Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b5/0bab1f-92d6-42f0-b952-442c080ae541/1/_TostrPdmVHP2nx2l5qNA7gU6js.roa
File: _TostrPdmVHP2nx2l5qNA7gU6js.roa (raw, json)
Hash identifier: v7e3hnrtpgHsBK0lV9SwUs8nwnK3wMK1fPYT8b7H+pM=
Subject key identifier: FD:3A:2C:B6:B3:DD:99:51:CF:DA:7C:76:97:9A:8D:03:B8:14:EA:3B
Certificate issuer: /CN=36261c261756fa03ac57d1bfc4db856ef808975a
Certificate serial: 049B6EEA
Authority key identifier: 36:26:1C:26:17:56:FA:03:AC:57:D1:BF:C4:DB:85:6E:F8:08:97:5A
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/NiYcJhdW-gOsV9G_xNuFbvgIl1o.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/b5/0bab1f-92d6-42f0-b952-442c080ae541/1/_TostrPdmVHP2nx2l5qNA7gU6js.roa
Signing time: Sat 01 Jan 2022 09:53:24 +0000
ROA not before: Sat 01 Jan 2022 09:53:24 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 20860
IP address blocks: 185.35.77.0/24 maxlen: 24
185.35.79.0/24 maxlen: 24
2a00:e120::/32 maxlen: 32
Validation: Failed, RFC 3779 resource not subset of parent's resources
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 77295338 (0x49b6eea)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=36261c261756fa03ac57d1bfc4db856ef808975a
Validity
Not Before: Jan 1 09:53:24 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=fd3a2cb6b3dd9951cfda7c76979a8d03b814ea3b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a1:13:19:0c:dd:57:73:18:4f:d6:26:78:5b:84:
1b:f7:48:d9:d5:40:49:e2:28:4a:0a:12:fd:09:f1:
f9:27:26:c5:93:71:bf:8b:c4:fe:c8:74:a5:55:5e:
8b:98:23:71:7f:dd:48:df:dc:f5:d4:17:57:a9:1a:
a6:9d:98:fb:d6:d2:f4:54:5f:77:27:83:59:6a:ad:
fe:1f:34:17:18:57:01:30:72:4f:af:0f:08:c0:65:
07:f8:1c:59:3c:d1:55:03:c3:4e:7f:10:81:9d:4c:
c0:06:f2:3a:53:07:df:30:3f:1e:4b:8b:48:fc:a0:
ac:80:12:89:54:fc:b7:fc:21:5d:99:09:4d:7c:1f:
7d:11:22:a8:d8:87:fb:5f:f1:c7:8f:d0:a2:e2:45:
c4:e8:f3:6a:21:a8:96:24:25:38:dd:cc:8d:7a:54:
ac:f5:27:4b:df:d3:91:84:e4:16:3b:00:98:50:c1:
1f:d9:f9:e0:56:14:8a:bb:b4:bb:b1:d2:24:b5:b5:
a6:64:02:7e:ae:15:d8:cc:44:d1:6d:27:21:f1:af:
c1:ac:4f:2b:f4:ae:7a:a8:1c:d2:93:12:7c:f5:b7:
8c:be:b3:f2:1d:55:6f:51:74:24:80:1b:a9:e4:32:
58:b6:ac:f1:6f:81:8b:48:aa:a2:1e:9c:c0:e9:b1:
20:89
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
FD:3A:2C:B6:B3:DD:99:51:CF:DA:7C:76:97:9A:8D:03:B8:14:EA:3B
X509v3 Authority Key Identifier:
keyid:36:26:1C:26:17:56:FA:03:AC:57:D1:BF:C4:DB:85:6E:F8:08:97:5A
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/NiYcJhdW-gOsV9G_xNuFbvgIl1o.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b5/0bab1f-92d6-42f0-b952-442c080ae541/1/_TostrPdmVHP2nx2l5qNA7gU6js.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/b5/0bab1f-92d6-42f0-b952-442c080ae541/1/NiYcJhdW-gOsV9G_xNuFbvgIl1o.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.35.77.0/24
185.35.79.0/24
IPv6:
2a00:e120::/32
Signature Algorithm: sha256WithRSAEncryption
10:a1:e2:81:2b:8b:68:47:20:54:b0:c9:89:1d:e4:0d:ce:ed:
02:60:1e:2e:27:d5:6e:86:b3:ec:b6:ea:71:a2:fa:2f:e2:07:
42:ff:6d:4f:81:44:49:46:cf:21:ff:5d:53:28:ef:1b:fd:37:
e7:a9:1b:41:db:1d:b2:95:28:eb:d5:2c:39:95:25:3d:0e:38:
02:8f:1c:fe:65:6e:df:0a:da:e4:bf:c6:76:fb:a9:18:d1:95:
9e:53:0d:39:a0:87:fc:01:af:3c:dc:96:d0:fd:6f:d7:73:25:
b2:de:60:ed:0c:8a:00:d0:64:3e:42:d8:ad:43:c1:5e:dd:9d:
ce:14:aa:70:d0:f7:56:e9:66:24:d6:a1:21:45:22:41:94:a5:
96:38:3c:cc:90:b8:91:7e:07:d1:31:3e:95:4f:c3:a0:04:dd:
2e:3c:b5:98:56:7e:5d:7c:3e:23:48:56:24:74:10:b0:1e:aa:
15:2e:37:42:92:d8:f4:a1:f4:fa:d9:4c:c3:7b:55:cb:90:16:
17:a9:8f:15:97:37:27:23:e0:09:9b:8c:fd:2c:a7:82:7e:fa:
a8:69:fa:d0:25:6e:76:d6:26:8e:53:79:b2:c0:ab:bf:f0:5f:
f7:81:82:6d:70:1c:9b:84:f8:14:2d:23:43:83:06:2a:49:f8:
ca:ee:a1:21
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 19:39:45 2024 by rpki-client on console-ams.rpki-client.org