Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/35/aa58c3-e706-4a49-a7c5-0ae2e922a292/1/xASHRUwAZ3qXqDtJM4pxxwoPSJM.roa
File: xASHRUwAZ3qXqDtJM4pxxwoPSJM.roa (raw, json)
Hash identifier: rzJbem5DjPGyimTB4O0Elc1vsXnC6JUg4L3EByaoK/0=
Subject key identifier: C4:04:87:45:4C:00:67:7A:97:A8:3B:49:33:8A:71:C7:0A:0F:48:93
Certificate issuer: /CN=368bfb8a5eee49082ea628df25a4a5d50f3aa9b3
Certificate serial: 03C38A6C
Authority key identifier: 36:8B:FB:8A:5E:EE:49:08:2E:A6:28:DF:25:A4:A5:D5:0F:3A:A9:B3
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Nov7il7uSQgupijfJaSl1Q86qbM.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/35/aa58c3-e706-4a49-a7c5-0ae2e922a292/1/xASHRUwAZ3qXqDtJM4pxxwoPSJM.roa
Signing time: Wed 30 Mar 2022 08:42:38 +0000
ROA not before: Wed 30 Mar 2022 08:42:38 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 43260
IP address blocks: 185.225.22.0/24 maxlen: 24
Validation: Failed, RFC 3779 resource not subset of parent's resources
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 63146604 (0x3c38a6c)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=368bfb8a5eee49082ea628df25a4a5d50f3aa9b3
Validity
Not Before: Mar 30 08:42:38 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=c40487454c00677a97a83b49338a71c70a0f4893
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:98:0d:36:db:ac:6b:9c:9b:75:c7:48:61:ee:81:
28:34:86:74:0e:dc:4a:0c:4f:7a:8a:27:d2:10:dd:
e1:e4:59:18:74:27:62:ba:5b:73:a0:cf:ee:a9:20:
ad:ac:cd:6a:e8:8f:72:bb:5b:89:6f:ea:8e:91:5b:
ee:98:5a:1a:1a:9f:26:b6:d4:a8:a7:48:4c:00:7e:
67:65:84:5f:ca:5d:3e:ab:0e:a7:74:b6:14:5c:65:
cc:af:2e:37:01:6e:82:28:c2:6f:fe:b6:c6:91:42:
d7:84:13:7a:be:44:09:fa:c8:0e:52:d0:c6:42:ca:
3a:25:9b:83:4d:35:50:78:51:80:16:8b:97:91:45:
42:b6:35:fb:c1:2f:2b:d1:dd:15:ff:80:1e:69:ee:
57:c2:ff:c3:85:88:7a:ac:cc:6d:f1:03:d4:ba:3d:
df:9a:e8:10:e5:07:f6:6e:cf:f2:ab:17:c9:1c:35:
3f:3f:52:08:b0:1b:d9:83:b0:e4:9a:b3:4e:43:09:
c1:b5:e6:48:f4:f3:c6:b5:29:fc:8c:04:6d:f4:17:
02:37:e6:bd:2c:a3:1a:c2:1f:b1:59:fa:a2:00:01:
a1:ec:6e:03:13:bd:eb:44:29:2a:3f:6c:5c:5f:2f:
89:8f:6b:ac:39:79:87:29:c7:22:17:f2:99:87:94:
48:c7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C4:04:87:45:4C:00:67:7A:97:A8:3B:49:33:8A:71:C7:0A:0F:48:93
X509v3 Authority Key Identifier:
keyid:36:8B:FB:8A:5E:EE:49:08:2E:A6:28:DF:25:A4:A5:D5:0F:3A:A9:B3
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Nov7il7uSQgupijfJaSl1Q86qbM.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/35/aa58c3-e706-4a49-a7c5-0ae2e922a292/1/xASHRUwAZ3qXqDtJM4pxxwoPSJM.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/35/aa58c3-e706-4a49-a7c5-0ae2e922a292/1/Nov7il7uSQgupijfJaSl1Q86qbM.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.225.22.0/24
