Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/1e/32d85d-a717-4d68-82a6-2f365f22a18c/1/R0p1W1zM4BWCxSd_ZhG1352Jzno.roa
File: R0p1W1zM4BWCxSd_ZhG1352Jzno.roa (raw, json)
Hash identifier: cuyJ1hh6b6Y2wzAQNC6kwVgtMnvJYdXd283q2uOzMYU=
Subject key identifier: 47:4A:75:5B:5C:CC:E0:15:82:C5:27:7F:66:11:B5:DF:9D:89:CE:7A
Certificate issuer: /CN=1a392dfc6ba2d3186d3269c7091b7019815345d3
Certificate serial: 378B5734
Authority key identifier: 1A:39:2D:FC:6B:A2:D3:18:6D:32:69:C7:09:1B:70:19:81:53:45:D3
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Gjkt_Gui0xhtMmnHCRtwGYFTRdM.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/1e/32d85d-a717-4d68-82a6-2f365f22a18c/1/R0p1W1zM4BWCxSd_ZhG1352Jzno.roa
Signing time: Sat 01 Jan 2022 15:01:26 +0000
ROA not before: Sat 01 Jan 2022 15:01:26 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 50591
IP address blocks: 109.230.64.0/22 maxlen: 22
109.230.68.0/22 maxlen: 22
109.230.76.0/22 maxlen: 22
109.230.72.0/22 maxlen: 22
109.230.80.0/22 maxlen: 22
109.230.84.0/22 maxlen: 22
109.230.88.0/22 maxlen: 22
109.230.97.0/24 maxlen: 24
109.230.96.0/24 maxlen: 24
109.230.92.0/22 maxlen: 22
109.230.98.0/24 maxlen: 24
109.230.102.0/23 maxlen: 23
109.230.101.0/24 maxlen: 24
109.230.100.0/24 maxlen: 24
109.230.99.0/24 maxlen: 24
Validation: Failed, RFC 3779 resource not subset of parent's resources
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 931878708 (0x378b5734)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=1a392dfc6ba2d3186d3269c7091b7019815345d3
Validity
Not Before: Jan 1 15:01:26 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=474a755b5ccce01582c5277f6611b5df9d89ce7a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ec:59:ab:0c:57:11:58:98:ad:66:d2:41:e5:f3:
3d:8d:8f:2f:b5:a2:e5:dd:5a:de:58:58:fc:46:e3:
7c:a0:cc:a7:68:34:f7:3d:ce:07:82:8c:40:f7:5c:
61:03:ce:70:6c:f4:18:1e:2c:66:a6:2b:43:b8:63:
96:ac:38:d4:88:b6:93:99:94:a7:28:d9:80:1b:49:
b6:47:6a:8c:33:13:ea:19:f3:a7:34:d0:2f:94:76:
13:db:34:de:fe:61:4e:3e:78:46:1c:74:9b:75:13:
4d:1f:1b:c4:62:20:7f:28:66:11:e9:ba:93:0a:a0:
9f:62:82:6b:f4:60:b3:58:99:3b:f7:c1:58:43:fd:
98:e6:35:5e:4d:e2:26:6f:9f:48:e9:6e:f8:bd:9e:
00:b2:ad:9d:6f:43:4f:a2:a4:39:4e:84:e0:80:16:
00:38:66:f8:e3:b3:9f:ba:4a:03:04:31:3a:27:7f:
28:31:9e:b2:ea:19:81:dd:fb:73:0b:05:8d:53:09:
47:f2:ee:be:a0:ba:8e:eb:46:38:04:f3:ad:c9:ba:
7e:98:41:54:dd:af:8d:3f:d3:7b:c8:47:07:69:74:
f1:42:98:4f:f8:f1:76:a6:4f:e6:d6:07:6f:4e:f4:
a6:e8:55:80:f2:a7:21:64:de:86:40:e3:1e:77:7f:
9e:69
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
47:4A:75:5B:5C:CC:E0:15:82:C5:27:7F:66:11:B5:DF:9D:89:CE:7A
X509v3 Authority Key Identifier:
keyid:1A:39:2D:FC:6B:A2:D3:18:6D:32:69:C7:09:1B:70:19:81:53:45:D3
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Gjkt_Gui0xhtMmnHCRtwGYFTRdM.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/1e/32d85d-a717-4d68-82a6-2f365f22a18c/1/R0p1W1zM4BWCxSd_ZhG1352Jzno.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/1e/32d85d-a717-4d68-82a6-2f365f22a18c/1/Gjkt_Gui0xhtMmnHCRtwGYFTRdM.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
