Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/33/1df18e-6c4d-434b-8e31-71eb95f50e5b/1/PuPhNabvo9_qxKCWn4gMB6x-zyY.roa
File: PuPhNabvo9_qxKCWn4gMB6x-zyY.roa (raw, json)
Hash identifier: FBlGDazH6kNFcFIDcXDNcqWRM5YdSml+XnvQykqE71E=
Subject key identifier: 3E:E3:E1:35:A6:EF:A3:DF:EA:C4:A0:96:9F:88:0C:07:AC:7E:CF:26
Certificate issuer: /CN=ff87e0ab032b0c05eb5e74cc2c08698dd324d963
Certificate serial: 018CC501455FFF4CBC47683E4600E3FADD81
Authority key identifier: FF:87:E0:AB:03:2B:0C:05:EB:5E:74:CC:2C:08:69:8D:D3:24:D9:63
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/_4fgqwMrDAXrXnTMLAhpjdMk2WM.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/33/1df18e-6c4d-434b-8e31-71eb95f50e5b/1/PuPhNabvo9_qxKCWn4gMB6x-zyY.roa
Signing time: Mon 01 Jan 2024 12:30:44 +0000
ROA not before: Mon 01 Jan 2024 12:30:44 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 211440
IP address blocks: 109.122.206.0/24 maxlen: 24
109.122.202.0/24 maxlen: 24
Validation: Failed, RFC 3779 resource not subset of parent's resources
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8c:c5:01:45:5f:ff:4c:bc:47:68:3e:46:00:e3:fa:dd:81
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=ff87e0ab032b0c05eb5e74cc2c08698dd324d963
Validity
Not Before: Jan 1 12:30:44 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=3ee3e135a6efa3dfeac4a0969f880c07ac7ecf26
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:93:22:0e:21:13:ee:cc:9b:61:5f:66:76:86:53:
96:98:c5:b8:39:7a:7e:9c:36:65:b7:bb:ce:28:a6:
1d:71:4b:fc:b9:c2:88:65:a7:8d:83:16:69:6f:bd:
c1:13:7c:84:10:54:a5:a6:fa:8c:73:01:00:69:21:
d1:9d:fd:b5:f9:7f:fc:87:0c:4b:37:be:3b:ff:bf:
60:f9:ff:d3:02:28:7c:1a:91:70:01:fb:69:5c:f9:
eb:e9:7c:37:44:2d:bd:f5:43:10:07:c6:ac:50:76:
05:f3:b3:07:c7:4a:e4:ea:ee:5b:24:bc:88:ef:71:
29:27:1e:8f:34:70:9b:64:b6:6f:1d:80:98:27:81:
ea:8f:8c:ba:1a:5d:59:df:60:02:4e:39:4e:63:c9:
88:c8:b1:5e:6a:51:1c:4a:07:fc:ea:0e:dc:90:f2:
e6:63:4e:69:0c:a1:68:9b:fa:91:5d:61:33:e1:67:
29:df:ff:d5:61:f4:a5:e1:de:16:1a:bd:03:c3:d2:
23:13:3c:1a:39:1e:18:e1:f7:24:87:b2:94:4d:0a:
31:90:43:27:e5:44:ce:ca:a8:7f:68:0e:0f:80:b0:
f1:2d:9e:67:b9:d8:b7:47:dd:65:68:95:ba:d3:af:
7a:db:63:43:64:cb:d5:be:2f:93:35:e3:c1:da:3c:
c4:53
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
3E:E3:E1:35:A6:EF:A3:DF:EA:C4:A0:96:9F:88:0C:07:AC:7E:CF:26
X509v3 Authority Key Identifier:
keyid:FF:87:E0:AB:03:2B:0C:05:EB:5E:74:CC:2C:08:69:8D:D3:24:D9:63
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/_4fgqwMrDAXrXnTMLAhpjdMk2WM.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/33/1df18e-6c4d-434b-8e31-71eb95f50e5b/1/PuPhNabvo9_qxKCWn4gMB6x-zyY.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/33/1df18e-6c4d-434b-8e31-71eb95f50e5b/1/_4fgqwMrDAXrXnTMLAhpjdMk2WM.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
109.122.202.0/24
109.122.206.0/24
Signature Algorithm: sha256WithRSAEncryption
17:58:d1:c4:f7:32:05:ff:e5:a8:ca:53:d5:da:6f:b1:bb:4b:
60:d6:f3:6c:78:eb:0a:13:ff:70:ef:bb:50:0b:2e:e0:54:5e:
39:29:af:4a:09:07:76:f9:8f:c7:11:e0:f2:31:c5:fa:84:ed:
fe:e6:e6:2d:71:c0:33:34:cb:69:47:69:5e:92:e2:b0:93:c3:
79:41:fd:7b:fc:2f:5e:39:06:d4:a8:9f:05:28:cc:cc:83:80:
c7:ae:6c:63:76:44:bc:db:8c:1f:6a:c9:5d:19:38:16:82:06:
1f:91:cf:5e:6d:55:2d:b4:24:09:c1:2f:74:e1:d5:07:d1:17:
e9:df:e3:56:11:5d:e5:05:5a:c7:cb:6c:5d:8d:7b:56:1c:9d:
f3:b6:11:ae:29:ab:eb:b1:eb:96:b1:5b:bd:c9:f7:53:80:98:
60:16:f2:a0:6a:a6:15:0b:62:9b:7a:3f:5a:99:5d:ca:29:cc:
a8:2c:0e:9d:11:47:c5:18:3f:71:3c:23:90:17:65:dc:4b:6c:
d7:63:fb:3e:ee:c1:5e:15:14:96:d1:41:04:c4:bf:76:35:7a:
90:aa:15:1a:dd:7e:d3:f0:8e:e1:cd:d9:ff:e6:30:9d:e7:60:
33:bf:9d:0a:03:2f:f6:6c:65:47:35:00:4e:49:f1:f6:44:21:
58:6a:09:9c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Jan 15 20:13:15 2024 by rpki-client on console-ams.rpki-client.org