Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/3b/afbab5-adcf-4e57-92ea-9f4025571cba/1/AEI43kTZ6qLbhEYXpWaFk_FTVo4.roa
File: AEI43kTZ6qLbhEYXpWaFk_FTVo4.roa (raw, json)
Hash identifier: FZI2KUYmOolZsK09xuh6aeJioOnBeEVzRirHt/PID5M=
Subject key identifier: 00:42:38:DE:44:D9:EA:A2:DB:84:46:17:A5:66:85:93:F1:53:56:8E
Certificate issuer: /CN=7acfd0797e2d9bd3539d195a031241a56a02a16a
Certificate serial: 018AF18D14068B28065294B408EFA474DB0E
Authority key identifier: 7A:CF:D0:79:7E:2D:9B:D3:53:9D:19:5A:03:12:41:A5:6A:02:A1:6A
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/es_QeX4tm9NTnRlaAxJBpWoCoWo.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/3b/afbab5-adcf-4e57-92ea-9f4025571cba/1/AEI43kTZ6qLbhEYXpWaFk_FTVo4.roa
Signing time: Mon 02 Oct 2023 18:01:09 +0000
ROA not before: Mon 02 Oct 2023 18:01:09 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 210644
IP address blocks: 109.107.181.0/24 maxlen: 24
109.107.189.0/24 maxlen: 24
Validation: Failed, RFC 3779 resource not subset of parent's resources
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8a:f1:8d:14:06:8b:28:06:52:94:b4:08:ef:a4:74:db:0e
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=7acfd0797e2d9bd3539d195a031241a56a02a16a
Validity
Not Before: Oct 2 18:01:09 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=004238de44d9eaa2db844617a5668593f153568e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:81:17:38:38:67:16:b7:cb:90:c9:6a:98:4f:77:
b3:cb:c0:19:e5:ac:3d:49:64:f9:db:d9:ab:6b:94:
72:37:33:51:54:98:c2:1c:69:62:02:18:6e:04:97:
73:0a:3a:2e:0e:b0:c8:1f:38:da:a2:26:f4:8a:14:
e1:6b:bb:b3:ca:16:3c:ac:e1:18:aa:6c:28:82:bb:
b9:7d:cc:22:ee:16:3a:2c:4b:b6:ca:57:68:9b:95:
fa:3e:51:3e:44:7b:69:16:e1:83:50:b5:6e:ab:44:
b0:ed:e7:a8:9a:7d:48:cf:cb:1a:fd:91:58:0a:27:
22:ef:0d:2e:b4:0c:ac:89:80:a2:a1:2b:68:7a:39:
71:2a:6c:fa:f4:34:f8:63:bb:b8:0f:ac:d8:e4:a2:
31:0f:db:0b:79:0e:2c:8f:f4:b0:84:d3:ad:3d:f3:
0e:2d:d2:2f:0f:48:ea:71:8a:f9:39:4d:76:40:e9:
ae:db:f2:12:c8:d8:a8:7f:0e:f8:d8:3f:ea:37:8c:
40:b1:4a:06:f0:36:4b:ac:4b:86:04:64:42:2e:76:
a6:dc:87:28:9c:84:ab:48:3b:c1:71:47:9b:7a:23:
f1:56:69:11:43:ac:f2:b0:e3:51:aa:b2:8a:da:5a:
ec:22:73:4c:f7:b2:fc:16:6a:eb:61:ed:22:fa:2d:
3f:f5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
00:42:38:DE:44:D9:EA:A2:DB:84:46:17:A5:66:85:93:F1:53:56:8E
X509v3 Authority Key Identifier:
keyid:7A:CF:D0:79:7E:2D:9B:D3:53:9D:19:5A:03:12:41:A5:6A:02:A1:6A
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/es_QeX4tm9NTnRlaAxJBpWoCoWo.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/3b/afbab5-adcf-4e57-92ea-9f4025571cba/1/AEI43kTZ6qLbhEYXpWaFk_FTVo4.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/3b/afbab5-adcf-4e57-92ea-9f4025571cba/1/es_QeX4tm9NTnRlaAxJBpWoCoWo.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
