Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/3f/f57ca3-4ff1-4064-9df7-3da05388e9ae/1/SPpiHmz8bUn9W235n2i8-QCbAOY.roa
File: SPpiHmz8bUn9W235n2i8-QCbAOY.roa (raw, json)
Hash identifier: juWV92Y4fNlCp7k8iTJGSQmD35YW6nyu7HJ01Wer1Ok=
Subject key identifier: 48:FA:62:1E:6C:FC:6D:49:FD:5B:6D:F9:9F:68:BC:F9:00:9B:00:E6
Certificate issuer: /CN=07266adfb18b189f3dc4d3be6dc596254be5c9b1
Certificate serial: 01837D6053CAA3DE167000514BFC927DA17C
Authority key identifier: 07:26:6A:DF:B1:8B:18:9F:3D:C4:D3:BE:6D:C5:96:25:4B:E5:C9:B1
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/ByZq37GLGJ89xNO-bcWWJUvlybE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/3f/f57ca3-4ff1-4064-9df7-3da05388e9ae/1/SPpiHmz8bUn9W235n2i8-QCbAOY.roa
Signing time: Tue 27 Sep 2022 05:16:48 +0000
ROA not before: Tue 27 Sep 2022 05:16:48 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 204106
IP address blocks: 109.74.72.0/24 maxlen: 24
Validation: Failed, RFC 3779 resource not subset of parent's resources
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:83:7d:60:53:ca:a3:de:16:70:00:51:4b:fc:92:7d:a1:7c
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=07266adfb18b189f3dc4d3be6dc596254be5c9b1
Validity
Not Before: Sep 27 05:16:48 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=48fa621e6cfc6d49fd5b6df99f68bcf9009b00e6
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:dd:ce:c6:31:72:6a:a6:6a:1e:b1:36:ee:6e:01:
ab:0f:15:de:cb:d0:c8:8d:d3:82:90:54:1e:e7:bb:
1e:44:e0:8b:c2:1a:72:b6:11:54:f1:ba:97:fa:6c:
f9:7a:b8:80:64:fc:c7:34:c0:8c:cc:97:cf:c2:0a:
fa:d3:ec:3e:7b:af:aa:46:16:e0:df:c6:b8:ba:d1:
e7:d4:0f:90:74:d0:29:d8:3f:b7:4d:bc:d6:1d:75:
fc:b9:e0:69:14:76:21:d8:06:28:87:6d:99:5f:5f:
40:b6:c4:b0:c4:af:98:25:9f:68:3b:51:ea:11:65:
c1:4f:43:ae:52:3c:77:0c:bd:fc:df:2c:14:13:47:
1c:03:c2:c2:36:98:fd:89:8a:59:31:8c:2e:2f:95:
16:95:22:2b:eb:1c:26:89:e1:3e:08:0b:28:e9:a1:
23:c3:0a:21:8d:5f:20:26:3d:86:e0:31:48:30:c6:
d1:1b:ed:ca:bf:95:dd:3c:6a:1c:aa:b7:51:ab:17:
09:d4:dc:0d:e8:2c:10:e4:97:15:97:5e:46:59:d9:
30:fb:38:91:fa:46:3a:78:62:23:d4:d0:b2:59:fd:
cd:8d:d7:74:ac:d5:1a:37:25:e2:39:85:fe:44:63:
69:d2:99:af:c2:04:77:ee:3c:ed:b1:e3:b6:c1:18:
3e:4d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
48:FA:62:1E:6C:FC:6D:49:FD:5B:6D:F9:9F:68:BC:F9:00:9B:00:E6
X509v3 Authority Key Identifier:
keyid:07:26:6A:DF:B1:8B:18:9F:3D:C4:D3:BE:6D:C5:96:25:4B:E5:C9:B1
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ByZq37GLGJ89xNO-bcWWJUvlybE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/3f/f57ca3-4ff1-4064-9df7-3da05388e9ae/1/SPpiHmz8bUn9W235n2i8-QCbAOY.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/3f/f57ca3-4ff1-4064-9df7-3da05388e9ae/1/ByZq37GLGJ89xNO-bcWWJUvlybE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
109.74.72.0/24
Signature Algorithm: sha256WithRSAEncryption
06:c6:01:a6:d2:bb:de:39:2a:0b:74:89:75:6d:b8:f2:c7:6f:
65:61:86:da:3f:bf:0b:d7:05:b0:ca:c3:0a:31:cc:e2:bb:57:
8a:b0:38:45:51:09:60:be:09:58:a7:27:cd:6e:95:f2:22:c2:
72:5b:91:1a:dc:eb:41:8e:59:c0:0e:03:0d:2a:2c:85:83:3e:
0f:49:cf:29:ab:96:63:4e:49:64:65:6c:0e:18:ae:47:cc:49:
34:01:38:70:21:ac:c0:bb:22:23:1b:6d:e2:39:4e:68:bf:2d:
7d:30:22:f7:dd:49:da:a1:8a:f2:fd:39:23:cc:48:3f:7c:c2:
9f:fc:e0:d2:18:1c:b8:27:62:e1:2f:bd:7a:f3:dd:b3:f9:08:
82:92:6f:0a:ef:0e:4a:78:51:06:64:2b:70:43:6a:2b:03:84:
4f:04:eb:b1:8a:6b:b0:63:6e:4f:06:5e:07:55:5f:86:c3:c1:
8f:fb:6a:e4:be:58:bd:e9:4f:be:ea:e4:7d:ec:4d:85:18:d4:
9d:65:de:81:17:6f:95:8b:41:14:4d:33:78:10:24:52:96:95:
80:cb:91:8a:ba:0d:d5:9b:a8:87:7a:16:5d:a1:b1:84:0a:e4:
a2:e4:6b:ac:2f:60:d3:99:de:ce:44:c8:f9:35:7a:d9:79:6b:
1d:dc:b8:d0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 19:04:43 2024 by rpki-client on console-ams.rpki-client.org