Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b5/0bab1f-92d6-42f0-b952-442c080ae541/1/CTaoSjkZduP02xsDzJttAxDSjjo.roa
File: CTaoSjkZduP02xsDzJttAxDSjjo.roa (raw, json)
Hash identifier: DTvDy3H3+xbEOGFcc9fKUNx3eQUc/21SbSPGMpPW+PA=
Subject key identifier: 09:36:A8:4A:39:19:76:E3:F4:DB:1B:03:CC:9B:6D:03:10:D2:8E:3A
Certificate issuer: /CN=36261c261756fa03ac57d1bfc4db856ef808975a
Certificate serial: 04AC4232
Authority key identifier: 36:26:1C:26:17:56:FA:03:AC:57:D1:BF:C4:DB:85:6E:F8:08:97:5A
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/NiYcJhdW-gOsV9G_xNuFbvgIl1o.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/b5/0bab1f-92d6-42f0-b952-442c080ae541/1/CTaoSjkZduP02xsDzJttAxDSjjo.roa
Signing time: Fri 07 Jan 2022 15:36:14 +0000
ROA not before: Fri 07 Jan 2022 15:36:14 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 61317
IP address blocks: 185.35.78.0/24 maxlen: 24
185.35.76.0/24 maxlen: 24
Validation: Failed, RFC 3779 resource not subset of parent's resources
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 78398002 (0x4ac4232)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=36261c261756fa03ac57d1bfc4db856ef808975a
Validity
Not Before: Jan 7 15:36:14 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=0936a84a391976e3f4db1b03cc9b6d0310d28e3a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bc:d3:bc:42:3b:2f:42:e0:e5:ce:4d:fe:cd:31:
0f:f6:57:9e:2a:fc:87:d6:b7:21:9d:96:d1:31:59:
b3:fd:ea:2c:6a:47:e2:e3:d5:1c:ce:7f:3a:6d:3e:
32:1a:6d:5f:ba:ff:d5:e8:9c:74:50:ba:c3:6d:ed:
52:ec:95:d9:ad:62:78:db:bd:0a:4f:98:c5:65:4a:
01:e5:e6:9a:44:f1:b4:24:24:18:e4:18:dc:74:d0:
4b:b7:6e:40:76:07:ec:45:0f:9f:ca:3f:23:4b:a7:
df:4e:c0:c4:f5:f9:11:15:4f:5a:8d:aa:41:93:09:
7a:c7:78:2a:92:29:bc:fb:e0:39:c8:9e:92:e4:d6:
73:65:84:5a:f5:37:b5:4e:25:8b:99:fa:fb:e2:9f:
0b:55:19:7c:20:b2:a9:10:3a:76:9b:49:4c:50:f7:
09:7d:d9:14:e8:92:38:e5:e9:67:d1:86:4f:eb:36:
1b:ff:4a:ee:ad:49:82:6c:ac:cd:4a:26:2a:1a:17:
55:ae:7d:e0:e8:e2:03:e1:05:a5:3e:ed:bc:b1:45:
fd:3a:d8:bf:32:24:36:65:51:81:39:d8:a1:39:e0:
a3:53:13:6c:86:a4:94:b3:5f:5e:10:50:61:3c:67:
17:f5:1a:06:52:e1:be:55:04:c8:82:a9:2c:17:b5:
d5:a3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
09:36:A8:4A:39:19:76:E3:F4:DB:1B:03:CC:9B:6D:03:10:D2:8E:3A
X509v3 Authority Key Identifier:
keyid:36:26:1C:26:17:56:FA:03:AC:57:D1:BF:C4:DB:85:6E:F8:08:97:5A
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/NiYcJhdW-gOsV9G_xNuFbvgIl1o.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b5/0bab1f-92d6-42f0-b952-442c080ae541/1/CTaoSjkZduP02xsDzJttAxDSjjo.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/b5/0bab1f-92d6-42f0-b952-442c080ae541/1/NiYcJhdW-gOsV9G_xNuFbvgIl1o.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.35.76.0/24
185.35.78.0/24
Signature Algorithm: sha256WithRSAEncryption
16:2d:42:64:3d:4c:e9:e9:41:58:36:4d:db:f0:52:a4:88:4b:
eb:c9:68:12:45:1b:24:01:33:8d:90:79:86:15:2d:bb:e0:6d:
d8:54:47:99:84:59:c2:21:62:13:08:1e:1e:94:2d:db:4a:6f:
7c:8c:51:6d:c8:29:fe:91:23:d0:bf:e4:73:f7:d3:86:99:0c:
c3:73:10:8a:b8:f8:98:5c:7f:3a:a4:07:bd:a9:0d:81:7c:e5:
cb:5b:53:41:27:27:9d:f1:17:c7:1c:88:93:fa:b8:06:50:08:
1b:ca:94:36:43:07:91:b8:df:d0:7d:09:cc:ff:19:5d:55:5b:
fb:48:94:fc:51:2b:a1:2d:aa:97:f5:c7:16:99:49:30:de:15:
84:11:2d:70:17:4f:3c:43:c4:a4:01:b8:67:ff:2c:ff:b6:73:
e4:bc:35:d8:45:0a:f0:25:43:61:e1:35:61:e5:14:4f:f3:9e:
80:17:49:71:17:e6:81:54:df:1a:04:60:84:93:ff:64:59:d8:
23:c9:69:02:b1:22:94:34:e9:a3:cc:4b:7a:2c:d2:9d:74:2d:
92:f1:31:33:5b:2c:5f:43:39:66:b7:b3:08:21:06:fc:e0:e0:
36:1d:45:63:eb:00:94:16:b5:a2:46:be:6b:25:83:ec:53:f6:
ea:4e:6e:41
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:50:45 2024 by rpki-client on console-fra.rpki-client.org