Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/3b/afbab5-adcf-4e57-92ea-9f4025571cba/1/LZK35qliPo1JEupR-reO_XZu-QQ.roa
File: LZK35qliPo1JEupR-reO_XZu-QQ.roa (raw, json)
Hash identifier: q6uRRfDZHslp2opEcXlEPigPerukE7GVk0Sapo+y0c0=
Subject key identifier: 2D:92:B7:E6:A9:62:3E:8D:49:12:EA:51:FA:B7:8E:FD:76:6E:F9:04
Certificate issuer: /CN=7acfd0797e2d9bd3539d195a031241a56a02a16a
Certificate serial: 018AD05B9427ACBAE2A06FD10948F332BCF1
Authority key identifier: 7A:CF:D0:79:7E:2D:9B:D3:53:9D:19:5A:03:12:41:A5:6A:02:A1:6A
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/es_QeX4tm9NTnRlaAxJBpWoCoWo.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/3b/afbab5-adcf-4e57-92ea-9f4025571cba/1/LZK35qliPo1JEupR-reO_XZu-QQ.roa
Signing time: Tue 26 Sep 2023 07:19:37 +0000
ROA not before: Tue 26 Sep 2023 07:19:37 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 213369
IP address blocks: 109.107.162.0/24 maxlen: 24
109.107.162.0/23 maxlen: 23
109.107.163.0/24 maxlen: 24
Validation: Failed, RFC 3779 resource not subset of parent's resources
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8a:d0:5b:94:27:ac:ba:e2:a0:6f:d1:09:48:f3:32:bc:f1
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=7acfd0797e2d9bd3539d195a031241a56a02a16a
Validity
Not Before: Sep 26 07:19:37 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=2d92b7e6a9623e8d4912ea51fab78efd766ef904
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:97:5d:86:7e:3f:f1:42:ab:86:da:ed:89:12:0b:
7e:65:f9:95:54:59:25:e3:22:a0:72:bb:a1:b5:25:
a6:94:5f:7c:c4:2f:6a:76:78:e1:fa:ea:94:c9:6c:
28:ac:54:c7:04:8a:a3:e8:d5:01:85:4c:80:6a:1c:
42:6f:81:82:09:ab:d1:dc:83:32:0f:a8:32:eb:cc:
37:a6:e4:1a:d3:7e:4c:84:57:03:2c:2a:a2:6b:15:
5d:f7:21:38:24:8a:48:cb:82:72:88:00:d4:9e:0c:
fe:dc:d6:59:05:a8:46:06:5a:f4:61:f9:c8:60:f4:
00:32:2d:6b:16:3a:ce:02:47:02:0d:c8:01:63:0b:
97:cc:d8:b6:09:e4:52:15:d6:c0:68:ce:ab:f7:ea:
dc:72:b4:fa:9f:8d:2d:e3:d3:61:96:e8:f8:18:d4:
3f:62:f0:1f:a0:66:d1:9f:42:08:7b:85:a6:e4:03:
da:ae:20:6a:12:bf:37:25:2f:2b:f7:1c:28:d9:ba:
77:38:21:4c:dd:bd:e3:20:f0:8e:78:a1:3f:7d:5b:
27:0b:17:51:36:13:de:14:cb:27:6c:cb:0a:05:c6:
1d:ec:9e:90:6a:27:ea:cc:7a:b2:00:82:80:15:66:
c8:ea:ac:3e:07:ad:69:c7:40:50:5a:4c:c7:92:dc:
b0:f7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
2D:92:B7:E6:A9:62:3E:8D:49:12:EA:51:FA:B7:8E:FD:76:6E:F9:04
X509v3 Authority Key Identifier:
keyid:7A:CF:D0:79:7E:2D:9B:D3:53:9D:19:5A:03:12:41:A5:6A:02:A1:6A
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/es_QeX4tm9NTnRlaAxJBpWoCoWo.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/3b/afbab5-adcf-4e57-92ea-9f4025571cba/1/LZK35qliPo1JEupR-reO_XZu-QQ.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/3b/afbab5-adcf-4e57-92ea-9f4025571cba/1/es_QeX4tm9NTnRlaAxJBpWoCoWo.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
109.107.162.0/23
Signature Algorithm: sha256WithRSAEncryption
71:a2:3e:51:a5:90:51:79:99:98:3a:61:bb:54:86:40:5d:1b:
fe:5d:1a:ce:46:dc:11:67:73:49:3c:a6:f8:d2:dd:a4:5a:09:
ed:8e:cf:fb:52:10:9e:39:c5:84:20:72:ff:19:33:04:7d:3c:
16:fa:1c:c1:0b:0e:27:62:0f:91:37:56:08:91:47:a3:27:66:
04:69:4a:6a:c0:1e:7a:ae:67:ea:f3:fb:cb:dc:74:75:7c:a8:
1d:e7:ce:a9:44:84:22:d7:17:82:e4:c9:1e:01:dd:7f:fe:c1:
81:f6:4f:cf:2e:b8:10:c3:e7:fa:c8:a5:dc:fa:6c:6f:14:87:
0d:a4:f3:cf:9c:ff:40:fd:51:da:bc:ac:a9:77:59:cf:9c:93:
1f:86:44:2a:6c:a3:96:d9:33:3c:d7:c3:77:98:98:bf:8b:8d:
bc:8e:c9:c5:c0:0b:a5:01:0f:a1:0e:a3:6e:2f:36:e1:71:f0:
dd:6f:33:2d:cc:d6:89:8c:f5:17:bf:63:0a:64:60:d2:69:f8:
d1:dc:96:ad:62:06:12:d1:13:a5:0e:0b:b1:30:80:87:d6:a9:
eb:7e:6a:37:77:09:82:c0:d0:53:e6:30:bb:fc:44:40:cf:d1:
5c:91:d6:d0:61:c8:c4:41:b5:98:ef:6e:4e:d3:1a:66:65:86:
46:b8:c8:10
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 19:04:05 2024 by rpki-client on console-ams.rpki-client.org