Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/2f/2171be-b083-479b-a580-6a06b7502bd7/1/OfQ-1M3sfQlE1rfnfM7mGvcPjAU.roa
File: OfQ-1M3sfQlE1rfnfM7mGvcPjAU.roa (raw, json)
Hash identifier: j9VyXkVb4AhY3tHbY2SSl9d48QmkJO/Vnom2pOzkrTQ=
Subject key identifier: 39:F4:3E:D4:CD:EC:7D:09:44:D6:B7:E7:7C:CE:E6:1A:F7:0F:8C:05
Certificate issuer: /CN=37ed49efac9795987771acdc77a0e228904277ad
Certificate serial: 018C1BFEF007D6854F132E34350C2204A3DF
Authority key identifier: 37:ED:49:EF:AC:97:95:98:77:71:AC:DC:77:A0:E2:28:90:42:77:AD
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/N-1J76yXlZh3cazcd6DiKJBCd60.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/2f/2171be-b083-479b-a580-6a06b7502bd7/1/OfQ-1M3sfQlE1rfnfM7mGvcPjAU.roa
Signing time: Wed 29 Nov 2023 16:52:21 +0000
ROA not before: Wed 29 Nov 2023 16:52:21 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 9123
IP address blocks: 178.130.131.0/24 maxlen: 24
178.130.132.0/24 maxlen: 24
178.130.133.0/24 maxlen: 24
109.172.80.0/24 maxlen: 24
109.172.81.0/24 maxlen: 24
109.172.82.0/24 maxlen: 24
109.172.83.0/24 maxlen: 24
109.172.89.0/24 maxlen: 24
109.172.90.0/24 maxlen: 24
109.172.91.0/24 maxlen: 24
109.172.88.0/24 maxlen: 24
Validation: Failed, RFC 3779 resource not subset of parent's resources
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8c:1b:fe:f0:07:d6:85:4f:13:2e:34:35:0c:22:04:a3:df
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=37ed49efac9795987771acdc77a0e228904277ad
Validity
Not Before: Nov 29 16:52:21 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=39f43ed4cdec7d0944d6b7e77ccee61af70f8c05
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:94:a2:cc:05:68:49:70:f5:df:44:09:b5:b3:ef:
fe:f2:61:48:92:b1:03:e8:0c:14:a2:62:2a:de:24:
dd:4c:37:2a:6d:e0:1f:1d:d6:ca:3b:9b:a5:2d:5e:
a4:65:d3:73:74:a2:9b:f4:23:74:ec:07:6f:a3:71:
72:44:5f:f5:4b:9f:99:18:af:24:a5:41:37:8c:b8:
27:75:86:a1:04:40:b7:dc:9f:8d:8c:0a:56:13:aa:
96:b5:62:84:e6:ce:3c:75:4f:92:d6:6e:f5:b5:68:
87:29:e9:36:98:f4:ae:07:81:56:a5:1f:65:8c:b1:
e6:52:ca:22:d0:90:cc:e0:e5:e9:8a:93:c3:65:dd:
ed:a0:58:9e:0d:da:e2:e2:f3:93:47:01:9b:90:26:
2a:54:a8:55:9b:19:de:29:10:7c:90:7e:c7:10:a1:
08:63:27:f3:56:23:3b:b5:97:a2:1a:f1:09:52:52:
d5:a1:ed:1e:fe:2e:e5:7a:f7:96:e4:d2:67:0a:55:
a4:f2:1d:e5:84:e7:28:87:06:a9:ce:d0:87:af:c4:
b3:5c:50:9e:6d:81:06:d7:2e:2d:2b:df:7b:66:22:
08:8f:53:bb:a6:34:6b:76:3b:65:ac:24:5d:84:94:
a4:e3:7b:cd:43:3d:35:ee:35:12:f1:18:3b:1b:92:
50:17
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
39:F4:3E:D4:CD:EC:7D:09:44:D6:B7:E7:7C:CE:E6:1A:F7:0F:8C:05
X509v3 Authority Key Identifier:
keyid:37:ED:49:EF:AC:97:95:98:77:71:AC:DC:77:A0:E2:28:90:42:77:AD
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/N-1J76yXlZh3cazcd6DiKJBCd60.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/2f/2171be-b083-479b-a580-6a06b7502bd7/1/OfQ-1M3sfQlE1rfnfM7mGvcPjAU.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/2f/2171be-b083-479b-a580-6a06b7502bd7/1/N-1J76yXlZh3cazcd6DiKJBCd60.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
109.172.80.0/22
109.172.88.0/22
178.130.131.0-178.130.133.255
Signature Algorithm: sha256WithRSAEncryption
33:f1:6d:e5:23:f1:c8:90:1f:96:08:f6:8a:e1:94:dd:ad:e1:
64:4c:95:7b:63:3f:52:b1:b9:50:6b:28:72:27:71:3f:86:34:
dc:0a:df:5f:78:56:d6:1f:4a:06:67:ed:a8:43:55:cd:10:40:
09:df:14:d8:ef:5a:b4:dd:10:a6:8c:a8:7f:37:b5:e9:51:94:
ac:40:9b:2d:a2:6c:de:8b:0f:3b:51:f7:59:e9:6c:62:c7:a9:
0a:f4:06:21:98:c4:91:58:8c:3c:1b:55:a8:7c:98:0c:32:1f:
81:b4:e5:28:2f:87:5d:3f:2a:83:bd:10:c5:f1:b9:41:e2:37:
df:36:9b:c8:21:6b:82:f8:91:46:ba:a8:d7:11:65:4c:7e:7e:
6b:8d:03:fc:01:46:07:7a:70:ce:34:b8:30:3f:7f:ab:f2:2a:
9f:4c:09:dd:ac:a3:4f:dc:f1:41:bc:0c:33:39:48:4d:a7:b8:
de:af:f3:d0:c7:0f:11:9f:d1:b6:e5:f1:0d:35:d9:13:d5:8b:
8d:6e:e1:61:fd:93:f0:34:e3:c8:36:9e:a7:e3:aa:1c:6c:4d:
e9:be:30:4e:30:62:3e:21:d0:2f:91:8c:56:33:28:5a:d5:08:
e4:2e:d9:08:4d:bd:b0:22:59:ee:2d:82:e9:23:c8:d5:51:98:
e1:fe:a9:34
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:24:09 2024 by rpki-client on console-fra.rpki-client.org