Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/35/aa58c3-e706-4a49-a7c5-0ae2e922a292/1/AucpuC_qxRd3TW_agkBc5keDK2U.roa
File: AucpuC_qxRd3TW_agkBc5keDK2U.roa (raw, json)
Hash identifier: 95NFfZYw72diUWOay/41IL/yjqn6E4tc+1dmIptwMq8=
Subject key identifier: 02:E7:29:B8:2F:EA:C5:17:77:4D:6F:DA:82:40:5C:E6:47:83:2B:65
Certificate issuer: /CN=368bfb8a5eee49082ea628df25a4a5d50f3aa9b3
Certificate serial: 03D305B2
Authority key identifier: 36:8B:FB:8A:5E:EE:49:08:2E:A6:28:DF:25:A4:A5:D5:0F:3A:A9:B3
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Nov7il7uSQgupijfJaSl1Q86qbM.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/35/aa58c3-e706-4a49-a7c5-0ae2e922a292/1/AucpuC_qxRd3TW_agkBc5keDK2U.roa
Signing time: Mon 04 Apr 2022 08:42:13 +0000
ROA not before: Mon 04 Apr 2022 08:42:13 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 61003
IP address blocks: 185.108.207.0/24 maxlen: 24
Validation: Failed, RFC 3779 resource not subset of parent's resources
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 64161202 (0x3d305b2)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=368bfb8a5eee49082ea628df25a4a5d50f3aa9b3
Validity
Not Before: Apr 4 08:42:13 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=02e729b82feac517774d6fda82405ce647832b65
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c1:4c:f7:bf:e1:80:3e:13:b6:8f:bd:f4:57:4c:
ae:8e:65:5d:1e:35:5a:01:c8:f6:a9:ee:d6:67:83:
19:33:56:ff:29:e9:d9:fd:fc:a1:2f:f3:cf:c1:4d:
b2:d2:a2:61:7d:07:c9:29:f4:4d:cf:1a:eb:dd:7b:
61:c0:7d:10:ab:e1:1c:46:7a:c7:9a:55:51:b9:92:
82:7b:24:bd:66:68:9d:87:13:b2:79:75:ba:10:76:
1a:aa:ad:86:e1:09:66:3b:c9:43:5b:e2:8c:29:e6:
06:75:cf:bb:b5:d5:35:b5:dd:6c:34:36:54:48:9a:
7d:86:e2:30:e0:d5:54:da:3a:31:15:66:54:d4:49:
29:3c:f6:fb:24:5e:38:fc:00:33:ef:30:0d:5c:dc:
50:1f:4d:c9:42:22:9b:96:0e:e4:e4:87:c2:26:c4:
9f:db:b4:fe:fe:b0:83:db:4c:ff:dd:5a:1b:ec:1f:
9c:95:8e:ed:c4:83:6c:7e:d8:83:5f:55:99:60:23:
77:32:9a:eb:20:ca:a2:bd:e4:5a:9a:a0:3e:df:62:
51:ae:89:9a:8c:a3:2b:06:91:80:cf:97:0b:26:eb:
5d:3a:e8:8e:91:f7:98:40:c5:29:57:6f:af:2d:e0:
ef:95:6b:b0:9d:5b:e5:e0:ad:ab:54:9e:ee:88:71:
8e:47
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
02:E7:29:B8:2F:EA:C5:17:77:4D:6F:DA:82:40:5C:E6:47:83:2B:65
X509v3 Authority Key Identifier:
keyid:36:8B:FB:8A:5E:EE:49:08:2E:A6:28:DF:25:A4:A5:D5:0F:3A:A9:B3
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Nov7il7uSQgupijfJaSl1Q86qbM.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/35/aa58c3-e706-4a49-a7c5-0ae2e922a292/1/AucpuC_qxRd3TW_agkBc5keDK2U.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/35/aa58c3-e706-4a49-a7c5-0ae2e922a292/1/Nov7il7uSQgupijfJaSl1Q86qbM.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.108.207.0/24
Signature Algorithm: sha256WithRSAEncryption
9e:52:c4:8f:77:91:f9:ad:9c:07:3e:77:81:7a:35:e6:a5:0a:
42:d0:a2:ea:f8:6f:2e:34:e9:23:43:95:af:e9:c6:d4:11:91:
52:9a:d3:c5:ea:b9:55:23:9a:0e:6e:a2:b5:24:65:ad:2a:56:
0e:65:cd:6c:b0:a3:7e:4a:62:5f:7a:10:7d:3f:bd:f0:7e:5f:
1f:bc:30:9a:78:17:81:46:cc:58:8c:98:cd:e8:78:91:42:b9:
90:d3:eb:f8:e1:ac:f3:ac:75:58:88:ce:d5:0f:96:48:3c:23:
ca:e4:c7:ed:95:5d:25:78:7e:64:bb:a9:03:bc:48:3d:68:ea:
03:5d:c9:bc:a9:70:5b:51:af:74:bc:d7:bf:10:ac:40:ed:48:
b5:13:3d:ae:b1:df:4a:6f:8e:13:8d:28:d7:9b:60:f4:75:a3:
0a:72:a7:8d:e8:fd:bd:8c:0c:cc:c5:9c:25:51:9c:86:25:7e:
cf:58:f6:ce:ea:13:98:91:3e:25:b7:91:43:c8:e9:27:e7:1d:
6d:e7:6d:b6:a7:0b:74:8d:9e:be:fe:93:76:c7:db:44:b0:7f:
12:71:39:31:c6:74:99:e4:bd:cc:c0:28:03:f3:5c:31:22:db:
d6:07:b7:87:d8:53:33:c6:71:61:e8:51:ba:76:3f:9c:0c:8e:
5f:9f:37:44
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:25:13 2024 by rpki-client on console-fra.rpki-client.org