Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/3b/afbab5-adcf-4e57-92ea-9f4025571cba/1/Q2sKZQuU_7B2dpb8sBsRvLXIjOo.roa
File: Q2sKZQuU_7B2dpb8sBsRvLXIjOo.roa (raw, json)
Hash identifier: Ma9/8165ZoeD/aSdaYmy59ot5pQ4uxD78hP6urLK9TM=
Subject key identifier: 43:6B:0A:65:0B:94:FF:B0:76:76:96:FC:B0:1B:11:BC:B5:C8:8C:EA
Certificate issuer: /CN=7acfd0797e2d9bd3539d195a031241a56a02a16a
Certificate serial: 018B00B85AE5AD1581E2FBB5CC334FE8662F
Authority key identifier: 7A:CF:D0:79:7E:2D:9B:D3:53:9D:19:5A:03:12:41:A5:6A:02:A1:6A
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/es_QeX4tm9NTnRlaAxJBpWoCoWo.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/3b/afbab5-adcf-4e57-92ea-9f4025571cba/1/Q2sKZQuU_7B2dpb8sBsRvLXIjOo.roa
Signing time: Thu 05 Oct 2023 16:42:43 +0000
ROA not before: Thu 05 Oct 2023 16:42:43 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 203727
IP address blocks: 109.107.182.0/24 maxlen: 24
Validation: Failed, RFC 3779 resource not subset of parent's resources
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8b:00:b8:5a:e5:ad:15:81:e2:fb:b5:cc:33:4f:e8:66:2f
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=7acfd0797e2d9bd3539d195a031241a56a02a16a
Validity
Not Before: Oct 5 16:42:43 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=436b0a650b94ffb0767696fcb01b11bcb5c88cea
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d3:fd:0c:82:4d:9a:09:3d:0f:bc:ca:f5:d8:62:
85:28:60:9f:ce:5f:f3:63:ff:d8:7d:3c:76:61:2f:
b8:1c:76:c0:67:dc:e4:57:6b:27:73:7e:e0:31:a0:
0f:d4:6c:fe:10:75:e8:9c:c2:2d:ca:d5:ed:f2:69:
cd:2b:22:d1:35:8a:6a:06:d1:c9:3c:52:b7:48:6a:
45:b9:32:d0:92:18:5d:14:1a:24:70:84:f1:65:ee:
41:9e:d8:e0:d6:0d:22:07:b1:9c:ba:96:3c:99:10:
61:2f:6f:03:3c:52:4c:7a:cd:18:f2:26:af:2c:18:
f4:20:ff:5a:3f:98:fc:59:60:a1:af:7b:b2:8f:d0:
f4:c5:3c:56:5e:d0:48:e7:90:da:46:9a:b0:41:93:
86:bf:8f:0d:9a:ca:0d:7c:1c:06:c0:19:e9:f8:a6:
ae:0b:39:67:12:73:67:f2:9c:9d:c0:b2:87:08:fd:
17:03:ca:58:76:0f:19:12:c5:d1:9c:29:dd:32:23:
28:3e:cc:3f:62:f2:ab:18:c3:e3:8f:a4:5d:ab:af:
46:53:e7:8e:50:6f:c1:39:4a:8e:fb:9f:f6:53:71:
ab:15:5c:7f:fd:68:22:5f:f8:13:9b:11:47:ad:30:
67:af:e9:ab:44:96:29:d7:18:06:d3:0e:7f:78:93:
89:4d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
43:6B:0A:65:0B:94:FF:B0:76:76:96:FC:B0:1B:11:BC:B5:C8:8C:EA
X509v3 Authority Key Identifier:
keyid:7A:CF:D0:79:7E:2D:9B:D3:53:9D:19:5A:03:12:41:A5:6A:02:A1:6A
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/es_QeX4tm9NTnRlaAxJBpWoCoWo.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/3b/afbab5-adcf-4e57-92ea-9f4025571cba/1/Q2sKZQuU_7B2dpb8sBsRvLXIjOo.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/3b/afbab5-adcf-4e57-92ea-9f4025571cba/1/es_QeX4tm9NTnRlaAxJBpWoCoWo.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
