:dc:96:8f:d2:b7:
cc:ac:f4:73:29:69:b1:20:23:0b:07:04:54:5b:32:
8e:a3:ce:95:2a:6b:b3:22:bc:da:cf:34:7e:f3:b1:
87:6b:93:cd:5f:10:63:a3:04:84:46:8c:d5:44:a1:
c1:d9:c5:0f:a3:69:0a:6a:dd:94:5b:29:0b:c4:97:
5d:b5:06:9a:2c:35:99:f0:a0:c5:63:c6:66:cb:74:
dd:13:9a:fa:4c:2e:b3:ea:c0:ac:3f:bc:cc:c8:b6:
7a:01:ff:4d:7d:01:1a:ee:15:9a:74:a1:84:41:0e:
72:94:2b:f0:4f:ac:cb:91:74:ce:98:a9:8f:96:8a:
2a:28:66:2a:ee:4e:b5:29:9a:0c:16:e2:76:55:46:
e2:6e:c8:04:c3:59:40:d0:5b:ef:68:54:00:53:04:
b5:9b:90:e9:ce:29:9d:b0:1b:52:7c:1a:d9:9f:56:
cd:3d:fc:3f:fe:bb:8a:73:6d:22:d0:d9:42:8a:4f:
14:72:49:b3:9c:f9:14:92:f9:3b:6f:89:ea:14:f7:
02:d1:54:e6:e9:dd:cd:eb:10:25:6f:05:59:3a:ad:
84:ab
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A5:62:8C:2F:CB:01:4A:EC:AC:4B:2F:8E:37:76:05:87:0F:B2:C1:F2
X509v3 Authority Key Identifier:
keyid:43:D5:BA:08:15:C9:F5:19:3F:80:98:9E:E8:93:AC:AC:C4:BA:88:49
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Q9W6CBXJ9Rk_gJie6JOsrMS6iEk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ab/7282b4-7f11-4ee0-abea-e13e5579c5dc/1/pWKML8sBSuysSy-ON3YFhw-ywfI.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/ab/7282b4-7f11-4ee0-abea-e13e5579c5dc/1/Q9W6CBXJ9Rk_gJie6JOsrMS6iEk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
57.246.0.0/16
57.251.0.0/16
Signature Algorithm: sha256WithRSAEncryption
b7:98:56:5a:7e:6e:5a:60:be:46:e1:1c:10:3a:88:ca:d7:fc:
62:59:78:79:57:83:09:98:94:6a:21:30:2a:10:fb:38:22:d2:
53:b4:dd:64:1d:4b:a3:a4:a5:d9:4b:4d:bd:07:94:4b:d4:10:
b0:78:0c:39:fe:d3:7b:4f:3e:f9:fb:b7:3a:39:63:df:9a:cb:
84:6d:d1:21:ae:7e:67:00:f6:42:1b:3a:1c:4e:80:fd:f0:46:
1c:47:96:f1:f3:ca:d7:b0:d2:1b:bb:d1:ec:98:75:ca:43:fc:
d0:23:97:aa:f3:e3:f8:3f:54:c3:3b:9b:da:1a:69:52:d0:3f:
22:a1:7c:f3:d0:dd:8b:35:85:de:55:32:c4:4f:6b:d0:87:32:
32:77:22:de:aa:06:e4:36:e3:37:4b:45:c9:e3:b5:30:1a:1d:
86:7e:82:21:5f:cf:98:78:ef:2d:a0:6b:eb:15:de:7d:c7:ac:
fc:c3:11:e5:85:15:5a:f2:b6:f2:c4:a1:45:bb:d8:79:88:43:
b4:5b:32:7d:d4:96:18:a4:d8:41:6b:b1:1b:39:07:55:78:ae:
27:50:1d:a2:0e:ce:05:aa:8c:af:6b:b4:e6:f6:e9:d1:da:be:
8d:7a:ec:42:fe:93:bb:f2:0c:ab:9b:c0:f8:95:70:a1:a5:6a:
fe:3b:fb:fb
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 19:37:48 2024 by rpki-client on console-ams.rpki-client.org