Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/3b/afbab5-adcf-4e57-92ea-9f4025571cba/1/6TjybQtXRltdGGwdR2vXXH4nifY.roa
File: 6TjybQtXRltdGGwdR2vXXH4nifY.roa (raw, json)
Hash identifier: eUpeEAWkuZFs4xM/iVQZMO1PjWZxO8cEFFUX21CW1Ys=
Subject key identifier: E9:38:F2:6D:0B:57:46:5B:5D:18:6C:1D:47:6B:D7:5C:7E:27:89:F6
Certificate issuer: /CN=7acfd0797e2d9bd3539d195a031241a56a02a16a
Certificate serial: 018B29135951807356DA0FD1605BF4E2FFCD
Authority key identifier: 7A:CF:D0:79:7E:2D:9B:D3:53:9D:19:5A:03:12:41:A5:6A:02:A1:6A
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/es_QeX4tm9NTnRlaAxJBpWoCoWo.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/3b/afbab5-adcf-4e57-92ea-9f4025571cba/1/6TjybQtXRltdGGwdR2vXXH4nifY.roa
Signing time: Fri 13 Oct 2023 12:46:55 +0000
ROA not before: Fri 13 Oct 2023 12:46:55 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 56380
IP address blocks: 109.107.183.0/24 maxlen: 24
Validation: Failed, RFC 3779 resource not subset of parent's resources
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8b:29:13:59:51:80:73:56:da:0f:d1:60:5b:f4:e2:ff:cd
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=7acfd0797e2d9bd3539d195a031241a56a02a16a
Validity
Not Before: Oct 13 12:46:55 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=e938f26d0b57465b5d186c1d476bd75c7e2789f6
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ae:c7:0e:81:5b:8f:2b:07:83:02:0b:77:6f:6e:
7a:11:dc:ed:94:ca:6e:0e:3c:ce:36:d2:b0:45:0b:
80:89:60:16:4b:f6:5a:52:9e:14:83:00:ba:0a:e7:
09:68:72:2d:09:bd:3d:49:b8:45:48:b9:e0:cd:39:
f6:a4:27:fc:5a:73:07:f1:84:23:8f:06:e5:49:ab:
bc:88:45:46:c2:f9:44:ea:05:c8:21:dc:21:48:5c:
19:c0:7d:34:35:78:06:38:f6:d3:1a:a5:77:48:d2:
97:a5:8f:57:96:52:c3:a1:c2:01:4f:75:c3:07:cd:
36:6e:e3:ed:a4:be:6f:77:ea:86:ad:4c:af:67:d1:
2f:1e:ce:1c:00:b4:37:ee:58:97:f2:f2:c8:11:25:
cc:2a:54:67:c9:89:8b:64:6b:a6:4a:d0:57:2d:16:
e2:cc:5c:5a:7f:01:a5:82:66:92:de:4b:d4:f3:27:
38:b4:f6:6e:be:d5:12:8c:f2:e5:93:31:d0:fe:ca:
e9:be:d5:66:e5:ef:fa:df:b7:25:6c:f0:2b:bc:9b:
82:bc:9a:a6:7c:7c:88:a3:ea:80:02:64:d4:7f:f0:
5a:c6:46:30:3e:27:7e:9c:ed:5c:46:f3:94:b4:89:
b0:d4:63:3b:8e:8c:49:54:3b:ee:2e:80:e7:cd:db:
4c:e3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E9:38:F2:6D:0B:57:46:5B:5D:18:6C:1D:47:6B:D7:5C:7E:27:89:F6
X509v3 Authority Key Identifier:
keyid:7A:CF:D0:79:7E:2D:9B:D3:53:9D:19:5A:03:12:41:A5:6A:02:A1:6A
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/es_QeX4tm9NTnRlaAxJBpWoCoWo.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/3b/afbab5-adcf-4e57-92ea-9f4025571cba/1/6TjybQtXRltdGGwdR2vXXH4nifY.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/3b/afbab5-adcf-4e57-92ea-9f4025571cba/1/es_QeX4tm9NTnRlaAxJBpWoCoWo.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
