Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/3b/afbab5-adcf-4e57-92ea-9f4025571cba/1/hPfZRJH7Be3-aIcHKLpzCGjuyFw.roa
File: hPfZRJH7Be3-aIcHKLpzCGjuyFw.roa (raw, json)
Hash identifier: s+QdNboyP7Ms3Z6DKc6PVj0TkFs9QFiaKIABYbaexeI=
Subject key identifier: 84:F7:D9:44:91:FB:05:ED:FE:68:87:07:28:BA:73:08:68:EE:C8:5C
Certificate issuer: /CN=7acfd0797e2d9bd3539d195a031241a56a02a16a
Certificate serial: 01856E38B11110B6A0DF62A9519F19D4530A
Authority key identifier: 7A:CF:D0:79:7E:2D:9B:D3:53:9D:19:5A:03:12:41:A5:6A:02:A1:6A
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/es_QeX4tm9NTnRlaAxJBpWoCoWo.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/3b/afbab5-adcf-4e57-92ea-9f4025571cba/1/hPfZRJH7Be3-aIcHKLpzCGjuyFw.roa
Signing time: Sun 01 Jan 2023 16:44:47 +0000
ROA not before: Sun 01 Jan 2023 16:44:47 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 212441
IP address blocks: 109.107.185.0/24 maxlen: 24
109.107.186.0/24 maxlen: 24
109.107.184.0/24 maxlen: 24
109.107.182.0/24 maxlen: 24
109.107.183.0/24 maxlen: 24
109.107.180.0/24 maxlen: 24
109.107.181.0/24 maxlen: 24
109.107.191.0/24 maxlen: 24
109.107.189.0/24 maxlen: 24
109.107.190.0/24 maxlen: 24
109.107.187.0/24 maxlen: 24
109.107.188.0/24 maxlen: 24
Validation: Failed, RFC 3779 resource not subset of parent's resources
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:85:6e:38:b1:11:10:b6:a0:df:62:a9:51:9f:19:d4:53:0a
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=7acfd0797e2d9bd3539d195a031241a56a02a16a
Validity
Not Before: Jan 1 16:44:47 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=84f7d94491fb05edfe68870728ba730868eec85c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c7:32:24:c2:43:da:5d:95:1f:ee:b4:20:00:3b:
08:ce:be:c7:41:92:ce:67:15:7a:3f:a9:b9:8a:0a:
27:e6:2a:82:d3:b9:16:af:5b:2b:23:d3:5f:03:50:
36:d7:0a:ce:21:ca:b2:3f:8c:3f:27:5f:58:66:85:
64:c8:c1:f1:2e:1d:d5:f2:2f:6c:03:7d:6c:9f:e7:
47:d7:6b:96:a4:54:e4:54:53:f0:d8:64:7a:83:eb:
9b:86:b9:36:d2:89:9f:66:9c:7b:14:c8:40:8a:8b:
73:5f:d5:7f:c3:f8:c5:d7:42:35:59:fe:3e:8c:d9:
75:93:13:16:86:2f:0e:10:4a:fb:ac:4c:ff:fe:4c:
93:e2:51:d3:ea:15:5c:62:5c:da:23:68:1b:5c:60:
96:de:c0:99:cd:14:46:1f:c3:bb:a0:e0:da:48:b9:
38:6f:6a:51:2d:e5:76:e6:ce:6c:96:e6:e6:61:4b:
9f:7a:ba:06:81:56:93:91:3b:05:bf:a9:d5:23:da:
40:30:55:41:53:1b:e5:97:9f:66:90:8c:e1:2a:13:
53:00:48:4a:47:29:86:a9:98:93:0f:b0:c1:53:b0:
25:35:ab:bc:ad:2a:d0:1f:ba:3e:2e:47:ae:56:96:
d4:13:a5:db:88:36:0e:f1:96:51:7f:49:fb:4f:07:
5b:8d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
84:F7:D9:44:91:FB:05:ED:FE:68:87:07:28:BA:73:08:68:EE:C8:5C
X509v3 Authority Key Identifier:
keyid:7A:CF:D0:79:7E:2D:9B:D3:53:9D:19:5A:03:12:41:A5:6A:02:A1:6A
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/es_QeX4tm9NTnRlaAxJBpWoCoWo.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/3b/afbab5-adcf-4e57-92ea-9f4025571cba/1/hPfZRJH7Be3-aIcHKLpzCGjuyFw.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/3b/afbab5-adcf-4e57-92ea-9f4025571cba/1/es_QeX4tm9NTnRlaAxJBpWoCoWo.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
109.107.180.0-109.107.191.255
Signature Algorithm: sha256WithRSAEncryption
31:66:f6:2a:d4:55:1c:da:c6:a3:6e:15:1e:91:3c:b0:8c:6d:
18:cf:ac:b2:e8:3f:a6:db:43:68:0a:96:d1:ab:86:d0:57:ea:
94:23:61:67:7a:27:68:ea:ff:ad:98:b6:e2:d6:ff:ff:8a:a5:
51:71:67:a3:c7:8f:a9:d9:9c:3c:2c:95:6a:49:ad:5b:9f:b9:
4d:69:61:98:64:4a:82:1b:74:ff:b9:2c:9d:ed:56:d9:6c:a7:
09:5b:b5:5c:f6:d2:20:6e:8c:90:2f:a6:c2:03:62:24:9b:51:
1d:e7:97:40:3f:9c:7f:d0:14:d8:62:32:2b:63:35:95:41:a6:
d8:88:e8:d6:68:25:1e:44:c1:4c:f2:73:c5:63:de:50:7b:fd:
2c:99:72:0b:03:b3:9b:74:d7:8f:66:a5:22:97:9c:81:0d:96:
02:c0:96:85:6b:54:c7:12:94:ea:fa:29:fc:b9:94:e6:70:bf:
00:87:df:16:7d:ca:09:8a:44:6d:36:93:0e:d9:83:02:f2:ea:
cb:0f:62:2a:94:63:42:e1:bf:9b:7e:4e:57:9a:05:f1:2e:f2:
78:ae:85:da:8a:59:44:2e:45:9d:59:70:7f:c2:8c:0e:1d:aa:
de:08:8d:33:e3:c2:2f:67:fc:bc:e3:b4:83:41:12:14:aa:fa:
12:cc:f8:e7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:26:09 2024 by rpki-client on console-fra.rpki-client.org