Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/35/aa58c3-e706-4a49-a7c5-0ae2e922a292/1/MBw7wJP6ZPPCkPvkyPBnclEpjNg.roa
File: MBw7wJP6ZPPCkPvkyPBnclEpjNg.roa (raw, json)
Hash identifier: /QCeNq11b8UPvTARcupl2+281mCiXQ7Fx0mYQR3/lHk=
Subject key identifier: 30:1C:3B:C0:93:FA:64:F3:C2:90:FB:E4:C8:F0:67:72:51:29:8C:D8
Certificate issuer: /CN=368bfb8a5eee49082ea628df25a4a5d50f3aa9b3
Certificate serial: 0181FEBDA3E6B755157875919F5FF7F396AD
Authority key identifier: 36:8B:FB:8A:5E:EE:49:08:2E:A6:28:DF:25:A4:A5:D5:0F:3A:A9:B3
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Nov7il7uSQgupijfJaSl1Q86qbM.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/35/aa58c3-e706-4a49-a7c5-0ae2e922a292/1/MBw7wJP6ZPPCkPvkyPBnclEpjNg.roa
Signing time: Thu 14 Jul 2022 22:04:09 +0000
ROA not before: Thu 14 Jul 2022 22:04:09 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 400377
IP address blocks: 185.36.207.0/24 maxlen: 24
Validation: Failed, RFC 3779 resource not subset of parent's resources
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:81:fe:bd:a3:e6:b7:55:15:78:75:91:9f:5f:f7:f3:96:ad
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=368bfb8a5eee49082ea628df25a4a5d50f3aa9b3
Validity
Not Before: Jul 14 22:04:09 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=301c3bc093fa64f3c290fbe4c8f0677251298cd8
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:93:d3:24:25:6c:cb:12:fc:c3:4d:5c:5d:86:bf:
fd:30:2f:37:64:b3:06:a0:de:39:99:9a:0b:5c:45:
6f:40:c7:30:1d:33:79:25:0a:b3:70:9c:b8:50:45:
11:ce:9b:bd:01:53:3d:db:f7:a7:c5:c5:4e:05:1a:
88:35:71:31:52:88:9c:c9:3c:1d:57:ea:08:ef:b4:
17:4f:a6:57:30:b1:0a:70:1e:e1:3d:99:8c:6f:26:
1d:e2:09:39:cd:1c:c7:fb:ff:69:c2:9d:8e:e7:f8:
6a:21:20:fb:68:c8:08:33:a7:12:b8:cf:55:a2:7b:
2c:a4:b7:cb:60:b0:da:45:17:c9:21:fa:c8:cf:18:
e5:f3:84:77:3d:00:ef:61:67:45:dc:5e:02:28:28:
05:93:20:e9:a7:e5:76:94:ee:90:70:2e:ca:09:46:
68:be:58:2a:62:e8:cf:75:ab:d4:96:02:8f:61:f2:
c6:c9:1a:c1:39:09:62:15:78:84:20:c5:c7:6a:35:
f6:85:a0:bf:40:73:5e:6c:ec:9e:81:e6:4d:47:7f:
99:92:9d:3d:9b:d2:a8:0a:1f:ed:d0:c9:58:34:14:
6b:5b:84:0c:21:78:82:4b:7a:e4:59:5a:7d:5e:dd:
86:96:01:6c:8c:f4:62:59:ef:21:87:d2:27:d8:f3:
0d:bb
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
30:1C:3B:C0:93:FA:64:F3:C2:90:FB:E4:C8:F0:67:72:51:29:8C:D8
X509v3 Authority Key Identifier:
keyid:36:8B:FB:8A:5E:EE:49:08:2E:A6:28:DF:25:A4:A5:D5:0F:3A:A9:B3
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Nov7il7uSQgupijfJaSl1Q86qbM.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/35/aa58c3-e706-4a49-a7c5-0ae2e922a292/1/MBw7wJP6ZPPCkPvkyPBnclEpjNg.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/35/aa58c3-e706-4a49-a7c5-0ae2e922a292/1/Nov7il7uSQgupijfJaSl1Q86qbM.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.36.207.0/24
Signature Algorithm: sha256WithRSAEncryption
67:b8:12:4e:4b:f2:82:12:b9:44:e5:a2:02:fa:f7:3f:10:6a:
94:e1:61:97:77:db:5b:dc:4e:a7:a7:a1:14:9f:f6:e7:9a:a7:
eb:15:fb:48:fc:c2:e6:28:d2:09:14:38:a2:08:6d:c6:29:b4:
cc:40:ff:c8:6b:7d:9a:a1:09:08:c2:70:44:c3:8d:dd:c3:1e:
28:ac:81:50:ab:da:72:54:2f:8a:54:8f:97:93:f0:2e:b3:51:
53:ad:14:db:d2:e6:39:a0:3d:49:cf:17:2f:78:97:9d:2f:ea:
a2:30:4c:22:4e:b6:9d:8e:5d:66:8d:ef:4e:7b:d0:e8:89:09:
88:f3:1b:71:73:a5:9c:96:bd:72:cb:d3:f3:18:ba:ef:4d:cb:
a7:85:c1:28:10:ec:55:2f:37:8a:97:97:ad:ce:af:d6:d4:10:
eb:37:b2:38:30:fb:77:cf:6f:4e:1e:b9:ca:c2:51:f1:44:42:
e6:92:88:e6:39:f7:64:5b:3e:ec:1d:15:c6:aa:d8:c1:28:45:
8f:ba:6d:ef:47:e8:d9:9f:05:e8:21:f3:0c:d3:99:e7:40:1e:
49:55:6a:e4:fe:83:5d:62:7e:02:43:bd:c0:9e:84:01:62:6f:
a3:09:f4:8c:f0:e6:b4:83:1f:c4:1e:84:66:f6:43:99:a7:0e:
3a:51:65:f7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 19 23:50:11 2023 by rpki-client on console-ams.rpki-client.org