Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/35/aa58c3-e706-4a49-a7c5-0ae2e922a292/1/N9fEAj-RdyYfvhxlJ_ywu8vPrTE.roa
File: N9fEAj-RdyYfvhxlJ_ywu8vPrTE.roa (raw, json)
Hash identifier: RswdIwk6XetLZuOU0W9ZvOmmRj1D+o+gDKg+bu7no9c=
Subject key identifier: 37:D7:C4:02:3F:91:77:26:1F:BE:1C:65:27:FC:B0:BB:CB:CF:AD:31
Certificate issuer: /CN=368bfb8a5eee49082ea628df25a4a5d50f3aa9b3
Certificate serial: 03BC39BC
Authority key identifier: 36:8B:FB:8A:5E:EE:49:08:2E:A6:28:DF:25:A4:A5:D5:0F:3A:A9:B3
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Nov7il7uSQgupijfJaSl1Q86qbM.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/35/aa58c3-e706-4a49-a7c5-0ae2e922a292/1/N9fEAj-RdyYfvhxlJ_ywu8vPrTE.roa
Signing time: Mon 28 Mar 2022 09:48:04 +0000
ROA not before: Mon 28 Mar 2022 09:48:04 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 1239
IP address blocks: 185.36.205.0/24 maxlen: 24
Validation: Failed, RFC 3779 resource not subset of parent's resources
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 62667196 (0x3bc39bc)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=368bfb8a5eee49082ea628df25a4a5d50f3aa9b3
Validity
Not Before: Mar 28 09:48:04 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=37d7c4023f9177261fbe1c6527fcb0bbcbcfad31
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d5:a9:13:5c:ed:21:2f:c5:e3:43:69:a5:2c:24:
15:99:56:13:46:a8:8b:b5:2a:a0:b1:f4:76:a8:aa:
4c:bb:d8:02:e7:fe:4c:49:21:73:be:b7:92:a0:2e:
23:b9:99:cd:16:08:ea:c6:c6:08:56:ab:24:9e:20:
1e:7a:1a:dd:1e:bb:19:c0:37:bd:47:03:0f:45:46:
95:0f:b6:ef:4c:da:1e:52:fb:c8:da:b0:4d:a3:3c:
6e:e0:c9:09:a6:29:ff:56:12:a5:5b:0d:5e:8c:ed:
ee:d9:aa:e3:b6:7f:56:57:49:f9:54:a7:ed:28:56:
b0:50:27:de:0d:09:8d:81:a2:2c:2f:9b:3b:75:14:
31:ed:9e:d4:d6:1c:ec:f9:a1:3e:b3:16:99:1d:57:
00:7f:fe:2f:1c:53:eb:4e:9e:4b:7b:84:f0:4d:03:
d6:93:ed:35:d0:ed:24:e1:5d:0b:5a:ec:dd:3c:f3:
d1:b1:92:4a:19:8d:87:5a:cf:c1:43:81:0f:46:79:
0f:d8:34:49:12:64:e9:4e:c7:fd:bc:b6:65:4e:ec:
ab:5b:be:fe:b0:66:6f:7f:34:35:fe:f6:49:7a:f2:
2b:36:75:cf:62:36:6d:8b:37:64:cb:ea:35:ab:5a:
f6:5d:2d:c5:5b:40:45:92:66:f1:09:ef:82:2f:c4:
66:bb
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
37:D7:C4:02:3F:91:77:26:1F:BE:1C:65:27:FC:B0:BB:CB:CF:AD:31
X509v3 Authority Key Identifier:
keyid:36:8B:FB:8A:5E:EE:49:08:2E:A6:28:DF:25:A4:A5:D5:0F:3A:A9:B3
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Nov7il7uSQgupijfJaSl1Q86qbM.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/35/aa58c3-e706-4a49-a7c5-0ae2e922a292/1/N9fEAj-RdyYfvhxlJ_ywu8vPrTE.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/35/aa58c3-e706-4a49-a7c5-0ae2e922a292/1/Nov7il7uSQgupijfJaSl1Q86qbM.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.36.205.0/24
Signature Algorithm: sha256WithRSAEncryption
41:24:4a:cb:63:f7:e9:a3:c6:2f:21:04:07:de:14:ef:db:f6:
3e:87:8c:85:7d:a2:94:f2:0a:d3:0c:02:9d:7c:44:b3:f1:9d:
54:1f:3b:f2:8d:20:a2:c9:15:54:b0:e0:93:7b:3c:5c:ea:83:
08:14:42:5d:9e:f1:c3:67:23:f8:04:d9:3f:55:89:bd:75:48:
94:f1:55:94:fa:cf:9f:38:f3:c8:fc:9d:d0:ef:4f:98:93:d9:
36:1d:ff:b2:0c:16:fe:61:5e:f5:68:f4:99:2e:87:ca:f1:df:
45:87:63:60:be:51:c3:01:c4:4b:8e:84:01:52:ee:b4:32:bb:
e0:2a:a9:33:87:8d:51:c7:9f:8e:d4:56:c7:05:1c:49:5c:f4:
15:e6:58:0d:4a:96:89:b9:7a:df:97:23:2e:eb:f5:28:80:33:
a8:b6:2b:1e:8d:9b:21:b0:59:fd:15:ed:28:88:60:13:ab:94:
2f:28:29:bb:c4:38:39:a5:4a:0c:0e:83:1e:55:bd:e3:3a:0b:
b4:36:d5:d3:ca:5c:d5:8f:17:3f:ff:84:0c:9e:31:1e:59:dc:
96:28:cc:21:a1:c3:89:84:ce:17:74:57:af:44:55:f8:ad:1f:
5a:86:a5:f3:fc:8a:7e:7d:95:ad:a9:90:57:9c:68:32:e3:95:
cc:52:42:b7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 19:02:35 2024 by rpki-client on console-ams.rpki-client.org