Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/9c/b7bf94-377b-4400-8b9c-cbf164e8be01/1/INBt274ZULomCOMTtJpACGWenVc.roa
File: INBt274ZULomCOMTtJpACGWenVc.roa (raw, json)
Hash identifier: hnbiRXGmU4bQwnscAjXCDsRkTc2A6uERQJZjBuvWew8=
Subject key identifier: 20:D0:6D:DB:BE:19:50:BA:26:08:E3:13:B4:9A:40:08:65:9E:9D:57
Certificate issuer: /CN=cdc84082be96e609d9de9808fbc37866feb4c54b
Certificate serial: 0186DF8F7B08545C10CD7667A4C80663ACCF
Authority key identifier: CD:C8:40:82:BE:96:E6:09:D9:DE:98:08:FB:C3:78:66:FE:B4:C5:4B
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/zchAgr6W5gnZ3pgI-8N4Zv60xUs.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/9c/b7bf94-377b-4400-8b9c-cbf164e8be01/1/INBt274ZULomCOMTtJpACGWenVc.roa
Signing time: Tue 14 Mar 2023 09:59:27 +0000
ROA not before: Tue 14 Mar 2023 09:59:27 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 49999
IP address blocks: 37.235.120.0/24 maxlen: 24
Validation: Failed, RFC 3779 resource not subset of parent's resources
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:86:df:8f:7b:08:54:5c:10:cd:76:67:a4:c8:06:63:ac:cf
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=cdc84082be96e609d9de9808fbc37866feb4c54b
Validity
Not Before: Mar 14 09:59:27 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=20d06ddbbe1950ba2608e313b49a4008659e9d57
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:89:87:6c:30:18:5f:6c:af:cd:c2:ee:d2:40:d3:
9a:cf:63:e6:c7:39:42:8b:54:26:36:93:41:20:1a:
bd:35:be:28:63:05:c9:b8:c2:15:f7:9d:36:25:f3:
64:de:c2:31:30:93:ed:98:f2:a8:cf:34:3f:fe:9c:
e2:fd:e1:54:b2:ff:81:c6:55:a3:0e:9c:7b:a9:e0:
65:a8:a5:91:af:10:c0:5b:1e:f1:7e:99:28:77:ae:
af:cf:ca:9c:b3:66:f0:c3:23:b4:00:2e:c4:7f:bb:
f9:15:c5:54:c3:ea:e3:11:61:e4:f6:d8:7e:ac:4a:
e7:e5:c4:56:2b:e5:88:b0:f0:30:11:8d:ce:4b:b7:
53:41:0a:e3:6b:e3:29:9c:27:f8:a6:72:5d:de:b6:
ba:a2:cf:b1:6c:26:65:19:f7:0e:97:a6:32:b5:0c:
30:52:74:5e:ae:1b:64:72:4a:12:e2:c1:d9:ee:63:
5d:35:2e:ea:4d:41:97:2f:ca:ac:a9:5c:2c:b7:ab:
83:75:c6:e8:bc:85:d9:e3:72:27:46:08:87:95:5f:
c1:07:41:00:aa:84:1c:db:c5:b1:eb:59:cf:5d:e3:
e7:b9:0c:bb:e5:e1:89:f4:19:9d:e2:f1:e9:db:7f:
a7:93:e1:39:9c:27:52:ae:a0:35:51:3c:59:23:94:
ad:1f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
20:D0:6D:DB:BE:19:50:BA:26:08:E3:13:B4:9A:40:08:65:9E:9D:57
X509v3 Authority Key Identifier:
keyid:CD:C8:40:82:BE:96:E6:09:D9:DE:98:08:FB:C3:78:66:FE:B4:C5:4B
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/zchAgr6W5gnZ3pgI-8N4Zv60xUs.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/9c/b7bf94-377b-4400-8b9c-cbf164e8be01/1/INBt274ZULomCOMTtJpACGWenVc.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/9c/b7bf94-377b-4400-8b9c-cbf164e8be01/1/zchAgr6W5gnZ3pgI-8N4Zv60xUs.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
37.235.120.0/24
Signature Algorithm: sha256WithRSAEncryption
b9:06:6d:cf:2e:87:94:63:bd:aa:70:03:fb:d2:2d:92:b5:05:
83:2b:ce:14:29:b5:c2:29:05:c7:b4:7b:fe:66:c0:07:ed:01:
f7:c9:03:2c:34:ef:96:82:09:74:8c:9c:60:46:ef:ca:0b:a2:
50:77:e8:81:82:0f:45:60:c8:ee:20:c6:3c:ef:11:d0:1e:41:
38:18:b5:34:72:cb:8e:50:2a:87:fb:f6:36:d6:cd:b5:92:98:
e8:15:7a:14:4c:65:8c:41:02:0d:ce:51:f7:59:aa:7e:a1:33:
89:f3:54:13:a2:01:9c:75:09:bf:8d:39:f6:9b:5f:f4:88:c6:
d2:3f:63:96:16:b1:da:1a:78:e5:5d:c5:e3:4a:5a:7a:ee:9a:
5c:e1:77:b8:e4:ab:f3:ef:72:c6:3b:66:59:c0:bc:58:54:73:
d3:41:0e:0d:f7:eb:ef:07:76:31:78:2d:35:e3:f8:71:e5:18:
36:32:e5:bd:f8:7b:da:86:be:0b:ae:f8:8b:10:bc:10:5d:02:
a3:d7:52:78:7d:66:bd:60:7c:cb:3a:96:35:fd:4c:b1:43:89:
bc:93:78:13:d6:dd:52:ac:0e:9c:32:7f:d2:bc:9e:e5:3b:98:
05:fd:d4:17:05:9e:65:ef:fc:d5:22:8d:7e:a8:a7:b7:61:b4:
4c:61:ef:6c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:40:51 2024 by rpki-client on console-fra.rpki-client.org