Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/33/1df18e-6c4d-434b-8e31-71eb95f50e5b/1/5KuKr9Oobm0SJm2FW0Fw8U-OsYU.roa
File: 5KuKr9Oobm0SJm2FW0Fw8U-OsYU.roa (raw, json)
Hash identifier: u02bvLUEuaPLDLo4dmB2IW5OnaOCfeFw37VxL2/8Lv8=
Subject key identifier: E4:AB:8A:AF:D3:A8:6E:6D:12:26:6D:85:5B:41:70:F1:4F:8E:B1:85
Certificate issuer: /CN=ff87e0ab032b0c05eb5e74cc2c08698dd324d963
Certificate serial: 018B434C2997EF03D2269C42F9790E2E9E29
Authority key identifier: FF:87:E0:AB:03:2B:0C:05:EB:5E:74:CC:2C:08:69:8D:D3:24:D9:63
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/_4fgqwMrDAXrXnTMLAhpjdMk2WM.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/33/1df18e-6c4d-434b-8e31-71eb95f50e5b/1/5KuKr9Oobm0SJm2FW0Fw8U-OsYU.roa
Signing time: Wed 18 Oct 2023 14:59:06 +0000
ROA not before: Wed 18 Oct 2023 14:59:06 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 6939
IP address blocks: 109.122.211.0/24 maxlen: 24
Validation: Failed, RFC 3779 resource not subset of parent's resources
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8b:43:4c:29:97:ef:03:d2:26:9c:42:f9:79:0e:2e:9e:29
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=ff87e0ab032b0c05eb5e74cc2c08698dd324d963
Validity
Not Before: Oct 18 14:59:06 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=e4ab8aafd3a86e6d12266d855b4170f14f8eb185
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e3:83:50:f8:8e:02:d5:55:d3:bc:9d:3b:ca:72:
d4:eb:7c:36:9b:b0:99:92:17:7b:a5:11:ed:cf:6a:
65:49:2d:8b:eb:b0:2c:41:e5:56:46:67:96:55:90:
86:8a:ff:08:81:ba:f5:47:e6:10:91:0b:a8:7e:43:
ed:9b:e8:cf:82:32:15:f2:ff:81:25:8c:07:e7:b8:
55:e6:4b:cc:b4:23:cc:45:11:0b:0a:3c:7d:2b:76:
4e:d2:a9:92:d2:f1:83:5e:a5:d1:0d:9f:23:50:7b:
1f:a1:2d:2a:78:6a:a5:b5:e4:d0:87:a3:de:c9:6b:
f1:11:ac:06:f3:8a:ef:d5:b9:65:01:3f:01:60:ea:
6b:6b:7e:a8:5a:75:7c:f7:14:e7:7b:f5:84:df:5c:
d8:78:b8:2b:ad:97:2a:1e:7f:d0:07:00:8a:88:43:
3e:3e:73:38:93:6b:78:47:52:bb:f2:45:9c:88:47:
ab:df:8d:75:b6:b0:56:86:42:e8:9a:b3:30:cb:6a:
8f:c9:32:bd:e8:8f:7e:0b:26:bc:e9:1e:15:f4:8d:
1f:80:74:c1:1e:2c:1a:37:6d:a3:0a:5d:bc:cf:05:
6d:78:04:c1:b1:dc:3b:db:23:06:d6:59:65:09:32:
ed:cf:a5:8f:4e:f9:02:2f:83:f5:2e:36:1e:19:17:
1f:fb
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E4:AB:8A:AF:D3:A8:6E:6D:12:26:6D:85:5B:41:70:F1:4F:8E:B1:85
X509v3 Authority Key Identifier:
keyid:FF:87:E0:AB:03:2B:0C:05:EB:5E:74:CC:2C:08:69:8D:D3:24:D9:63
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/_4fgqwMrDAXrXnTMLAhpjdMk2WM.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/33/1df18e-6c4d-434b-8e31-71eb95f50e5b/1/5KuKr9Oobm0SJm2FW0Fw8U-OsYU.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/33/1df18e-6c4d-434b-8e31-71eb95f50e5b/1/_4fgqwMrDAXrXnTMLAhpjdMk2WM.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
109.122.211.0/24
Signature Algorithm: sha256WithRSAEncryption
99:71:ef:b9:17:ff:ca:7c:72:97:c0:9b:85:4c:f5:6b:ba:b1:
25:e0:46:14:2c:d6:34:17:e6:be:99:bb:ee:85:29:ba:a4:8b:
60:45:9a:1d:ba:a5:21:b4:13:22:07:5a:08:e0:6b:95:16:10:
46:23:53:e8:1a:a3:ad:2b:63:87:77:3f:e9:71:40:26:0d:fa:
7a:e2:2c:b2:ea:0d:27:5b:ee:26:47:fc:b2:02:92:15:c1:26:
21:de:f8:47:f4:08:dc:c6:8d:0c:95:28:b4:86:75:f9:bd:9d:
95:09:83:02:ce:51:bd:8d:eb:76:01:12:de:68:c3:d0:59:5c:
e7:e0:3b:41:fa:c3:f3:3a:99:46:6b:37:90:f6:c9:e3:91:8b:
45:c4:b7:31:db:40:ff:af:5b:9a:d1:cc:41:0b:90:56:4c:10:
e7:6b:40:bd:42:13:41:d9:e1:d7:6c:b2:e4:48:e4:f4:50:63:
1b:d2:5d:83:a8:39:c9:7b:64:98:33:77:60:5f:79:31:e9:c4:
35:6f:7e:04:b0:7d:5f:f1:57:3c:e7:93:26:8c:2d:94:9c:f8:
62:a1:06:93:de:89:e7:1d:2f:89:36:94:04:bf:1c:61:1b:20:
90:9f:6c:5a:84:55:cf:b0:2a:37:93:c6:9c:bb:72:4c:69:3b:
6d:a6:d3:50
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:24:48 2024 by rpki-client on console-fra.rpki-client.org