Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/3b/afbab5-adcf-4e57-92ea-9f4025571cba/1/vY23U2YGKgSqr7m5rTo9ahiK7i8.roa
File: vY23U2YGKgSqr7m5rTo9ahiK7i8.roa (raw, json)
Hash identifier: pRXZe3J58GZzQ3qxrPmZpoMmu6jJoGga4Igt+ka4oMY=
Subject key identifier: BD:8D:B7:53:66:06:2A:04:AA:AF:B9:B9:AD:3A:3D:6A:18:8A:EE:2F
Certificate issuer: /CN=7acfd0797e2d9bd3539d195a031241a56a02a16a
Certificate serial: 018AF4AED0C6BCBB9E5842D8DEAC4E05AD31
Authority key identifier: 7A:CF:D0:79:7E:2D:9B:D3:53:9D:19:5A:03:12:41:A5:6A:02:A1:6A
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/es_QeX4tm9NTnRlaAxJBpWoCoWo.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/3b/afbab5-adcf-4e57-92ea-9f4025571cba/1/vY23U2YGKgSqr7m5rTo9ahiK7i8.roa
Signing time: Tue 03 Oct 2023 08:36:51 +0000
ROA not before: Tue 03 Oct 2023 08:36:51 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 216218
IP address blocks: 109.107.188.0/24 maxlen: 24
Validation: Failed, RFC 3779 resource not subset of parent's resources
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8a:f4:ae:d0:c6:bc:bb:9e:58:42:d8:de:ac:4e:05:ad:31
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=7acfd0797e2d9bd3539d195a031241a56a02a16a
Validity
Not Before: Oct 3 08:36:51 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=bd8db75366062a04aaafb9b9ad3a3d6a188aee2f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9e:bf:2c:e9:d5:27:8f:34:f8:e5:70:44:1d:1c:
c8:fa:dd:df:85:10:5c:24:3c:fa:a0:1e:3e:98:3e:
17:5d:8b:ec:a8:4a:9d:b1:e3:89:04:bb:86:d3:46:
3e:c0:38:57:4a:42:bb:0c:97:34:98:34:4d:c6:af:
63:ef:ab:39:40:b4:35:85:31:27:19:ed:13:00:37:
b8:67:86:b7:3f:ba:15:c4:61:07:d4:03:9e:f4:cb:
9e:51:4d:a5:8d:82:ad:68:cf:3a:fb:a4:7d:7e:d1:
af:2c:36:f0:78:4f:82:b2:00:01:c7:dd:dd:69:48:
77:1c:14:cb:08:83:0e:fe:46:35:78:9a:ed:b7:ac:
f7:47:8a:ff:10:ec:41:e5:9c:25:3f:28:c2:aa:ee:
b0:2e:d3:86:6b:cc:8e:12:91:66:b4:fb:c1:cb:fa:
4f:7a:89:33:2b:e7:92:34:1d:5a:a8:26:37:d8:dd:
d5:8f:71:b3:ab:42:4b:fd:77:8e:a3:0d:a9:4c:11:
e2:e9:30:4a:b0:36:55:6d:bf:5b:48:bf:10:fa:6e:
14:69:06:ae:e4:73:7a:d8:61:ee:5d:2c:ee:8e:96:
0a:8e:ea:df:5c:5f:d4:b1:00:91:b6:c6:36:ab:a1:
1a:28:e5:71:f6:24:50:4e:27:0f:4d:c0:00:54:95:
84:3b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
BD:8D:B7:53:66:06:2A:04:AA:AF:B9:B9:AD:3A:3D:6A:18:8A:EE:2F
X509v3 Authority Key Identifier:
keyid:7A:CF:D0:79:7E:2D:9B:D3:53:9D:19:5A:03:12:41:A5:6A:02:A1:6A
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/es_QeX4tm9NTnRlaAxJBpWoCoWo.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/3b/afbab5-adcf-4e57-92ea-9f4025571cba/1/vY23U2YGKgSqr7m5rTo9ahiK7i8.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/3b/afbab5-adcf-4e57-92ea-9f4025571cba/1/es_QeX4tm9NTnRlaAxJBpWoCoWo.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
109.107.188.0/24
Signature Algorithm: sha256WithRSAEncryption
75:78:34:47:8e:3a:06:e7:81:42:8a:a4:f0:fd:ce:02:d9:32:
87:4d:f7:04:dd:3a:ac:ca:f8:e3:5f:f4:16:ed:d9:02:f9:5f:
2d:3c:a8:a7:f0:ba:48:33:ff:3e:3a:59:f3:6a:5f:3c:b9:74:
2c:23:ca:46:b8:37:17:af:a0:d1:a8:4d:55:b8:ef:20:b6:07:
67:be:c8:e5:32:5c:04:7e:08:3b:a0:e9:0a:2c:4a:db:f6:7b:
d2:66:01:d1:d7:11:7d:a1:99:8a:30:92:2d:b6:10:53:9b:c8:
84:2b:15:01:c2:55:71:3a:9a:23:a5:2b:bf:f9:61:d5:05:fd:
92:b7:0f:89:36:b3:5a:bd:36:01:2b:a9:f3:43:32:55:51:d3:
b0:89:48:6a:c3:8e:32:fd:b7:07:27:d4:d7:24:6d:44:ff:ba:
ad:8e:42:fd:e4:2a:01:dd:bc:85:e7:05:d8:8f:7c:2a:1d:2d:
e9:20:eb:04:03:ef:92:3f:ff:f1:88:ce:5e:a0:d7:31:fa:ef:
5f:c7:5b:41:70:e9:68:98:de:3e:81:e4:f6:ff:6e:58:68:44:
ac:09:8e:42:46:f5:d8:1c:ec:85:62:09:6c:6b:07:68:5c:e3:
d5:8f:f7:63:84:d3:36:82:dc:36:e4:68:37:07:59:a4:e0:3e:
69:ab:f9:d1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:26:09 2024 by rpki-client on console-fra.rpki-client.org