Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/35/aa58c3-e706-4a49-a7c5-0ae2e922a292/1/CBAKEgDkbmqrbPUR1-nHicylO4M.roa
File: CBAKEgDkbmqrbPUR1-nHicylO4M.roa (raw, json)
Hash identifier: Grx+SDkkXpqHp8TCRDgv7UyApDWZ02MKCqdNk6LyFII=
Subject key identifier: 08:10:0A:12:00:E4:6E:6A:AB:6C:F5:11:D7:E9:C7:89:CC:A5:3B:83
Certificate issuer: /CN=368bfb8a5eee49082ea628df25a4a5d50f3aa9b3
Certificate serial: 049AD5B4
Authority key identifier: 36:8B:FB:8A:5E:EE:49:08:2E:A6:28:DF:25:A4:A5:D5:0F:3A:A9:B3
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Nov7il7uSQgupijfJaSl1Q86qbM.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/35/aa58c3-e706-4a49-a7c5-0ae2e922a292/1/CBAKEgDkbmqrbPUR1-nHicylO4M.roa
Signing time: Thu 23 Jun 2022 23:08:16 +0000
ROA not before: Thu 23 Jun 2022 23:08:16 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 60721
IP address blocks: 185.225.23.0/24 maxlen: 24
185.199.156.0/24 maxlen: 24
185.199.157.0/24 maxlen: 24
185.228.75.0/24 maxlen: 24
185.228.72.0/24 maxlen: 24
185.214.111.0/24 maxlen: 24
Validation: Failed, RFC 3779 resource not subset of parent's resources
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 77256116 (0x49ad5b4)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=368bfb8a5eee49082ea628df25a4a5d50f3aa9b3
Validity
Not Before: Jun 23 23:08:16 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=08100a1200e46e6aab6cf511d7e9c789cca53b83
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d3:53:f2:a7:f2:76:89:38:3d:4e:fc:79:1f:6f:
8d:8a:54:9b:2a:d9:7f:37:5a:e6:7d:cc:23:01:a9:
1a:58:64:5d:73:35:fc:ec:b0:0a:49:ab:52:67:24:
0e:59:3b:84:bc:0f:a4:39:b6:10:6d:e2:df:a0:cd:
fa:0c:0f:e8:e4:4e:19:cf:9a:8d:be:95:0c:2b:b8:
c1:89:e7:46:f0:3c:8b:78:b0:6d:cc:5c:52:da:8a:
08:de:db:bd:30:cf:9d:a8:14:69:f9:65:15:51:0f:
ac:db:40:fa:50:d5:eb:25:3c:c9:66:74:c2:1e:57:
87:5c:e0:a1:0b:e9:31:19:c7:06:9a:cd:c2:e2:fd:
b1:57:b6:31:8f:04:7b:d0:56:fc:ea:c3:59:61:29:
ed:27:9b:b0:a3:b5:ef:36:56:b2:4f:a9:09:81:3d:
9a:eb:95:98:0a:f7:63:8e:ac:96:d2:09:3c:1a:7b:
48:10:4e:f4:a8:e4:fd:05:f2:f3:63:72:f0:39:87:
a7:15:9b:f0:b6:fd:37:0f:64:ef:28:28:5d:2a:1d:
1c:1a:3a:bc:7c:1d:cc:f1:17:ee:69:cf:12:6e:a6:
d6:d4:5d:09:cc:db:82:bb:15:8e:5e:9b:ed:db:ba:
9d:98:51:d4:19:4e:cd:48:86:36:86:ce:1a:14:d7:
0a:57
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
08:10:0A:12:00:E4:6E:6A:AB:6C:F5:11:D7:E9:C7:89:CC:A5:3B:83
X509v3 Authority Key Identifier:
keyid:36:8B:FB:8A:5E:EE:49:08:2E:A6:28:DF:25:A4:A5:D5:0F:3A:A9:B3
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Nov7il7uSQgupijfJaSl1Q86qbM.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/35/aa58c3-e706-4a49-a7c5-0ae2e922a292/1/CBAKEgDkbmqrbPUR1-nHicylO4M.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/35/aa58c3-e706-4a49-a7c5-0ae2e922a292/1/Nov7il7uSQgupijfJaSl1Q86qbM.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.199.156.0/23
185.214.111.0/24
185.225.23.0/24
185.228.72.0/24
185.228.75.0/24
Signature Algorithm: sha256WithRSAEncryption
9a:2f:a5:f8:43:4f:dd:3c:06:f5:70:ba:57:01:ac:74:bd:2d:
1e:d2:d2:af:7e:4a:58:ba:b2:ae:24:42:13:dd:cd:02:d8:11:
2e:de:6e:1b:32:6b:3d:04:a4:5d:c4:22:4a:78:93:f9:39:11:
cc:20:58:75:52:28:3d:9b:c5:0c:70:58:18:a9:44:f3:e7:e1:
98:58:28:5f:19:3d:cc:60:45:c6:c1:c1:21:17:02:a2:91:6e:
16:12:db:3b:ab:65:62:c1:3b:64:94:80:4b:eb:0b:87:05:b8:
f7:b7:fb:f7:9a:0a:7c:3c:c9:81:55:2b:fd:a3:1a:bf:49:c6:
5c:4f:26:ca:ad:93:ee:88:da:8b:13:ea:9e:c1:62:6b:b3:1e:
3e:ca:09:66:71:4c:45:12:34:7a:af:33:bd:23:fb:d1:9a:02:
f5:9a:5b:64:77:ba:94:3e:19:dd:70:bd:13:d6:03:9a:7e:0f:
fe:16:94:d5:21:9e:bc:21:2c:8e:dd:d0:3b:05:8d:5a:e0:d8:
20:a7:d4:d6:93:48:2f:87:4b:3d:f3:ee:01:32:ee:37:1b:2c:
bc:ee:e9:2c:73:9c:f5:ad:c4:aa:af:a1:52:9c:77:15:ed:86:
59:0f:67:29:28:9d:6f:20:86:79:57:f6:3f:30:37:63:10:55:
4b:b5:39:32
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 19:02:35 2024 by rpki-client on console-ams.rpki-client.org