Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/35/aa58c3-e706-4a49-a7c5-0ae2e922a292/1/7kFnHH67oC_qpyP-BPt5Qnei3M8.roa
File: 7kFnHH67oC_qpyP-BPt5Qnei3M8.roa (raw, json)
Hash identifier: hpLIrY4y55x55Y+P3JAYGmnfsHDVNr3sToYIb2r+Sl8=
Subject key identifier: EE:41:67:1C:7E:BB:A0:2F:EA:A7:23:FE:04:FB:79:42:77:A2:DC:CF
Certificate issuer: /CN=368bfb8a5eee49082ea628df25a4a5d50f3aa9b3
Certificate serial: 01830E978A0C1CD0E42094BE2761DECC2243
Authority key identifier: 36:8B:FB:8A:5E:EE:49:08:2E:A6:28:DF:25:A4:A5:D5:0F:3A:A9:B3
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Nov7il7uSQgupijfJaSl1Q86qbM.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/35/aa58c3-e706-4a49-a7c5-0ae2e922a292/1/7kFnHH67oC_qpyP-BPt5Qnei3M8.roa
Signing time: Mon 05 Sep 2022 16:59:15 +0000
ROA not before: Mon 05 Sep 2022 16:59:15 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 399045
IP address blocks: 185.194.179.0/24 maxlen: 24
Validation: Failed, RFC 3779 resource not subset of parent's resources
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:83:0e:97:8a:0c:1c:d0:e4:20:94:be:27:61:de:cc:22:43
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=368bfb8a5eee49082ea628df25a4a5d50f3aa9b3
Validity
Not Before: Sep 5 16:59:15 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=ee41671c7ebba02feaa723fe04fb794277a2dccf
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9d:a7:9f:18:ec:3e:24:b4:cf:19:7e:67:78:93:
c3:94:4c:f2:87:94:51:2d:00:9f:1e:02:9d:81:7f:
ac:30:c5:33:66:c4:e2:b5:38:74:ca:f9:48:97:0b:
a4:3c:64:a5:2d:f2:11:41:e4:43:6c:eb:e9:51:ee:
15:77:7c:26:7f:d9:22:de:3f:e7:e5:6b:fe:78:e4:
b7:a7:12:3b:71:9e:62:cf:5c:df:36:26:f6:36:eb:
73:85:9e:3d:14:66:27:a6:0d:48:f0:7f:9d:7c:f3:
3e:27:e2:18:b8:be:cf:43:1a:c8:3f:d1:b4:45:5e:
bb:bc:5d:16:dd:b7:c4:87:c0:32:29:4c:76:ce:56:
b2:c4:f2:08:1c:40:03:36:65:a8:5d:29:81:f7:02:
49:39:77:42:b6:e7:6c:5c:bb:1f:0f:a7:fa:02:1d:
d1:76:23:49:27:90:0c:8b:59:cc:b4:bf:79:07:1b:
5f:23:65:aa:00:4a:19:85:f1:b1:14:a0:b8:21:00:
13:36:e5:dc:99:48:9f:ec:2b:a1:f1:9d:20:3e:2a:
3a:35:4a:8e:f4:36:f6:f1:c7:3a:09:3f:e4:12:40:
45:01:d5:8d:27:bc:16:88:d9:b2:53:71:c9:0d:eb:
e8:5d:10:31:09:d4:5b:80:ca:d2:be:af:9c:33:23:
54:e1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
EE:41:67:1C:7E:BB:A0:2F:EA:A7:23:FE:04:FB:79:42:77:A2:DC:CF
X509v3 Authority Key Identifier:
keyid:36:8B:FB:8A:5E:EE:49:08:2E:A6:28:DF:25:A4:A5:D5:0F:3A:A9:B3
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Nov7il7uSQgupijfJaSl1Q86qbM.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/35/aa58c3-e706-4a49-a7c5-0ae2e922a292/1/7kFnHH67oC_qpyP-BPt5Qnei3M8.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/35/aa58c3-e706-4a49-a7c5-0ae2e922a292/1/Nov7il7uSQgupijfJaSl1Q86qbM.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.194.179.0/24
Signature Algorithm: sha256WithRSAEncryption
2c:c2:75:5b:12:26:95:d5:30:7f:59:4b:b7:60:4f:89:c6:60:
9a:c1:5c:cd:f6:ca:76:b7:59:e6:88:95:16:c2:58:08:31:49:
ed:f1:29:30:53:b3:b0:52:4f:18:52:a2:df:6d:18:7f:e0:94:
f6:71:fb:b2:1a:55:12:a3:1d:50:1d:ce:0f:79:eb:c6:f7:cc:
4a:a3:4c:59:b6:f8:20:96:91:16:8c:c8:40:a2:59:2a:b6:8f:
fe:75:82:56:8d:b7:cd:41:07:8c:66:ca:8f:73:1b:10:5c:5b:
b8:07:21:b6:05:8b:2a:5b:8a:91:68:83:8f:a4:80:f1:58:18:
9a:6f:0e:f3:5b:67:a3:c0:61:7b:42:1a:3b:e6:e9:fa:1c:85:
4e:fb:af:0d:39:eb:9b:4c:67:d1:3a:1c:b5:94:5d:9c:88:53:
79:b0:2d:34:ac:51:5c:77:ef:02:79:ae:3e:6b:c0:d6:f5:ed:
df:7b:b1:b8:f4:e7:05:08:0c:8c:f7:c9:8e:73:ed:24:77:5b:
c9:7c:a1:52:d0:c0:e1:d1:57:cf:f3:1b:be:97:3a:ad:d1:e4:
85:af:7b:32:bf:0a:1b:f3:4e:f5:7c:0b:65:58:56:23:b1:8f:
11:fa:84:bf:c3:f0:d0:72:35:a2:a1:a4:19:84:0f:c3:f3:bd:
e1:45:d0:4a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 19 23:46:26 2023 by rpki-client on console-fra.rpki-client.org