Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/33/1df18e-6c4d-434b-8e31-71eb95f50e5b/1/DTbRCBAAAO6m-8eQ8wyDdg2H-us.roa
File: DTbRCBAAAO6m-8eQ8wyDdg2H-us.roa (raw, json)
Hash identifier: a+5V29qUgDH0P5WSgTo7MSL74FFTGjuxKvpxBDBONZU=
Subject key identifier: 0D:36:D1:08:10:00:00:EE:A6:FB:C7:90:F3:0C:83:76:0D:87:FA:EB
Certificate issuer: /CN=ff87e0ab032b0c05eb5e74cc2c08698dd324d963
Certificate serial: 018B434C2BF63A64FFBD41E60AFDE10759A2
Authority key identifier: FF:87:E0:AB:03:2B:0C:05:EB:5E:74:CC:2C:08:69:8D:D3:24:D9:63
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/_4fgqwMrDAXrXnTMLAhpjdMk2WM.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/33/1df18e-6c4d-434b-8e31-71eb95f50e5b/1/DTbRCBAAAO6m-8eQ8wyDdg2H-us.roa
Signing time: Wed 18 Oct 2023 14:59:07 +0000
ROA not before: Wed 18 Oct 2023 14:59:07 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 48678
IP address blocks: 109.122.196.0/24 maxlen: 24
Validation: Failed, RFC 3779 resource not subset of parent's resources
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8b:43:4c:2b:f6:3a:64:ff:bd:41:e6:0a:fd:e1:07:59:a2
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=ff87e0ab032b0c05eb5e74cc2c08698dd324d963
Validity
Not Before: Oct 18 14:59:07 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=0d36d108100000eea6fbc790f30c83760d87faeb
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:87:f5:dd:65:f3:3a:a0:06:26:84:86:46:2d:1e:
b0:48:b2:8f:14:15:30:e4:09:26:a3:23:46:17:93:
42:a5:27:5c:96:1e:6d:df:fb:c3:45:bd:86:97:80:
ce:86:40:ec:c5:6a:b8:09:62:c7:19:57:f5:72:06:
4d:69:30:88:9a:87:c3:1a:14:94:36:9a:c8:4e:d8:
8f:71:69:69:f8:24:3a:4a:d1:4c:bf:8d:89:b1:e0:
b7:cd:94:17:c2:7f:42:c0:0c:d3:04:1c:ff:fe:9d:
af:0b:f3:48:5a:4e:34:69:6e:5c:f6:50:29:de:60:
ad:bc:bf:53:22:40:11:07:64:a5:82:fa:3f:19:75:
39:9b:36:5d:16:32:00:9f:6d:ed:26:51:7e:fa:61:
e7:b7:6e:89:4f:fe:b9:97:ae:20:03:6a:49:46:6b:
cd:ec:5c:3a:a8:6d:40:f6:ef:64:0b:f2:06:3e:4c:
fc:06:06:c1:59:0f:b2:d7:ca:3d:89:fa:3a:09:6b:
06:12:77:6c:dc:5a:a2:59:26:91:65:43:b2:cd:e7:
c7:6d:d9:f9:d7:dd:3b:56:2d:37:a4:85:05:25:12:
3d:ee:0a:9c:7d:5a:99:d0:91:e1:65:53:b5:14:18:
25:92:26:dd:6e:22:29:a0:8d:32:26:b8:17:f4:b4:
bb:99
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
0D:36:D1:08:10:00:00:EE:A6:FB:C7:90:F3:0C:83:76:0D:87:FA:EB
X509v3 Authority Key Identifier:
keyid:FF:87:E0:AB:03:2B:0C:05:EB:5E:74:CC:2C:08:69:8D:D3:24:D9:63
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/_4fgqwMrDAXrXnTMLAhpjdMk2WM.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/33/1df18e-6c4d-434b-8e31-71eb95f50e5b/1/DTbRCBAAAO6m-8eQ8wyDdg2H-us.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/33/1df18e-6c4d-434b-8e31-71eb95f50e5b/1/_4fgqwMrDAXrXnTMLAhpjdMk2WM.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
109.122.196.0/24
Signature Algorithm: sha256WithRSAEncryption
1c:0f:2d:d3:c5:29:dc:80:cb:5c:7a:fe:86:c7:39:b6:3b:ff:
b0:c9:6d:3a:80:2f:c3:fb:d7:c8:75:71:08:f4:71:db:b8:d7:
87:23:74:87:9a:73:19:7c:77:2d:f7:a4:6c:b1:32:4f:22:44:
42:5f:da:ce:ff:57:15:49:8e:e8:16:12:58:b8:0f:65:ff:1c:
ae:99:c2:d2:9f:67:6a:de:44:bf:25:23:6e:6c:d9:d0:e0:80:
d6:42:31:40:2e:2a:de:8c:8b:d4:03:a1:fa:c8:11:b2:9a:f7:
b5:62:d8:45:65:84:be:50:e5:88:85:63:16:35:74:7c:c8:16:
a9:10:c5:fc:71:35:81:ac:67:37:35:46:55:77:ad:de:32:5b:
aa:cc:58:7b:36:33:83:61:b4:44:8d:72:09:de:5e:26:36:4f:
e8:28:d0:56:14:ce:59:10:46:d0:ca:15:2e:aa:ea:a6:06:a7:
c5:19:e2:cd:65:9d:fa:e8:cc:3a:e4:da:4f:98:6a:e9:eb:76:
5f:31:0e:cb:71:63:1d:d0:d8:37:90:9a:7b:a7:b9:21:d6:71:
4b:8e:68:2d:d8:fa:ee:23:7e:6a:69:0e:56:ed:94:32:06:bd:
65:d3:75:82:18:2a:9c:a5:49:04:66:2a:04:c4:97:24:fc:dd:
23:8f:15:50
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 19:02:04 2024 by rpki-client on console-ams.rpki-client.org