Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/8f/ff94f1-ba63-40d6-beca-5e624a3038cf/1/NtrmJISmTacfWaszIiEoshBVOhE.roa
File: NtrmJISmTacfWaszIiEoshBVOhE.roa (raw, json)
Hash identifier: VIvyo61fjwRYcAUnHcFe5VGQqQFOPdxr99T8+ktn0U0=
Subject key identifier: 36:DA:E6:24:84:A6:4D:A7:1F:59:AB:33:22:21:28:B2:10:55:3A:11
Certificate issuer: /CN=9c1aed9913f8880af7557eef3ef02d6e0ff3fd49
Certificate serial: 01825457E77111CB13D3DCE049AA22AFB3E9
Authority key identifier: 9C:1A:ED:99:13:F8:88:0A:F7:55:7E:EF:3E:F0:2D:6E:0F:F3:FD:49
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/nBrtmRP4iAr3VX7vPvAtbg_z_Uk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/8f/ff94f1-ba63-40d6-beca-5e624a3038cf/1/NtrmJISmTacfWaszIiEoshBVOhE.roa
Signing time: Sun 31 Jul 2022 13:00:23 +0000
ROA not before: Sun 31 Jul 2022 13:00:23 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 34773
IP address blocks: 91.233.121.0/24 maxlen: 24
194.8.28.0/24 maxlen: 24
2a0a:1b84::/32 maxlen: 32
2a0a:1b82::/32 maxlen: 32
2a0a:1b80::/32 maxlen: 32
2a0a:1b86::/32 maxlen: 32
2a0a:1b85::/32 maxlen: 32
2a0a:1b83::/32 maxlen: 32
2a0a:1b87::/32 maxlen: 32
2a0a:1b81::/32 maxlen: 32
Validation: Failed, RFC 3779 resource not subset of parent's resources
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:82:54:57:e7:71:11:cb:13:d3:dc:e0:49:aa:22:af:b3:e9
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=9c1aed9913f8880af7557eef3ef02d6e0ff3fd49
Validity
Not Before: Jul 31 13:00:23 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=36dae62484a64da71f59ab33222128b210553a11
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b8:05:d0:8d:be:78:fc:0b:34:69:4a:e5:7a:1b:
26:74:f2:43:7a:b9:e5:93:3d:9d:5e:ba:69:0e:a7:
6d:cf:4b:94:cc:b7:26:27:09:9a:69:63:30:36:26:
5d:bb:dc:a8:52:05:b1:64:c9:56:1a:0e:79:38:4a:
9d:92:76:34:54:f5:56:39:be:c9:38:f9:de:93:0d:
cf:91:81:4c:e7:54:f0:71:10:71:9c:fa:5a:41:89:
6c:91:34:22:71:a9:10:a6:86:ac:8f:0e:c1:fb:00:
08:1e:7d:f1:eb:f8:c7:67:50:ee:04:9e:5c:89:93:
65:69:f8:7b:08:88:02:a5:ce:d0:48:0b:16:6f:94:
b6:e7:d8:34:12:63:48:02:2b:92:6c:a7:95:41:6f:
86:f5:2c:4e:c0:0a:30:55:f6:5d:e4:22:20:6e:74:
d9:75:c8:c9:d9:f2:70:83:54:f9:ad:0f:31:c6:af:
be:3d:70:35:67:17:ad:db:3c:64:ee:27:96:be:5e:
ef:94:2e:64:11:2e:9e:35:ca:9c:85:be:9f:b6:20:
61:d5:95:c4:44:4f:e2:cf:5f:3b:f9:ab:89:a5:8e:
6b:8a:33:29:6c:2c:81:d8:30:79:c1:fc:49:30:66:
59:5e:a8:c4:c9:75:f2:4f:5a:e6:a6:be:17:08:06:
d9:f1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
36:DA:E6:24:84:A6:4D:A7:1F:59:AB:33:22:21:28:B2:10:55:3A:11
X509v3 Authority Key Identifier:
keyid:9C:1A:ED:99:13:F8:88:0A:F7:55:7E:EF:3E:F0:2D:6E:0F:F3:FD:49
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/nBrtmRP4iAr3VX7vPvAtbg_z_Uk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/8f/ff94f1-ba63-40d6-beca-5e624a3038cf/1/NtrmJISmTacfWaszIiEoshBVOhE.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/8f/ff94f1-ba63-40d6-beca-5e624a3038cf/1/nBrtmRP4iAr3VX7vPvAtbg_z_Uk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
91.233.121.0/24
194.8.28.0/24
IPv6:
2a0a:1b80::/29
Signature Algorithm: sha256WithRSAEncryption
cc:bd:20:45:5e:dc:0c:31:18:72:31:0b:e7:ea:33:f2:02:01:
dd:bd:cc:59:8b:90:e5:65:88:66:dd:e9:60:7f:a7:8c:06:19:
cc:d5:55:de:d9:12:b4:fa:3c:47:85:7c:e5:78:55:5e:65:06:
41:ce:9b:95:7f:f4:74:23:6b:45:95:19:24:dc:24:b1:92:33:
dd:89:73:91:2c:f9:12:47:89:33:d7:46:b3:53:bb:8a:6e:4f:
40:f0:45:98:27:fe:a1:45:e8:4e:0c:af:6e:7e:ff:37:e0:1d:
79:34:0b:93:63:26:02:f7:51:fb:df:92:6b:4c:b5:dd:38:db:
52:39:db:60:14:3d:ef:a4:42:3c:35:21:03:70:5b:f7:63:2f:
a7:de:3d:d8:75:a0:99:2c:e9:76:a7:46:02:e0:31:5c:57:d8:
a8:e3:9e:6d:b4:da:83:92:8c:a0:5d:ab:05:01:9a:32:f7:1d:
2c:f5:e4:3e:75:96:12:de:00:13:68:10:c2:fa:00:8f:c8:34:
db:94:d8:da:10:7c:00:53:ba:9a:a6:6b:78:01:2a:cc:27:45:
21:d7:0f:43:60:5a:d0:56:a6:11:3d:c7:25:86:0f:67:1f:6c:
5d:1d:c4:2f:70:3b:95:d1:d0:0e:f8:ca:12:7e:d2:24:62:a9:
e4:f9:20:19
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 19 23:59:22 2023 by rpki-client on console-fra.rpki-client.org