Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/3b/afbab5-adcf-4e57-92ea-9f4025571cba/1/NMF1tTt3ajuAwzOV5dro3YcZu2c.roa
File: NMF1tTt3ajuAwzOV5dro3YcZu2c.roa (raw, json)
Hash identifier: IvCY6EJbe1Tpozna9nNQJc5Ya/5c6h1bcNKm1NySohk=
Subject key identifier: 34:C1:75:B5:3B:77:6A:3B:80:C3:33:95:E5:DA:E8:DD:87:19:BB:67
Certificate issuer: /CN=7acfd0797e2d9bd3539d195a031241a56a02a16a
Certificate serial: 018ADAFA8A5FA4CCA02FF95AC571051A62C0
Authority key identifier: 7A:CF:D0:79:7E:2D:9B:D3:53:9D:19:5A:03:12:41:A5:6A:02:A1:6A
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/es_QeX4tm9NTnRlaAxJBpWoCoWo.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/3b/afbab5-adcf-4e57-92ea-9f4025571cba/1/NMF1tTt3ajuAwzOV5dro3YcZu2c.roa
Signing time: Thu 28 Sep 2023 08:49:27 +0000
ROA not before: Thu 28 Sep 2023 08:49:27 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 212441
IP address blocks: 109.107.185.0/24 maxlen: 24
109.107.186.0/24 maxlen: 24
109.107.184.0/24 maxlen: 24
109.107.181.0/24 maxlen: 24
109.107.187.0/24 maxlen: 24
109.107.188.0/24 maxlen: 24
Validation: Failed, RFC 3779 resource not subset of parent's resources
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8a:da:fa:8a:5f:a4:cc:a0:2f:f9:5a:c5:71:05:1a:62:c0
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=7acfd0797e2d9bd3539d195a031241a56a02a16a
Validity
Not Before: Sep 28 08:49:27 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=34c175b53b776a3b80c33395e5dae8dd8719bb67
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:95:0b:27:e6:4c:78:88:6f:e9:7f:be:81:5b:2e:
b6:00:17:5c:69:d6:40:47:f9:d0:ff:aa:02:3c:05:
23:6d:f7:4f:7c:67:e8:22:a9:63:1b:66:9d:3c:c3:
70:cb:ab:12:a2:a5:20:1d:d5:ac:66:73:e3:d1:f4:
51:06:0a:0c:b3:bf:46:6e:58:0e:4e:71:9c:33:c7:
6d:0a:64:8d:a8:5a:a1:b5:71:6b:d7:67:b6:5e:6b:
79:7e:6a:68:03:c6:79:41:0c:56:fb:53:a4:48:ef:
fe:54:3c:9f:93:dd:4e:bd:b9:2f:a6:b9:98:62:a4:
54:ee:a6:59:6b:ab:40:29:e6:3b:88:29:4f:77:22:
89:7f:f4:c9:9d:c3:86:85:e8:01:3b:f2:b6:d8:90:
b1:20:6b:7c:e3:61:cb:5f:01:cc:ca:7d:6f:71:fe:
77:47:90:18:7f:13:2a:bd:3a:66:22:8c:99:e4:2f:
6b:79:3c:c5:58:5c:34:7e:49:f6:3e:53:a6:5e:77:
97:97:66:66:c2:d6:5b:78:3c:88:bd:1f:63:fe:7e:
11:a4:b5:44:1f:a9:c7:f6:9a:64:0b:5f:cc:18:d9:
3a:81:bf:7e:20:09:06:59:ef:6f:ed:0b:58:68:9c:
e1:12:68:a2:43:1b:d5:cc:32:34:12:9b:d0:e3:0e:
fc:a5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
34:C1:75:B5:3B:77:6A:3B:80:C3:33:95:E5:DA:E8:DD:87:19:BB:67
X509v3 Authority Key Identifier:
keyid:7A:CF:D0:79:7E:2D:9B:D3:53:9D:19:5A:03:12:41:A5:6A:02:A1:6A
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/es_QeX4tm9NTnRlaAxJBpWoCoWo.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/3b/afbab5-adcf-4e57-92ea-9f4025571cba/1/NMF1tTt3ajuAwzOV5dro3YcZu2c.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/3b/afbab5-adcf-4e57-92ea-9f4025571cba/1/es_QeX4tm9NTnRlaAxJBpWoCoWo.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
109.107.181.0/24
109.107.184.0-109.107.188.255
Signature Algorithm: sha256WithRSAEncryption
26:b7:aa:f6:89:85:67:15:54:83:9f:86:41:83:78:20:f3:0f:
91:82:4a:8c:c6:6d:bc:4d:23:11:86:84:ba:f5:55:1f:e3:55:
29:e1:5c:d6:6a:e3:76:59:cd:a8:cf:2c:c3:b5:13:09:d7:24:
59:6d:07:3b:e8:aa:d2:6c:15:bc:91:d2:59:24:8f:b5:7a:4a:
8a:69:8b:11:75:90:33:a2:f0:1d:80:40:ef:c5:1d:89:c2:5d:
be:4d:ac:34:ea:52:f6:6b:39:5b:56:23:0e:ee:1e:da:f6:45:
d1:71:f7:f3:04:f9:a6:af:25:1b:e8:23:6b:e4:99:2a:1e:35:
40:08:04:26:52:92:b9:04:7e:8a:40:98:c9:20:05:91:eb:b3:
55:dd:cd:6c:4e:80:88:65:70:b2:2e:a3:35:0d:c1:bf:55:50:
56:26:0c:ae:d9:2f:b0:59:0d:39:5b:25:f7:35:45:9b:f7:ac:
d2:8f:4c:8d:8d:31:cc:bf:f4:5d:a6:89:47:c0:16:6c:c6:bc:
0f:e0:ba:c3:49:db:e5:44:f6:31:1e:cc:b4:46:ab:5b:08:8f:
8c:12:a7:92:11:5c:ef:4e:fd:81:0d:f9:db:86:3b:78:60:32:
30:bc:37:bc:02:70:78:c9:c7:a7:c2:6e:82:d8:ce:45:7d:ad:
78:30:11:83
-----BEGIN CERTIFICATE-----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=
-----END CERTIFICATE-----
Generated at Thu Jun 6 17:26:09 2024 by rpki-client on console-fra.rpki-client.org