109.230.64.0-109.230.103.255
Signature Algorithm: sha256WithRSAEncryption
82:c6:79:77:15:3a:f4:8d:1c:c5:20:ef:64:d9:4c:ab:bc:15:
02:c0:cc:59:6f:fd:61:3f:02:d7:fd:f6:68:4a:98:4f:7e:22:
e1:51:e1:b0:67:0d:cb:b7:e5:e5:dc:d8:08:c3:b3:80:84:66:
d0:90:5e:aa:20:16:c6:5c:75:b3:4f:09:5b:8a:d3:c2:2f:21:
11:35:a9:c3:b7:f7:35:76:20:64:ed:e8:14:c4:39:b5:d0:36:
37:29:1a:84:1b:88:e9:fb:74:d7:24:31:ce:7b:28:d6:7b:32:
0a:2f:56:1f:d7:ca:61:39:15:65:51:46:56:f0:dc:fe:7d:51:
e0:3a:f8:b1:6b:a8:5b:b9:83:cb:be:fa:29:65:fd:c3:7d:c6:
10:ea:0b:d2:36:aa:69:11:ba:75:0a:b2:00:cd:e3:3e:7e:49:
77:ce:5a:1d:33:f0:e9:a7:5e:47:a3:09:80:aa:2f:ba:bb:99:
33:06:3f:fd:85:fa:1d:0a:e3:f6:b0:25:a9:4f:53:73:0e:33:
75:ef:49:d4:3b:16:74:5a:ea:42:50:13:00:4f:9d:76:69:e8:
1b:d8:16:e3:50:f2:38:de:f2:9d:ab:7e:8d:4b:2a:9b:ca:b2:
93:0b:e7:21:91:cd:50:16:f3:32:5c:76:42:9a:d3:d5:8a:25:
24:2e:91:86
-----BEGIN CERTIFICATE-----
MIIE9zCCA9+gAwIBAgIEN4tXNDANBgkqhkiG9w0BAQsFADAzMTEwLwYDVQQDEygx
YTM5MmRmYzZiYTJkMzE4NmQzMjY5YzcwOTFiNzAxOTgxNTM0NWQzMB4XDTIyMDEw
MTE1MDEyNloXDTIzMDcwMTAwMDAwMFowMzExMC8GA1UEAxMoNDc0YTc1NWI1Y2Nj
ZTAxNTgyYzUyNzdmNjYxMWI1ZGY5ZDg5Y2U3YTCCASIwDQYJKoZIhvcNAQEBBQAD
ggEPADCCAQoCggEBAOxZqwxXEViYrWbSQeXzPY2PL7Wi5d1a3lhY/EbjfKDMp2g0
9z3OB4KMQPdcYQPOcGz0GB4sZqYrQ7hjlqw41Ii2k5mUpyjZgBtJtkdqjDMT6hnz
pzTQL5R2E9s03v5hTj54Rhx0m3UTTR8bxGIgfyhmEem6kwqgn2KCa/Rgs1iZO/fB
WEP9mOY1Xk3iJm+fSOlu+L2eALKtnW9DT6KkOU6E4IAWADhm+OOzn7pKAwQxOid/
KDGesuoZgd37cwsFjVMJR/LuvqC6jutGOATzrcm6fphBVN2vjT/Te8hHB2l08UKY
T/jxdqZP5tYHb070puhVgPKnIWTehkDjHnd/nmkCAwEAAaOCAhEwggINMB0GA1Ud
DgQWBBRHSnVbXMzgFYLFJ39mEbXfnYnOejAfBgNVHSMEGDAWgBQaOS38a6LTGG0y
accJG3AZgVNF0zAOBgNVHQ8BAf8EBAMCB4AwZAYIKwYBBQUHAQEEWDBWMFQGCCsG
AQUFBzAChkhyc3luYzovL3Jwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxU
L0dqa3RfR3VpMHhodE1tbkhDUnR3R1lGVFJkTS5jZXIwgY0GCCsGAQUFBwELBIGA
MH4wfAYIKwYBBQUHMAuGcHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5
L0RFRkFVTFQvMWUvMzJkODVkLWE3MTctNGQ2OC04MmE2LTJmMzY1ZjIyYTE4Yy8x
L1IwcDFXMXpNNEJXQ3hTZF9aaEcxMzUySnpuby5yb2EwgYEGA1UdHwR6MHgwdqB0
oHKGcHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvMWUv
MzJkODVkLWE3MTctNGQ2OC04MmE2LTJmMzY1ZjIyYTE4Yy8xL0dqa3RfR3VpMHho
dE1tbkhDUnR3R1lGVFJkTS5jcmwwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAn
BggrBgEFBQcBBwEB/wQYMBYwFAQCAAEwDjAMAwQGbeZAAwQDbeZgMA0GCSqGSIb3
DQEBCwUAA4IBAQCCxnl3FTr0jRzFIO9k2UyrvBUCwMxZb/1hPwLX/fZoSphPfiLh
UeGwZw3Lt+Xl3NgIw7OAhGbQkF6qIBbGXHWzTwlbitPCLyERNanDt/c1diBk7egU
xDm10DY3KRqEG4jp+3TXJDHOeyjWezIKL1Yf18phORVlUUZW8Nz+fVHgOvixa6hb
uYPLvvopZf3DfcYQ6gvSNqppEbp1CrIAzeM+fkl3zlodM/Dpp15HowmAqi+6u5kz
Bj/9hfodCuP2sCWpT1NzDjN170nUOxZ0WupCUBMAT512aegb2BbjUPI43vKdq36N
SyqbyrKTC+chkc1QFvMyXHZCmtPViiUkLpGG
-----END CERTIFICATE-----
Generated at Thu Jun 6 18:57:18 2024 by rpki-client on console-ams.rpki-client.org