Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/9c/b7bf94-377b-4400-8b9c-cbf164e8be01/1/GTBNNVdKtVHhr0mNIGZAckIoFpc.roa
File: GTBNNVdKtVHhr0mNIGZAckIoFpc.roa (raw, json)
Hash identifier: B9r9wb7JyHOIlMyoJOrL5TMYjmyh5wS7EnRfNbd6ieA=
Subject key identifier: 19:30:4D:35:57:4A:B5:51:E1:AF:49:8D:20:66:40:72:42:28:16:97
Certificate issuer: /CN=cdc84082be96e609d9de9808fbc37866feb4c54b
Certificate serial: 01884D36A176379EFA50E89D139F72E9A01C
Authority key identifier: CD:C8:40:82:BE:96:E6:09:D9:DE:98:08:FB:C3:78:66:FE:B4:C5:4B
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/zchAgr6W5gnZ3pgI-8N4Zv60xUs.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/9c/b7bf94-377b-4400-8b9c-cbf164e8be01/1/GTBNNVdKtVHhr0mNIGZAckIoFpc.roa
Signing time: Wed 24 May 2023 10:03:25 +0000
ROA not before: Wed 24 May 2023 10:03:25 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 834
IP address blocks: 37.235.121.0/24 maxlen: 24
37.235.123.0/24 maxlen: 24
37.235.120.0/24 maxlen: 24
Validation: Failed, RFC 3779 resource not subset of parent's resources
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:88:4d:36:a1:76:37:9e:fa:50:e8:9d:13:9f:72:e9:a0:1c
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=cdc84082be96e609d9de9808fbc37866feb4c54b
Validity
Not Before: May 24 10:03:25 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=19304d35574ab551e1af498d2066407242281697
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b7:56:cc:c6:51:b1:69:01:18:09:be:bc:8a:0a:
17:c1:b3:7d:d6:bd:e2:1a:fc:65:12:5f:a7:20:9e:
33:02:47:20:a9:91:c2:75:cf:c3:6b:8b:08:e8:92:
ed:47:01:9e:e4:dd:b1:53:f1:ee:25:b6:89:cc:4d:
63:7b:fe:7f:cd:cd:b1:92:62:15:7b:9b:a4:85:2f:
ba:38:ae:22:bd:a0:8a:30:1b:9f:60:2f:96:4d:49:
11:52:28:7a:c6:a9:6e:bc:13:9c:e8:c1:b2:7c:77:
a7:c9:a0:b4:06:06:06:36:17:ea:8a:7f:25:ff:10:
02:2d:6c:24:ed:70:36:43:82:82:b1:c9:ee:1b:da:
6d:26:63:b5:36:19:fc:df:3e:66:36:c5:83:72:38:
93:88:32:89:7e:bc:ba:e4:17:6e:2f:97:bf:7c:88:
0b:44:86:5c:6a:48:b7:55:65:64:b2:00:a8:22:cd:
c8:58:34:2e:27:b5:18:13:94:b3:83:ee:99:9b:25:
7e:ca:ae:46:32:2e:90:e3:05:a8:77:5d:ea:fa:cc:
4a:8b:49:ce:19:db:68:fe:e6:a9:f6:01:56:7c:8e:
42:f8:52:44:69:79:48:e4:a9:18:ac:30:4a:94:ff:
c8:f5:6d:45:3c:db:d3:07:90:57:8c:44:45:1a:77:
0b:d5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
19:30:4D:35:57:4A:B5:51:E1:AF:49:8D:20:66:40:72:42:28:16:97
X509v3 Authority Key Identifier:
keyid:CD:C8:40:82:BE:96:E6:09:D9:DE:98:08:FB:C3:78:66:FE:B4:C5:4B
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/zchAgr6W5gnZ3pgI-8N4Zv60xUs.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/9c/b7bf94-377b-4400-8b9c-cbf164e8be01/1/GTBNNVdKtVHhr0mNIGZAckIoFpc.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/9c/b7bf94-377b-4400-8b9c-cbf164e8be01/1/zchAgr6W5gnZ3pgI-8N4Zv60xUs.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
37.235.120.0/23
37.235.123.0/24
Signature Algorithm: sha256WithRSAEncryption
a0:d7:9e:9d:8f:90:e1:f2:e2:15:bb:ca:29:35:68:da:9e:95:
e9:e8:f6:ae:03:39:f6:69:22:6a:66:0e:fe:2f:ce:3c:90:5a:
dc:05:98:a2:a6:1a:ac:8a:67:27:4a:af:34:08:c7:dd:85:ed:
1f:17:e1:8f:a4:e5:dd:77:a4:61:a5:8e:a7:5b:27:a8:1a:80:
3d:d9:f0:ae:f9:7e:b9:4b:66:5e:21:05:0c:6c:7b:9e:cf:84:
74:7e:7a:b8:14:85:11:0d:07:9b:ce:55:b3:14:87:6e:7f:31:
29:b3:56:a8:5a:81:44:b8:bc:47:f1:55:bc:dc:80:5f:2f:30:
20:e8:00:2c:8f:b2:cb:86:b1:66:0a:d7:4e:c3:58:ef:bd:fb:
69:ca:58:28:f7:64:01:dd:77:93:f6:dc:08:62:de:25:b0:34:
26:cc:80:cd:cd:d4:62:85:56:65:c8:bb:21:52:b0:db:48:ba:
a5:0b:da:a5:e8:10:ea:8d:5e:13:16:37:12:d1:8d:12:2c:39:
05:2d:20:5a:8e:49:b4:52:65:57:1b:9f:03:41:e6:11:08:5e:
3c:b0:c1:5f:fb:65:e2:1d:63:19:4b:8a:0c:b2:87:e5:0e:70:
c4:8c:61:8f:ca:d7:7c:68:93:a4:b3:b5:b8:0a:8b:0e:45:7e:
04:a7:2a:8d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 19:26:07 2024 by rpki-client on console-ams.rpki-client.org