Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/35/aa58c3-e706-4a49-a7c5-0ae2e922a292/1/dQn-BX56XKXUp_6wnNo3oTHKEm0.roa
File: dQn-BX56XKXUp_6wnNo3oTHKEm0.roa (raw, json)
Hash identifier: YXZxX1MZZQ5JiiHitRRtaUzu8yaTcZNTw2aGuU5Sq4s=
Subject key identifier: 75:09:FE:05:7E:7A:5C:A5:D4:A7:FE:B0:9C:DA:37:A1:31:CA:12:6D
Certificate issuer: /CN=368bfb8a5eee49082ea628df25a4a5d50f3aa9b3
Certificate serial: 01820CE721773FD70857856FD7F10B735607
Authority key identifier: 36:8B:FB:8A:5E:EE:49:08:2E:A6:28:DF:25:A4:A5:D5:0F:3A:A9:B3
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Nov7il7uSQgupijfJaSl1Q86qbM.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/35/aa58c3-e706-4a49-a7c5-0ae2e922a292/1/dQn-BX56XKXUp_6wnNo3oTHKEm0.roa
Signing time: Sun 17 Jul 2022 16:04:10 +0000
ROA not before: Sun 17 Jul 2022 16:04:10 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 399641
IP address blocks: 185.214.111.0/24 maxlen: 24
Validation: Failed, RFC 3779 resource not subset of parent's resources
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:82:0c:e7:21:77:3f:d7:08:57:85:6f:d7:f1:0b:73:56:07
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=368bfb8a5eee49082ea628df25a4a5d50f3aa9b3
Validity
Not Before: Jul 17 16:04:10 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=7509fe057e7a5ca5d4a7feb09cda37a131ca126d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b1:53:06:45:ad:7d:4b:b3:fc:e1:57:91:4c:16:
88:fa:49:57:c6:b2:18:70:45:1d:14:6f:8f:dd:18:
f6:3d:b7:1d:8f:cb:52:a7:68:88:c0:8e:46:8c:4e:
57:70:99:16:53:2c:77:a7:ec:71:08:ae:75:97:e8:
3c:29:8c:5d:93:a9:03:cb:31:06:3d:25:8e:ed:8a:
07:53:97:47:95:4e:45:64:d3:a0:29:c5:ea:8a:21:
34:73:4f:15:5d:ce:ab:aa:95:ef:2f:33:b9:99:a7:
a7:4f:32:c4:c0:5e:0f:c3:bd:aa:3c:a9:7e:3b:fb:
01:69:1d:8d:ff:13:82:15:33:73:14:d5:dd:33:49:
e3:25:32:fc:45:a8:7b:6b:be:83:05:ce:dd:20:fb:
db:72:5c:e5:76:31:a0:78:16:a3:5e:36:54:11:12:
6a:81:98:f0:20:84:18:4a:f4:6d:1c:71:d0:29:05:
26:f3:81:23:ee:6f:7d:4a:99:a9:06:4d:b6:6f:84:
83:e6:fd:4e:0a:10:02:89:a7:98:80:1b:6f:bf:69:
14:bc:90:ea:35:72:15:29:67:89:2e:5f:21:0f:e7:
0e:a0:d0:c9:a4:3a:f5:1c:18:0a:07:b5:9d:cd:55:
b4:aa:9a:74:99:f1:86:c8:1c:ff:2b:10:d9:c7:05:
47:09
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
75:09:FE:05:7E:7A:5C:A5:D4:A7:FE:B0:9C:DA:37:A1:31:CA:12:6D
X509v3 Authority Key Identifier:
keyid:36:8B:FB:8A:5E:EE:49:08:2E:A6:28:DF:25:A4:A5:D5:0F:3A:A9:B3
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Nov7il7uSQgupijfJaSl1Q86qbM.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/35/aa58c3-e706-4a49-a7c5-0ae2e922a292/1/dQn-BX56XKXUp_6wnNo3oTHKEm0.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/35/aa58c3-e706-4a49-a7c5-0ae2e922a292/1/Nov7il7uSQgupijfJaSl1Q86qbM.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.214.111.0/24
Signature Algorithm: sha256WithRSAEncryption
82:14:84:f8:77:7f:e2:76:47:02:d7:97:54:a4:e4:ba:52:f6:
11:74:dd:e6:7c:ae:76:ed:2b:6f:98:35:8a:2e:b5:6d:f6:c9:
c3:15:82:fd:65:df:61:41:ff:04:89:49:62:05:81:0e:69:4e:
58:c7:69:9e:c9:00:05:24:37:22:8f:ea:87:53:77:41:78:64:
1e:f9:2e:eb:53:e6:4c:a0:0b:40:3e:ed:f7:e4:f4:c2:24:5c:
14:7d:30:b2:d1:a3:ea:e1:8c:21:77:88:0e:fe:77:6a:e9:ea:
96:4c:d2:ef:7e:08:56:e8:7c:64:4c:08:c5:a7:85:06:b4:c7:
99:b6:b0:11:c8:6e:51:a5:c4:56:5c:de:45:1b:1f:6b:43:44:
e9:62:c5:37:15:bb:4b:70:29:bd:11:3b:7d:70:19:b7:af:a8:
eb:37:a4:a3:7e:0c:42:00:b9:ce:12:99:f3:b3:28:c7:c0:e0:
bc:fd:5c:94:9a:31:84:ca:de:11:39:c1:b4:8b:c5:c9:32:b4:
f0:a5:4e:b9:9d:22:32:8d:5a:98:f9:11:00:7a:82:80:05:5f:
11:a8:0f:15:67:3c:1b:47:9b:f5:22:4e:1c:09:25:f5:0d:e7:
5e:ce:9e:06:12:68:c9:00:65:e9:f1:cc:43:a1:6d:ea:8a:e4:
ef:e3:07:2b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 19 23:50:12 2023 by rpki-client on console-ams.rpki-client.org