Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f3/664cab-ba9a-4c40-97f4-af98e49f11ae/1/WX3GEJhoCYV-W99qN9_kuofoOSg.roa
File: WX3GEJhoCYV-W99qN9_kuofoOSg.roa (raw, json)
Hash identifier: F9dCgxVkf3oAlTHavOBwlj1V2Df/8nJV/Jod1d0r8GI=
Subject key identifier: 59:7D:C6:10:98:68:09:85:7E:5B:DF:6A:37:DF:E4:BA:87:E8:39:28
Certificate issuer: /CN=23d480b0795617e2e26e6e18264377e7a96c78f3
Certificate serial: 056C497B
Authority key identifier: 23:D4:80:B0:79:56:17:E2:E2:6E:6E:18:26:43:77:E7:A9:6C:78:F3
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/I9SAsHlWF-Libm4YJkN356lsePM.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/f3/664cab-ba9a-4c40-97f4-af98e49f11ae/1/WX3GEJhoCYV-W99qN9_kuofoOSg.roa
Signing time: Tue 01 Mar 2022 06:23:08 +0000
ROA not before: Tue 01 Mar 2022 06:23:08 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 31059
IP address blocks: 46.227.160.0/23 maxlen: 23
46.227.162.0/24 maxlen: 24
46.227.164.0/24 maxlen: 24
91.200.178.0/24 maxlen: 24
46.227.165.0/24 maxlen: 24
46.227.166.0/24 maxlen: 24
46.227.167.0/24 maxlen: 24
193.242.176.0/22 maxlen: 22
95.143.4.0/24 maxlen: 24
95.143.0.0/21 maxlen: 24
95.143.10.0/24 maxlen: 24
95.143.11.0/24 maxlen: 24
95.143.5.0/24 maxlen: 24
95.143.8.0/23 maxlen: 23
95.143.12.0/24 maxlen: 24
95.143.13.0/24 maxlen: 24
95.143.14.0/23 maxlen: 23
185.72.224.0/24 maxlen: 24
185.72.225.0/24 maxlen: 24
185.72.226.0/24 maxlen: 24
185.72.227.0/24 maxlen: 24
2a02:1328:2::/48 maxlen: 48
Validation: Failed, RFC 3779 resource not subset of parent's resources
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 90982779 (0x56c497b)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=23d480b0795617e2e26e6e18264377e7a96c78f3
Validity
Not Before: Mar 1 06:23:08 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=597dc610986809857e5bdf6a37dfe4ba87e83928
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b0:07:aa:6c:94:87:5c:6a:c6:46:c9:a6:26:19:
e6:51:7a:11:b3:96:c3:23:43:ea:d7:ff:c4:e2:3d:
7a:d2:57:92:a4:10:e5:98:ce:cd:b5:a1:fb:53:b6:
68:44:51:85:18:65:5e:19:01:d7:65:3c:61:57:18:
73:68:9a:61:73:2e:36:e7:33:c2:76:03:bb:68:cd:
1c:60:23:6e:71:fb:65:01:49:1d:c0:5f:34:98:1f:
5c:31:33:87:fa:23:05:fa:db:b6:2c:38:f9:f5:82:
66:04:94:b1:10:71:35:55:fa:04:05:19:cc:bd:7c:
eb:19:fc:e3:c1:30:57:2d:e4:9d:21:3a:6e:1b:41:
9d:ac:6a:66:7f:49:2f:97:ba:e1:57:d4:7e:bb:c8:
ca:dc:a6:1d:69:2b:5c:bb:d4:32:2a:1c:a5:4c:2a:
d8:58:ba:a6:14:db:15:34:46:5c:c1:1a:e2:f6:ec:
3b:45:63:55:eb:45:d8:f1:33:51:28:ae:dc:9a:59:
07:e6:c1:48:7b:12:a6:47:e5:30:a1:8e:0b:f8:76:
04:bc:f1:31:a2:d9:08:47:cd:64:e7:f7:8a:06:32:
ba:61:1c:66:14:48:4b:a1:af:cd:be:c4:79:b7:be:
e7:9e:b9:4a:ad:59:2d:3f:21:5a:1b:bc:49:88:49:
dd:5d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
59:7D:C6:10:98:68:09:85:7E:5B:DF:6A:37:DF:E4:BA:87:E8:39:28
X509v3 Authority Key Identifier:
keyid:23:D4:80:B0:79:56:17:E2:E2:6E:6E:18:26:43:77:E7:A9:6C:78:F3
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/I9SAsHlWF-Libm4YJkN356lsePM.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f3/664cab-ba9a-4c40-97f4-af98e49f11ae/1/WX3GEJhoCYV-W99qN9_kuofoOSg.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/f3/664cab-ba9a-4c40-97f4-af98e49f11ae/1/I9SAsHlWF-Libm4YJkN356lsePM.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
