Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/33/1df18e-6c4d-434b-8e31-71eb95f50e5b/1/MkvRKLCt32gwEKa3C_ewT-j6z-o.roa
File: MkvRKLCt32gwEKa3C_ewT-j6z-o.roa (raw, json)
Hash identifier: tlVGw5zM9VyZ1XTQiACAeL3/ZxRw8fMlHhJqX9UJHmk=
Subject key identifier: 32:4B:D1:28:B0:AD:DF:68:30:10:A6:B7:0B:F7:B0:4F:E8:FA:CF:EA
Certificate issuer: /CN=ff87e0ab032b0c05eb5e74cc2c08698dd324d963
Certificate serial: 0187A865EBBC495D1332BF5AE57CD7B8108C
Authority key identifier: FF:87:E0:AB:03:2B:0C:05:EB:5E:74:CC:2C:08:69:8D:D3:24:D9:63
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/_4fgqwMrDAXrXnTMLAhpjdMk2WM.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/33/1df18e-6c4d-434b-8e31-71eb95f50e5b/1/MkvRKLCt32gwEKa3C_ewT-j6z-o.roa
Signing time: Sat 22 Apr 2023 09:57:44 +0000
ROA not before: Sat 22 Apr 2023 09:57:44 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 209181
IP address blocks: 109.122.219.0/24 maxlen: 24
Validation: Failed, RFC 3779 resource not subset of parent's resources
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:87:a8:65:eb:bc:49:5d:13:32:bf:5a:e5:7c:d7:b8:10:8c
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=ff87e0ab032b0c05eb5e74cc2c08698dd324d963
Validity
Not Before: Apr 22 09:57:44 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=324bd128b0addf683010a6b70bf7b04fe8facfea
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9c:0c:a7:1f:0c:23:a8:73:58:19:c0:f3:36:64:
00:06:22:04:0e:7d:90:87:7d:64:f8:3d:b5:9f:33:
3e:5f:54:2a:60:d1:5f:25:21:3d:15:20:c1:d8:48:
ef:d0:01:e6:68:db:ed:9c:80:25:6d:64:3f:2b:ad:
5b:e0:dc:33:70:20:50:46:47:f3:98:b6:78:c8:9d:
04:00:38:97:9f:7b:93:cd:58:77:0a:c9:6e:15:b5:
ed:a7:e6:48:06:d9:3c:30:40:1a:42:6c:64:50:a8:
4c:29:69:84:bc:34:31:ca:54:ce:fe:07:45:ec:29:
e8:7f:16:21:35:a4:a1:4e:6c:b2:e9:4c:f5:63:23:
5c:7f:43:6a:33:89:0c:5b:a4:8e:91:b5:d0:7c:96:
2c:40:ab:86:5c:e8:51:ad:d9:e0:82:54:0c:21:4a:
02:2a:a3:c7:32:ac:21:c8:40:09:53:c3:54:af:51:
21:0f:6c:88:32:f0:de:f9:fc:cf:d0:97:9d:9c:89:
8a:45:8d:4c:c5:fc:8c:be:2e:d7:ab:cb:5e:d7:1a:
82:ea:1f:ac:b4:39:a0:45:98:71:8d:83:78:b8:42:
2e:23:d8:3a:52:d2:53:d1:96:a2:b4:b2:70:7c:a0:
9a:b8:a4:b9:84:04:4a:b1:df:52:c9:0f:d6:e4:3a:
41:1d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
32:4B:D1:28:B0:AD:DF:68:30:10:A6:B7:0B:F7:B0:4F:E8:FA:CF:EA
X509v3 Authority Key Identifier:
keyid:FF:87:E0:AB:03:2B:0C:05:EB:5E:74:CC:2C:08:69:8D:D3:24:D9:63
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/_4fgqwMrDAXrXnTMLAhpjdMk2WM.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/33/1df18e-6c4d-434b-8e31-71eb95f50e5b/1/MkvRKLCt32gwEKa3C_ewT-j6z-o.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/33/1df18e-6c4d-434b-8e31-71eb95f50e5b/1/_4fgqwMrDAXrXnTMLAhpjdMk2WM.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
