Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/35/aa58c3-e706-4a49-a7c5-0ae2e922a292/1/eJKabDm8QIcIpGfZ2Qqx4MvgPYk.roa
File: eJKabDm8QIcIpGfZ2Qqx4MvgPYk.roa (raw, json)
Hash identifier: LHSDed9eRnnCSc0qzRnnU5dmJqrzoH0Ez4kKK1nVW+c=
Subject key identifier: 78:92:9A:6C:39:BC:40:87:08:A4:67:D9:D9:0A:B1:E0:CB:E0:3D:89
Certificate issuer: /CN=368bfb8a5eee49082ea628df25a4a5d50f3aa9b3
Certificate serial: 0183E58A08863D40A6AD051542B2933CA3CF
Authority key identifier: 36:8B:FB:8A:5E:EE:49:08:2E:A6:28:DF:25:A4:A5:D5:0F:3A:A9:B3
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Nov7il7uSQgupijfJaSl1Q86qbM.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/35/aa58c3-e706-4a49-a7c5-0ae2e922a292/1/eJKabDm8QIcIpGfZ2Qqx4MvgPYk.roa
Signing time: Mon 17 Oct 2022 10:42:52 +0000
ROA not before: Mon 17 Oct 2022 10:42:52 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 207326
IP address blocks: 185.194.178.0/24 maxlen: 24
Validation: Failed, RFC 3779 resource not subset of parent's resources
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:83:e5:8a:08:86:3d:40:a6:ad:05:15:42:b2:93:3c:a3:cf
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=368bfb8a5eee49082ea628df25a4a5d50f3aa9b3
Validity
Not Before: Oct 17 10:42:52 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=78929a6c39bc408708a467d9d90ab1e0cbe03d89
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c5:14:b8:20:84:86:a6:4d:c8:86:f7:eb:3f:e5:
fd:3b:d8:9e:20:08:41:23:8f:f8:3c:ca:4f:92:23:
9d:c1:14:95:55:db:40:67:c4:73:29:06:91:a8:b0:
4c:19:05:7d:ee:d1:13:d1:ae:09:81:41:63:d2:83:
2e:ca:6f:09:85:9f:96:e6:1d:ef:81:d3:5e:15:9f:
49:57:5b:db:f5:3f:2f:ab:a8:ce:e2:5b:bc:14:a9:
e1:ba:79:65:7b:38:71:7d:e7:ce:cf:26:85:f5:78:
73:7e:45:d0:f0:d3:cb:17:31:37:e5:99:30:8a:b4:
c1:3e:d0:a7:92:b7:10:4a:9b:f5:4f:87:cf:49:aa:
20:37:e6:f5:b8:88:0e:cc:78:55:ee:76:4d:c0:29:
f2:0e:0a:49:cf:9d:c2:7d:d0:ae:9f:a0:1b:85:22:
33:5d:58:e7:97:b1:59:29:21:17:fc:3a:2c:41:c2:
fe:ac:de:8e:ce:0f:6f:29:ef:4e:0b:e7:d5:de:08:
c2:85:f2:f9:92:28:fd:80:98:94:88:05:4a:e4:de:
4e:ab:cf:35:bc:d4:e2:d1:f8:65:d9:5c:a6:db:0e:
97:c0:ec:a7:4d:42:56:b6:9a:55:f7:d6:e9:47:a8:
3b:3a:ee:cf:29:04:c3:8c:50:51:85:d7:ed:bb:fc:
ea:8b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
78:92:9A:6C:39:BC:40:87:08:A4:67:D9:D9:0A:B1:E0:CB:E0:3D:89
X509v3 Authority Key Identifier:
keyid:36:8B:FB:8A:5E:EE:49:08:2E:A6:28:DF:25:A4:A5:D5:0F:3A:A9:B3
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Nov7il7uSQgupijfJaSl1Q86qbM.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/35/aa58c3-e706-4a49-a7c5-0ae2e922a292/1/eJKabDm8QIcIpGfZ2Qqx4MvgPYk.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/35/aa58c3-e706-4a49-a7c5-0ae2e922a292/1/Nov7il7uSQgupijfJaSl1Q86qbM.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.194.178.0/24
Signature Algorithm: sha256WithRSAEncryption
4d:2c:f4:b3:13:a7:57:7f:1b:71:e5:33:ca:fa:5d:df:b6:a3:
31:f8:e8:8e:ca:cd:66:f7:b3:91:e9:96:06:ed:e8:9e:8b:3d:
75:94:22:ed:17:14:d0:36:d4:31:4d:39:51:cf:74:80:f1:d7:
d0:c4:65:73:31:6e:1a:fd:fd:0b:0f:bb:8e:88:cd:65:ea:73:
7f:e2:87:41:c7:6f:a2:44:df:32:44:6f:f5:e7:5e:b9:4a:0b:
42:66:d1:bf:ba:d9:85:b7:54:cc:b0:e7:30:91:f0:e8:e8:1b:
7f:7d:5c:60:df:a8:d2:a8:37:d7:ec:a9:44:70:1f:74:11:ce:
22:01:c0:5d:50:a2:02:22:70:2d:2b:63:02:97:77:69:1a:09:
23:85:b3:74:b4:9a:54:bb:ba:df:bc:a4:bc:cd:44:d9:4f:6d:
fd:10:de:7a:26:fb:b5:ec:37:b4:b1:a4:2f:06:3e:83:e7:a5:
60:56:6c:ec:85:7c:7a:62:62:26:26:a7:15:4c:55:26:d0:33:
e2:0b:78:02:fd:78:8a:51:4f:97:e9:4a:c9:28:7b:05:27:99:
d5:9b:60:35:b4:23:dc:3a:af:42:b3:80:36:5b:4d:8c:fb:98:
64:38:3e:12:f5:4e:bd:06:10:57:cd:cf:73:dc:e4:d2:e3:29:
0c:32:5a:c3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:25:13 2024 by rpki-client on console-fra.rpki-client.org