Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/33/1df18e-6c4d-434b-8e31-71eb95f50e5b/1/Of44GxZdyKo4Z8o-WG-C1vHxXqA.roa
File: Of44GxZdyKo4Z8o-WG-C1vHxXqA.roa (raw, json)
Hash identifier: x0FPjjhmBCm4mS6sJQTiAPSFP0xMAr88PJuE7VpwmfQ=
Subject key identifier: 39:FE:38:1B:16:5D:C8:AA:38:67:CA:3E:58:6F:82:D6:F1:F1:5E:A0
Certificate issuer: /CN=ff87e0ab032b0c05eb5e74cc2c08698dd324d963
Certificate serial: 018D379735A7491FC6AE3B0C71176FBCDD98
Authority key identifier: FF:87:E0:AB:03:2B:0C:05:EB:5E:74:CC:2C:08:69:8D:D3:24:D9:63
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/_4fgqwMrDAXrXnTMLAhpjdMk2WM.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/33/1df18e-6c4d-434b-8e31-71eb95f50e5b/1/Of44GxZdyKo4Z8o-WG-C1vHxXqA.roa
Signing time: Tue 23 Jan 2024 18:31:12 +0000
ROA not before: Tue 23 Jan 2024 18:31:12 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 209181
IP address blocks: 109.122.219.0/24 maxlen: 24
Validation: Failed, RFC 3779 resource not subset of parent's resources
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8d:37:97:35:a7:49:1f:c6:ae:3b:0c:71:17:6f:bc:dd:98
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=ff87e0ab032b0c05eb5e74cc2c08698dd324d963
Validity
Not Before: Jan 23 18:31:12 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=39fe381b165dc8aa3867ca3e586f82d6f1f15ea0
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:97:d9:c2:14:63:f7:60:74:35:51:2f:c8:f9:6b:
f0:31:90:67:5d:3d:d9:80:e2:60:ea:a5:b1:c2:8a:
3f:31:fe:ed:29:08:13:53:26:80:ec:95:60:1c:3b:
17:cd:9a:0c:ae:06:34:cc:43:1b:15:01:79:a0:e3:
9d:e4:e5:72:d5:7d:9e:4f:e8:8f:b9:df:5e:42:a5:
d7:01:69:43:d0:5e:80:b4:cd:e4:22:42:87:3f:4d:
6e:a3:94:0e:0b:85:0c:11:1a:9a:2a:62:14:52:b1:
01:d5:4e:2e:82:a8:88:f8:34:9b:67:ba:2c:a7:bf:
a6:36:9a:99:35:a6:2e:d7:44:d7:04:5e:dd:b7:df:
72:7a:01:64:32:13:cd:a1:8d:5a:89:89:c9:96:2d:
a6:52:af:35:0f:2c:b7:47:b1:35:ed:75:f7:87:0c:
d0:f6:af:be:62:3a:ba:ae:3e:f9:6f:5b:99:9e:77:
dc:8b:6e:04:1a:f4:59:6e:1e:bc:50:11:37:2a:01:
0b:33:27:aa:78:ae:94:b1:a6:94:95:de:74:76:35:
3c:fb:f8:e7:12:4f:97:47:5f:91:87:e7:d0:bc:fe:
e2:06:af:eb:13:63:ec:99:78:38:f2:f0:d7:13:60:
09:43:7c:85:86:95:41:10:ba:f7:90:2b:5c:b0:73:
23:0b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
39:FE:38:1B:16:5D:C8:AA:38:67:CA:3E:58:6F:82:D6:F1:F1:5E:A0
X509v3 Authority Key Identifier:
keyid:FF:87:E0:AB:03:2B:0C:05:EB:5E:74:CC:2C:08:69:8D:D3:24:D9:63
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/_4fgqwMrDAXrXnTMLAhpjdMk2WM.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/33/1df18e-6c4d-434b-8e31-71eb95f50e5b/1/Of44GxZdyKo4Z8o-WG-C1vHxXqA.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/33/1df18e-6c4d-434b-8e31-71eb95f50e5b/1/_4fgqwMrDAXrXnTMLAhpjdMk2WM.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
109.122.219.0/24
Signature Algorithm: sha256WithRSAEncryption
82:5c:50:46:a1:94:5f:aa:7a:6d:20:d9:8e:0f:1d:e4:a0:ec:
87:51:4a:2a:a0:d3:36:56:f1:d6:19:4a:da:b3:1a:e8:8b:18:
61:84:c9:a3:c8:86:f4:8b:4a:ad:23:ad:93:07:4e:ec:04:51:
13:d8:80:37:ea:01:3e:2d:ee:7a:44:6b:45:79:dd:8f:2c:82:
52:ef:df:73:6e:5f:43:ab:97:c2:90:d2:71:71:31:e9:03:ca:
22:0b:ed:53:e4:60:bf:41:61:be:bd:b3:26:b6:3b:f8:ec:9f:
ea:57:21:9e:7d:5b:f6:6a:1a:f3:76:87:31:b5:09:08:b9:04:
fd:73:6a:ca:dd:bc:fc:68:86:7f:c5:ec:73:67:54:b4:14:64:
93:e6:8a:a8:91:25:5f:d6:8e:77:60:e4:ca:14:4e:3a:79:ff:
c7:bf:ce:f6:a3:54:72:74:25:f4:1e:54:df:48:b5:06:0f:7c:
d6:f4:dc:0d:1b:f5:12:73:2b:98:ec:ff:6e:fb:db:bc:a6:b5:
6b:f9:e8:0b:ce:7f:86:16:a1:a0:f0:01:fd:03:17:48:f3:9f:
12:55:43:16:e0:61:c1:bb:c5:11:63:8a:d2:59:7d:51:d0:f1:
c0:2b:cb:fc:28:85:1d:4c:31:0e:a2:63:56:15:3c:9f:cc:3e:
6c:39:34:9b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Feb 17 08:19:02 2025 by rpki-client