Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b1/4de598-6b03-4bef-ab14-33894913dcb7/1/WqYXK0cuQxUf6ntKxWOizPlJCB8.roa
File: WqYXK0cuQxUf6ntKxWOizPlJCB8.roa (raw, json)
Hash identifier: pNKOmFkv0MzQ8SqwHxJB8ZR5USpViRhFR7ac4o4CNo0=
Subject key identifier: 5A:A6:17:2B:47:2E:43:15:1F:EA:7B:4A:C5:63:A2:CC:F9:49:08:1F
Certificate issuer: /CN=fe779e56238b6f2ea068ede4e20aef00c904132b
Certificate serial: 0181D04939077C5F09FBE98913F91B279018
Authority key identifier: FE:77:9E:56:23:8B:6F:2E:A0:68:ED:E4:E2:0A:EF:00:C9:04:13:2B
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/_neeViOLby6gaO3k4grvAMkEEys.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/b1/4de598-6b03-4bef-ab14-33894913dcb7/1/WqYXK0cuQxUf6ntKxWOizPlJCB8.roa
Signing time: Tue 05 Jul 2022 21:34:28 +0000
ROA not before: Tue 05 Jul 2022 21:34:28 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 0
IP address blocks: 176.52.128.0/22 maxlen: 24
176.52.152.0/22 maxlen: 24
92.53.160.0/22 maxlen: 24
92.53.164.0/22 maxlen: 24
Validation: Failed, RFC 3779 resource not subset of parent's resources
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:81:d0:49:39:07:7c:5f:09:fb:e9:89:13:f9:1b:27:90:18
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=fe779e56238b6f2ea068ede4e20aef00c904132b
Validity
Not Before: Jul 5 21:34:28 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=5aa6172b472e43151fea7b4ac563a2ccf949081f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:98:fb:5f:90:5f:89:03:05:77:61:d9:82:ca:c2:
39:dc:73:05:f1:5a:80:29:22:98:78:3c:bf:3e:fa:
b6:61:be:4c:1c:eb:d8:19:ee:bd:9e:65:d0:3d:c1:
b5:3b:34:25:78:42:c8:e6:b9:9c:34:ab:5f:cc:91:
ba:85:34:1e:da:4b:0d:d9:44:6d:7e:f0:5c:0b:81:
0b:6e:17:6b:d8:f3:40:35:57:aa:d5:f7:68:7c:ad:
4c:81:aa:2f:18:4e:b1:15:d6:a5:d3:ce:c0:21:0c:
13:a2:c2:63:22:13:52:c2:2e:22:78:6c:c3:41:8f:
1b:01:46:c6:75:c0:b1:0e:fa:ce:08:30:01:e0:27:
e5:a1:fd:ea:e1:a1:f0:ff:c6:54:31:a2:ac:29:cd:
aa:13:77:5e:59:45:d0:3b:27:84:9c:3c:f1:30:27:
36:3a:35:8e:95:c9:29:67:f3:bd:41:8a:76:3b:e0:
ad:23:3d:14:88:4f:b4:3b:f2:c2:f5:88:7d:1a:65:
54:20:58:17:83:7a:71:ed:06:59:6a:9a:54:9c:13:
c7:38:4f:85:5c:78:93:16:b3:0c:40:9b:37:dc:40:
b3:2f:3e:82:9a:f0:43:91:ae:4e:c4:89:e6:b7:d2:
b6:24:00:f4:7b:63:29:b3:8b:75:ff:dc:60:12:d5:
c5:19
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
5A:A6:17:2B:47:2E:43:15:1F:EA:7B:4A:C5:63:A2:CC:F9:49:08:1F
X509v3 Authority Key Identifier:
keyid:FE:77:9E:56:23:8B:6F:2E:A0:68:ED:E4:E2:0A:EF:00:C9:04:13:2B
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/_neeViOLby6gaO3k4grvAMkEEys.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b1/4de598-6b03-4bef-ab14-33894913dcb7/1/WqYXK0cuQxUf6ntKxWOizPlJCB8.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/b1/4de598-6b03-4bef-ab14-33894913dcb7/1/_neeViOLby6gaO3k4grvAMkEEys.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
