Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/33/1df18e-6c4d-434b-8e31-71eb95f50e5b/1/B-xpvQiSIb08mH4riB2TmCuTwlE.roa
File: B-xpvQiSIb08mH4riB2TmCuTwlE.roa (raw, json)
Hash identifier: pvk5mfBlALsqzfxDSktq/xtmGuIoxU7aUwE+wha3Gh8=
Subject key identifier: 07:EC:69:BD:08:92:21:BD:3C:98:7E:2B:88:1D:93:98:2B:93:C2:51
Certificate issuer: /CN=ff87e0ab032b0c05eb5e74cc2c08698dd324d963
Certificate serial: 018E1A88931534EC8A306634870BCBECB9E9
Authority key identifier: FF:87:E0:AB:03:2B:0C:05:EB:5E:74:CC:2C:08:69:8D:D3:24:D9:63
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/_4fgqwMrDAXrXnTMLAhpjdMk2WM.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/33/1df18e-6c4d-434b-8e31-71eb95f50e5b/1/B-xpvQiSIb08mH4riB2TmCuTwlE.roa
Signing time: Thu 07 Mar 2024 20:09:01 +0000
ROA not before: Thu 07 Mar 2024 20:09:01 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 132335
IP address blocks: 109.122.200.0/24 maxlen: 24
Validation: Failed, RFC 3779 resource not subset of parent's resources
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8e:1a:88:93:15:34:ec:8a:30:66:34:87:0b:cb:ec:b9:e9
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=ff87e0ab032b0c05eb5e74cc2c08698dd324d963
Validity
Not Before: Mar 7 20:09:01 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=07ec69bd089221bd3c987e2b881d93982b93c251
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:90:58:78:4b:2e:f5:5e:08:07:d3:45:8f:6d:ab:
38:5b:52:25:23:56:5f:6f:89:52:c7:2a:1f:00:c2:
fa:48:a2:e8:2d:d7:26:b5:b5:a2:b0:1e:60:9b:cc:
2b:6e:67:68:08:24:6b:c2:0a:97:f9:2d:ec:7a:06:
c5:54:b2:53:a2:6e:2e:a7:79:a7:11:e0:97:28:c4:
a9:c2:b8:a4:81:55:10:4c:41:d3:29:cd:18:38:34:
35:c8:ea:82:c5:f4:f0:3f:81:35:57:d6:e1:e5:c9:
0b:5b:49:36:3c:c2:91:0a:9f:d0:65:bd:fe:1d:6e:
e7:cc:c5:ac:90:33:2a:62:83:6a:6f:81:c8:4c:47:
b5:f8:ab:0a:c4:1f:91:cd:15:79:b9:e4:69:44:91:
c6:87:be:ee:60:d6:65:f3:f3:be:21:d1:7f:1a:85:
c7:cd:c2:18:2f:1c:31:e1:a8:16:95:54:ab:c3:fb:
92:6b:2b:83:85:80:d5:54:cb:af:c2:eb:46:f2:21:
d1:f0:97:d4:23:72:ce:8c:e9:06:54:81:68:89:be:
56:01:5c:6b:d7:7a:d9:7a:6f:e1:c5:d1:b7:22:a3:
38:ab:e2:6d:25:0c:a3:dd:83:09:05:09:94:af:6d:
71:b5:39:06:70:04:84:54:11:72:c1:0b:9c:98:2e:
3d:7b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
07:EC:69:BD:08:92:21:BD:3C:98:7E:2B:88:1D:93:98:2B:93:C2:51
X509v3 Authority Key Identifier:
keyid:FF:87:E0:AB:03:2B:0C:05:EB:5E:74:CC:2C:08:69:8D:D3:24:D9:63
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/_4fgqwMrDAXrXnTMLAhpjdMk2WM.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/33/1df18e-6c4d-434b-8e31-71eb95f50e5b/1/B-xpvQiSIb08mH4riB2TmCuTwlE.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/33/1df18e-6c4d-434b-8e31-71eb95f50e5b/1/_4fgqwMrDAXrXnTMLAhpjdMk2WM.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
109.122.200.0/24
Signature Algorithm: sha256WithRSAEncryption
1d:79:07:5f:57:65:d2:40:b0:45:8b:23:0f:cc:62:8c:16:62:
c3:d0:f3:0f:eb:42:a6:a2:24:ee:33:f2:1b:20:b3:eb:16:a2:
00:65:5f:9a:db:45:2b:5f:1b:80:e1:79:30:55:fd:fc:ab:6c:
ee:4a:08:ad:cd:e5:85:bf:d0:87:ec:34:3f:37:2d:d2:6c:bf:
14:9b:07:a4:5c:ed:3d:8c:ba:cc:ea:d8:08:05:8f:54:e6:1d:
71:26:32:a2:04:0e:3b:30:11:ee:3e:71:4a:d1:16:52:11:06:
3d:69:24:26:f4:8e:d6:1c:ee:6f:92:eb:3a:35:50:b1:6a:75:
47:d9:c6:b8:f2:08:b8:99:d8:56:73:51:31:8e:11:41:de:b5:
a2:4e:c4:48:6b:5f:de:ee:df:30:71:66:b6:b7:60:28:cf:a8:
a0:1d:5e:48:7d:03:bf:7a:c2:70:21:22:5f:39:84:e8:88:3f:
2b:46:9f:4c:79:ad:33:a5:71:4f:ba:19:d0:f8:94:c7:e9:ff:
aa:62:f6:bf:e0:78:4b:7f:b5:5d:a1:de:3f:ef:36:a0:12:13:
5f:ce:76:20:b2:8c:e0:c1:be:0c:81:d5:3f:e8:9f:07:48:3f:
53:96:ea:d6:d3:a3:4b:9c:e5:a2:1b:76:7d:b0:6c:00:83:94:
75:5a:67:4b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Apr 2 14:44:00 2024 by rpki-client on console-ams.rpki-client.org