Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/35/aa58c3-e706-4a49-a7c5-0ae2e922a292/1/VmYyX6UVXkzVGcF0VR7wb-P8QhQ.roa
File: VmYyX6UVXkzVGcF0VR7wb-P8QhQ.roa (raw, json)
Hash identifier: +8De67zpnvJVcPmW6XallCAHpW5vr+ZYnEWBC0eQI7A=
Subject key identifier: 56:66:32:5F:A5:15:5E:4C:D5:19:C1:74:55:1E:F0:6F:E3:FC:42:14
Certificate issuer: /CN=368bfb8a5eee49082ea628df25a4a5d50f3aa9b3
Certificate serial: 03C00FFE
Authority key identifier: 36:8B:FB:8A:5E:EE:49:08:2E:A6:28:DF:25:A4:A5:D5:0F:3A:A9:B3
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Nov7il7uSQgupijfJaSl1Q86qbM.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/35/aa58c3-e706-4a49-a7c5-0ae2e922a292/1/VmYyX6UVXkzVGcF0VR7wb-P8QhQ.roa
Signing time: Tue 29 Mar 2022 08:46:05 +0000
ROA not before: Tue 29 Mar 2022 08:46:05 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 61317
IP address blocks: 185.225.21.0/24 maxlen: 24
185.218.21.0/24 maxlen: 24
185.199.149.0/24 maxlen: 24
185.214.110.0/24 maxlen: 24
185.214.109.0/24 maxlen: 24
185.194.179.0/24 maxlen: 24
Validation: Failed, RFC 3779 resource not subset of parent's resources
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 62918654 (0x3c00ffe)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=368bfb8a5eee49082ea628df25a4a5d50f3aa9b3
Validity
Not Before: Mar 29 08:46:05 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=5666325fa5155e4cd519c174551ef06fe3fc4214
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b6:25:9b:65:e2:bb:e4:7c:ff:1a:75:ae:08:67:
33:f7:5d:b4:1a:47:4f:30:bc:0b:bb:30:05:88:44:
b1:32:a4:c9:12:0b:9f:2d:4d:2f:fe:7f:b5:72:b9:
39:44:8a:a2:bb:fd:d3:b4:71:61:f9:46:d5:b2:1c:
c3:ca:fe:4e:bc:7c:68:9d:50:d8:13:d7:a5:10:8b:
cf:57:be:58:db:09:b3:dc:a8:66:33:05:1b:71:8e:
72:79:34:c4:d6:cf:03:80:81:5d:98:09:47:cf:7b:
92:59:18:fe:45:70:c9:aa:bf:e2:bb:0e:80:26:ca:
ef:d0:6d:95:34:77:ac:3d:1b:65:de:1f:7e:c7:63:
63:4f:ed:ea:e0:f6:99:d0:48:ed:9e:c7:0d:5c:51:
8c:06:68:f9:ff:11:72:33:94:dc:97:04:49:56:9d:
e4:99:b0:51:84:ec:7b:83:bd:f3:24:31:75:1a:6e:
67:6b:14:8d:b3:10:e1:df:24:b4:f1:cc:17:f5:0f:
29:49:99:b6:89:1a:e3:0f:48:d9:2a:cc:d9:d7:2a:
56:cb:4e:75:44:b2:60:a4:6a:e2:19:5e:f9:19:04:
04:33:40:85:5e:92:f6:48:19:e1:a7:c8:6f:f4:4b:
15:5a:d6:34:a2:1b:1b:ed:ca:03:85:19:67:2f:ab:
4f:bb
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
56:66:32:5F:A5:15:5E:4C:D5:19:C1:74:55:1E:F0:6F:E3:FC:42:14
X509v3 Authority Key Identifier:
keyid:36:8B:FB:8A:5E:EE:49:08:2E:A6:28:DF:25:A4:A5:D5:0F:3A:A9:B3
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Nov7il7uSQgupijfJaSl1Q86qbM.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/35/aa58c3-e706-4a49-a7c5-0ae2e922a292/1/VmYyX6UVXkzVGcF0VR7wb-P8QhQ.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/35/aa58c3-e706-4a49-a7c5-0ae2e922a292/1/Nov7il7uSQgupijfJaSl1Q86qbM.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.194.179.0/24
185.199.149.0/24
185.214.109.0-185.214.110.255
185.218.21.0/24
185.225.21.0/24
Signature Algorithm: sha256WithRSAEncryption
76:45:24:6a:0c:83:fe:17:f0:e0:03:3b:ec:41:d6:77:ec:24:
bf:8a:92:01:63:41:bb:6e:a7:66:31:a7:ea:9e:39:ab:34:c0:
9d:c9:a3:7d:f1:4d:8b:1e:df:42:67:30:19:e2:fd:69:0c:76:
df:84:32:d4:44:8b:4c:f0:f2:54:bf:ae:21:71:85:8c:56:bd:
64:43:58:3d:93:83:ff:86:d4:c1:4e:75:aa:71:f8:df:55:74:
db:58:de:2a:60:6e:5e:34:fb:c3:ef:8f:8d:d1:01:f8:34:ee:
98:b3:6f:6a:05:49:15:30:b7:2e:72:cd:42:ad:00:a7:58:51:
c2:56:40:2d:14:a8:02:ef:64:d2:d3:80:35:14:80:90:b1:a6:
a3:73:0d:9d:e9:ad:69:ed:3d:e2:5a:6b:9c:00:5b:08:d5:42:
7b:f8:43:43:cb:66:4f:64:1b:9c:ed:d6:4e:19:44:7b:38:e8:
fb:fd:88:ae:d2:c3:f2:0a:22:8f:9b:bb:95:35:4a:83:9f:9a:
d8:66:7e:75:32:33:1d:9d:52:f7:90:62:35:b3:11:48:de:c8:
7b:c2:43:72:79:48:12:01:a3:8e:e3:70:0c:0c:de:86:ce:84:
6c:81:83:80:20:01:4e:e6:07:8f:38:5c:16:97:6b:19:32:01:
4b:5c:53:05
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:25:13 2024 by rpki-client on console-fra.rpki-client.org