Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/35/aa58c3-e706-4a49-a7c5-0ae2e922a292/1/qFAv6zaZZkISA0ycLp68pnJixI8.roa
File: qFAv6zaZZkISA0ycLp68pnJixI8.roa (raw, json)
Hash identifier: LrB3z0k+Othe0wxFpgymLIaMMGhST2d2DqcZTDqKHDM=
Subject key identifier: A8:50:2F:EB:36:99:66:42:12:03:4C:9C:2E:9E:BC:A6:72:62:C4:8F
Certificate issuer: /CN=368bfb8a5eee49082ea628df25a4a5d50f3aa9b3
Certificate serial: 03C2F4D2
Authority key identifier: 36:8B:FB:8A:5E:EE:49:08:2E:A6:28:DF:25:A4:A5:D5:0F:3A:A9:B3
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Nov7il7uSQgupijfJaSl1Q86qbM.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/35/aa58c3-e706-4a49-a7c5-0ae2e922a292/1/qFAv6zaZZkISA0ycLp68pnJixI8.roa
Signing time: Wed 30 Mar 2022 08:41:42 +0000
ROA not before: Wed 30 Mar 2022 08:41:42 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 49999
IP address blocks: 185.194.177.0/24 maxlen: 24
Validation: Failed, RFC 3779 resource not subset of parent's resources
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 63108306 (0x3c2f4d2)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=368bfb8a5eee49082ea628df25a4a5d50f3aa9b3
Validity
Not Before: Mar 30 08:41:42 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=a8502feb3699664212034c9c2e9ebca67262c48f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a7:59:67:1d:cb:09:b1:32:49:c4:86:21:cb:43:
ef:61:44:52:5e:8a:78:b0:10:81:36:fc:8f:4b:63:
3f:38:c8:9f:5d:5b:c3:e3:02:ab:84:48:56:92:db:
ac:94:38:28:ae:ae:4a:d6:de:51:e8:f0:5b:91:9a:
26:6d:fb:95:db:48:8b:7f:9b:05:ce:da:3f:28:07:
3c:0a:16:35:a3:87:dc:f0:95:0e:ef:0e:a8:b5:5b:
c6:73:84:fb:dc:0d:70:3b:09:27:07:d8:33:73:ff:
78:f9:89:44:0c:3b:e3:7d:d6:72:c6:b8:88:b6:d6:
9f:5a:c5:00:55:6d:f6:e4:2b:98:21:fa:34:22:04:
61:6e:d4:a5:13:32:44:7a:f2:62:a7:41:82:47:b0:
84:00:0d:84:8d:28:dc:07:8c:b5:d4:3a:ea:1b:9b:
d9:6b:16:94:f7:d2:f4:05:d7:f3:ce:3d:cd:53:09:
a3:59:44:6c:6e:c9:2e:e1:84:83:4e:cd:4b:e7:8a:
49:45:81:fa:1b:e3:c9:46:0f:13:10:6d:94:2a:d4:
a6:89:31:b8:b5:f4:fe:ee:08:27:91:34:d7:35:14:
75:05:53:0b:37:21:9a:8d:f5:a9:a1:5f:7f:d1:82:
33:85:10:24:fc:8a:97:ae:ef:c1:d4:43:7d:c3:05:
a8:af
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A8:50:2F:EB:36:99:66:42:12:03:4C:9C:2E:9E:BC:A6:72:62:C4:8F
X509v3 Authority Key Identifier:
keyid:36:8B:FB:8A:5E:EE:49:08:2E:A6:28:DF:25:A4:A5:D5:0F:3A:A9:B3
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Nov7il7uSQgupijfJaSl1Q86qbM.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/35/aa58c3-e706-4a49-a7c5-0ae2e922a292/1/qFAv6zaZZkISA0ycLp68pnJixI8.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/35/aa58c3-e706-4a49-a7c5-0ae2e922a292/1/Nov7il7uSQgupijfJaSl1Q86qbM.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.194.177.0/24
Signature Algorithm: sha256WithRSAEncryption
70:cc:97:f7:40:29:e1:f3:5b:ce:10:2a:b2:69:ae:f7:70:4a:
92:2b:d5:36:9d:7c:19:4a:24:df:f1:94:c8:87:ae:e4:d3:02:
c9:91:86:03:f0:01:33:d0:66:00:23:6b:46:6e:e3:ec:ba:5d:
db:b8:5a:18:3a:05:28:69:c1:8a:32:b8:8e:0f:98:2a:b7:16:
d0:a5:88:50:9f:86:df:ea:54:e9:86:d2:47:9f:5f:c9:ce:44:
49:2f:b7:0f:de:6b:67:c2:13:4f:e3:f8:14:59:58:8d:ce:e0:
d3:59:14:e8:04:92:ca:3e:68:e7:ed:21:86:8d:06:1a:4f:83:
c8:0d:9f:5e:27:dd:6d:e2:33:9c:60:58:77:3c:f6:1f:b3:a9:
ee:4c:6d:ec:ba:4e:18:97:ed:45:91:03:11:57:41:23:ee:8b:
b2:1f:b6:a3:c3:71:37:eb:f7:af:41:62:22:73:eb:1c:98:2f:
8f:c7:8a:21:e1:e9:d3:91:f0:09:8b:af:cf:f7:75:5b:d5:16:
53:d1:4e:71:be:54:9d:c0:2c:43:25:c5:03:21:78:82:1f:c9:
c8:6e:a7:16:84:51:29:08:5d:15:fe:af:65:2e:63:4c:91:42:
a2:d0:f9:b7:71:9e:db:ba:9e:4a:f8:81:40:86:67:ab:b6:7e:
15:7a:33:7e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:25:14 2024 by rpki-client on console-fra.rpki-client.org