Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/33/1df18e-6c4d-434b-8e31-71eb95f50e5b/1/7p3PiI30vztxYgy04HtnTOuKh2c.roa
File: 7p3PiI30vztxYgy04HtnTOuKh2c.roa (raw, json)
Hash identifier: LBOBxV5j6M5SmMiQD46Nl9/cUYTI8b/kbtQhxpxN5fQ=
Subject key identifier: EE:9D:CF:88:8D:F4:BF:3B:71:62:0C:B4:E0:7B:67:4C:EB:8A:87:67
Certificate issuer: /CN=ff87e0ab032b0c05eb5e74cc2c08698dd324d963
Certificate serial: 0187E0A8AC3DD1C938852E0D78B9F8D8BB87
Authority key identifier: FF:87:E0:AB:03:2B:0C:05:EB:5E:74:CC:2C:08:69:8D:D3:24:D9:63
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/_4fgqwMrDAXrXnTMLAhpjdMk2WM.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/33/1df18e-6c4d-434b-8e31-71eb95f50e5b/1/7p3PiI30vztxYgy04HtnTOuKh2c.roa
Signing time: Wed 03 May 2023 08:09:23 +0000
ROA not before: Wed 03 May 2023 08:09:23 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 834
IP address blocks: 109.122.197.0/24 maxlen: 24
109.122.210.0/24 maxlen: 24
Validation: Failed, RFC 3779 resource not subset of parent's resources
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:87:e0:a8:ac:3d:d1:c9:38:85:2e:0d:78:b9:f8:d8:bb:87
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=ff87e0ab032b0c05eb5e74cc2c08698dd324d963
Validity
Not Before: May 3 08:09:23 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=ee9dcf888df4bf3b71620cb4e07b674ceb8a8767
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:95:53:f3:91:0a:70:f7:9e:9b:4f:94:6e:b0:63:
3c:17:de:82:98:65:3b:55:81:e9:9f:e4:8a:c3:7f:
3f:73:54:b2:1f:8d:41:6c:0e:58:7d:8b:ba:30:ac:
c9:83:ec:71:6f:ac:52:dc:09:8f:ae:d2:03:49:99:
f6:6a:ba:5d:b3:bb:78:95:c5:2d:8a:d1:64:5f:68:
24:d3:a7:3b:05:4b:f2:11:2a:ea:91:cc:8a:af:14:
5c:9c:09:8a:45:e0:31:95:e7:38:3d:5a:18:e6:c4:
dd:9c:fb:16:45:f2:cb:96:f6:b1:de:30:31:3b:4a:
e7:a3:2a:83:54:9e:01:3c:87:35:2c:f6:ed:39:c1:
fc:b9:9a:3d:7d:c2:a7:91:08:ec:8d:5a:48:dd:46:
50:24:19:4f:12:1a:bf:7d:25:be:59:31:36:f7:5a:
e4:7b:26:25:4e:40:a7:61:28:c6:ec:7a:b9:3a:89:
ca:75:44:ee:e8:b5:ed:a7:26:1c:a9:c3:c4:da:9f:
4e:89:2f:3a:17:63:62:ef:06:9d:17:2b:a3:29:ed:
8e:e1:fb:07:ea:cf:98:2a:00:fc:59:7a:68:1b:ec:
38:e6:db:03:62:98:6e:8a:24:62:15:4f:71:fd:98:
81:03:69:f8:95:91:b7:da:8c:25:28:cc:5e:4c:c5:
ab:87
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
EE:9D:CF:88:8D:F4:BF:3B:71:62:0C:B4:E0:7B:67:4C:EB:8A:87:67
X509v3 Authority Key Identifier:
keyid:FF:87:E0:AB:03:2B:0C:05:EB:5E:74:CC:2C:08:69:8D:D3:24:D9:63
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/_4fgqwMrDAXrXnTMLAhpjdMk2WM.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/33/1df18e-6c4d-434b-8e31-71eb95f50e5b/1/7p3PiI30vztxYgy04HtnTOuKh2c.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/33/1df18e-6c4d-434b-8e31-71eb95f50e5b/1/_4fgqwMrDAXrXnTMLAhpjdMk2WM.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
109.122.197.0/24
109.122.210.0/24
Signature Algorithm: sha256WithRSAEncryption
8f:fe:bd:4a:d6:99:28:96:f9:f9:1f:c5:5a:7b:b7:cb:cf:ef:
36:82:b6:fa:40:1d:48:3b:1f:fd:1d:c9:d1:ce:d1:4a:b8:22:
d7:aa:c3:38:f8:96:5d:d1:8e:60:10:07:7d:95:5e:b9:99:4c:
92:1b:ad:53:47:7a:25:82:39:35:da:87:9b:97:61:00:d0:b6:
73:72:f9:85:f2:e4:e3:ab:3f:cc:d5:fa:21:e3:f2:0d:89:ad:
44:b5:fc:e4:e2:f0:f7:c7:30:e4:98:c0:b2:3c:bc:85:50:c2:
3f:a0:b4:eb:86:f7:5b:0d:af:41:89:21:3d:e7:5a:68:d5:66:
b0:9f:33:7c:74:54:c8:8d:81:5f:03:82:5b:7e:4c:2f:b5:1a:
e8:18:d0:16:40:4f:06:0c:21:04:d5:2b:f5:75:4d:63:37:77:
41:ae:43:fe:68:6a:ae:2d:8e:99:70:5b:3f:54:6c:d2:46:52:
54:8d:2d:47:df:33:e1:e2:14:bd:36:24:fe:48:9c:be:ca:e1:
c7:e0:30:25:ea:42:87:db:d5:b3:ec:91:b6:2a:e3:19:07:cd:
e0:09:6d:42:a4:62:85:e7:60:6e:e3:fd:23:ee:c3:e0:ae:80:
25:45:38:2a:25:11:59:d3:af:fe:42:b6:96:8d:ee:e7:c0:89:
00:d9:f0:11
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:24:48 2024 by rpki-client on console-fra.rpki-client.org