Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/bc/8dd85a-bf8f-425e-a24b-2ccedb966a58/1/WX_mt9l1w6ISNM4odYCO10er9qc.roa
File: WX_mt9l1w6ISNM4odYCO10er9qc.roa (raw, json)
Hash identifier: FZZNoRgTgRxZ0wqdY0QS6vR0ABJ+1IEg2kORq5VqMec=
Subject key identifier: 59:7F:E6:B7:D9:75:C3:A2:12:34:CE:28:75:80:8E:D7:47:AB:F6:A7
Certificate issuer: /CN=36c2a4b7d5d73c5b57046223bf30eb653005b0e2
Certificate serial: 01876A540048CDD75D19BCF771D6C74E70F7
Authority key identifier: 36:C2:A4:B7:D5:D7:3C:5B:57:04:62:23:BF:30:EB:65:30:05:B0:E2
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/NsKkt9XXPFtXBGIjvzDrZTAFsOI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/bc/8dd85a-bf8f-425e-a24b-2ccedb966a58/1/WX_mt9l1w6ISNM4odYCO10er9qc.roa
Signing time: Mon 10 Apr 2023 08:41:42 +0000
ROA not before: Mon 10 Apr 2023 08:41:42 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 834
IP address blocks: 78.142.242.0/24 maxlen: 24
188.214.27.0/24 maxlen: 24
78.142.243.0/24 maxlen: 24
185.9.55.0/24 maxlen: 24
45.159.152.0/24 maxlen: 24
193.19.106.0/24 maxlen: 24
192.166.208.0/22 maxlen: 24
185.103.75.0/24 maxlen: 24
Validation: Failed, RFC 3779 resource not subset of parent's resources
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:87:6a:54:00:48:cd:d7:5d:19:bc:f7:71:d6:c7:4e:70:f7
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=36c2a4b7d5d73c5b57046223bf30eb653005b0e2
Validity
Not Before: Apr 10 08:41:42 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=597fe6b7d975c3a21234ce2875808ed747abf6a7
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8e:d2:6b:b3:e3:e1:09:6e:4c:bc:83:ac:e1:c3:
14:f4:01:00:54:f9:66:32:6a:b4:cd:0d:d8:5d:6c:
0f:f8:e0:91:a0:5f:53:b4:eb:b8:57:cd:4b:9d:d6:
b3:6b:12:3e:b1:2f:d2:d4:c8:e0:8d:da:07:f8:b4:
af:11:14:92:9b:4e:43:75:72:a4:24:0c:9c:6a:cf:
ee:e8:14:f3:19:6c:d3:19:91:6c:c8:e8:02:86:03:
c1:ad:87:4e:e0:69:b4:bc:20:8b:ba:93:61:90:e0:
32:e6:a5:fe:2a:77:11:c8:24:09:22:17:69:76:62:
32:b3:31:80:01:73:d6:da:5a:9f:54:77:11:44:a1:
94:c8:17:58:16:39:02:e6:b3:bc:d6:1b:50:22:03:
6b:12:c2:81:bd:f6:74:1c:3f:94:cf:d3:f4:22:36:
23:ea:8d:ab:89:34:dd:f0:7e:fd:12:77:c0:1e:81:
76:14:a2:e1:b3:31:36:46:5b:74:96:b6:fa:64:ae:
cf:a8:d9:c9:36:99:6f:52:ee:e7:5f:78:2e:e7:1f:
81:b4:c8:4b:94:5b:13:15:17:e4:67:12:ad:54:fc:
79:e9:2b:61:d5:dc:ce:45:96:de:43:8d:d0:d1:77:
81:f7:b8:f8:83:e8:4b:f9:7a:bc:11:f7:8b:e9:03:
30:81
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
59:7F:E6:B7:D9:75:C3:A2:12:34:CE:28:75:80:8E:D7:47:AB:F6:A7
X509v3 Authority Key Identifier:
keyid:36:C2:A4:B7:D5:D7:3C:5B:57:04:62:23:BF:30:EB:65:30:05:B0:E2
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/NsKkt9XXPFtXBGIjvzDrZTAFsOI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/bc/8dd85a-bf8f-425e-a24b-2ccedb966a58/1/WX_mt9l1w6ISNM4odYCO10er9qc.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/bc/8dd85a-bf8f-425e-a24b-2ccedb966a58/1/NsKkt9XXPFtXBGIjvzDrZTAFsOI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
45.159.152.0/24
78.142.242.0/23
185.9.55.0/24
185.103.75.0/24
188.214.27.0/24
192.166.208.0/22
193.19.106.0/24
Signature Algorithm: sha256WithRSAEncryption
3e:b2:4a:31:65:6a:f7:ca:d9:c7:f1:14:dd:15:c5:20:ff:ab:
9a:b9:26:3d:c1:ca:83:b6:5a:ea:b9:28:c1:ca:35:0e:66:4f:
ac:c9:17:6b:65:d4:6f:b2:ac:40:84:90:c4:a5:17:a2:e2:da:
df:59:dc:0a:1a:41:ac:45:d9:b6:29:39:29:e3:88:f1:d6:b2:
b5:c2:1a:d4:30:d6:99:dc:1e:89:29:11:f1:65:08:78:94:f9:
ec:8f:d8:21:35:3a:75:b7:37:8c:25:8f:59:7a:90:fa:0e:47:
f8:b6:25:5f:39:50:05:a8:c1:db:ab:c0:7e:fa:b0:26:07:3a:
b9:ba:04:ff:22:4d:e1:b7:5a:db:9e:ae:47:10:9d:c2:7b:6a:
ed:9b:d9:4c:4b:d0:6e:1d:d0:55:f3:26:a4:a6:df:e3:11:3d:
5e:cc:2a:c4:ea:c1:a9:ac:77:29:92:60:35:ca:9c:57:cb:3d:
03:fa:12:65:d6:55:07:7f:7e:40:8d:76:17:e7:58:a3:48:36:
49:9d:77:38:80:68:a2:87:6f:65:ba:48:30:e1:73:44:a0:ce:
7c:a8:30:7c:10:0a:84:b8:7a:eb:8f:d4:d5:5e:29:b1:78:82:
0f:10:97:ac:47:d1:f8:de:88:75:cf:15:e6:84:e2:ca:30:43:
bb:f1:97:0b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jul 20 00:03:02 2023 by rpki-client on console-fra.rpki-client.org