Signature Algorithm: sha256WithRSAEncryption
88:22:50:d6:7f:2c:1e:b5:29:c7:f9:44:54:70:cc:4d:f9:22:
a1:07:cf:48:6f:23:dc:d0:67:d2:40:3e:ac:5c:6e:3e:70:c0:
d4:de:1d:c2:8f:27:d8:8a:12:78:b4:08:35:17:eb:ce:5a:62:
87:8c:d5:12:aa:6c:2b:04:7e:44:94:f5:3e:0e:65:09:3d:d9:
03:01:62:33:e3:76:06:5d:0f:97:00:64:b6:b4:03:81:92:b5:
c2:d6:e4:7c:18:59:71:c8:12:2c:9b:25:99:30:44:55:03:d5:
a0:f4:f8:ac:75:c3:8f:08:5e:b1:95:25:6f:ae:95:84:44:16:
67:fd:9e:54:0b:33:79:c4:16:d4:68:54:7e:92:ea:b3:e6:75:
74:13:32:dc:85:e6:45:8a:fa:53:56:c3:2e:02:eb:8e:88:7d:
1a:02:e0:13:98:54:7f:31:17:d3:65:47:0a:8e:8d:14:8a:51:
4e:d8:7b:01:93:f4:be:8c:82:81:f7:05:8b:26:25:89:50:da:
4f:65:97:9c:8f:37:7e:af:8a:1c:f4:7b:a6:56:53:94:45:49:
b6:2c:9a:06:a4:a7:5c:65:2b:33:5e:53:c5:84:50:0f:b7:a0:
e2:44:28:d9:ff:4b:b7:14:37:43:ef:2a:72:0d:aa:c1:45:8f:
49:9a:c0:00
-----BEGIN CERTIFICATE-----
MIIE7zCCA9egAwIBAgIEA8OKbDANBgkqhkiG9w0BAQsFADAzMTEwLwYDVQQDEygz
NjhiZmI4YTVlZWU0OTA4MmVhNjI4ZGYyNWE0YTVkNTBmM2FhOWIzMB4XDTIyMDMz
MDA4NDIzOFoXDTIzMDcwMTAwMDAwMFowMzExMC8GA1UEAxMoYzQwNDg3NDU0YzAw
Njc3YTk3YTgzYjQ5MzM4YTcxYzcwYTBmNDg5MzCCASIwDQYJKoZIhvcNAQEBBQAD
ggEPADCCAQoCggEBAJgNNtusa5ybdcdIYe6BKDSGdA7cSgxPeoon0hDd4eRZGHQn
Yrpbc6DP7qkgrazNauiPcrtbiW/qjpFb7phaGhqfJrbUqKdITAB+Z2WEX8pdPqsO
p3S2FFxlzK8uNwFugijCb/62xpFC14QTer5ECfrIDlLQxkLKOiWbg001UHhRgBaL
l5FFQrY1+8EvK9HdFf+AHmnuV8L/w4WIeqzMbfED1Lo935roEOUH9m7P8qsXyRw1
Pz9SCLAb2YOw5JqzTkMJwbXmSPTzxrUp/IwEbfQXAjfmvSyjGsIfsVn6ogABoexu
AxO960QpKj9sXF8viY9rrDl5hynHIhfymYeUSMcCAwEAAaOCAgkwggIFMB0GA1Ud
DgQWBBTEBIdFTABnepeoO0kzinHHCg9IkzAfBgNVHSMEGDAWgBQ2i/uKXu5JCC6m
KN8lpKXVDzqpszAOBgNVHQ8BAf8EBAMCB4AwZAYIKwYBBQUHAQEEWDBWMFQGCCsG
AQUFBzAChkhyc3luYzovL3Jwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxU
L05vdjdpbDd1U1FndXBpamZKYVNsMVE4NnFiTS5jZXIwgY0GCCsGAQUFBwELBIGA
MH4wfAYIKwYBBQUHMAuGcHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5
L0RFRkFVTFQvMzUvYWE1OGMzLWU3MDYtNGE0OS1hN2M1LTBhZTJlOTIyYTI5Mi8x
L3hBU0hSVXdBWjNxWHFEdEpNNHB4eHdvUFNKTS5yb2EwgYEGA1UdHwR6MHgwdqB0
oHKGcHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvMzUv
YWE1OGMzLWU3MDYtNGE0OS1hN2M1LTBhZTJlOTIyYTI5Mi8xL05vdjdpbDd1U1Fn
dXBpamZKYVNsMVE4NnFiTS5jcmwwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAf
BggrBgEFBQcBBwEB/wQQMA4wDAQCAAEwBgMEALnhFjANBgkqhkiG9w0BAQsFAAOC
AQEAiCJQ1n8sHrUpx/lEVHDMTfkioQfPSG8j3NBn0kA+rFxuPnDA1N4dwo8n2IoS
eLQINRfrzlpih4zVEqpsKwR+RJT1Pg5lCT3ZAwFiM+N2Bl0PlwBktrQDgZK1wtbk
fBhZccgSLJslmTBEVQPVoPT4rHXDjwhesZUlb66VhEQWZ/2eVAszecQW1GhUfpLq
s+Z1dBMy3IXmRYr6U1bDLgLrjoh9GgLgE5hUfzEX02VHCo6NFIpRTth7AZP0voyC
gfcFiyYliVDaT2WXnI83fq+KHPR7plZTlEVJtiyaBqSnXGUrM15TxYRQD7eg4kQo
2f9LtxQ3Q+8qcg2qwUWPSZrAAA==
-----END CERTIFICATE-----
Generated at Thu Jun 6 17:25:14 2024 by rpki-client on console-fra.rpki-client.org