Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/33/1df18e-6c4d-434b-8e31-71eb95f50e5b/1/18FppYO9XvBspo9wMcDhkSD1KXM.roa
File: 18FppYO9XvBspo9wMcDhkSD1KXM.roa (raw, json)
Hash identifier: gjTa0j/7lyw16eS8H1IAxBgZFqPuSK30TG6X/mEy1wc=
Subject key identifier: D7:C1:69:A5:83:BD:5E:F0:6C:A6:8F:70:31:C0:E1:91:20:F5:29:73
Certificate issuer: /CN=ff87e0ab032b0c05eb5e74cc2c08698dd324d963
Certificate serial: 018C3E0C2E3F90DD9BC86F76BF6636B398A7
Authority key identifier: FF:87:E0:AB:03:2B:0C:05:EB:5E:74:CC:2C:08:69:8D:D3:24:D9:63
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/_4fgqwMrDAXrXnTMLAhpjdMk2WM.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/33/1df18e-6c4d-434b-8e31-71eb95f50e5b/1/18FppYO9XvBspo9wMcDhkSD1KXM.roa
Signing time: Wed 06 Dec 2023 07:33:54 +0000
ROA not before: Wed 06 Dec 2023 07:33:54 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 149457
IP address blocks: 109.122.222.0/24 maxlen: 24
Validation: Failed, RFC 3779 resource not subset of parent's resources
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8c:3e:0c:2e:3f:90:dd:9b:c8:6f:76:bf:66:36:b3:98:a7
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=ff87e0ab032b0c05eb5e74cc2c08698dd324d963
Validity
Not Before: Dec 6 07:33:54 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=d7c169a583bd5ef06ca68f7031c0e19120f52973
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cf:6c:67:bf:f5:1c:d7:67:8e:be:58:4d:59:11:
a2:3b:6f:ab:14:a2:f1:c1:b8:46:b5:a0:ca:e4:ff:
06:8c:cc:9d:69:05:14:8b:82:69:3d:8a:b1:41:32:
13:58:e4:0d:bb:7b:a6:e4:24:9b:ab:26:90:1c:74:
c6:10:11:63:66:71:d5:2b:71:81:0b:82:4b:1a:4c:
c7:39:4a:33:6f:d3:a8:c3:54:83:14:aa:15:a9:1a:
fe:00:2d:5c:50:b9:3d:66:ba:54:48:2a:a4:c2:87:
12:bd:11:ad:8e:e9:75:cc:bd:ee:5d:a9:5f:99:18:
20:34:3b:cc:0d:fc:b0:6e:47:92:bf:61:eb:e5:7f:
7f:57:5b:fc:bb:5c:77:ba:a1:b6:7c:f5:00:c0:1d:
e1:67:ec:1f:3e:0f:33:5e:f2:e9:d8:23:b4:af:45:
0d:61:2d:aa:c7:12:26:4f:b5:2c:00:b3:5f:be:4f:
e3:d1:6c:ae:20:bb:65:d9:62:78:63:8b:0f:61:78:
40:2d:6d:b7:94:7e:74:fd:fc:88:5b:00:fa:f9:87:
7c:f5:ab:47:5a:00:67:7e:dd:ea:0b:55:59:b0:7d:
d6:2f:cd:83:74:5a:17:b9:d1:9e:e1:8e:2f:61:7c:
63:ca:b9:63:01:36:e8:3c:61:f5:23:40:11:f1:3b:
ac:17
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D7:C1:69:A5:83:BD:5E:F0:6C:A6:8F:70:31:C0:E1:91:20:F5:29:73
X509v3 Authority Key Identifier:
keyid:FF:87:E0:AB:03:2B:0C:05:EB:5E:74:CC:2C:08:69:8D:D3:24:D9:63
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/_4fgqwMrDAXrXnTMLAhpjdMk2WM.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/33/1df18e-6c4d-434b-8e31-71eb95f50e5b/1/18FppYO9XvBspo9wMcDhkSD1KXM.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/33/1df18e-6c4d-434b-8e31-71eb95f50e5b/1/_4fgqwMrDAXrXnTMLAhpjdMk2WM.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
109.122.222.0/24
Signature Algorithm: sha256WithRSAEncryption
1f:18:2c:19:f8:c2:67:9a:3a:92:6e:ca:74:73:42:6c:c6:32:
63:00:f0:8c:0c:42:6d:6f:ab:3f:8a:32:4b:bb:24:f5:9b:78:
e7:e3:63:b4:7f:6c:7f:7e:15:f7:27:9d:2c:e6:f9:b6:71:38:
17:be:07:3b:04:32:07:62:19:94:86:84:51:55:41:8f:92:f8:
8e:7d:6d:e6:40:cb:5f:96:0d:a8:72:14:55:1b:47:a3:c3:b4:
b7:09:cf:ec:d2:87:59:1a:86:67:64:54:c3:1a:dd:d1:7e:d6:
74:fc:da:c9:72:0b:66:24:65:84:5b:15:18:42:2d:91:85:ef:
08:44:99:d8:9d:28:1b:f7:f3:f1:83:ee:e0:b3:b3:ba:d0:47:
40:63:cb:52:97:a6:bf:d2:e5:b9:ba:c9:47:6c:9d:79:03:e8:
71:e2:40:a9:28:51:2f:e5:5d:ce:4b:36:47:91:8b:62:c2:49:
c1:1e:6b:18:49:05:57:60:65:03:7f:b0:c0:d1:aa:0b:38:3d:
a2:26:37:d3:01:aa:69:f1:e8:b4:55:8f:27:05:c4:a2:9c:21:
57:2f:2b:4f:98:2b:e9:0e:e1:1d:76:86:a8:a9:66:14:33:f8:
88:b3:36:f4:6a:b3:ea:ef:4d:15:63:ed:b4:11:e3:fa:7f:db:
0d:a4:b2:9e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:24:48 2024 by rpki-client on console-fra.rpki-client.org