Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/35/aa58c3-e706-4a49-a7c5-0ae2e922a292/1/fNx0jgVgkgPMRbQOJBC4KcGBTM0.roa
File: fNx0jgVgkgPMRbQOJBC4KcGBTM0.roa (raw, json)
Hash identifier: oYeNX9nAmqbwnHvaNC3I9xPJSmtw+us058EQUMtkrVE=
Subject key identifier: 7C:DC:74:8E:05:60:92:03:CC:45:B4:0E:24:10:B8:29:C1:81:4C:CD
Certificate issuer: /CN=368bfb8a5eee49082ea628df25a4a5d50f3aa9b3
Certificate serial: 04539597
Authority key identifier: 36:8B:FB:8A:5E:EE:49:08:2E:A6:28:DF:25:A4:A5:D5:0F:3A:A9:B3
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Nov7il7uSQgupijfJaSl1Q86qbM.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/35/aa58c3-e706-4a49-a7c5-0ae2e922a292/1/fNx0jgVgkgPMRbQOJBC4KcGBTM0.roa
Signing time: Wed 25 May 2022 07:43:13 +0000
ROA not before: Wed 25 May 2022 07:43:13 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 207326
IP address blocks: 185.36.206.0/24 maxlen: 24
185.194.178.0/24 maxlen: 24
Validation: Failed, RFC 3779 resource not subset of parent's resources
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 72586647 (0x4539597)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=368bfb8a5eee49082ea628df25a4a5d50f3aa9b3
Validity
Not Before: May 25 07:43:13 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=7cdc748e05609203cc45b40e2410b829c1814ccd
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b8:44:6b:38:b4:ac:5b:40:2e:a7:72:8f:c4:62:
fb:f3:75:78:7c:94:d5:fe:c2:93:9c:48:60:96:48:
4b:14:0d:95:d2:f8:db:55:47:7c:df:eb:46:2a:bf:
0f:50:5c:f9:b1:c2:af:ef:78:c5:92:95:2f:c8:25:
70:06:4c:b6:0d:53:ac:e8:72:13:81:2f:c3:9d:7d:
63:58:95:84:0b:49:91:cd:74:dc:be:76:4e:74:0a:
97:9f:32:ba:85:aa:52:a0:c4:2c:15:86:ba:79:ec:
ac:fa:ce:c5:c1:9c:cb:a5:3f:df:35:b2:73:de:7d:
b0:e9:20:80:f6:59:d6:f2:ea:b0:55:38:c3:6a:ae:
b4:1f:a0:92:cc:2a:91:e8:05:b7:97:bb:b1:7d:26:
3e:ae:74:6a:cb:da:e0:42:5f:d9:35:6f:f9:1c:3c:
c4:20:2e:6c:63:47:f0:cc:66:12:16:e4:d8:9d:b6:
b0:21:0f:fb:8e:0b:2b:a2:1d:f6:98:15:03:49:aa:
38:77:da:64:b2:b8:7b:67:d4:c5:63:b8:d7:db:22:
a0:60:9b:04:fe:20:6b:56:15:6a:b3:3b:f7:dc:13:
a6:b8:d9:37:90:eb:cb:0e:35:b3:be:d3:fa:5d:86:
52:19:aa:98:db:d6:5e:7a:e0:8c:c2:00:13:ea:60:
ab:a7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
7C:DC:74:8E:05:60:92:03:CC:45:B4:0E:24:10:B8:29:C1:81:4C:CD
X509v3 Authority Key Identifier:
keyid:36:8B:FB:8A:5E:EE:49:08:2E:A6:28:DF:25:A4:A5:D5:0F:3A:A9:B3
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Nov7il7uSQgupijfJaSl1Q86qbM.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/35/aa58c3-e706-4a49-a7c5-0ae2e922a292/1/fNx0jgVgkgPMRbQOJBC4KcGBTM0.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/35/aa58c3-e706-4a49-a7c5-0ae2e922a292/1/Nov7il7uSQgupijfJaSl1Q86qbM.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.36.206.0/24
185.194.178.0/24
Signature Algorithm: sha256WithRSAEncryption
50:fe:6b:1f:93:ae:f8:f8:cc:ae:88:29:c4:86:92:cf:3a:0a:
ec:ce:24:02:0d:7b:63:cb:a4:f2:1f:e2:02:8f:b2:48:6e:8c:
48:92:d1:e0:ef:7d:27:12:05:83:ba:23:2d:3c:48:dc:6e:0b:
60:c5:51:c3:f9:0f:5e:d7:17:af:93:f7:64:d1:51:ba:37:68:
ef:d0:fe:f2:8d:83:dc:be:e2:9b:89:77:40:16:09:67:2d:95:
30:bb:bd:b4:a8:3e:d6:ce:3f:2e:69:94:c3:62:51:c8:68:da:
fa:43:e1:32:fa:b5:5c:cf:3c:b3:9e:b9:15:ee:11:78:dd:25:
76:75:69:87:c7:af:14:c0:b3:1d:a2:f5:84:01:a4:02:5a:06:
51:2e:83:24:40:5d:ac:50:54:3c:67:ad:c8:c2:3b:b3:be:1c:
8d:a3:6f:56:82:50:18:d3:b6:d0:db:43:77:82:94:fe:f3:13:
62:23:52:91:bb:0d:c7:77:91:05:a7:e4:7f:16:8b:5a:08:c1:
9d:ac:59:7a:94:4a:30:3e:5a:63:8e:b8:5d:07:13:b7:18:1c:
29:54:21:3c:ac:28:34:02:e6:47:29:31:7e:4b:65:03:9e:9a:
62:1c:1c:6f:cc:a6:f7:de:95:81:95:9f:3a:6f:82:55:30:0c:
ff:f0:54:f9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 19 23:46:27 2023 by rpki-client on console-fra.rpki-client.org