Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/33/1df18e-6c4d-434b-8e31-71eb95f50e5b/1/ATaj1in3JIHj-tSvK4oSa4tRcq0.roa
File: ATaj1in3JIHj-tSvK4oSa4tRcq0.roa (raw, json)
Hash identifier: x5Ia7QGqXhC7SkT/bZDeUSOpKB0ZWWLysSnXP8OPeXg=
Subject key identifier: 01:36:A3:D6:29:F7:24:81:E3:FA:D4:AF:2B:8A:12:6B:8B:51:72:AD
Certificate issuer: /CN=ff87e0ab032b0c05eb5e74cc2c08698dd324d963
Certificate serial: 018C91F716FC4D7EAB6B707E74C75F6349FD
Authority key identifier: FF:87:E0:AB:03:2B:0C:05:EB:5E:74:CC:2C:08:69:8D:D3:24:D9:63
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/_4fgqwMrDAXrXnTMLAhpjdMk2WM.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/33/1df18e-6c4d-434b-8e31-71eb95f50e5b/1/ATaj1in3JIHj-tSvK4oSa4tRcq0.roa
Signing time: Fri 22 Dec 2023 14:38:58 +0000
ROA not before: Fri 22 Dec 2023 14:38:58 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 32613
IP address blocks: 109.122.194.0/24 maxlen: 24
Validation: Failed, RFC 3779 resource not subset of parent's resources
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8c:91:f7:16:fc:4d:7e:ab:6b:70:7e:74:c7:5f:63:49:fd
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=ff87e0ab032b0c05eb5e74cc2c08698dd324d963
Validity
Not Before: Dec 22 14:38:58 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=0136a3d629f72481e3fad4af2b8a126b8b5172ad
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:af:19:bd:eb:8e:95:26:31:4b:11:ef:c5:60:a6:
f0:0a:bb:98:08:f9:86:f8:b7:22:d6:bc:1b:78:58:
f5:5c:5d:0d:8d:d7:68:40:00:f5:06:e7:89:3a:a1:
d1:69:bc:a7:82:75:76:db:a9:f3:4b:39:f6:d8:66:
5f:33:7c:f3:2a:60:b6:b5:d6:59:96:d0:8c:dc:c9:
68:63:b0:f0:8e:51:a3:97:02:90:a3:02:bc:61:4a:
4a:e4:80:83:65:51:54:8e:48:11:11:44:28:6c:06:
e4:79:2c:99:08:76:aa:63:9d:54:e7:77:9d:5d:16:
25:92:0c:c2:51:ad:47:d5:3e:74:e4:50:96:96:cb:
14:c7:6b:5b:aa:b7:e5:5f:71:28:54:57:68:50:b1:
53:96:97:dd:2b:cc:72:5c:75:ad:54:d1:ad:36:6c:
2f:ed:54:2f:1b:cd:f0:51:2d:37:a9:a7:c5:69:48:
a7:86:1f:b1:2c:ed:b7:51:98:87:ed:71:a5:2c:ba:
f3:15:d8:17:72:32:d8:71:c9:a1:23:d1:30:40:76:
04:7e:65:0c:41:4f:5d:f6:e6:07:66:39:d4:44:24:
14:2b:b5:06:cf:3b:44:05:30:2f:19:69:1b:39:50:
bb:c7:ec:a1:f2:f0:57:26:c5:2f:3c:6b:a1:81:14:
69:39
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
01:36:A3:D6:29:F7:24:81:E3:FA:D4:AF:2B:8A:12:6B:8B:51:72:AD
X509v3 Authority Key Identifier:
keyid:FF:87:E0:AB:03:2B:0C:05:EB:5E:74:CC:2C:08:69:8D:D3:24:D9:63
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/_4fgqwMrDAXrXnTMLAhpjdMk2WM.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/33/1df18e-6c4d-434b-8e31-71eb95f50e5b/1/ATaj1in3JIHj-tSvK4oSa4tRcq0.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/33/1df18e-6c4d-434b-8e31-71eb95f50e5b/1/_4fgqwMrDAXrXnTMLAhpjdMk2WM.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
109.122.194.0/24
Signature Algorithm: sha256WithRSAEncryption
13:dd:99:49:25:1f:6d:84:ac:b9:33:a3:6f:a6:e5:20:5f:e2:
32:00:32:d6:e7:82:8c:c6:a8:e3:c8:bc:26:4c:8e:64:ed:1f:
2a:7e:b0:3c:78:4a:d1:42:5c:f7:4d:f9:2f:4c:4b:c0:aa:bd:
09:e9:68:29:c8:62:b6:4c:08:91:ae:6f:a1:59:6e:20:6a:4f:
1a:d7:8a:7f:7a:41:03:f9:6d:94:e7:e8:bb:39:e7:f5:6f:c6:
95:89:a9:b8:de:bc:c9:0d:03:56:94:81:f7:91:02:29:90:be:
9f:90:bf:34:e2:a1:db:e3:52:43:38:55:cc:b3:86:34:23:39:
60:ec:02:3c:50:f8:e1:c1:cc:4e:ce:1c:12:9d:99:a6:32:fc:
39:2c:15:8a:e1:64:c7:aa:7b:b9:a8:e0:ee:6d:11:2b:e4:0e:
86:1f:da:ff:3b:f9:2f:8f:8b:a9:bd:cb:be:4d:0c:0e:7f:dc:
9b:c7:3f:03:28:f4:bd:b4:4a:c3:7d:8b:44:2e:aa:52:b4:f6:
67:4c:65:55:ff:3f:28:ef:18:04:cb:37:6a:16:9c:b5:5f:52:
3f:14:5f:5f:65:76:0f:75:c9:9d:dd:08:3f:90:92:9b:b6:fa:
5e:0e:b2:ca:08:25:07:8c:d2:ab:94:1a:04:83:36:61:ef:28:
a4:23:e0:65
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 19:02:04 2024 by rpki-client on console-ams.rpki-client.org