Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/33/1df18e-6c4d-434b-8e31-71eb95f50e5b/1/Eqc7yxuMlRXxK1zccps3gozu-Pw.roa
File: Eqc7yxuMlRXxK1zccps3gozu-Pw.roa (raw, json)
Hash identifier: Xi92mttcimuq/a9xZCrFGfDBvIx7BdFuhB73/QDDQa8=
Subject key identifier: 12:A7:3B:CB:1B:8C:95:15:F1:2B:5C:DC:72:9B:37:82:8C:EE:F8:FC
Certificate issuer: /CN=ff87e0ab032b0c05eb5e74cc2c08698dd324d963
Certificate serial: 018CC501403FA105768FAA88B306B144446E
Authority key identifier: FF:87:E0:AB:03:2B:0C:05:EB:5E:74:CC:2C:08:69:8D:D3:24:D9:63
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/_4fgqwMrDAXrXnTMLAhpjdMk2WM.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/33/1df18e-6c4d-434b-8e31-71eb95f50e5b/1/Eqc7yxuMlRXxK1zccps3gozu-Pw.roa
Signing time: Mon 01 Jan 2024 12:30:42 +0000
ROA not before: Mon 01 Jan 2024 12:30:42 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 9009
IP address blocks: 109.122.204.0/24 maxlen: 24
Validation: Failed, RFC 3779 resource not subset of parent's resources
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8c:c5:01:40:3f:a1:05:76:8f:aa:88:b3:06:b1:44:44:6e
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=ff87e0ab032b0c05eb5e74cc2c08698dd324d963
Validity
Not Before: Jan 1 12:30:42 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=12a73bcb1b8c9515f12b5cdc729b37828ceef8fc
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a8:11:39:52:8b:e8:e6:68:64:f6:b7:f5:4b:03:
cd:54:df:57:e5:c6:be:75:20:84:e8:1c:1a:b2:5c:
55:7a:63:00:de:01:83:d2:e4:f4:54:d5:c4:ee:7c:
68:09:a4:be:c5:8d:8c:9e:6d:d7:7c:ed:4b:b8:e4:
31:0b:7a:5f:f2:68:07:5c:35:c3:a4:fe:b4:75:2c:
41:92:c0:6e:7d:d5:6a:b6:c3:30:9e:2b:32:0b:c0:
14:2d:0a:ad:14:a9:32:ef:04:8a:10:43:64:47:40:
bd:17:44:0e:16:22:e8:2e:e3:2b:d9:5d:ce:4b:19:
78:58:21:cd:f2:fe:ad:3c:6a:ac:2a:18:3d:23:95:
de:08:32:65:cd:1f:a9:99:eb:dd:ca:86:4d:19:6b:
ec:c6:ca:a4:5e:c9:e9:11:3b:a8:fe:78:41:4a:f6:
08:8a:b3:65:bd:68:94:81:4f:b2:c6:c6:54:3d:4d:
3d:58:88:91:4e:f4:c9:99:ea:60:8a:49:92:27:d2:
8b:41:63:ad:e6:96:96:e0:68:9c:cc:dc:10:eb:fb:
3c:db:25:11:4b:74:bd:32:7b:e7:10:ef:b1:ab:3a:
73:e0:0a:7a:eb:53:28:9f:09:68:40:3a:dd:16:29:
57:fb:15:27:d6:54:c9:3c:98:b9:69:e5:db:f9:45:
0b:35
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
12:A7:3B:CB:1B:8C:95:15:F1:2B:5C:DC:72:9B:37:82:8C:EE:F8:FC
X509v3 Authority Key Identifier:
keyid:FF:87:E0:AB:03:2B:0C:05:EB:5E:74:CC:2C:08:69:8D:D3:24:D9:63
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/_4fgqwMrDAXrXnTMLAhpjdMk2WM.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/33/1df18e-6c4d-434b-8e31-71eb95f50e5b/1/Eqc7yxuMlRXxK1zccps3gozu-Pw.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/33/1df18e-6c4d-434b-8e31-71eb95f50e5b/1/_4fgqwMrDAXrXnTMLAhpjdMk2WM.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
109.122.204.0/24
Signature Algorithm: sha256WithRSAEncryption
2a:c9:94:62:48:b4:fd:cc:51:71:e3:08:d3:b7:95:c1:e5:b6:
ad:7a:12:44:17:d1:84:5e:a9:75:40:cb:79:04:11:9e:9f:64:
bb:83:bf:95:40:6d:96:79:38:ad:ed:21:c7:ec:ea:4b:f9:f3:
c1:9a:02:95:e4:7a:bf:99:ec:c1:ce:3b:ac:96:ed:8f:89:94:
d2:5b:6a:f9:c4:ba:f5:19:be:0e:45:4f:9b:b2:e6:81:84:77:
c4:f5:39:1a:b1:21:d9:c7:6c:fb:48:51:12:20:34:d8:2f:c9:
67:8f:61:7a:57:4e:28:7b:ee:59:a6:5d:c9:22:58:15:64:ca:
d3:e1:b9:32:4a:e8:78:9c:c4:4a:ed:3f:a5:73:ac:17:91:8c:
87:b9:13:73:c4:44:c0:c7:d0:dc:e4:d7:00:81:df:6a:6e:34:
eb:fb:ed:a3:23:ca:f5:4f:00:eb:54:77:31:41:d6:02:87:26:
10:03:db:8d:a9:ba:ed:4a:f2:f3:a9:42:56:51:e2:ae:f5:a5:
8b:41:85:fc:af:d7:10:10:65:48:b4:38:9c:de:56:01:b9:5c:
b8:6f:e1:8d:71:41:ce:74:41:d5:c2:6a:8f:43:d5:c2:ea:c3:
f5:7e:04:c2:95:61:11:e8:35:33:47:62:90:24:8e:6a:df:51:
93:4b:10:3a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 19:02:04 2024 by rpki-client on console-ams.rpki-client.org