109.107.183.0/24
Signature Algorithm: sha256WithRSAEncryption
0b:df:b0:de:07:ec:ea:59:a0:a5:0e:05:08:f1:fe:91:8d:3d:
1a:6c:27:bd:cd:83:0c:47:1a:6c:03:ff:a1:df:d6:98:12:8b:
cf:0a:a6:86:35:bf:ab:8b:60:68:30:6e:3b:dd:79:6d:08:d4:
f6:cf:a8:bf:99:ba:d3:5f:eb:8e:07:bd:83:ca:ab:c4:28:51:
19:d3:61:95:76:56:53:0f:a2:cb:89:22:5e:da:f7:52:af:52:
c1:33:89:e2:92:ec:a4:e4:dc:2c:18:d0:43:69:29:10:cc:ad:
73:8d:d7:6c:55:e6:26:43:b2:44:67:3d:d4:f1:4b:30:b6:18:
e3:8e:66:01:98:b0:76:db:75:49:36:fb:0d:a8:77:95:5a:7f:
3c:f1:29:6f:2d:69:3a:3e:d0:cb:95:4d:2f:0d:91:bf:fb:86:
b7:79:cb:00:be:d3:42:71:01:b4:40:03:5e:b9:a4:85:43:5c:
b5:50:07:00:5d:23:e3:6e:30:56:2e:fb:d6:35:7b:3b:78:bb:
2b:08:d7:cd:8b:ee:53:b7:8a:b6:04:db:a5:5a:a5:d6:28:32:
af:14:0b:05:59:d6:18:45:70:f1:de:c4:af:20:cf:49:99:fd:
3a:04:d9:8d:33:fe:ac:f1:f4:e4:b7:b7:08:4a:76:ff:83:9f:
42:a5:54:5b
-----BEGIN CERTIFICATE-----
MIIE/TCCA+WgAwIBAgISAYspE1lRgHNW2g/RYFv04v/NMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDdhY2ZkMDc5N2UyZDliZDM1MzlkMTk1YTAzMTI0MWE1NmEw
MmExNmEwHhcNMjMxMDEzMTI0NjU1WhcNMjQwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EyhlOTM4ZjI2ZDBiNTc0NjViNWQxODZjMWQ0NzZiZDc1YzdlMjc4OWY2MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEArscOgVuPKweDAgt3b256EdztlMpu
DjzONtKwRQuAiWAWS/ZaUp4UgwC6CucJaHItCb09SbhFSLngzTn2pCf8WnMH8YQj
jwblSau8iEVGwvlE6gXIIdwhSFwZwH00NXgGOPbTGqV3SNKXpY9XllLDocIBT3XD
B802buPtpL5vd+qGrUyvZ9EvHs4cALQ37liX8vLIESXMKlRnyYmLZGumStBXLRbi
zFxafwGlgmaS3kvU8yc4tPZuvtUSjPLlkzHQ/srpvtVm5e/637clbPArvJuCvJqm
fHyIo+qAAmTUf/BaxkYwPid+nO1cRvOUtImw1GM7joxJVDvuLoDnzdtM4wIDAQAB
o4ICCTCCAgUwHQYDVR0OBBYEFOk48m0LV0ZbXRhsHUdr11x+J4n2MB8GA1UdIwQY
MBaAFHrP0Hl+LZvTU50ZWgMSQaVqAqFqMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvZXNfUWVYNHRtOU5UblJsYUF4SkJwV29Db1dvLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8zYi9hZmJhYjUtYWRjZi00ZTU3LTkyZWEt
OWY0MDI1NTcxY2JhLzEvNlRqeWJRdFhSbHRkR0d3ZFIydlhYSDRuaWZZLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8zYi9hZmJhYjUtYWRjZi00ZTU3LTkyZWEtOWY0MDI1NTcxY2Jh
LzEvZXNfUWVYNHRtOU5UblJsYUF4SkJwV29Db1dvLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAbWu3MA0G
CSqGSIb3DQEBCwUAA4IBAQAL37DeB+zqWaClDgUI8f6RjT0abCe9zYMMRxpsA/+h
39aYEovPCqaGNb+ri2BoMG473XltCNT2z6i/mbrTX+uOB72DyqvEKFEZ02GVdlZT
D6LLiSJe2vdSr1LBM4nikuyk5NwsGNBDaSkQzK1zjddsVeYmQ7JEZz3U8Uswthjj
jmYBmLB223VJNvsNqHeVWn888SlvLWk6PtDLlU0vDZG/+4a3ecsAvtNCcQG0QANe
uaSFQ1y1UAcAXSPjbjBWLvvWNXs7eLsrCNfNi+5Tt4q2BNulWqXWKDKvFAsFWdYY
RXDx3sSvIM9Jmf06BNmNM/6s8fTkt7cISnb/g59CpVRb
-----END CERTIFICATE-----
Generated at Thu Jun 6 19:04:05 2024 by rpki-client on console-ams.rpki-client.org