Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/24/7a87a0-8014-4605-9fb5-9e71dc24a683/1/a9rbQbKewbPIINbYqsuEyfZwOsA.roa
File: a9rbQbKewbPIINbYqsuEyfZwOsA.roa (raw, json)
Hash identifier: 9ohaktzS64+37o4Tdtm7/IGNPElqgkmRhfczMwczp6U=
Subject key identifier: 6B:DA:DB:41:B2:9E:C1:B3:C8:20:D6:D8:AA:CB:84:C9:F6:70:3A:C0
Certificate issuer: /CN=2f93d3ba197f5ce3098bfa7700b43854eaa80e9e
Certificate serial: 01857139AB6350A2B461F82276EACE19AEB5
Authority key identifier: 2F:93:D3:BA:19:7F:5C:E3:09:8B:FA:77:00:B4:38:54:EA:A8:0E:9E
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/L5PTuhl_XOMJi_p3ALQ4VOqoDp4.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/24/7a87a0-8014-4605-9fb5-9e71dc24a683/1/a9rbQbKewbPIINbYqsuEyfZwOsA.roa
Signing time: Mon 02 Jan 2023 06:44:42 +0000
ROA not before: Mon 02 Jan 2023 06:44:42 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 196943
IP address blocks: 109.205.246.0/24 maxlen: 24
109.205.245.0/24 maxlen: 24
Validation: Failed, RFC 3779 resource not subset of parent's resources
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:85:71:39:ab:63:50:a2:b4:61:f8:22:76:ea:ce:19:ae:b5
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2f93d3ba197f5ce3098bfa7700b43854eaa80e9e
Validity
Not Before: Jan 2 06:44:42 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=6bdadb41b29ec1b3c820d6d8aacb84c9f6703ac0
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:81:10:b1:59:88:4b:4f:5f:81:f8:0b:33:32:24:
9f:76:bc:ed:2a:78:28:df:ab:7e:50:e2:b1:fa:69:
b4:cf:c1:bb:a0:a1:c6:fa:3b:ac:27:7c:69:9b:e6:
63:d9:74:60:e7:55:3c:15:31:e9:02:fc:96:e0:42:
32:53:fa:42:0a:d1:9e:58:47:d1:3d:27:6b:14:85:
65:b2:7a:88:89:34:18:77:ab:6e:1d:01:1b:55:8f:
5c:c5:d7:86:ea:72:bf:86:a8:8c:a3:4b:7f:2b:ac:
14:bc:76:cd:8d:ae:47:e1:5e:c5:b1:ef:fe:b5:6a:
64:08:36:dc:ec:7a:33:2e:75:d5:04:65:76:68:54:
f2:7c:98:78:00:85:5d:6a:fc:cd:30:6e:33:27:f9:
3e:56:90:51:45:b3:e9:09:00:87:7a:70:d9:1f:36:
52:10:fd:b5:f4:eb:a0:7d:b7:0a:6d:23:45:0f:d0:
6d:5d:ee:7f:51:47:92:18:64:ce:cd:9d:f2:73:74:
40:04:e2:ea:50:29:42:3f:6f:6e:01:33:d8:9a:ee:
25:bc:94:4e:1c:5a:a3:5b:b4:4a:25:04:9d:35:f7:
8c:5d:d1:33:bb:fb:92:a7:0a:f1:b0:17:37:ea:b0:
08:1c:b3:fa:83:8d:7d:a5:4a:d0:8c:6a:c6:da:10:
e0:bb
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
6B:DA:DB:41:B2:9E:C1:B3:C8:20:D6:D8:AA:CB:84:C9:F6:70:3A:C0
X509v3 Authority Key Identifier:
keyid:2F:93:D3:BA:19:7F:5C:E3:09:8B:FA:77:00:B4:38:54:EA:A8:0E:9E
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/L5PTuhl_XOMJi_p3ALQ4VOqoDp4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/24/7a87a0-8014-4605-9fb5-9e71dc24a683/1/a9rbQbKewbPIINbYqsuEyfZwOsA.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/24/7a87a0-8014-4605-9fb5-9e71dc24a683/1/L5PTuhl_XOMJi_p3ALQ4VOqoDp4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
