Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/35/aa58c3-e706-4a49-a7c5-0ae2e922a292/1/ZJs5C6YCD9OITAE0fvTtUaGMd5I.roa
File: ZJs5C6YCD9OITAE0fvTtUaGMd5I.roa (raw, json)
Hash identifier: egOlTqS284TpJwLUADDuiE3eilXzw4QHQUOOWylxdQE=
Subject key identifier: 64:9B:39:0B:A6:02:0F:D3:88:4C:01:34:7E:F4:ED:51:A1:8C:77:92
Certificate issuer: /CN=368bfb8a5eee49082ea628df25a4a5d50f3aa9b3
Certificate serial: 0183CDD4C5AF38DDFC34D2F3CD219F010291
Authority key identifier: 36:8B:FB:8A:5E:EE:49:08:2E:A6:28:DF:25:A4:A5:D5:0F:3A:A9:B3
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Nov7il7uSQgupijfJaSl1Q86qbM.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/35/aa58c3-e706-4a49-a7c5-0ae2e922a292/1/ZJs5C6YCD9OITAE0fvTtUaGMd5I.roa
Signing time: Wed 12 Oct 2022 20:13:37 +0000
ROA not before: Wed 12 Oct 2022 20:13:37 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 211585
IP address blocks: 185.108.206.0/24 maxlen: 24
185.36.207.0/24 maxlen: 24
Validation: Failed, RFC 3779 resource not subset of parent's resources
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:83:cd:d4:c5:af:38:dd:fc:34:d2:f3:cd:21:9f:01:02:91
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=368bfb8a5eee49082ea628df25a4a5d50f3aa9b3
Validity
Not Before: Oct 12 20:13:37 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=649b390ba6020fd3884c01347ef4ed51a18c7792
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:87:e5:bb:9f:b9:2c:25:e3:62:ba:6f:a8:9b:dc:
98:01:5e:a1:75:78:01:97:67:6b:91:1d:1c:bb:27:
e0:bb:54:d8:67:07:cf:5d:3e:20:e8:bf:87:14:88:
7c:22:0f:e3:b3:e0:0a:37:e1:10:d4:ad:3d:41:83:
dc:7a:c0:96:c3:4e:0d:c4:df:f2:7c:ae:88:9e:64:
3b:b2:76:df:6d:0a:9e:a1:71:fa:cc:ed:46:57:06:
84:95:0f:d0:71:01:72:68:0f:67:8f:4e:ca:98:c4:
9c:bd:41:aa:5d:a5:2f:d0:85:dd:3e:f7:4a:ee:b7:
60:21:69:37:b7:7b:8f:86:8a:ea:75:09:20:6f:cb:
f3:48:72:c9:b8:23:0a:d1:44:cd:a0:69:3d:0e:d3:
cd:85:86:f9:76:fb:af:e5:59:4f:f5:98:72:fe:15:
25:01:23:b8:cb:28:e6:d0:73:a8:77:16:6a:05:8f:
3a:fc:3c:ba:cc:7b:bd:7e:19:80:aa:5d:f8:42:6b:
99:ff:cc:91:54:ed:4d:7e:f7:60:4b:9b:02:f2:7f:
ba:be:f4:9e:db:0f:72:db:cf:6d:36:1a:56:3a:c4:
eb:df:46:04:0a:7c:84:e7:a8:61:84:cb:7c:eb:6c:
5a:19:b1:c7:c5:4e:41:90:0d:63:81:e8:7d:e5:7f:
a3:c7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
64:9B:39:0B:A6:02:0F:D3:88:4C:01:34:7E:F4:ED:51:A1:8C:77:92
X509v3 Authority Key Identifier:
keyid:36:8B:FB:8A:5E:EE:49:08:2E:A6:28:DF:25:A4:A5:D5:0F:3A:A9:B3
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Nov7il7uSQgupijfJaSl1Q86qbM.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/35/aa58c3-e706-4a49-a7c5-0ae2e922a292/1/ZJs5C6YCD9OITAE0fvTtUaGMd5I.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/35/aa58c3-e706-4a49-a7c5-0ae2e922a292/1/Nov7il7uSQgupijfJaSl1Q86qbM.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.36.207.0/24
185.108.206.0/24
Signature Algorithm: sha256WithRSAEncryption
c4:10:26:2a:99:91:85:67:b6:98:0c:e6:9f:39:da:71:c1:86:
03:77:9d:2a:e3:df:16:4b:6e:83:49:70:99:89:2f:30:2a:5e:
cb:3f:6a:97:11:44:25:b6:c2:0e:f7:e7:85:54:a9:f9:d0:b5:
a3:d4:f1:7c:3c:20:97:c5:2a:5e:b8:04:db:89:d9:e2:1e:59:
78:99:70:00:eb:d6:14:20:f5:97:b8:6c:02:04:c1:12:e7:70:
c9:ad:75:8c:3d:78:bd:65:71:38:43:77:3f:ce:79:7a:45:da:
c0:a2:42:be:0c:e3:45:2f:b5:95:94:90:6e:5e:10:b0:b7:f4:
32:4b:1e:23:7d:b3:69:88:36:68:eb:51:6b:87:78:ee:b3:13:
35:c6:c9:77:ac:70:a2:39:e3:03:73:b6:53:1f:f9:d0:df:03:
00:c5:d1:9f:b6:29:10:39:82:88:29:5c:f1:45:c4:06:fe:40:
3e:d9:9e:d6:1f:20:bc:be:8b:03:d2:d2:d5:d8:49:45:b5:7c:
50:d8:d4:e5:7d:fd:4a:50:ae:2b:e9:49:78:5f:38:64:6a:46:
8c:44:28:37:83:4b:05:07:11:35:af:ff:b4:36:f9:c3:ce:d5:
d8:d6:c9:9b:1e:25:8c:7b:99:fe:30:9e:dd:32:f3:0b:e0:d8:
69:c5:65:28
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:25:13 2024 by rpki-client on console-fra.rpki-client.org