109.107.181.0/24
109.107.189.0/24
Signature Algorithm: sha256WithRSAEncryption
5f:02:8e:d6:6b:ab:69:e2:80:15:0b:9b:f8:1d:5a:e6:0d:be:
f2:eb:75:0f:a7:5c:13:3e:fe:2a:46:f1:86:c0:29:ea:44:b1:
ba:c7:e4:fa:2c:44:8d:40:4a:2e:82:54:5a:ad:0c:59:28:a2:
9c:9a:40:de:bf:00:17:e0:af:85:73:5c:8c:46:d2:8f:0a:b8:
02:a7:2d:10:ee:59:37:86:bb:b9:81:46:11:3e:6d:fe:90:2b:
64:fc:ac:30:a0:c2:fb:0d:c2:4d:ce:e8:d3:89:d8:bf:b5:79:
ea:20:fc:d7:df:61:c6:f2:e5:b0:e1:7f:11:e5:ce:90:32:02:
9a:29:a8:47:b1:51:ce:d7:ea:04:89:fd:d3:92:20:8d:1c:f5:
96:99:4f:05:6c:ef:d1:30:db:0d:5c:8a:f7:b1:32:0a:8d:f4:
dd:72:e3:ba:0e:52:ce:24:93:f5:38:ac:b6:4f:71:be:38:01:
3f:58:fe:d1:c2:a3:9c:40:e4:57:57:99:7f:d6:05:92:ef:64:
2b:f2:9b:be:16:0c:3d:fb:21:56:aa:5b:4f:6d:46:69:44:bf:
09:04:05:b4:b2:99:40:51:60:87:59:a3:5c:87:13:b8:70:2d:
8f:25:2c:64:ae:f9:92:79:e9:4b:0b:2c:9a:73:d5:bb:57:e3:
bb:17:e3:b8
-----BEGIN CERTIFICATE-----
MIIFAzCCA+ugAwIBAgISAYrxjRQGiygGUpS0CO+kdNsOMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDdhY2ZkMDc5N2UyZDliZDM1MzlkMTk1YTAzMTI0MWE1NmEw
MmExNmEwHhcNMjMxMDAyMTgwMTA5WhcNMjQwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EygwMDQyMzhkZTQ0ZDllYWEyZGI4NDQ2MTdhNTY2ODU5M2YxNTM1NjhlMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAgRc4OGcWt8uQyWqYT3ezy8AZ5aw9
SWT529mra5RyNzNRVJjCHGliAhhuBJdzCjouDrDIHzjaoib0ihTha7uzyhY8rOEY
qmwogru5fcwi7hY6LEu2yldom5X6PlE+RHtpFuGDULVuq0Sw7eeomn1Iz8sa/ZFY
Cici7w0utAysiYCioStoejlxKmz69DT4Y7u4D6zY5KIxD9sLeQ4sj/SwhNOtPfMO
LdIvD0jqcYr5OU12QOmu2/ISyNiofw742D/qN4xAsUoG8DZLrEuGBGRCLnam3Ico
nISrSDvBcUebeiPxVmkRQ6zysONRqrKK2lrsInNM97L8FmrrYe0i+i0/9QIDAQAB
o4ICDzCCAgswHQYDVR0OBBYEFABCON5E2eqi24RGF6VmhZPxU1aOMB8GA1UdIwQY
MBaAFHrP0Hl+LZvTU50ZWgMSQaVqAqFqMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvZXNfUWVYNHRtOU5UblJsYUF4SkJwV29Db1dvLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8zYi9hZmJhYjUtYWRjZi00ZTU3LTkyZWEt
OWY0MDI1NTcxY2JhLzEvQUVJNDNrVFo2cUxiaEVZWHBXYUZrX0ZUVm80LnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8zYi9hZmJhYjUtYWRjZi00ZTU3LTkyZWEtOWY0MDI1NTcxY2Jh
LzEvZXNfUWVYNHRtOU5UblJsYUF4SkJwV29Db1dvLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCUGCCsGAQUFBwEHAQH/BBYwFDASBAIAATAMAwQAbWu1AwQA
bWu9MA0GCSqGSIb3DQEBCwUAA4IBAQBfAo7Wa6tp4oAVC5v4HVrmDb7y63UPp1wT
Pv4qRvGGwCnqRLG6x+T6LESNQEouglRarQxZKKKcmkDevwAX4K+Fc1yMRtKPCrgC
py0Q7lk3hru5gUYRPm3+kCtk/KwwoML7DcJNzujTidi/tXnqIPzX32HG8uWw4X8R
5c6QMgKaKahHsVHO1+oEif3TkiCNHPWWmU8FbO/RMNsNXIr3sTIKjfTdcuO6DlLO
JJP1OKy2T3G+OAE/WP7RwqOcQORXV5l/1gWS72Qr8pu+Fgw9+yFWqltPbUZpRL8J
BAW0splAUWCHWaNchxO4cC2PJSxkrvmSeelLCyyac9W7V+O7F+O4
-----END CERTIFICATE-----
Generated at Thu Jun 6 19:04:05 2024 by rpki-client on console-ams.rpki-client.org