109.205.245.0-109.205.246.255
Signature Algorithm: sha256WithRSAEncryption
3e:59:63:78:7e:6a:c4:e6:e4:50:f7:bb:63:16:06:70:7e:57:
6d:54:0e:f8:1d:1d:fb:d4:1a:0a:97:87:54:1a:35:1d:6d:17:
ff:90:1a:62:2d:27:3a:b7:78:78:53:2c:47:a1:89:c2:7d:ab:
7c:d0:7c:8e:11:21:c1:42:82:e2:0a:ce:08:d4:fa:57:b6:ad:
5c:e1:51:29:5b:c2:27:9a:d4:68:ec:99:31:ff:97:b7:3a:cd:
54:bc:2a:a7:25:7b:6e:45:43:45:2c:9e:37:f8:36:0a:83:9f:
70:44:27:cb:47:44:ca:39:be:29:89:7c:3b:72:03:63:ce:04:
db:e2:96:7a:e1:9c:b7:e7:12:d3:68:63:a5:43:12:4f:b2:34:
7b:e0:7f:f9:0e:77:1a:00:37:fc:15:cf:f0:9e:ab:62:85:fc:
49:d6:ab:c5:c7:e7:50:ca:20:16:01:f8:bf:ce:89:90:7a:02:
82:9b:b8:5f:93:d6:5f:8b:35:b8:96:f0:9e:53:76:90:83:d4:
d6:04:c8:20:e4:4e:fb:21:c2:4e:60:ab:84:b1:7d:83:34:06:
da:59:15:a4:59:45:2d:d5:ad:8a:08:97:f0:33:bf:36:ac:9d:
ed:5f:ab:9a:95:a5:a2:5e:b2:5f:e7:a9:03:fb:d3:86:8b:88:
02:90:3e:79
-----BEGIN CERTIFICATE-----
MIIFBTCCA+2gAwIBAgISAYVxOatjUKK0YfgidurOGa61MA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDJmOTNkM2JhMTk3ZjVjZTMwOThiZmE3NzAwYjQzODU0ZWFh
ODBlOWUwHhcNMjMwMTAyMDY0NDQyWhcNMjQwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
Eyg2YmRhZGI0MWIyOWVjMWIzYzgyMGQ2ZDhhYWNiODRjOWY2NzAzYWMwMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAgRCxWYhLT1+B+AszMiSfdrztKngo
36t+UOKx+mm0z8G7oKHG+jusJ3xpm+Zj2XRg51U8FTHpAvyW4EIyU/pCCtGeWEfR
PSdrFIVlsnqIiTQYd6tuHQEbVY9cxdeG6nK/hqiMo0t/K6wUvHbNja5H4V7Fse/+
tWpkCDbc7HozLnXVBGV2aFTyfJh4AIVdavzNMG4zJ/k+VpBRRbPpCQCHenDZHzZS
EP219OugfbcKbSNFD9BtXe5/UUeSGGTOzZ3yc3RABOLqUClCP29uATPYmu4lvJRO
HFqjW7RKJQSdNfeMXdEzu/uSpwrxsBc36rAIHLP6g419pUrQjGrG2hDguwIDAQAB
o4ICETCCAg0wHQYDVR0OBBYEFGva20GynsGzyCDW2KrLhMn2cDrAMB8GA1UdIwQY
MBaAFC+T07oZf1zjCYv6dwC0OFTqqA6eMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvTDVQVHVobF9YT01KaV9wM0FMUTRWT3FvRHA0LmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8yNC83YTg3YTAtODAxNC00NjA1LTlmYjUt
OWU3MWRjMjRhNjgzLzEvYTlyYlFiS2V3YlBJSU5iWXFzdUV5Zlp3T3NBLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8yNC83YTg3YTAtODAxNC00NjA1LTlmYjUtOWU3MWRjMjRhNjgz
LzEvTDVQVHVobF9YT01KaV9wM0FMUTRWT3FvRHA0LmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCcGCCsGAQUFBwEHAQH/BBgwFjAUBAIAATAOMAwDBABtzfUD
BABtzfYwDQYJKoZIhvcNAQELBQADggEBAD5ZY3h+asTm5FD3u2MWBnB+V21UDvgd
HfvUGgqXh1QaNR1tF/+QGmItJzq3eHhTLEehicJ9q3zQfI4RIcFCguIKzgjU+le2
rVzhUSlbwiea1GjsmTH/l7c6zVS8Kqcle25FQ0Usnjf4NgqDn3BEJ8tHRMo5vimJ
fDtyA2POBNvilnrhnLfnEtNoY6VDEk+yNHvgf/kOdxoAN/wVz/Ceq2KF/EnWq8XH
51DKIBYB+L/OiZB6AoKbuF+T1l+LNbiW8J5TdpCD1NYEyCDkTvshwk5gq4SxfYM0
BtpZFaRZRS3VrYoIl/Azvzasne1fq5qVpaJesl/nqQP704aLiAKQPnk=
-----END CERTIFICATE-----
Generated at Wed Jul 19 23:45:21 2023 by rpki-client on console-fra.rpki-client.org