92.53.160.0/21
176.52.128.0/22
176.52.152.0/22
Signature Algorithm: sha256WithRSAEncryption
a4:8e:7e:f7:c9:9d:48:fd:0d:35:e1:cf:50:b0:f5:f2:bc:22:
9a:16:76:2b:cd:db:9b:42:37:c0:54:51:08:6b:8e:da:58:0e:
bf:58:1a:de:0f:53:bf:fe:61:ef:92:38:5b:d7:b8:26:bc:5e:
ea:96:d4:60:33:89:e3:7a:c9:ef:1b:30:ec:15:56:78:9e:75:
eb:be:57:eb:29:6b:2f:62:d8:d2:19:19:a3:e8:5c:42:04:08:
b1:42:52:bf:a3:f8:9e:65:20:42:66:d1:da:5d:3f:c5:6f:73:
91:83:9b:c1:c6:01:0e:fc:b0:aa:84:d7:0a:3e:6c:88:60:f2:
00:1e:ce:0c:bd:c5:ae:27:c3:54:b3:10:6b:10:b7:7a:41:9e:
08:9f:3b:7e:1a:ff:07:ae:d2:a2:ee:36:2d:93:bb:40:d0:47:
a2:d4:63:26:14:9b:ca:65:bb:4c:33:7e:0b:03:39:75:fe:8d:
8f:bb:a8:88:a1:0c:fa:99:13:2b:7e:0e:27:cb:c6:00:14:39:
3b:e4:9f:36:40:05:53:c7:71:82:ad:a4:06:02:ef:15:45:23:
c3:1b:00:eb:98:ec:15:21:3a:1a:3c:79:3d:32:5c:12:3a:b1:
7f:0f:5f:f8:ec:85:ca:5d:36:75:b1:52:3e:09:c3:dd:46:7b:
b7:c3:6a:e2
-----BEGIN CERTIFICATE-----
MIIFCTCCA/GgAwIBAgISAYHQSTkHfF8J++mJE/kbJ5AYMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGZlNzc5ZTU2MjM4YjZmMmVhMDY4ZWRlNGUyMGFlZjAwYzkw
NDEzMmIwHhcNMjIwNzA1MjEzNDI4WhcNMjMwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
Eyg1YWE2MTcyYjQ3MmU0MzE1MWZlYTdiNGFjNTYzYTJjY2Y5NDkwODFmMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAmPtfkF+JAwV3YdmCysI53HMF8VqA
KSKYeDy/Pvq2Yb5MHOvYGe69nmXQPcG1OzQleELI5rmcNKtfzJG6hTQe2ksN2URt
fvBcC4ELbhdr2PNANVeq1fdofK1MgaovGE6xFdal087AIQwTosJjIhNSwi4ieGzD
QY8bAUbGdcCxDvrOCDAB4Cflof3q4aHw/8ZUMaKsKc2qE3deWUXQOyeEnDzxMCc2
OjWOlckpZ/O9QYp2O+CtIz0UiE+0O/LC9Yh9GmVUIFgXg3px7QZZappUnBPHOE+F
XHiTFrMMQJs33ECzLz6CmvBDka5OxInmt9K2JAD0e2Mps4t1/9xgEtXFGQIDAQAB
o4ICFTCCAhEwHQYDVR0OBBYEFFqmFytHLkMVH+p7SsVjosz5SQgfMB8GA1UdIwQY
MBaAFP53nlYji28uoGjt5OIK7wDJBBMrMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvX25lZVZpT0xieTZnYU8zazRncnZBTWtFRXlzLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9iMS80ZGU1OTgtNmIwMy00YmVmLWFiMTQt
MzM4OTQ5MTNkY2I3LzEvV3FZWEswY3VReFVmNm50S3hXT2l6UGxKQ0I4LnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9iMS80ZGU1OTgtNmIwMy00YmVmLWFiMTQtMzM4OTQ5MTNkY2I3
LzEvX25lZVZpT0xieTZnYU8zazRncnZBTWtFRXlzLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCsGCCsGAQUFBwEHAQH/BBwwGjAYBAIAATASAwQDXDWgAwQC
sDSAAwQCsDSYMA0GCSqGSIb3DQEBCwUAA4IBAQCkjn73yZ1I/Q014c9QsPXyvCKa
FnYrzdubQjfAVFEIa47aWA6/WBreD1O//mHvkjhb17gmvF7qltRgM4njesnvGzDs
FVZ4nnXrvlfrKWsvYtjSGRmj6FxCBAixQlK/o/ieZSBCZtHaXT/Fb3ORg5vBxgEO
/LCqhNcKPmyIYPIAHs4MvcWuJ8NUsxBrELd6QZ4Inzt+Gv8HrtKi7jYtk7tA0Eei
1GMmFJvKZbtMM34LAzl1/o2Pu6iIoQz6mRMrfg4ny8YAFDk75J82QAVTx3GCraQG
Au8VRSPDGwDrmOwVIToaPHk9MlwSOrF/D1/47IXKXTZ1sVI+CcPdRnu3w2ri
-----END CERTIFICATE-----
Generated at Thu Jun 6 19:39:05 2024 by rpki-client on console-ams.rpki-client.org