Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/33/1df18e-6c4d-434b-8e31-71eb95f50e5b/1/4NtFK8XXJEEJkcyH0ZEKHawf8dY.roa
File: 4NtFK8XXJEEJkcyH0ZEKHawf8dY.roa (raw, json)
Hash identifier: 96rlXPioAmrRaUMohShTCWr9JvrhcDhSWXjQ3rkiObY=
Subject key identifier: E0:DB:45:2B:C5:D7:24:41:09:91:CC:87:D1:91:0A:1D:AC:1F:F1:D6
Certificate issuer: /CN=ff87e0ab032b0c05eb5e74cc2c08698dd324d963
Certificate serial: 018B434C2E46742DF9AA7F274E7FCA8A09DD
Authority key identifier: FF:87:E0:AB:03:2B:0C:05:EB:5E:74:CC:2C:08:69:8D:D3:24:D9:63
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/_4fgqwMrDAXrXnTMLAhpjdMk2WM.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/33/1df18e-6c4d-434b-8e31-71eb95f50e5b/1/4NtFK8XXJEEJkcyH0ZEKHawf8dY.roa
Signing time: Wed 18 Oct 2023 14:59:07 +0000
ROA not before: Wed 18 Oct 2023 14:59:07 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 209181
IP address blocks: 109.122.219.0/24 maxlen: 24
Validation: Failed, RFC 3779 resource not subset of parent's resources
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8b:43:4c:2e:46:74:2d:f9:aa:7f:27:4e:7f:ca:8a:09:dd
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=ff87e0ab032b0c05eb5e74cc2c08698dd324d963
Validity
Not Before: Oct 18 14:59:07 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=e0db452bc5d724410991cc87d1910a1dac1ff1d6
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8c:63:fc:24:61:08:fb:63:0a:89:81:3d:a8:e7:
98:49:6b:cc:05:4c:4f:86:1d:e6:35:9c:5e:fe:ab:
f5:c3:56:21:e1:14:8d:b5:16:83:b2:4a:dc:5c:f5:
b5:c0:41:49:f5:73:88:5a:00:73:97:71:f2:ba:27:
9a:87:49:ed:ef:74:5e:b5:54:c2:04:f7:e1:0a:e1:
21:67:2c:a1:fd:e2:88:a0:06:02:bf:7b:cb:c1:91:
01:b4:0c:c9:de:73:27:8a:0f:0c:47:97:a7:f2:5f:
a4:51:ba:05:a4:d1:2f:47:c0:15:ed:b7:b1:f5:b2:
36:87:a0:d5:4a:7d:09:9f:b0:51:dd:66:2e:16:8e:
cb:9a:d0:6e:0a:3f:29:59:28:2f:00:f5:4d:17:4d:
f4:c5:fa:fb:9d:64:cc:d4:e1:50:a8:52:37:22:32:
d8:83:64:cd:63:e8:b5:41:b6:6f:74:64:a8:11:63:
8f:62:94:57:dc:68:20:90:3c:9d:ec:c3:8a:5d:75:
50:c7:6d:1c:8c:c3:b8:e3:47:e9:a1:d9:1f:b3:07:
9a:63:0b:a2:ac:28:9e:dd:3f:bc:33:88:e5:6e:a2:
5b:89:18:8e:4a:4b:e4:8c:24:8d:58:ce:0f:85:c3:
8c:8f:66:05:1f:1d:f6:cd:d7:24:71:b9:77:d3:7a:
31:e1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E0:DB:45:2B:C5:D7:24:41:09:91:CC:87:D1:91:0A:1D:AC:1F:F1:D6
X509v3 Authority Key Identifier:
keyid:FF:87:E0:AB:03:2B:0C:05:EB:5E:74:CC:2C:08:69:8D:D3:24:D9:63
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/_4fgqwMrDAXrXnTMLAhpjdMk2WM.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/33/1df18e-6c4d-434b-8e31-71eb95f50e5b/1/4NtFK8XXJEEJkcyH0ZEKHawf8dY.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/33/1df18e-6c4d-434b-8e31-71eb95f50e5b/1/_4fgqwMrDAXrXnTMLAhpjdMk2WM.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
