Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/33/1df18e-6c4d-434b-8e31-71eb95f50e5b/1/EhPsfwcC0ZlV08Pgp8gMAgdm_2s.roa
File: EhPsfwcC0ZlV08Pgp8gMAgdm_2s.roa (raw, json)
Hash identifier: i8OGVEm8nyejG75LRFezewcp4+ca6lG+1OP3z2cecHU=
Subject key identifier: 12:13:EC:7F:07:02:D1:99:55:D3:C3:E0:A7:C8:0C:02:07:66:FF:6B
Certificate issuer: /CN=ff87e0ab032b0c05eb5e74cc2c08698dd324d963
Certificate serial: 018CC50144509AAAF566E18ECB2158703E56
Authority key identifier: FF:87:E0:AB:03:2B:0C:05:EB:5E:74:CC:2C:08:69:8D:D3:24:D9:63
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/_4fgqwMrDAXrXnTMLAhpjdMk2WM.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/33/1df18e-6c4d-434b-8e31-71eb95f50e5b/1/EhPsfwcC0ZlV08Pgp8gMAgdm_2s.roa
Signing time: Mon 01 Jan 2024 12:30:43 +0000
ROA not before: Mon 01 Jan 2024 12:30:43 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 149457
IP address blocks: 109.122.222.0/24 maxlen: 24
Validation: Failed, RFC 3779 resource not subset of parent's resources
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8c:c5:01:44:50:9a:aa:f5:66:e1:8e:cb:21:58:70:3e:56
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=ff87e0ab032b0c05eb5e74cc2c08698dd324d963
Validity
Not Before: Jan 1 12:30:43 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=1213ec7f0702d19955d3c3e0a7c80c020766ff6b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ac:e3:12:e9:14:b1:4b:ab:94:de:39:b4:a8:d3:
e1:37:84:96:aa:e3:fd:4e:1e:9b:48:a5:ed:45:7e:
12:d6:05:6c:ed:86:4f:8a:89:2a:e0:ef:81:03:d0:
3e:19:9e:f6:3c:82:23:2b:c6:e8:b4:05:14:09:7c:
e4:91:67:ef:58:8c:4d:50:9b:fb:d8:6f:9b:3d:e8:
2b:47:73:76:e6:16:b2:da:7b:17:62:c6:75:d8:2f:
25:54:18:64:76:10:0d:e9:70:37:8b:0f:24:e3:65:
ab:33:44:ed:87:2e:8b:dd:ab:60:7c:f4:c2:3e:eb:
8b:ed:0c:c7:bd:28:d9:b3:df:38:41:cd:09:83:d6:
57:53:cb:2e:67:1e:8f:b6:76:80:73:c3:8e:03:7f:
e3:4d:b3:7c:00:f1:45:5e:d3:8d:d3:3d:47:66:a4:
b4:7a:bf:74:b6:4b:33:a9:8c:df:ea:76:99:0a:31:
a8:85:b4:ef:80:86:5a:ac:5e:d6:5c:38:77:f1:4d:
70:73:61:18:b3:e5:01:f6:6b:03:59:41:67:43:5e:
40:c7:be:26:9b:b4:2d:90:69:13:1e:d2:bf:1d:98:
7c:7a:73:03:66:0a:77:30:49:d8:5a:19:43:d6:60:
c9:e7:b8:ea:54:05:08:b6:32:f1:97:35:a9:49:0c:
07:25
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
12:13:EC:7F:07:02:D1:99:55:D3:C3:E0:A7:C8:0C:02:07:66:FF:6B
X509v3 Authority Key Identifier:
keyid:FF:87:E0:AB:03:2B:0C:05:EB:5E:74:CC:2C:08:69:8D:D3:24:D9:63
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/_4fgqwMrDAXrXnTMLAhpjdMk2WM.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/33/1df18e-6c4d-434b-8e31-71eb95f50e5b/1/EhPsfwcC0ZlV08Pgp8gMAgdm_2s.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/33/1df18e-6c4d-434b-8e31-71eb95f50e5b/1/_4fgqwMrDAXrXnTMLAhpjdMk2WM.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
