Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/2f/2171be-b083-479b-a580-6a06b7502bd7/1/QkxIeHz8EKA-YlLSFs0ctunlWSM.roa
File: QkxIeHz8EKA-YlLSFs0ctunlWSM.roa (raw, json)
Hash identifier: 5SyMjeOGlfJW4MZ8YyFf2MSoBeiiEd2gT4SGtw12UEE=
Subject key identifier: 42:4C:48:78:7C:FC:10:A0:3E:62:52:D2:16:CD:1C:B6:E9:E5:59:23
Certificate issuer: /CN=37ed49efac9795987771acdc77a0e228904277ad
Certificate serial: 018DCC3400E9247C97931884F99131C578AF
Authority key identifier: 37:ED:49:EF:AC:97:95:98:77:71:AC:DC:77:A0:E2:28:90:42:77:AD
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/N-1J76yXlZh3cazcd6DiKJBCd60.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/2f/2171be-b083-479b-a580-6a06b7502bd7/1/QkxIeHz8EKA-YlLSFs0ctunlWSM.roa
Signing time: Wed 21 Feb 2024 15:06:16 +0000
ROA not before: Wed 21 Feb 2024 15:06:16 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 9123
IP address blocks: 109.172.80.0/24 maxlen: 24
109.172.81.0/24 maxlen: 24
109.172.82.0/24 maxlen: 24
109.172.83.0/24 maxlen: 24
109.172.88.0/24 maxlen: 24
109.172.89.0/24 maxlen: 24
109.172.90.0/24 maxlen: 24
109.172.91.0/24 maxlen: 24
178.130.131.0/24 maxlen: 24
Validation: Failed, RFC 3779 resource not subset of parent's resources
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8d:cc:34:00:e9:24:7c:97:93:18:84:f9:91:31:c5:78:af
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=37ed49efac9795987771acdc77a0e228904277ad
Validity
Not Before: Feb 21 15:06:16 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=424c48787cfc10a03e6252d216cd1cb6e9e55923
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8c:d7:6d:5d:6c:f2:58:fd:5e:de:de:97:4e:89:
ea:de:5a:ed:e9:3e:9b:b1:ed:de:5c:89:9c:e5:c7:
55:05:bb:a0:94:11:39:a2:04:86:51:ac:7f:71:f1:
55:2d:28:d2:20:1c:05:03:b9:b1:db:fe:b3:30:9c:
19:bb:5f:23:92:66:14:d2:74:2c:74:a7:e3:88:e6:
f6:07:f7:c9:f7:21:a8:68:32:68:17:4f:8f:ea:81:
37:70:bf:cf:a3:91:03:44:91:31:a9:71:57:ba:1d:
49:ef:22:0e:fe:5e:5e:93:c5:1c:20:ee:ac:d5:56:
ac:a1:52:c7:a1:63:a9:b2:10:e0:4d:e5:53:f7:63:
fd:57:55:31:69:ad:7f:f1:90:aa:fc:72:de:e3:ed:
cf:6d:c2:bc:12:e5:14:cf:91:6d:0d:b6:1b:18:e5:
ac:e3:06:c5:51:52:cc:ab:53:c8:c3:5b:d6:00:62:
bf:ac:4c:22:2a:34:33:f8:fe:dd:d6:a8:71:68:0d:
49:11:3d:27:44:a4:c5:15:b0:37:1a:04:c3:da:15:
8c:bb:1a:40:83:85:63:3b:4f:e2:6a:0a:1d:d5:f8:
ef:d6:77:d3:6a:e5:da:5e:2f:bf:f2:48:c8:3b:3f:
d3:72:0e:90:f8:79:26:1f:dc:86:c3:2a:0c:b1:f2:
82:25
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
42:4C:48:78:7C:FC:10:A0:3E:62:52:D2:16:CD:1C:B6:E9:E5:59:23
X509v3 Authority Key Identifier:
keyid:37:ED:49:EF:AC:97:95:98:77:71:AC:DC:77:A0:E2:28:90:42:77:AD
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/N-1J76yXlZh3cazcd6DiKJBCd60.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/2f/2171be-b083-479b-a580-6a06b7502bd7/1/QkxIeHz8EKA-YlLSFs0ctunlWSM.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/2f/2171be-b083-479b-a580-6a06b7502bd7/1/N-1J76yXlZh3cazcd6DiKJBCd60.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
109.172.80.0/22
109.172.88.0/22
178.130.131.0/24
Signature Algorithm: sha256WithRSAEncryption
5b:dc:07:47:18:9b:23:90:ed:ca:78:b7:e7:68:d5:4e:5f:56:
7a:45:b0:7f:9c:ee:33:7b:06:bf:0c:cc:35:94:a9:81:12:f3:
44:77:87:ca:3b:46:29:d4:9a:47:e7:89:2e:c8:46:d6:6d:78:
2a:41:67:da:ff:0a:b9:06:eb:34:a0:36:7a:eb:c0:9d:70:0d:
e4:2e:5c:44:98:0b:c8:00:b7:0f:80:e9:7d:4d:8b:8a:99:65:
a6:88:d8:84:e1:da:b6:56:d5:84:6c:86:33:e1:ec:cf:84:7a:
0d:30:cb:c2:66:4c:14:fa:08:50:71:f6:51:04:a7:8f:d9:19:
b5:49:39:57:df:6e:c6:ed:e2:ea:a3:53:8d:32:df:4d:22:9e:
4a:c6:aa:6c:8b:b7:63:b2:8c:78:3e:de:26:15:bc:ba:f4:04:
0b:46:83:ee:1c:a8:1c:51:62:ab:d5:57:e4:55:cf:1f:f2:3a:
0b:2b:25:8f:1e:d9:98:76:dd:27:7b:ce:69:67:f3:c3:f0:95:
29:fc:90:50:62:38:59:80:03:9c:bc:24:1d:a2:fb:ae:90:0a:
7e:a6:4c:63:42:2d:e9:cf:8e:e9:02:b2:9d:70:e1:e1:32:dc:
aa:b4:47:e4:bd:8b:6e:c1:91:c4:2b:e3:46:ab:bf:c3:a4:b7:
5d:9c:86:56
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Mar 11 14:52:25 2024 by rpki-client on console-fra.rpki-client.org