Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b0/3bfc31-dc32-4541-8460-c927b8c2c7c4/1/wVc4LDM5GGdCiimhmJbNmKOsxlo.roa
File: wVc4LDM5GGdCiimhmJbNmKOsxlo.roa (raw, json)
Hash identifier: 8wE3xm5F/IPKYs3koxcS2ebXZAVIStGxejKGvwAbmvE=
Subject key identifier: C1:57:38:2C:33:39:18:67:42:8A:29:A1:98:96:CD:98:A3:AC:C6:5A
Certificate issuer: /CN=c398060f1bf22f0999cb071b1b42696dbc43e10c
Certificate serial: 2FBD2682
Authority key identifier: C3:98:06:0F:1B:F2:2F:09:99:CB:07:1B:1B:42:69:6D:BC:43:E1:0C
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/w5gGDxvyLwmZywcbG0JpbbxD4Qw.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/b0/3bfc31-dc32-4541-8460-c927b8c2c7c4/1/wVc4LDM5GGdCiimhmJbNmKOsxlo.roa
Signing time: Sat 01 Jan 2022 10:04:51 +0000
ROA not before: Sat 01 Jan 2022 10:04:51 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 36040
IP address blocks: 194.122.80.0/22 maxlen: 24
2001:680:4004::/46 maxlen: 48
Validation: Failed, RFC 3779 resource not subset of parent's resources
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 800925314 (0x2fbd2682)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=c398060f1bf22f0999cb071b1b42696dbc43e10c
Validity
Not Before: Jan 1 10:04:51 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=c157382c33391867428a29a19896cd98a3acc65a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b4:5e:d5:f4:df:05:da:27:bf:a3:0a:28:56:96:
bf:0f:1a:0d:8f:28:70:fe:9a:9f:fc:24:17:ed:fe:
c2:26:13:cb:bc:18:d0:6c:e9:29:b7:f8:fa:06:0b:
76:3a:77:63:8b:0d:54:f1:85:fb:5f:ff:cf:b7:10:
08:96:14:9d:52:65:6b:a0:ba:cd:7e:57:09:be:ad:
9e:e5:3f:9c:a7:50:07:9a:36:29:8b:cb:fb:6c:40:
10:f1:9c:24:6f:d9:53:b6:86:91:4d:c3:09:18:e6:
95:4e:02:41:dd:d2:e2:84:5b:08:8c:c2:79:fa:24:
39:e7:9c:ed:31:34:83:3b:51:58:08:b9:9f:65:86:
b5:8d:cd:af:e9:87:d3:ae:77:cf:1f:27:a5:34:e7:
81:1d:e4:39:f8:6e:2c:5b:1c:da:24:e3:23:e1:4e:
19:6a:63:70:3d:4e:b1:35:80:ce:f1:35:f0:8c:2c:
e7:a9:33:69:83:d5:d2:98:4f:2f:30:fb:98:15:31:
b7:f1:d5:4e:b9:94:ed:f3:b7:4c:d7:4a:ff:bc:17:
c7:89:2e:39:02:3f:ca:f6:40:47:71:cd:46:c3:9a:
a1:86:28:81:cd:9d:0c:ce:5d:cc:9d:5d:29:6f:6b:
54:f6:44:18:99:86:c0:8a:b6:9f:89:c3:f4:29:f6:
ff:f7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C1:57:38:2C:33:39:18:67:42:8A:29:A1:98:96:CD:98:A3:AC:C6:5A
X509v3 Authority Key Identifier:
keyid:C3:98:06:0F:1B:F2:2F:09:99:CB:07:1B:1B:42:69:6D:BC:43:E1:0C
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/w5gGDxvyLwmZywcbG0JpbbxD4Qw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b0/3bfc31-dc32-4541-8460-c927b8c2c7c4/1/wVc4LDM5GGdCiimhmJbNmKOsxlo.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/b0/3bfc31-dc32-4541-8460-c927b8c2c7c4/1/w5gGDxvyLwmZywcbG0JpbbxD4Qw.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
194.122.80.0/22
IPv6:
2001:680:4004::/46
Signature Algorithm: sha256WithRSAEncryption
84:b9:d8:46:64:49:af:36:bd:d3:a8:46:b1:28:5d:f4:07:b1:
ac:3b:51:b8:1d:a7:34:2a:7b:d8:b3:03:d0:9c:af:28:b7:7f:
0e:96:8c:fc:ed:05:27:fb:80:91:46:e3:59:a6:6c:68:2e:b0:
62:0d:4b:13:83:7b:5c:56:d0:70:df:08:e5:d6:a3:01:61:de:
60:3f:c8:d9:2c:64:d7:bc:85:90:9a:c1:79:53:e2:20:88:73:
e7:be:d7:e5:f2:24:94:1a:3b:ad:fd:3a:d3:1a:a2:46:93:94:
e4:0b:a4:3d:b2:71:31:58:13:c8:9c:73:73:71:91:33:20:1e:
56:b0:a3:1d:c7:83:0d:5b:e0:05:ea:9c:19:16:e0:7b:04:52:
79:95:6f:09:19:1a:60:c2:5e:30:3a:88:b1:a0:f9:c4:10:d3:
15:db:8c:24:42:3c:6c:ef:bf:8e:4e:44:5c:80:b4:b6:52:23:
d4:c7:f9:12:fc:37:44:1b:e6:26:7c:af:e8:b5:94:d5:32:99:
2d:ad:96:6f:9a:b1:9e:37:07:f0:91:e2:42:da:e2:18:c1:49:
06:33:a8:9b:d5:69:c0:a5:63:58:99:58:50:3a:e1:9e:4c:fe:
a2:4c:4a:41:09:cf:75:56:04:62:09:37:d0:8b:a4:01:98:62:
ff:d7:4f:c6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:50:02 2024 by rpki-client on console-fra.rpki-client.org