46.227.160.0-46.227.162.255
46.227.164.0/22
91.200.178.0/24
95.143.0.0/20
185.72.224.0/22
193.242.176.0/22
IPv6:
2a02:1328:2::/48
Signature Algorithm: sha256WithRSAEncryption
06:fd:2f:aa:d7:40:c4:52:5f:d2:ad:29:0d:39:ec:87:69:5f:
d7:41:f9:e3:0b:0e:49:d6:ef:57:0d:24:b6:61:f9:65:43:e0:
3e:37:da:f9:f1:d1:a3:1c:7d:b8:28:05:5a:95:bd:cd:60:f8:
4f:96:97:e8:f4:d0:ca:97:62:7b:82:cc:a8:b7:56:72:9c:23:
ae:cc:0b:86:5e:59:3c:33:44:9c:c5:7f:4f:c5:58:f0:e5:76:
e5:e2:f2:8d:6a:ea:eb:25:82:5b:32:4b:9d:3a:55:e7:56:0d:
5b:24:ab:72:8a:47:c6:d1:5d:ed:1f:c3:dc:f2:b0:11:33:fb:
4f:a3:9f:f2:f2:32:de:46:5e:dc:50:0a:40:8b:f3:74:d7:6f:
07:2a:b2:71:c0:69:38:84:5a:c2:05:89:55:a4:17:7d:7e:19:
ab:a5:67:4e:0c:48:0e:8b:1e:5a:01:6d:63:d8:c2:04:9e:01:
d7:7d:1f:32:51:b9:98:6b:45:9d:78:08:55:74:45:59:66:73:
65:47:a9:00:10:ba:45:76:3d:76:2b:26:29:4d:3f:9f:0e:4e:
5d:f5:61:b6:76:2a:3a:d2:c9:97:44:ce:36:c2:78:ba:8a:1b:
01:a9:03:d2:9a:bf:fa:34:30:85:95:84:4a:03:35:10:db:05:
90:40:4a:ed
-----BEGIN CERTIFICATE-----
MIIFJjCCBA6gAwIBAgIEBWxJezANBgkqhkiG9w0BAQsFADAzMTEwLwYDVQQDEygy
M2Q0ODBiMDc5NTYxN2UyZTI2ZTZlMTgyNjQzNzdlN2E5NmM3OGYzMB4XDTIyMDMw
MTA2MjMwOFoXDTIzMDcwMTAwMDAwMFowMzExMC8GA1UEAxMoNTk3ZGM2MTA5ODY4
MDk4NTdlNWJkZjZhMzdkZmU0YmE4N2U4MzkyODCCASIwDQYJKoZIhvcNAQEBBQAD
ggEPADCCAQoCggEBALAHqmyUh1xqxkbJpiYZ5lF6EbOWwyND6tf/xOI9etJXkqQQ
5ZjOzbWh+1O2aERRhRhlXhkB12U8YVcYc2iaYXMuNuczwnYDu2jNHGAjbnH7ZQFJ
HcBfNJgfXDEzh/ojBfrbtiw4+fWCZgSUsRBxNVX6BAUZzL186xn848EwVy3knSE6
bhtBnaxqZn9JL5e64VfUfrvIytymHWkrXLvUMiocpUwq2Fi6phTbFTRGXMEa4vbs
O0VjVetF2PEzUSiu3JpZB+bBSHsSpkflMKGOC/h2BLzxMaLZCEfNZOf3igYyumEc
ZhRIS6Gvzb7Eebe+5565Sq1ZLT8hWhu8SYhJ3V0CAwEAAaOCAkAwggI8MB0GA1Ud
DgQWBBRZfcYQmGgJhX5b32o33+S6h+g5KDAfBgNVHSMEGDAWgBQj1ICweVYX4uJu
bhgmQ3fnqWx48zAOBgNVHQ8BAf8EBAMCB4AwZAYIKwYBBQUHAQEEWDBWMFQGCCsG
AQUFBzAChkhyc3luYzovL3Jwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxU
L0k5U0FzSGxXRi1MaWJtNFlKa04zNTZsc2VQTS5jZXIwgY0GCCsGAQUFBwELBIGA
MH4wfAYIKwYBBQUHMAuGcHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5
L0RFRkFVTFQvZjMvNjY0Y2FiLWJhOWEtNGM0MC05N2Y0LWFmOThlNDlmMTFhZS8x
L1dYM0dFSmhvQ1lWLVc5OXFOOV9rdW9mb09TZy5yb2EwgYEGA1UdHwR6MHgwdqB0
oHKGcHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvZjMv
NjY0Y2FiLWJhOWEtNGM0MC05N2Y0LWFmOThlNDlmMTFhZS8xL0k5U0FzSGxXRi1M
aWJtNFlKa04zNTZsc2VQTS5jcmwwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjBW
BggrBgEFBQcBBwEB/wRHMEUwMgQCAAEwLDAMAwQFLuOgAwQALuOiAwQCLuOkAwQA
W8iyAwQEX48AAwQCuUjgAwQCwfKwMA8EAgACMAkDBwAqAhMoAAIwDQYJKoZIhvcN
AQELBQADggEBAAb9L6rXQMRSX9KtKQ057IdpX9dB+eMLDknW71cNJLZh+WVD4D43
2vnx0aMcfbgoBVqVvc1g+E+Wl+j00MqXYnuCzKi3VnKcI67MC4ZeWTwzRJzFf0/F
WPDlduXi8o1q6uslglsyS506VedWDVskq3KKR8bRXe0fw9zysBEz+0+jn/LyMt5G
XtxQCkCL83TXbwcqsnHAaTiEWsIFiVWkF31+GaulZ04MSA6LHloBbWPYwgSeAdd9
HzJRuZhrRZ14CFV0RVlmc2VHqQAQukV2PXYrJilNP58OTl31YbZ2KjrSyZdEzjbC
eLqKGwGpA9Kav/o0MIWVhEoDNRDbBZBASu0=
-----END CERTIFICATE-----
Generated at Thu Jun 6 19:52:26 2024 by rpki-client on console-ams.rpki-client.org