Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/33/1df18e-6c4d-434b-8e31-71eb95f50e5b/1/BfYzQt2OKCz9oRJwseAEcJOf5A0.roa
File: BfYzQt2OKCz9oRJwseAEcJOf5A0.roa (raw, json)
Hash identifier: CbmKTN5Z+NWviYLwivLDy7JZxiOZEhqGz1NrlzlnhnE=
Subject key identifier: 05:F6:33:42:DD:8E:28:2C:FD:A1:12:70:B1:E0:04:70:93:9F:E4:0D
Certificate issuer: /CN=ff87e0ab032b0c05eb5e74cc2c08698dd324d963
Certificate serial: 018B8DB86E1325AADC56D455488D926C10DF
Authority key identifier: FF:87:E0:AB:03:2B:0C:05:EB:5E:74:CC:2C:08:69:8D:D3:24:D9:63
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/_4fgqwMrDAXrXnTMLAhpjdMk2WM.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/33/1df18e-6c4d-434b-8e31-71eb95f50e5b/1/BfYzQt2OKCz9oRJwseAEcJOf5A0.roa
Signing time: Thu 02 Nov 2023 01:49:16 +0000
ROA not before: Thu 02 Nov 2023 01:49:16 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 43260
IP address blocks: 109.122.192.0/24 maxlen: 24
109.122.195.0/24 maxlen: 24
109.122.197.0/24 maxlen: 24
109.122.201.0/24 maxlen: 24
109.122.205.0/24 maxlen: 24
109.122.203.0/24 maxlen: 24
109.122.212.0/24 maxlen: 24
109.122.213.0/24 maxlen: 24
109.122.210.0/24 maxlen: 24
109.122.215.0/24 maxlen: 24
109.122.220.0/24 maxlen: 24
109.122.222.0/24 maxlen: 24
Validation: Failed, RFC 3779 resource not subset of parent's resources
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8b:8d:b8:6e:13:25:aa:dc:56:d4:55:48:8d:92:6c:10:df
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=ff87e0ab032b0c05eb5e74cc2c08698dd324d963
Validity
Not Before: Nov 2 01:49:16 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=05f63342dd8e282cfda11270b1e00470939fe40d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a5:d9:07:ca:bb:f0:7e:78:a4:3e:ac:f7:30:c2:
f6:d4:5b:8c:4f:bb:24:92:99:91:f3:ee:7d:21:9a:
39:58:fc:e4:2a:bf:58:fd:60:41:8b:3b:1d:15:b9:
ff:d2:64:0f:09:3d:86:cc:99:3a:d3:8f:31:a0:91:
44:a6:94:dd:7b:e3:b9:94:fe:a5:6e:c3:89:83:5a:
a4:40:b5:73:35:05:46:e8:84:b8:26:36:7d:b6:02:
90:24:96:27:06:32:e6:ca:7d:a9:08:9b:59:e7:dd:
a6:bf:9b:85:84:a0:fe:15:a3:54:41:95:2b:2a:2d:
48:2b:f5:32:1e:4e:4b:c3:bf:8e:c7:8f:8c:89:65:
ba:0c:2a:ae:f5:f8:58:4b:45:f6:3a:58:c1:1a:ed:
38:c9:fc:d4:65:5e:9b:63:66:ef:fd:80:2c:39:cb:
b3:c7:30:b7:ad:48:5c:57:ab:c5:49:90:a0:42:08:
67:53:60:a6:db:10:5b:61:8c:b0:41:ee:50:16:c0:
6a:28:fd:9e:15:b7:43:cb:15:d8:e8:9d:21:5b:cb:
fa:3b:21:3b:62:b2:1d:5a:59:fc:5c:9b:81:0a:3a:
49:85:7b:16:4a:b0:72:df:a9:d7:42:cf:ad:c6:44:
49:c9:96:25:fb:98:0b:83:0f:38:c5:8b:23:7e:1a:
49:45
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
05:F6:33:42:DD:8E:28:2C:FD:A1:12:70:B1:E0:04:70:93:9F:E4:0D
X509v3 Authority Key Identifier:
keyid:FF:87:E0:AB:03:2B:0C:05:EB:5E:74:CC:2C:08:69:8D:D3:24:D9:63
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/_4fgqwMrDAXrXnTMLAhpjdMk2WM.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/33/1df18e-6c4d-434b-8e31-71eb95f50e5b/1/BfYzQt2OKCz9oRJwseAEcJOf5A0.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/33/1df18e-6c4d-434b-8e31-71eb95f50e5b/1/_4fgqwMrDAXrXnTMLAhpjdMk2WM.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
109.122.192.0/24
109.122.195.0/24
109.122.197.0/24
109.122.201.0/24
109.122.203.0/24
109.122.205.0/24
109.122.210.0/24
109.122.212.0/23
109.122.215.0/24
109.122.220.0/24
109.122.222.0/24
Signature Algorithm: sha256WithRSAEncryption
40:da:d4:57:d3:36:48:dc:bb:8a:29:ab:b4:b6:98:ec:b2:21:
7c:dc:11:4f:b0:65:b9:c9:69:8c:4d:15:c2:80:7b:35:e0:3c:
4a:e5:44:e3:bd:ce:bc:76:64:a8:74:a3:2b:ed:3c:7d:85:44:
00:bf:da:0b:04:d5:ec:ae:85:81:0b:ce:11:2c:26:44:b1:0b:
bc:79:14:00:50:b4:1f:d7:6f:89:e5:29:b7:0b:46:ea:9e:8b:
18:25:fe:80:0b:25:44:a2:08:1e:7d:d6:17:ed:0c:aa:13:e9:
a4:e1:b9:d8:cf:7e:2b:50:32:c7:cd:76:03:34:63:81:22:39:
80:d1:a3:d9:ca:fe:d9:b7:61:df:bb:c7:7e:35:15:50:1a:39:
74:a8:8c:09:6c:c4:b7:d7:41:1d:d4:f9:22:6d:f2:1f:ac:37:
fe:67:94:d8:3e:5f:8f:8e:e9:65:61:7b:02:6b:0b:ed:19:cd:
9a:1c:ad:77:8b:1d:9d:59:64:4d:b1:51:af:62:e5:cb:f9:78:
a1:fc:8f:ab:8f:44:c3:62:63:8e:9e:16:4c:0c:17:88:c8:80:
3c:f9:d0:52:2d:27:9e:cc:d1:42:e6:33:87:b1:a8:d0:d6:36:
f3:9b:2c:ba:ca:5b:b0:95:7a:43:e1:45:99:bb:87:2f:98:45:
7a:a9:7b:8a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:24:48 2024 by rpki-client on console-fra.rpki-client.org