109.122.219.0/24
Signature Algorithm: sha256WithRSAEncryption
84:64:1a:96:a2:93:d0:fd:12:5a:1f:d0:62:40:3c:2a:e9:18:
0c:45:7f:22:c5:81:c6:65:da:b4:b5:e0:a6:0c:ab:62:cd:9e:
33:9f:5e:7b:ee:1a:0a:43:23:22:66:d2:99:cb:76:61:80:bc:
8f:db:ee:56:42:5c:b4:b3:d4:51:43:45:e0:c2:aa:7e:3c:79:
4a:3f:15:0d:a5:d8:51:ca:00:5c:26:63:86:98:da:ca:de:7d:
aa:27:a7:e2:47:58:3f:c9:f2:1f:ee:f8:93:f9:d6:16:f4:28:
e7:3a:b6:7f:36:1b:37:fc:bb:7f:70:3c:be:70:14:98:20:e0:
8e:b2:b1:cc:fe:85:b7:88:f6:b9:52:2f:5b:40:47:e6:04:e1:
98:9c:69:77:ea:bb:86:d5:38:4a:38:97:d6:a8:e2:61:09:80:
01:a5:29:6d:d0:e2:01:cf:5e:33:18:c8:5e:1c:9e:1c:cb:e2:
91:ca:82:2e:69:2a:35:60:3e:f1:a8:84:79:68:d4:5e:38:e7:
3c:45:dd:e5:c2:f2:59:19:57:e5:b8:94:95:66:95:4b:a0:46:
bb:d5:59:77:d0:63:55:0a:ee:8c:fb:a0:1c:7b:5b:83:95:1f:
c9:93:e3:e4:bf:fc:4a:b9:3a:e8:fb:33:2c:a7:50:a6:e5:d8:
d8:a3:6d:9d
-----BEGIN CERTIFICATE-----
MIIE/TCCA+WgAwIBAgISAYtDTC5GdC35qn8nTn/KigndMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGZmODdlMGFiMDMyYjBjMDVlYjVlNzRjYzJjMDg2OThkZDMy
NGQ5NjMwHhcNMjMxMDE4MTQ1OTA3WhcNMjQwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EyhlMGRiNDUyYmM1ZDcyNDQxMDk5MWNjODdkMTkxMGExZGFjMWZmMWQ2MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAjGP8JGEI+2MKiYE9qOeYSWvMBUxP
hh3mNZxe/qv1w1Yh4RSNtRaDskrcXPW1wEFJ9XOIWgBzl3Hyuieah0nt73RetVTC
BPfhCuEhZyyh/eKIoAYCv3vLwZEBtAzJ3nMnig8MR5en8l+kUboFpNEvR8AV7bex
9bI2h6DVSn0Jn7BR3WYuFo7LmtBuCj8pWSgvAPVNF030xfr7nWTM1OFQqFI3IjLY
g2TNY+i1QbZvdGSoEWOPYpRX3GggkDyd7MOKXXVQx20cjMO440fpodkfsweaYwui
rCie3T+8M4jlbqJbiRiOSkvkjCSNWM4PhcOMj2YFHx32zdckcbl303ox4QIDAQAB
o4ICCTCCAgUwHQYDVR0OBBYEFODbRSvF1yRBCZHMh9GRCh2sH/HWMB8GA1UdIwQY
MBaAFP+H4KsDKwwF6150zCwIaY3TJNljMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvXzRmZ3F3TXJEQVhyWG5UTUxBaHBqZE1rMldNLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8zMy8xZGYxOGUtNmM0ZC00MzRiLThlMzEt
NzFlYjk1ZjUwZTViLzEvNE50Rks4WFhKRUVKa2N5SDBaRUtIYXdmOGRZLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8zMy8xZGYxOGUtNmM0ZC00MzRiLThlMzEtNzFlYjk1ZjUwZTVi
LzEvXzRmZ3F3TXJEQVhyWG5UTUxBaHBqZE1rMldNLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAbXrbMA0G
CSqGSIb3DQEBCwUAA4IBAQCEZBqWopPQ/RJaH9BiQDwq6RgMRX8ixYHGZdq0teCm
DKtizZ4zn1577hoKQyMiZtKZy3ZhgLyP2+5WQly0s9RRQ0Xgwqp+PHlKPxUNpdhR
ygBcJmOGmNrK3n2qJ6fiR1g/yfIf7viT+dYW9CjnOrZ/Nhs3/Lt/cDy+cBSYIOCO
srHM/oW3iPa5Ui9bQEfmBOGYnGl36ruG1ThKOJfWqOJhCYABpSlt0OIBz14zGMhe
HJ4cy+KRyoIuaSo1YD7xqIR5aNReOOc8Rd3lwvJZGVfluJSVZpVLoEa71Vl30GNV
Cu6M+6Ace1uDlR/Jk+Pkv/xKuTro+zMsp1Cm5djYo22d
-----END CERTIFICATE-----
Generated at Fri Dec 15 07:36:30 2023 by rpki-client on console-ams.rpki-client.org