109.122.222.0/24
Signature Algorithm: sha256WithRSAEncryption
2f:0b:1f:ca:e1:68:9c:3c:06:37:c0:2c:c4:8c:54:67:bf:c1:
fb:42:76:ea:56:fd:c0:10:b0:3f:14:a9:bd:3d:f9:0f:2e:c8:
85:cf:93:f2:0b:e2:fb:de:3f:a4:fe:0b:90:46:f1:70:4e:28:
a5:4f:4e:37:eb:a1:8b:0f:a5:da:39:b4:50:7c:63:92:1a:0f:
a7:73:8f:ae:74:3c:f2:04:61:c7:b7:27:d1:f4:0a:74:05:7a:
84:da:4d:e7:05:1f:da:e4:bd:6b:a2:eb:0c:c7:10:b1:4c:96:
17:7e:32:22:24:05:39:3b:a8:2f:ac:93:1d:94:cf:6f:cf:1d:
00:06:05:d1:ee:49:2a:dc:4d:8c:aa:ec:b3:f3:55:ba:dc:7a:
d3:8e:ba:c7:6f:ee:a3:70:57:85:09:99:93:29:e0:95:41:cc:
2a:37:fb:bf:a4:74:8b:dd:f2:93:80:6f:44:3f:85:7d:a7:f1:
be:88:97:9d:6f:78:ff:1f:c6:23:87:17:5b:81:e3:ad:07:a3:
85:b6:ef:43:5e:19:36:f8:3d:fd:a7:6a:e3:65:fd:80:34:85:
bc:19:c2:31:82:3e:6b:5d:94:40:4b:8b:10:1b:f2:8e:63:2b:
fb:f0:69:cc:1d:42:4a:d4:8d:c9:1c:5e:0e:67:03:5f:34:9c:
6e:a2:de:ed
-----BEGIN CERTIFICATE-----
MIIE/TCCA+WgAwIBAgISAYzFAURQmqr1ZuGOyyFYcD5WMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGZmODdlMGFiMDMyYjBjMDVlYjVlNzRjYzJjMDg2OThkZDMy
NGQ5NjMwHhcNMjQwMTAxMTIzMDQzWhcNMjUwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EygxMjEzZWM3ZjA3MDJkMTk5NTVkM2MzZTBhN2M4MGMwMjA3NjZmZjZiMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEArOMS6RSxS6uU3jm0qNPhN4SWquP9
Th6bSKXtRX4S1gVs7YZPiokq4O+BA9A+GZ72PIIjK8botAUUCXzkkWfvWIxNUJv7
2G+bPegrR3N25hay2nsXYsZ12C8lVBhkdhAN6XA3iw8k42WrM0Tthy6L3atgfPTC
PuuL7QzHvSjZs984Qc0Jg9ZXU8suZx6PtnaAc8OOA3/jTbN8APFFXtON0z1HZqS0
er90tkszqYzf6naZCjGohbTvgIZarF7WXDh38U1wc2EYs+UB9msDWUFnQ15Ax74m
m7QtkGkTHtK/HZh8enMDZgp3MEnYWhlD1mDJ57jqVAUItjLxlzWpSQwHJQIDAQAB
o4ICCTCCAgUwHQYDVR0OBBYEFBIT7H8HAtGZVdPD4KfIDAIHZv9rMB8GA1UdIwQY
MBaAFP+H4KsDKwwF6150zCwIaY3TJNljMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvXzRmZ3F3TXJEQVhyWG5UTUxBaHBqZE1rMldNLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8zMy8xZGYxOGUtNmM0ZC00MzRiLThlMzEt
NzFlYjk1ZjUwZTViLzEvRWhQc2Z3Y0MwWmxWMDhQZ3A4Z01BZ2RtXzJzLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8zMy8xZGYxOGUtNmM0ZC00MzRiLThlMzEtNzFlYjk1ZjUwZTVi
LzEvXzRmZ3F3TXJEQVhyWG5UTUxBaHBqZE1rMldNLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAbXreMA0G
CSqGSIb3DQEBCwUAA4IBAQAvCx/K4WicPAY3wCzEjFRnv8H7QnbqVv3AELA/FKm9
PfkPLsiFz5PyC+L73j+k/guQRvFwTiilT04366GLD6XaObRQfGOSGg+nc4+udDzy
BGHHtyfR9Ap0BXqE2k3nBR/a5L1rousMxxCxTJYXfjIiJAU5O6gvrJMdlM9vzx0A
BgXR7kkq3E2Mquyz81W63HrTjrrHb+6jcFeFCZmTKeCVQcwqN/u/pHSL3fKTgG9E
P4V9p/G+iJedb3j/H8YjhxdbgeOtB6OFtu9DXhk2+D39p2rjZf2ANIW8GcIxgj5r
XZRAS4sQG/KOYyv78GnMHUJK1I3JHF4OZwNfNJxuot7t
-----END CERTIFICATE-----
Generated at Mon Feb 17 07:58:24 2025 by rpki-client