109.107.182.0/24
Signature Algorithm: sha256WithRSAEncryption
8d:0c:50:1e:29:e5:ca:a4:c3:75:d1:7d:1d:db:c1:94:e9:64:
51:b8:b0:b8:cc:84:ba:41:e7:5d:76:03:0e:e3:76:67:c7:fd:
89:3f:83:97:6b:f1:eb:59:e3:c1:ed:b1:bd:68:c4:10:8b:c1:
eb:d7:85:86:61:13:a4:e2:5f:8a:49:4c:38:58:41:54:2f:9b:
71:8d:dc:96:60:e6:e6:f9:07:93:ab:36:e6:63:8c:2c:ec:f6:
13:c2:86:1e:72:7c:74:ab:1d:70:9d:6e:49:84:76:e6:b4:8f:
4f:e8:b0:06:2a:30:26:f7:c0:91:77:cf:7b:d1:8f:05:a8:44:
27:90:d4:6e:3b:5d:b3:5a:a3:00:ea:2e:41:67:31:65:48:62:
dd:0f:0b:fd:ec:d5:8a:4c:2a:09:b2:94:73:1d:da:83:34:64:
a0:fa:4f:9c:43:71:31:dd:a1:9a:84:bb:47:e1:01:5c:c3:3d:
aa:3b:2c:1e:93:03:4e:9e:f0:17:84:fc:af:ea:9c:d9:2c:b6:
dc:32:0d:1c:79:37:aa:69:28:c6:8e:3b:96:3a:35:19:b2:2d:
fd:4e:b8:fc:65:b1:79:56:9f:e4:0d:a9:15:99:d4:2a:39:0d:
40:8a:b0:8b:65:79:ee:1c:4b:2a:ce:f1:ce:06:5c:e7:51:fd:
0e:0f:d1:e1
-----BEGIN CERTIFICATE-----
MIIE/TCCA+WgAwIBAgISAYsAuFrlrRWB4vu1zDNP6GYvMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDdhY2ZkMDc5N2UyZDliZDM1MzlkMTk1YTAzMTI0MWE1NmEw
MmExNmEwHhcNMjMxMDA1MTY0MjQzWhcNMjQwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
Eyg0MzZiMGE2NTBiOTRmZmIwNzY3Njk2ZmNiMDFiMTFiY2I1Yzg4Y2VhMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA0/0Mgk2aCT0PvMr12GKFKGCfzl/z
Y//YfTx2YS+4HHbAZ9zkV2snc37gMaAP1Gz+EHXonMItytXt8mnNKyLRNYpqBtHJ
PFK3SGpFuTLQkhhdFBokcITxZe5Bntjg1g0iB7GcupY8mRBhL28DPFJMes0Y8iav
LBj0IP9aP5j8WWChr3uyj9D0xTxWXtBI55DaRpqwQZOGv48NmsoNfBwGwBnp+Kau
CzlnEnNn8pydwLKHCP0XA8pYdg8ZEsXRnCndMiMoPsw/YvKrGMPjj6Rdq69GU+eO
UG/BOUqO+5/2U3GrFVx//WgiX/gTmxFHrTBnr+mrRJYp1xgG0w5/eJOJTQIDAQAB
o4ICCTCCAgUwHQYDVR0OBBYEFENrCmULlP+wdnaW/LAbEby1yIzqMB8GA1UdIwQY
MBaAFHrP0Hl+LZvTU50ZWgMSQaVqAqFqMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvZXNfUWVYNHRtOU5UblJsYUF4SkJwV29Db1dvLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8zYi9hZmJhYjUtYWRjZi00ZTU3LTkyZWEt
OWY0MDI1NTcxY2JhLzEvUTJzS1pRdVVfN0IyZHBiOHNCc1J2TFhJak9vLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8zYi9hZmJhYjUtYWRjZi00ZTU3LTkyZWEtOWY0MDI1NTcxY2Jh
LzEvZXNfUWVYNHRtOU5UblJsYUF4SkJwV29Db1dvLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAbWu2MA0G
CSqGSIb3DQEBCwUAA4IBAQCNDFAeKeXKpMN10X0d28GU6WRRuLC4zIS6QedddgMO
43Znx/2JP4OXa/HrWePB7bG9aMQQi8Hr14WGYROk4l+KSUw4WEFUL5txjdyWYObm
+QeTqzbmY4ws7PYTwoYecnx0qx1wnW5JhHbmtI9P6LAGKjAm98CRd8970Y8FqEQn
kNRuO12zWqMA6i5BZzFlSGLdDwv97NWKTCoJspRzHdqDNGSg+k+cQ3Ex3aGahLtH
4QFcwz2qOywekwNOnvAXhPyv6pzZLLbcMg0ceTeqaSjGjjuWOjUZsi39Trj8ZbF5
Vp/kDakVmdQqOQ1AirCLZXnuHEsqzvHOBlznUf0OD9Hh
-----END CERTIFICATE-----
Generated at Thu Jun 6 17:26:09 2024 by rpki-client on console-fra.rpki-client.org