Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/24/7a87a0-8014-4605-9fb5-9e71dc24a683/1/Yyn1cS7c_auGHKY0HLf_L1Omfcs.roa
File: Yyn1cS7c_auGHKY0HLf_L1Omfcs.roa (raw, json)
Hash identifier: ZeIWWo88H+CGJD2MDAa/phwWmlyoTuaYt6ylh0ifhMs=
Subject key identifier: 63:29:F5:71:2E:DC:FD:AB:86:1C:A6:34:1C:B7:FF:2F:53:A6:7D:CB
Certificate issuer: /CN=2f93d3ba197f5ce3098bfa7700b43854eaa80e9e
Certificate serial: 03919611
Authority key identifier: 2F:93:D3:BA:19:7F:5C:E3:09:8B:FA:77:00:B4:38:54:EA:A8:0E:9E
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/L5PTuhl_XOMJi_p3ALQ4VOqoDp4.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/24/7a87a0-8014-4605-9fb5-9e71dc24a683/1/Yyn1cS7c_auGHKY0HLf_L1Omfcs.roa
Signing time: Sat 01 Jan 2022 06:06:45 +0000
ROA not before: Sat 01 Jan 2022 06:06:45 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 196943
IP address blocks: 109.205.246.0/24 maxlen: 24
109.205.245.0/24 maxlen: 24
Validation: Failed, RFC 3779 resource not subset of parent's resources
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 59872785 (0x3919611)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2f93d3ba197f5ce3098bfa7700b43854eaa80e9e
Validity
Not Before: Jan 1 06:06:45 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=6329f5712edcfdab861ca6341cb7ff2f53a67dcb
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9a:d1:44:17:2b:91:6a:62:1b:39:ee:44:8f:10:
3d:14:88:36:35:ae:70:1d:3f:d5:d5:bb:f3:37:6c:
a6:3a:79:74:08:8c:d5:63:29:80:7a:14:71:85:b5:
cf:62:d8:bb:4d:c9:8c:f2:d2:5d:c0:4e:4e:26:25:
cb:1d:5c:57:0d:b0:6d:4b:e4:b7:56:e4:34:10:5f:
58:af:88:57:a0:6f:75:a6:69:d4:6a:bf:97:bd:2d:
7e:c1:ae:23:80:3c:43:7f:4e:c9:d7:d7:4d:0d:eb:
10:1e:ff:42:90:1e:e2:24:06:11:a8:ba:f3:d8:9d:
82:a3:8f:0c:91:9e:7f:e3:2e:1d:ad:8e:50:12:9a:
7c:8e:48:fc:2c:df:d9:96:67:c8:96:39:e8:a7:3e:
7a:0d:50:f4:67:c9:4d:a2:be:83:0f:e6:35:30:61:
b2:de:54:7f:28:fd:c0:fb:b2:ff:49:f6:1f:ad:91:
36:10:93:47:89:28:b6:85:0c:6f:0b:15:60:f2:cc:
13:14:5b:a8:ce:9f:0e:a2:ae:e5:55:0e:e5:39:0e:
fc:51:4f:b6:59:94:db:f4:9c:f4:92:d9:6f:49:ac:
81:f2:48:46:18:17:a8:ce:a6:aa:05:eb:5e:20:e3:
a3:db:7c:1b:26:92:b6:9c:37:a0:9c:1e:4e:77:63:
f9:c9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
63:29:F5:71:2E:DC:FD:AB:86:1C:A6:34:1C:B7:FF:2F:53:A6:7D:CB
X509v3 Authority Key Identifier:
keyid:2F:93:D3:BA:19:7F:5C:E3:09:8B:FA:77:00:B4:38:54:EA:A8:0E:9E
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/L5PTuhl_XOMJi_p3ALQ4VOqoDp4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/24/7a87a0-8014-4605-9fb5-9e71dc24a683/1/Yyn1cS7c_auGHKY0HLf_L1Omfcs.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/24/7a87a0-8014-4605-9fb5-9e71dc24a683/1/L5PTuhl_XOMJi_p3ALQ4VOqoDp4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
109.205.245.0-109.205.246.255
Signature Algorithm: sha256WithRSAEncryption
a5:40:2d:ab:20:25:21:08:20:b3:c3:c6:d4:03:8e:c6:fd:30:
e9:70:ac:8c:74:c9:b5:d0:e7:36:83:c1:da:dc:c1:c8:1f:2f:
f6:64:ef:5c:cb:39:a3:f1:01:de:cc:97:c1:11:0a:c1:e8:3d:
bd:74:a1:2d:b1:52:38:11:a7:40:e4:86:81:9e:da:cb:0c:33:
ec:09:de:d3:8e:14:71:2e:f0:c7:1f:70:dd:0d:e0:2e:a0:17:
46:07:6c:26:82:ff:4b:f8:29:ad:7b:69:20:81:11:de:d2:ce:
b4:c1:8f:59:bb:66:00:f4:b5:e4:ff:73:12:7e:a0:a0:26:8d:
a3:9d:3e:b7:6a:3e:ea:d4:d7:49:06:89:e9:7f:37:6a:06:b9:
20:e8:d9:e5:b1:99:98:e5:a0:fa:8d:a6:49:00:f8:af:bd:75:
99:4d:e8:35:f9:92:4c:6d:25:1c:2f:84:fe:ad:fb:28:18:90:
95:a4:0e:c5:a0:6a:b7:4a:6a:cd:91:c6:79:58:a2:f1:f1:6e:
5f:83:39:0e:e7:ac:05:92:5e:fc:45:11:63:a5:e2:da:97:67:
50:a2:06:0b:12:c6:d2:ac:89:e7:b8:93:4e:19:11:2d:93:ef:
d8:fb:b9:57:c2:c3:45:1d:ca:c7:02:1b:e8:e1:f0:bd:4d:33:
62:5a:c4:45
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:22:34 2024 by rpki-client on console-fra.rpki-client.org