Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ff/82a7d6-92a9-4204-9ae0-9a48ecf9e15e/1/wuL1SttJbrdNapZM6t0Ks8G8Xw0.roa
File: wuL1SttJbrdNapZM6t0Ks8G8Xw0.roa (raw, json)
Hash identifier: Yq88UNpI/SWWGW1mR+cArOGbq8sPYK3R83UF4eW+KEI=
Subject key identifier: C2:E2:F5:4A:DB:49:6E:B7:4D:6A:96:4C:EA:DD:0A:B3:C1:BC:5F:0D
Certificate issuer: /CN=da00e981953061972c896bd6d27738d083aadb0e
Certificate serial: 02F92727
Authority key identifier: DA:00:E9:81:95:30:61:97:2C:89:6B:D6:D2:77:38:D0:83:AA:DB:0E
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/2gDpgZUwYZcsiWvW0nc40IOq2w4.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ff/82a7d6-92a9-4204-9ae0-9a48ecf9e15e/1/wuL1SttJbrdNapZM6t0Ks8G8Xw0.roa
Signing time: Tue 08 Feb 2022 18:59:58 +0000
ROA not before: Tue 08 Feb 2022 18:59:58 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 7018
IP address blocks: 5.35.192.0/21 maxlen: 24
62.112.0.0/21 maxlen: 24
93.113.184.0/21 maxlen: 24
Validation: Failed, RFC 3779 resource not subset of parent's resources
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 49882919 (0x2f92727)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=da00e981953061972c896bd6d27738d083aadb0e
Validity
Not Before: Feb 8 18:59:58 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=c2e2f54adb496eb74d6a964ceadd0ab3c1bc5f0d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a2:2d:34:1b:7c:d4:54:c7:f5:6c:19:7a:06:3b:
39:b1:10:04:6c:61:1d:d7:c3:72:be:d8:64:ea:f3:
29:ee:6a:e2:d1:bb:3a:09:71:2c:1d:be:2c:94:36:
ff:98:51:f1:50:4e:cc:17:88:58:13:e4:11:70:0d:
04:85:87:49:79:cc:34:55:6a:7d:2d:b4:70:3f:b3:
4e:b9:8d:61:44:9e:7a:1f:6b:ce:19:e2:93:e5:2b:
3c:37:37:05:d1:72:54:dd:d7:3c:f7:8a:09:e8:00:
e0:34:9c:02:4e:cc:8e:68:84:f0:19:7f:4e:ae:c8:
eb:a1:a0:e9:58:eb:82:c9:49:be:86:bf:29:b2:37:
f5:be:fc:05:88:76:c5:90:e8:91:ed:6e:ef:fa:30:
35:9c:73:b6:b6:59:77:17:38:26:a1:eb:5a:a0:35:
d7:9c:47:63:9d:21:c3:ec:da:c2:a0:06:fb:c2:56:
27:25:f4:82:bf:d4:fe:ae:86:06:e6:43:ff:1f:0a:
61:79:32:20:c7:aa:94:8b:2c:2c:df:c5:3f:66:f8:
f9:a6:04:9a:59:7a:75:90:ba:22:5a:58:f8:cf:ac:
e7:b4:28:6f:74:9e:28:12:09:4e:1a:9b:d1:4e:ee:
7e:19:71:3f:07:fb:02:6e:f7:8a:dd:03:7b:52:97:
7f:f1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C2:E2:F5:4A:DB:49:6E:B7:4D:6A:96:4C:EA:DD:0A:B3:C1:BC:5F:0D
X509v3 Authority Key Identifier:
keyid:DA:00:E9:81:95:30:61:97:2C:89:6B:D6:D2:77:38:D0:83:AA:DB:0E
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/2gDpgZUwYZcsiWvW0nc40IOq2w4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ff/82a7d6-92a9-4204-9ae0-9a48ecf9e15e/1/wuL1SttJbrdNapZM6t0Ks8G8Xw0.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/ff/82a7d6-92a9-4204-9ae0-9a48ecf9e15e/1/2gDpgZUwYZcsiWvW0nc40IOq2w4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
5.35.192.0/21
62.112.0.0/21
93.113.184.0/21
Signature Algorithm: sha256WithRSAEncryption
08:29:9f:68:e4:82:c3:a4:c9:cf:60:5c:87:df:24:0a:d3:61:
35:19:ec:e5:33:33:1d:c1:a9:2b:43:07:d8:c9:66:9d:ce:ea:
03:e2:fe:8b:9c:87:8e:3b:e6:de:2f:d2:24:bf:eb:6e:4a:05:
09:3c:70:ab:61:31:e9:e0:36:b1:7d:54:47:9d:62:c3:39:3a:
b3:3c:50:30:37:91:32:1f:20:b6:04:af:90:27:a7:fd:3d:c1:
2a:e9:1c:4b:c9:42:a8:04:fc:4e:56:d2:60:b8:b9:2e:78:49:
25:38:b8:ad:45:42:71:17:ae:74:d1:1b:dd:fb:20:6a:9a:91:
71:44:b9:af:9e:b5:b0:9a:4d:5e:8b:de:27:2a:6f:cc:53:49:
5b:b4:24:16:4d:d8:00:0e:38:e1:2e:0d:20:c0:8d:e5:4d:3f:
5c:ff:d4:94:b4:6d:40:47:a9:a6:de:77:93:cf:73:71:05:de:
cd:e5:c4:08:a1:91:a9:c0:af:46:21:37:6a:3c:94:b1:98:e0:
50:bd:80:2c:12:17:f2:6c:4c:73:af:41:15:9e:0d:41:82:50:
35:74:2a:3b:f5:d4:92:81:87:be:d6:9e:78:67:b6:be:c4:ef:
29:f3:3a:05:63:d4:5b:bc:9e:57:9d:ea:96:26:a9:64:27:b7:
9b:43:79:62
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 19:54:49 2024 by rpki-client on console-ams.rpki-client.org