Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/1d/89ec25-72dc-4f0f-8b2f-ad7890c2e752/1/WIbcXkGohJuqePWJ5D_QdEBvAu8.roa
File: WIbcXkGohJuqePWJ5D_QdEBvAu8.roa (raw, json)
Hash identifier: Jbjy5Sb4eNxRfWIYLF58Cgm3egA3hUThYikeS2dZ5x4=
Subject key identifier: 58:86:DC:5E:41:A8:84:9B:AA:78:F5:89:E4:3F:D0:74:40:6F:02:EF
Certificate issuer: /CN=5bd74e39dda400d136126e6c3efb1cf9344277ef
Certificate serial: 018E3243C582D315AEEC9AEBEAED83DD3EBC
Authority key identifier: 5B:D7:4E:39:DD:A4:00:D1:36:12:6E:6C:3E:FB:1C:F9:34:42:77:EF
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/W9dOOd2kANE2Em5sPvsc-TRCd-8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/1d/89ec25-72dc-4f0f-8b2f-ad7890c2e752/1/WIbcXkGohJuqePWJ5D_QdEBvAu8.roa
Signing time: Tue 12 Mar 2024 10:44:45 +0000
ROA not before: Tue 12 Mar 2024 10:44:45 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 48031
IP address blocks: 109.107.148.0/24 maxlen: 24
Validation: Failed, RFC 3779 resource not subset of parent's resources
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8e:32:43:c5:82:d3:15:ae:ec:9a:eb:ea:ed:83:dd:3e:bc
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=5bd74e39dda400d136126e6c3efb1cf9344277ef
Validity
Not Before: Mar 12 10:44:45 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=5886dc5e41a8849baa78f589e43fd074406f02ef
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:99:85:99:8c:a6:40:89:86:8e:b9:01:32:92:22:
ca:16:50:0d:15:d2:90:86:08:13:e4:a5:5b:31:62:
5c:13:da:de:94:c3:e1:d2:7c:e8:3a:e9:2e:d6:43:
ff:9b:b0:89:e9:59:f2:48:78:61:d9:a3:06:6e:fe:
e9:13:e7:e4:5e:ab:5f:e4:1f:40:1f:4f:97:72:7b:
6e:9c:6c:7b:70:7b:63:16:36:bb:bc:ce:7b:ba:a7:
2c:96:9b:c7:df:17:54:50:50:41:75:28:48:d7:eb:
a7:32:92:7d:b8:bc:7e:72:bd:c0:0c:19:d8:09:1f:
fc:c3:3b:24:bf:bb:88:c6:14:c0:f2:c5:85:a3:68:
69:d4:f6:01:23:f6:c6:44:42:3f:3e:04:f2:53:a3:
80:41:67:07:b1:2a:71:96:0f:fd:cd:1a:3a:7a:19:
24:f9:38:87:2e:57:36:b7:82:c1:ee:8a:9b:75:39:
35:df:8d:d2:09:e5:5e:f8:3a:69:9e:44:78:0b:48:
ee:61:39:ac:db:d6:d8:ce:7c:35:82:69:3e:8e:2e:
db:bf:e7:60:27:a9:36:35:83:dc:65:51:90:56:6a:
22:f9:02:bd:06:1d:dc:4b:3f:ce:56:9c:f1:58:d9:
5c:d8:47:ce:6d:ca:a7:dc:c0:f9:99:e5:53:4a:36:
fd:1f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
58:86:DC:5E:41:A8:84:9B:AA:78:F5:89:E4:3F:D0:74:40:6F:02:EF
X509v3 Authority Key Identifier:
keyid:5B:D7:4E:39:DD:A4:00:D1:36:12:6E:6C:3E:FB:1C:F9:34:42:77:EF
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/W9dOOd2kANE2Em5sPvsc-TRCd-8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/1d/89ec25-72dc-4f0f-8b2f-ad7890c2e752/1/WIbcXkGohJuqePWJ5D_QdEBvAu8.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/1d/89ec25-72dc-4f0f-8b2f-ad7890c2e752/1/W9dOOd2kANE2Em5sPvsc-TRCd-8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
109.107.148.0/24
Signature Algorithm: sha256WithRSAEncryption
c6:12:c4:95:27:a1:4e:cb:27:d7:b0:cf:12:da:46:aa:c8:b5:
11:82:ea:ef:8d:6a:82:86:b7:5e:ff:f0:85:a1:69:5a:3f:23:
a4:4e:87:49:e8:18:1e:a4:f4:a9:c0:df:f9:37:26:0c:41:d2:
b7:fb:07:82:28:2f:75:6d:00:09:cf:12:97:89:aa:41:02:31:
c8:fb:87:e6:18:d0:78:77:45:17:34:6d:8c:e0:a7:45:c3:4d:
5b:65:1f:46:47:3b:50:fb:3e:bd:13:83:e0:91:31:bd:00:83:
8c:46:cd:8b:e8:ad:0e:c6:e0:f7:1f:ea:90:4c:6c:a6:f4:39:
16:dd:b0:85:6d:5b:73:46:79:36:2e:2f:fb:62:d5:4b:d2:aa:
c4:8b:0b:7a:5b:9a:2d:f1:f5:a2:bf:2b:7a:db:1a:1c:9f:86:
84:63:5f:d3:8f:4a:c7:2b:95:de:bb:f4:44:d8:96:a4:8e:6b:
a1:19:fb:fb:09:fe:e6:59:25:e6:e5:d2:e2:72:ed:c0:08:bd:
b3:ea:a9:36:6d:66:c3:7c:b4:99:29:7b:7c:23:79:02:dd:89:
d7:59:07:bf:03:52:d5:cf:e4:1e:9c:66:b5:79:1d:35:ac:25:
bc:a9:a2:12:83:87:19:d7:86:75:a7:b8:26:13:31:9b:b7:ac:
ff:07:eb:a9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 18:57:14 2024 by rpki-client on console-ams.rpki-client.org