Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c4/5e753d-c33d-47a3-8e82-a52862b44563/1/wnuhBLmZqkD_XPiAZ2HTS372LQk.roa
File: wnuhBLmZqkD_XPiAZ2HTS372LQk.roa (raw, json)
Hash identifier: fqcvYSdjyHGusgBThIfEk2BJfG8k5eN0IB0mtDL+1CU=
Subject key identifier: C2:7B:A1:04:B9:99:AA:40:FF:5C:F8:80:67:61:D3:4B:7E:F6:2D:09
Certificate issuer: /CN=fc55e0533efaa5624f538b92ed1a973feff89751
Certificate serial: 02075604
Authority key identifier: FC:55:E0:53:3E:FA:A5:62:4F:53:8B:92:ED:1A:97:3F:EF:F8:97:51
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/_FXgUz76pWJPU4uS7RqXP-_4l1E.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c4/5e753d-c33d-47a3-8e82-a52862b44563/1/wnuhBLmZqkD_XPiAZ2HTS372LQk.roa
Signing time: Sat 01 Jan 2022 06:01:32 +0000
ROA not before: Sat 01 Jan 2022 06:01:32 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 39144
IP address blocks: 185.132.188.0/22 maxlen: 22
Validation: Failed, RFC 3779 resource not subset of parent's resources
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 34035204 (0x2075604)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=fc55e0533efaa5624f538b92ed1a973feff89751
Validity
Not Before: Jan 1 06:01:32 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=c27ba104b999aa40ff5cf8806761d34b7ef62d09
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:99:73:3a:40:fd:70:af:32:d2:8b:f9:c0:bc:d8:
ff:a5:e4:36:4d:20:a5:6f:f5:78:66:a6:91:0c:31:
5b:f8:3e:df:e4:a1:9e:4f:46:f1:82:53:24:d7:09:
71:cf:df:e2:a9:c5:56:85:f3:55:08:75:b6:df:6f:
5c:45:7f:8f:ef:50:a8:fc:ce:d5:77:64:63:6d:0e:
b4:04:61:e1:a0:5f:05:fe:56:30:a2:ae:92:d4:7f:
ca:21:f2:3d:a3:6c:77:bc:de:1e:b7:ce:89:24:7a:
26:f9:fc:13:14:ae:0e:a1:91:c3:d3:12:c7:3d:7f:
fe:54:30:74:66:12:bc:a3:be:a5:07:e6:b5:82:51:
32:a8:aa:48:1d:ad:77:a8:cd:28:6e:ea:4b:5a:6e:
1f:af:91:c6:95:df:e1:1b:31:01:91:3f:32:34:a5:
c1:9d:fc:5e:ce:a0:1e:aa:b4:6a:a9:39:89:f5:60:
f2:61:40:39:a4:5c:86:2a:e2:4b:03:65:ae:55:ff:
cd:21:8d:df:8d:dd:ca:ee:c4:b1:97:6d:0a:e6:c3:
ee:01:d7:32:fa:ec:23:97:b9:03:88:02:92:2b:73:
c9:e6:74:20:6d:26:ac:e4:86:c7:2b:0a:6c:18:f9:
df:20:4a:73:82:70:f6:be:fa:8d:f7:9d:83:6a:99:
da:2b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C2:7B:A1:04:B9:99:AA:40:FF:5C:F8:80:67:61:D3:4B:7E:F6:2D:09
X509v3 Authority Key Identifier:
keyid:FC:55:E0:53:3E:FA:A5:62:4F:53:8B:92:ED:1A:97:3F:EF:F8:97:51
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/_FXgUz76pWJPU4uS7RqXP-_4l1E.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c4/5e753d-c33d-47a3-8e82-a52862b44563/1/wnuhBLmZqkD_XPiAZ2HTS372LQk.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c4/5e753d-c33d-47a3-8e82-a52862b44563/1/_FXgUz76pWJPU4uS7RqXP-_4l1E.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.132.188.0/22
Signature Algorithm: sha256WithRSAEncryption
b6:81:bc:5b:3e:db:5f:82:1a:5c:dc:57:e0:37:17:18:1b:6e:
cf:eb:30:7b:c6:dc:28:94:5c:73:ab:8a:26:ce:87:de:3c:ae:
e7:9d:37:a1:89:47:9d:42:d9:df:eb:2a:98:e3:80:a6:ab:00:
e7:27:e1:f0:1c:31:0b:75:53:2a:26:78:68:16:36:ef:83:5f:
d3:a3:e0:1f:b0:2b:7f:91:5d:d4:65:af:5a:dd:45:d9:b5:3d:
87:d9:1f:55:73:6d:19:05:5f:97:e0:ff:2e:32:b2:7f:fd:01:
91:76:55:34:14:d9:4f:f8:e3:16:da:4b:14:45:38:90:b7:82:
ab:5a:e7:80:6c:d4:15:30:c5:fb:8b:31:7f:03:d5:1a:b0:bd:
42:ca:a5:af:eb:4e:da:e4:0a:8b:fa:80:2d:9a:59:30:5e:3a:
ad:63:96:02:a7:60:75:b8:e2:40:e2:62:9f:0b:fc:63:d0:83:
89:c7:36:d6:42:5a:00:4c:7c:2a:19:a4:6d:d2:8a:f8:b4:17:
0f:7c:a8:33:a7:ef:47:19:68:a4:b2:e4:6b:33:60:87:ab:97:
d2:46:dc:c6:9f:5c:14:6d:68:ca:da:d6:48:93:a0:83:74:4f:
e6:8e:43:cb:6a:01:f3:0d:e3:63:3f:56:d9:1d:16:b3:6b:56:
76:fa:7c:67
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:52:58 2024 by rpki-client on console-fra.rpki-client.org