109.122.219.0/24
Signature Algorithm: sha256WithRSAEncryption
85:92:8c:6e:ea:f6:b7:16:15:85:8f:7c:b0:25:18:63:31:c8:
2a:bb:0b:4c:cd:9a:af:67:77:a4:54:fb:98:1b:15:ba:55:18:
04:2b:cb:a4:f6:18:87:6f:39:da:19:c0:28:36:fd:fb:43:36:
90:2f:2c:a0:c9:4e:36:24:e1:28:ca:47:e2:b4:5f:29:5e:db:
92:ac:91:c4:4a:a6:ef:28:25:b6:f9:19:7d:58:bf:96:a2:f8:
ef:d1:e9:eb:f0:4c:23:74:bc:aa:2c:5d:ad:68:f6:eb:49:b6:
cc:ea:f4:17:1c:4a:aa:8f:55:34:5f:8b:ad:eb:a2:74:1e:06:
b1:f8:2a:02:1e:b8:a0:a6:85:2a:c9:db:c8:6d:86:4e:86:ae:
ce:b3:d4:96:b3:54:77:d2:27:0a:40:47:90:cf:f5:00:25:c2:
e3:24:6d:50:41:8c:bb:7f:cf:1c:ae:2f:df:65:a6:50:cb:3c:
04:05:30:09:31:9c:bc:4a:ac:5c:ba:8b:9d:97:c9:81:43:ec:
5b:d1:e2:c3:74:7d:28:98:de:10:22:0b:11:08:2e:3f:3b:b0:
33:1f:dd:e9:4e:8c:d6:db:be:48:b2:6a:68:e5:08:22:0e:8c:
cc:dd:60:d1:e3:a5:3d:1c:24:2b:24:d0:91:4a:e6:bf:6e:90:
73:c4:0f:dd
-----BEGIN CERTIFICATE-----
MIIE/TCCA+WgAwIBAgISAYeoZeu8SV0TMr9a5XzXuBCMMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGZmODdlMGFiMDMyYjBjMDVlYjVlNzRjYzJjMDg2OThkZDMy
NGQ5NjMwHhcNMjMwNDIyMDk1NzQ0WhcNMjQwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EygzMjRiZDEyOGIwYWRkZjY4MzAxMGE2YjcwYmY3YjA0ZmU4ZmFjZmVhMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAnAynHwwjqHNYGcDzNmQABiIEDn2Q
h31k+D21nzM+X1QqYNFfJSE9FSDB2Ejv0AHmaNvtnIAlbWQ/K61b4NwzcCBQRkfz
mLZ4yJ0EADiXn3uTzVh3CsluFbXtp+ZIBtk8MEAaQmxkUKhMKWmEvDQxylTO/gdF
7CnofxYhNaShTmyy6Uz1YyNcf0NqM4kMW6SOkbXQfJYsQKuGXOhRrdngglQMIUoC
KqPHMqwhyEAJU8NUr1EhD2yIMvDe+fzP0JednImKRY1MxfyMvi7Xq8te1xqC6h+s
tDmgRZhxjYN4uEIuI9g6UtJT0ZaitLJwfKCauKS5hARKsd9SyQ/W5DpBHQIDAQAB
o4ICCTCCAgUwHQYDVR0OBBYEFDJL0Siwrd9oMBCmtwv3sE/o+s/qMB8GA1UdIwQY
MBaAFP+H4KsDKwwF6150zCwIaY3TJNljMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvXzRmZ3F3TXJEQVhyWG5UTUxBaHBqZE1rMldNLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8zMy8xZGYxOGUtNmM0ZC00MzRiLThlMzEt
NzFlYjk1ZjUwZTViLzEvTWt2UktMQ3QzMmd3RUthM0NfZXdULWo2ei1vLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8zMy8xZGYxOGUtNmM0ZC00MzRiLThlMzEtNzFlYjk1ZjUwZTVi
LzEvXzRmZ3F3TXJEQVhyWG5UTUxBaHBqZE1rMldNLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAbXrbMA0G
CSqGSIb3DQEBCwUAA4IBAQCFkoxu6va3FhWFj3ywJRhjMcgquwtMzZqvZ3ekVPuY
GxW6VRgEK8uk9hiHbznaGcAoNv37QzaQLyygyU42JOEoykfitF8pXtuSrJHESqbv
KCW2+Rl9WL+Wovjv0enr8EwjdLyqLF2taPbrSbbM6vQXHEqqj1U0X4ut66J0Hgax
+CoCHrigpoUqydvIbYZOhq7Os9SWs1R30icKQEeQz/UAJcLjJG1QQYy7f88cri/f
ZaZQyzwEBTAJMZy8Sqxcuoudl8mBQ+xb0eLDdH0omN4QIgsRCC4/O7AzH93pTozW
275Ismpo5QgiDozM3WDR46U9HCQrJNCRSua/bpBzxA/d
-----END CERTIFICATE-----
Generated at Thu Jun 6 19:02:04 2024 by rpki-client on console-ams.rpki-client.org