Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/33/1df18e-6c4d-434b-8e31-71eb95f50e5b/1/JyVJd51BTTNNZfJ8sUDOSLnpa_8.roa
File: JyVJd51BTTNNZfJ8sUDOSLnpa_8.roa (raw, json)
Hash identifier: N8muPwEBx6A761RL6xoY421rLspYAeoFkw2CbBlTT4A=
Subject key identifier: 27:25:49:77:9D:41:4D:33:4D:65:F2:7C:B1:40:CE:48:B9:E9:6B:FF
Certificate issuer: /CN=ff87e0ab032b0c05eb5e74cc2c08698dd324d963
Certificate serial: 018BD60C0EA709D10CE222477D6098B7F7A4
Authority key identifier: FF:87:E0:AB:03:2B:0C:05:EB:5E:74:CC:2C:08:69:8D:D3:24:D9:63
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/_4fgqwMrDAXrXnTMLAhpjdMk2WM.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/33/1df18e-6c4d-434b-8e31-71eb95f50e5b/1/JyVJd51BTTNNZfJ8sUDOSLnpa_8.roa
Signing time: Thu 16 Nov 2023 02:53:16 +0000
ROA not before: Thu 16 Nov 2023 02:53:16 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 48678
IP address blocks: 109.122.196.0/24 maxlen: 24
Validation: Failed, RFC 3779 resource not subset of parent's resources
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8b:d6:0c:0e:a7:09:d1:0c:e2:22:47:7d:60:98:b7:f7:a4
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=ff87e0ab032b0c05eb5e74cc2c08698dd324d963
Validity
Not Before: Nov 16 02:53:16 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=272549779d414d334d65f27cb140ce48b9e96bff
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:94:84:3d:2f:1a:db:b7:e4:55:df:ca:ff:d4:19:
06:33:d3:ce:90:b7:0c:c5:0e:3f:db:e6:6d:2c:02:
44:06:5a:41:ff:d2:75:2c:c9:d7:60:97:3f:64:48:
90:f0:3f:d7:02:c0:46:9c:4d:86:d7:05:56:73:85:
e9:e5:60:78:67:f1:a6:63:99:aa:97:f3:4b:ec:1c:
7f:5a:82:a8:e4:24:5b:d9:6d:63:2f:5e:61:fc:6c:
2a:92:80:e9:56:97:75:4f:f3:db:35:2b:f2:64:8c:
8e:b2:bc:fa:6b:96:09:00:41:14:01:95:28:38:61:
e3:69:cf:1c:3c:b3:55:e2:3f:2a:f4:96:4c:26:36:
25:aa:0f:a5:3a:2d:77:d1:21:20:43:3d:05:21:b0:
1b:d6:71:96:77:a6:b6:41:dc:da:e3:7b:9f:19:24:
49:03:d9:4d:46:b3:05:30:51:04:4f:31:39:78:4b:
cd:02:12:2e:ee:b7:b8:a2:2c:08:1d:5a:cf:d6:8e:
01:3a:13:2b:60:9c:17:9c:8d:ae:6a:d5:75:7f:58:
3b:25:d8:f9:db:d1:23:15:20:87:14:b7:c2:72:dd:
ec:f2:c4:ad:2c:ca:44:82:2a:af:3c:a3:56:23:e6:
63:46:83:1e:45:cd:92:02:da:64:e7:54:38:fc:15:
f6:fd
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
27:25:49:77:9D:41:4D:33:4D:65:F2:7C:B1:40:CE:48:B9:E9:6B:FF
X509v3 Authority Key Identifier:
keyid:FF:87:E0:AB:03:2B:0C:05:EB:5E:74:CC:2C:08:69:8D:D3:24:D9:63
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/_4fgqwMrDAXrXnTMLAhpjdMk2WM.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/33/1df18e-6c4d-434b-8e31-71eb95f50e5b/1/JyVJd51BTTNNZfJ8sUDOSLnpa_8.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/33/1df18e-6c4d-434b-8e31-71eb95f50e5b/1/_4fgqwMrDAXrXnTMLAhpjdMk2WM.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
109.122.196.0/24
Signature Algorithm: sha256WithRSAEncryption
2c:7f:29:1e:22:48:2c:31:16:65:f8:94:3b:55:73:cf:a1:8d:
79:3b:eb:2b:0f:91:43:de:c2:05:9b:78:92:f8:f6:50:75:70:
57:cb:f1:0a:24:5f:f6:3e:82:42:40:86:53:5e:7f:97:8f:8f:
04:31:21:c7:2b:e6:44:ee:fd:6a:2f:57:dd:f3:5d:56:b6:7d:
26:6d:82:c4:8b:6c:ac:c1:7b:7c:de:99:78:42:d6:d5:71:e6:
70:13:4a:dc:95:d5:64:37:37:10:d0:6c:6c:8a:a2:f0:db:02:
42:79:8e:54:22:b0:e0:eb:e0:13:0c:93:4d:48:aa:9d:c1:ab:
0d:ea:97:9d:1b:82:1a:20:0f:80:10:66:eb:5f:62:61:a7:9d:
80:bd:9e:9d:bc:a4:49:b5:a4:f7:01:fd:30:f3:2c:9c:dd:12:
09:a3:90:ab:2f:8d:ad:08:16:e2:ed:57:a0:41:48:13:39:af:
26:40:41:13:2f:6c:3b:00:ff:f6:53:d4:74:51:e7:de:1c:43:
54:55:71:cd:c1:2f:e4:cf:52:63:8d:d2:79:72:9f:5c:00:3a:
ab:1f:3a:0e:ab:52:d6:fc:b7:3b:3d:56:70:26:6a:37:1d:b9:
14:0c:f9:46:6c:fe:7b:b5:76:d5:0c:26:97:4e:64:87:aa:5a:
19:b6:c0:ea
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 19:02:04 2024 by rpki-client on console-ams.rpki-client.org