Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/33/1df18e-6c4d-434b-8e31-71eb95f50e5b/1/5TN01PueNyPJoOT3WTOvC2cSVxQ.roa
File: 5TN01PueNyPJoOT3WTOvC2cSVxQ.roa (raw, json)
Hash identifier: pjZqVx3ndj/XwF2IJ3XqAfwADPlYwjoa7unLDU+kMPQ=
Subject key identifier: E5:33:74:D4:FB:9E:37:23:C9:A0:E4:F7:59:33:AF:0B:67:12:57:14
Certificate issuer: /CN=ff87e0ab032b0c05eb5e74cc2c08698dd324d963
Certificate serial: 018CC501424A5F9D61DE59F8F2CC0D94A5D7
Authority key identifier: FF:87:E0:AB:03:2B:0C:05:EB:5E:74:CC:2C:08:69:8D:D3:24:D9:63
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/_4fgqwMrDAXrXnTMLAhpjdMk2WM.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/33/1df18e-6c4d-434b-8e31-71eb95f50e5b/1/5TN01PueNyPJoOT3WTOvC2cSVxQ.roa
Signing time: Mon 01 Jan 2024 12:30:43 +0000
ROA not before: Mon 01 Jan 2024 12:30:43 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 48678
IP address blocks: 109.122.196.0/24 maxlen: 24
Validation: Failed, RFC 3779 resource not subset of parent's resources
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8c:c5:01:42:4a:5f:9d:61:de:59:f8:f2:cc:0d:94:a5:d7
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=ff87e0ab032b0c05eb5e74cc2c08698dd324d963
Validity
Not Before: Jan 1 12:30:43 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=e53374d4fb9e3723c9a0e4f75933af0b67125714
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c9:df:5c:06:8e:d9:26:6e:26:08:72:2b:06:1e:
56:5a:21:78:7c:75:2c:b8:b1:79:c3:35:e9:d3:0c:
62:68:8b:86:09:7c:b4:04:c1:1e:9f:98:0b:f2:fc:
3d:10:e4:15:bb:39:53:64:24:ff:89:2b:10:b9:e7:
ce:79:5f:27:17:37:8f:c9:a9:2c:50:09:77:84:3d:
b6:ae:b4:c4:4a:b0:f8:1b:d1:af:1a:1c:95:82:52:
4a:80:63:02:d8:b1:36:98:fc:cf:cd:71:34:b1:4c:
8d:4b:f8:4a:8d:e0:ed:13:2d:16:68:bf:22:de:9a:
4f:80:dd:c1:be:e7:ef:b5:e4:c6:6f:e9:0d:ef:6a:
8e:89:5d:c6:55:ea:c2:55:3d:67:9e:78:72:7d:c2:
27:59:c3:12:51:85:34:2b:8b:76:53:6b:97:b6:7e:
38:66:27:5f:a4:29:bf:91:49:83:14:6e:d7:da:ac:
9b:1d:36:11:58:46:c9:79:91:e3:f1:aa:9b:60:d1:
fd:5f:70:43:f9:ac:d2:6d:a2:58:6d:92:af:a8:fb:
2e:76:7d:5f:22:e6:cc:e6:00:7e:f8:83:49:a4:07:
c1:29:22:9c:63:49:85:9b:9a:07:e2:d6:a3:4b:5e:
ab:ee:96:fb:49:0f:52:bd:48:14:2a:bf:5c:25:26:
26:bd
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E5:33:74:D4:FB:9E:37:23:C9:A0:E4:F7:59:33:AF:0B:67:12:57:14
X509v3 Authority Key Identifier:
keyid:FF:87:E0:AB:03:2B:0C:05:EB:5E:74:CC:2C:08:69:8D:D3:24:D9:63
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/_4fgqwMrDAXrXnTMLAhpjdMk2WM.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/33/1df18e-6c4d-434b-8e31-71eb95f50e5b/1/5TN01PueNyPJoOT3WTOvC2cSVxQ.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/33/1df18e-6c4d-434b-8e31-71eb95f50e5b/1/_4fgqwMrDAXrXnTMLAhpjdMk2WM.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
109.122.196.0/24
Signature Algorithm: sha256WithRSAEncryption
88:52:c6:a1:99:a9:d8:48:71:66:bd:7e:b2:9f:8f:ef:a6:dd:
7d:0d:f2:e0:37:10:1d:9c:46:3b:b7:1e:33:aa:67:49:2a:ba:
ea:0c:54:f0:12:9e:ee:42:b6:e2:2f:9b:b7:83:26:44:6e:45:
bb:92:73:41:a9:98:42:b7:ef:8a:3c:f5:87:c1:23:b4:5f:c8:
3c:2f:f4:79:23:35:f2:35:7a:31:a5:74:00:74:3c:62:04:4b:
59:86:7c:4f:d2:6a:d9:a8:94:fb:ab:c4:f8:c1:7e:c9:54:84:
f3:98:c8:68:d0:37:38:2d:e2:24:e7:22:2b:26:58:26:0f:32:
36:e2:b9:eb:93:bf:48:af:45:48:c9:3f:ad:62:29:64:22:ac:
dc:49:8b:93:c3:af:06:7e:0c:d7:18:aa:83:33:0f:d5:33:83:
cb:7b:90:c7:79:d7:36:ff:08:e1:d9:2e:4c:88:46:b4:8f:fb:
76:93:ec:1d:d2:ce:99:00:cf:c6:0f:89:66:e1:5b:85:0e:36:
cb:cd:d6:c2:a7:a5:13:4f:57:3b:90:db:ad:85:af:7d:a9:e4:
4c:12:95:e9:41:ee:36:3b:1a:45:75:ee:2c:53:6b:f9:00:7a:
9b:5c:1d:d6:49:8f:e5:99:08:22:a8:82:8c:b1:2b:99:bc:58:
39:8e:94:f6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Jan 15 20:13:15 2024 by rpki-client on console-ams.rpki-client.org