Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/35/aa58c3-e706-4a49-a7c5-0ae2e922a292/1/Ma1D-Stm5DXfPBM6zpvX7F0XXRk.roa
File: Ma1D-Stm5DXfPBM6zpvX7F0XXRk.roa (raw, json)
Hash identifier: CrPCuS/unR9h927yJQt9+JHcEoqtqK2rPUeh7BUREms=
Subject key identifier: 31:AD:43:F9:2B:66:E4:35:DF:3C:13:3A:CE:9B:D7:EC:5D:17:5D:19
Certificate issuer: /CN=368bfb8a5eee49082ea628df25a4a5d50f3aa9b3
Certificate serial: 018282665964748E99949FFC41B33EDFEF20
Authority key identifier: 36:8B:FB:8A:5E:EE:49:08:2E:A6:28:DF:25:A4:A5:D5:0F:3A:A9:B3
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Nov7il7uSQgupijfJaSl1Q86qbM.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/35/aa58c3-e706-4a49-a7c5-0ae2e922a292/1/Ma1D-Stm5DXfPBM6zpvX7F0XXRk.roa
Signing time: Tue 09 Aug 2022 11:38:41 +0000
ROA not before: Tue 09 Aug 2022 11:38:41 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 142430
IP address blocks: 185.126.80.0/24 maxlen: 24
185.108.206.0/24 maxlen: 24
Validation: Failed, RFC 3779 resource not subset of parent's resources
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:82:82:66:59:64:74:8e:99:94:9f:fc:41:b3:3e:df:ef:20
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=368bfb8a5eee49082ea628df25a4a5d50f3aa9b3
Validity
Not Before: Aug 9 11:38:41 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=31ad43f92b66e435df3c133ace9bd7ec5d175d19
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8e:1f:cc:f2:2d:e2:27:60:a6:a8:7a:e3:c2:56:
cf:d7:6f:fe:5e:ac:d3:13:1c:9a:32:2b:f8:cb:34:
29:28:cb:8c:d9:3d:dd:1d:c1:dc:61:9d:4d:f6:83:
98:e7:68:ed:a0:aa:c6:83:81:c8:34:22:eb:03:3d:
b8:ca:e0:74:37:41:af:c2:a9:54:d6:71:ec:46:5f:
c0:a8:9c:59:e8:41:76:4e:a0:93:02:d3:d6:dd:df:
5c:a9:a1:70:a7:dc:50:4a:95:ad:57:2a:12:fd:eb:
57:73:a0:a2:16:2d:71:0a:74:8b:55:0b:dd:33:d0:
ca:c6:68:a2:d5:43:f3:2c:1c:09:3c:ed:a9:11:16:
d9:7b:0c:11:05:cd:f0:3e:9d:c9:29:b1:cb:53:c2:
b4:3d:71:be:fa:d5:5c:c4:ce:01:09:45:b7:05:2b:
40:ad:ed:23:c8:03:90:26:a1:71:78:5f:b4:10:be:
fd:2b:ba:4a:5f:da:87:98:0c:e1:ed:e1:b8:93:61:
da:7a:51:ce:23:d5:81:aa:2d:43:5d:73:95:33:19:
3d:45:5b:a3:50:71:89:e5:5b:89:03:a1:2c:13:a9:
8b:c5:ee:58:e3:6a:86:2a:56:87:f8:b1:6a:50:8f:
6d:b9:f7:ca:35:73:28:6c:6a:bb:63:c4:84:a6:2c:
45:41
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
31:AD:43:F9:2B:66:E4:35:DF:3C:13:3A:CE:9B:D7:EC:5D:17:5D:19
X509v3 Authority Key Identifier:
keyid:36:8B:FB:8A:5E:EE:49:08:2E:A6:28:DF:25:A4:A5:D5:0F:3A:A9:B3
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Nov7il7uSQgupijfJaSl1Q86qbM.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/35/aa58c3-e706-4a49-a7c5-0ae2e922a292/1/Ma1D-Stm5DXfPBM6zpvX7F0XXRk.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/35/aa58c3-e706-4a49-a7c5-0ae2e922a292/1/Nov7il7uSQgupijfJaSl1Q86qbM.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.108.206.0/24
185.126.80.0/24
Signature Algorithm: sha256WithRSAEncryption
58:1c:68:5b:5c:9d:f4:08:b4:ac:2c:99:bc:80:ca:f5:95:d8:
0c:cb:27:9f:c9:2b:45:dc:50:d8:0d:4d:00:d8:ec:fd:5d:e6:
0d:64:4c:b0:a5:e8:a9:73:d8:db:dd:1a:d3:b1:8a:03:16:f6:
52:71:a6:70:88:85:e1:bd:ea:47:74:5c:bf:04:22:4e:8a:df:
9f:bf:73:54:81:c9:6b:75:03:04:d1:89:07:3f:3e:25:c7:dc:
39:14:b0:13:07:cd:36:42:9d:46:c9:d4:30:c5:e3:4a:92:34:
41:3b:86:df:35:b1:2e:7b:bc:b7:b5:2f:24:55:90:43:aa:de:
e5:2a:da:6b:3e:10:f3:e6:37:a2:b1:0e:f4:a4:1a:da:94:05:
79:37:94:1b:c3:a8:99:39:7c:92:98:2f:9b:4e:0f:e2:c8:18:
70:88:7c:2b:52:54:1a:1f:cf:2b:95:8f:f2:ed:14:b2:e8:3b:
f4:32:a2:59:92:d8:da:fa:6b:fa:c3:6c:41:14:86:99:8c:c5:
de:49:85:a5:c3:b6:35:76:85:7c:63:33:0b:20:1b:61:96:35:
94:5a:0c:01:07:c9:19:84:4e:5f:f7:23:1f:f7:37:f1:8a:d3:
cf:d5:e8:cb:b4:5e:91:db:8a:23:07:52:a3:67:2e:24:85:e2:
84:58:0c:80
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 19:02:35 2024 by rpki-client on console-ams.rpki-client.org