Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/35/aa58c3-e706-4a49-a7c5-0ae2e922a292/1/QIjcx1A2zxIjpX8mno3Rkti-27o.roa
File: QIjcx1A2zxIjpX8mno3Rkti-27o.roa (raw, json)
Hash identifier: qzyl57jf91khseJQirvh0eYBRKl9gB6QeH9++oUdgXo=
Subject key identifier: 40:88:DC:C7:50:36:CF:12:23:A5:7F:26:9E:8D:D1:92:D8:BE:DB:BA
Certificate issuer: /CN=368bfb8a5eee49082ea628df25a4a5d50f3aa9b3
Certificate serial: 042ED518
Authority key identifier: 36:8B:FB:8A:5E:EE:49:08:2E:A6:28:DF:25:A4:A5:D5:0F:3A:A9:B3
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Nov7il7uSQgupijfJaSl1Q86qbM.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/35/aa58c3-e706-4a49-a7c5-0ae2e922a292/1/QIjcx1A2zxIjpX8mno3Rkti-27o.roa
Signing time: Tue 10 May 2022 07:45:43 +0000
ROA not before: Tue 10 May 2022 07:45:43 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 43260
IP address blocks: 185.225.22.0/24 maxlen: 24
185.194.179.0/24 maxlen: 24
Validation: Failed, RFC 3779 resource not subset of parent's resources
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 70178072 (0x42ed518)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=368bfb8a5eee49082ea628df25a4a5d50f3aa9b3
Validity
Not Before: May 10 07:45:43 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=4088dcc75036cf1223a57f269e8dd192d8bedbba
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c6:8d:8b:11:e9:7e:df:03:a3:5c:91:26:df:3f:
28:31:42:1f:62:b3:bc:2c:49:fe:60:13:e6:2e:9c:
79:e7:29:c6:9c:6c:6d:42:ae:96:6f:3d:4c:2a:bc:
2a:2e:f1:63:2a:46:0a:bf:32:dc:ac:52:54:ae:23:
9f:9e:f9:32:d8:26:a5:9b:02:aa:8d:63:3b:04:61:
03:e6:57:10:46:42:f2:f6:1d:60:c5:73:81:84:cb:
6c:d2:3f:31:c4:73:c8:b9:e7:9e:90:fd:c9:0a:77:
78:63:fe:25:b7:a9:0e:5c:e8:fe:4f:0b:82:fd:fc:
78:6a:50:0f:8f:4e:dd:f7:41:ff:17:15:3b:b9:7e:
d0:c2:18:09:ee:18:a0:50:ae:a7:16:3c:21:11:e8:
ad:9d:f1:d0:5a:09:0f:f4:e0:b5:bc:17:b6:dc:33:
12:2d:01:31:8f:b0:c6:88:d1:6f:10:8d:6a:55:2d:
30:b6:5f:c9:75:aa:24:62:fb:12:ff:47:28:ca:81:
b0:0f:9a:e4:49:b8:61:42:ed:8e:de:66:ee:c8:3a:
64:6c:91:63:24:9d:3a:ec:0d:ce:42:4a:0a:46:2b:
4e:89:55:9e:b2:c0:97:56:94:bc:c7:92:f2:fb:a5:
bc:2f:31:7d:6a:b9:80:ac:90:8a:d3:4b:b3:4e:76:
9c:1b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
40:88:DC:C7:50:36:CF:12:23:A5:7F:26:9E:8D:D1:92:D8:BE:DB:BA
X509v3 Authority Key Identifier:
keyid:36:8B:FB:8A:5E:EE:49:08:2E:A6:28:DF:25:A4:A5:D5:0F:3A:A9:B3
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Nov7il7uSQgupijfJaSl1Q86qbM.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/35/aa58c3-e706-4a49-a7c5-0ae2e922a292/1/QIjcx1A2zxIjpX8mno3Rkti-27o.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/35/aa58c3-e706-4a49-a7c5-0ae2e922a292/1/Nov7il7uSQgupijfJaSl1Q86qbM.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.194.179.0/24
185.225.22.0/24
Signature Algorithm: sha256WithRSAEncryption
8e:7f:08:98:d9:d8:a2:f8:dd:5e:9b:97:59:60:41:dd:5a:71:
cf:43:fd:57:17:23:9c:aa:86:3c:9b:05:d0:ae:bc:97:dd:f2:
f6:09:20:99:d8:b0:88:2a:59:20:01:c1:df:be:e3:46:6b:e1:
31:ba:08:70:8d:c1:63:fa:8d:65:95:5d:e1:1c:b8:98:06:4f:
8b:d7:fb:e9:ea:0d:b3:f9:06:17:48:96:11:18:0d:c8:f9:dd:
57:6f:57:4c:43:21:0f:24:77:cb:57:5d:19:f2:67:f3:5a:f3:
60:e4:fe:2d:0e:78:d1:56:cc:a2:ca:a5:5f:70:88:94:3e:fa:
1b:1a:ff:dd:79:99:21:af:f2:35:32:fb:51:ba:8b:ea:bb:41:
0a:ba:f1:d3:4d:19:11:7a:4a:17:11:e9:d8:2a:16:5d:e7:13:
bf:d1:88:5d:22:2b:42:d3:5e:0a:70:0a:69:50:f1:1e:6f:f5:
7f:46:13:ea:44:f1:35:f2:ac:85:c1:6f:fe:89:80:10:6d:5a:
0a:2a:45:80:3b:05:2d:58:24:3a:5c:ee:40:c6:31:e9:f0:e8:
42:dc:4c:52:78:64:23:69:4d:a3:a7:13:d0:96:72:5a:8a:52:
6e:f9:00:d3:cd:48:e4:69:7d:39:46:f4:ff:68:e5:ba:90:90:
ee:5d:1c:20
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 19:02:35 2024 by rpki-client on console-ams.rpki-client.org