Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/3b/afbab5-adcf-4e57-92ea-9f4025571cba/1/Pr5DTqjQ_8-2nK4PxSONsAsMRjo.roa
File: Pr5DTqjQ_8-2nK4PxSONsAsMRjo.roa (raw, json)
Hash identifier: A5/xntiWwaJZG0nB+faXv2kO2SfrxNX5ZQvf67suvWU=
Subject key identifier: 3E:BE:43:4E:A8:D0:FF:CF:B6:9C:AE:0F:C5:23:8D:B0:0B:0C:46:3A
Certificate issuer: /CN=7acfd0797e2d9bd3539d195a031241a56a02a16a
Certificate serial: 04CBA0
Authority key identifier: 7A:CF:D0:79:7E:2D:9B:D3:53:9D:19:5A:03:12:41:A5:6A:02:A1:6A
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/es_QeX4tm9NTnRlaAxJBpWoCoWo.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/3b/afbab5-adcf-4e57-92ea-9f4025571cba/1/Pr5DTqjQ_8-2nK4PxSONsAsMRjo.roa
Signing time: Sat 01 Jan 2022 00:51:16 +0000
ROA not before: Sat 01 Jan 2022 00:51:16 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 212441
IP address blocks: 109.107.185.0/24 maxlen: 24
109.107.186.0/24 maxlen: 24
109.107.184.0/24 maxlen: 24
109.107.182.0/24 maxlen: 24
109.107.183.0/24 maxlen: 24
109.107.180.0/24 maxlen: 24
109.107.181.0/24 maxlen: 24
109.107.191.0/24 maxlen: 24
109.107.189.0/24 maxlen: 24
109.107.190.0/24 maxlen: 24
109.107.187.0/24 maxlen: 24
109.107.188.0/24 maxlen: 24
Validation: Failed, RFC 3779 resource not subset of parent's resources
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 314272 (0x4cba0)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=7acfd0797e2d9bd3539d195a031241a56a02a16a
Validity
Not Before: Jan 1 00:51:16 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=3ebe434ea8d0ffcfb69cae0fc5238db00b0c463a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b8:b8:42:b7:38:15:22:68:ba:01:25:c3:1c:76:
35:6a:2b:86:5f:99:0b:a8:91:5c:a8:b0:74:42:45:
25:5e:d7:f5:10:82:13:ca:43:ae:3f:53:4a:de:87:
20:45:71:e8:82:4b:7a:df:cb:38:af:a7:6e:5d:60:
34:1f:17:ae:9b:1b:36:67:27:b6:75:a8:12:4e:fa:
79:5e:1d:24:e7:82:a2:c1:ad:60:3c:27:5c:e7:6c:
26:3f:e0:90:d5:4d:05:0e:bc:82:4f:ab:b1:59:1d:
f2:44:cb:8d:4b:7a:73:11:c3:ca:2e:b8:96:a4:93:
fd:2b:9c:f6:53:f8:7f:25:84:45:a6:99:bd:41:da:
97:ba:42:78:10:74:0d:e5:2d:01:2b:35:48:ec:88:
b7:d0:90:70:19:80:f8:91:6d:76:59:f0:c8:85:35:
d8:dc:3b:c3:5b:88:ab:63:86:0d:77:fb:80:4c:3c:
59:9c:4a:51:cf:34:56:e7:b1:57:ad:1d:9d:f9:0f:
85:2f:ac:40:43:a1:73:b9:c6:93:6a:a4:5d:f8:c8:
f8:6f:98:a7:6e:31:61:55:87:71:de:08:c7:9d:a5:
60:61:05:90:18:c1:54:5b:03:6e:5c:4f:34:2c:f6:
a3:d3:d2:17:0e:6f:3c:9c:64:7b:b3:fd:13:03:72:
03:a3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
3E:BE:43:4E:A8:D0:FF:CF:B6:9C:AE:0F:C5:23:8D:B0:0B:0C:46:3A
X509v3 Authority Key Identifier:
keyid:7A:CF:D0:79:7E:2D:9B:D3:53:9D:19:5A:03:12:41:A5:6A:02:A1:6A
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/es_QeX4tm9NTnRlaAxJBpWoCoWo.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/3b/afbab5-adcf-4e57-92ea-9f4025571cba/1/Pr5DTqjQ_8-2nK4PxSONsAsMRjo.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/3b/afbab5-adcf-4e57-92ea-9f4025571cba/1/es_QeX4tm9NTnRlaAxJBpWoCoWo.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
109.107.180.0-109.107.191.255
Signature Algorithm: sha256WithRSAEncryption
06:c3:95:01:d4:8b:55:a7:c6:48:87:c9:d3:d3:21:4f:61:01:
9c:0b:a6:82:1a:b6:0c:3e:37:6b:67:f2:37:82:ad:58:66:29:
39:68:ac:bc:57:31:22:c1:63:63:37:09:73:44:ac:cd:9d:1b:
ea:18:c1:87:c1:f7:1a:1e:aa:75:b5:c6:b7:cd:4f:34:20:56:
3d:9b:f6:2f:d7:5d:b5:75:f3:6f:7e:2d:d1:ca:5e:04:e0:c4:
9a:d3:c2:3a:65:b3:0f:b1:1a:c1:ef:33:cc:19:96:08:dc:ae:
f6:e1:ca:6d:5e:f6:5a:cc:e8:50:11:bb:be:74:1b:c3:32:5d:
0a:f0:ad:78:2b:f6:6b:86:28:00:75:97:ae:31:35:48:85:53:
05:41:35:7d:7d:20:91:c3:fc:c7:5e:14:2a:c1:3b:32:e4:ca:
a6:37:e6:e6:63:6d:91:b1:f5:e3:d5:12:2a:dc:6c:47:c2:3e:
48:d6:81:05:39:3b:51:7a:a6:56:20:02:71:88:3a:14:92:73:
9a:fc:12:fb:e4:c9:dc:3a:1b:70:7d:21:2a:48:1e:8b:85:da:
c7:f1:e3:bb:9d:fc:f1:f1:59:6d:1e:0f:bd:79:24:e4:27:9d:
1d:1a:25:fa:e4:6c:f4:94:f0:46:fa:f4:72:03:07:fb:dd:6b:
1b:66:ad:6e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 19:04:05 2024 by rpki-client on console-ams.rpki-client.org