Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/33/1df18e-6c4d-434b-8e31-71eb95f50e5b/1/TDD-cRRobTLpX9LTtzUDOPX6lHE.roa
File: TDD-cRRobTLpX9LTtzUDOPX6lHE.roa (raw, json)
Hash identifier: GyNMd6OmfzezcLNMLltrjFTGYfWgtXwbJ5THMVRU+6w=
Subject key identifier: 4C:30:FE:71:14:68:6D:32:E9:5F:D2:D3:B7:35:03:38:F5:FA:94:71
Certificate issuer: /CN=ff87e0ab032b0c05eb5e74cc2c08698dd324d963
Certificate serial: 018CC50144146C1E2E25247D19D3549D2A2A
Authority key identifier: FF:87:E0:AB:03:2B:0C:05:EB:5E:74:CC:2C:08:69:8D:D3:24:D9:63
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/_4fgqwMrDAXrXnTMLAhpjdMk2WM.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/33/1df18e-6c4d-434b-8e31-71eb95f50e5b/1/TDD-cRRobTLpX9LTtzUDOPX6lHE.roa
Signing time: Mon 01 Jan 2024 12:30:43 +0000
ROA not before: Mon 01 Jan 2024 12:30:43 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 132335
IP address blocks: 109.122.200.0/24 maxlen: 24
Validation: Failed, RFC 3779 resource not subset of parent's resources
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8c:c5:01:44:14:6c:1e:2e:25:24:7d:19:d3:54:9d:2a:2a
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=ff87e0ab032b0c05eb5e74cc2c08698dd324d963
Validity
Not Before: Jan 1 12:30:43 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=4c30fe7114686d32e95fd2d3b7350338f5fa9471
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9b:aa:89:5f:a2:dd:e4:14:81:12:40:7f:51:85:
e3:2d:63:2f:02:fd:2c:35:0b:39:67:6b:21:14:65:
a6:21:93:66:1f:9a:5f:d6:33:04:3a:2f:71:1f:24:
9a:9d:8a:f1:4e:c0:9b:79:3d:38:3d:03:a2:aa:0a:
22:a1:a2:fb:31:0a:09:24:b0:dc:46:df:74:e6:5d:
53:12:09:8f:c6:23:9f:96:c5:3b:a2:75:83:89:8f:
e6:ab:28:a9:2e:59:51:dd:b6:97:01:37:62:0e:36:
97:e2:e9:13:7a:aa:28:d9:1c:59:a0:42:36:c7:e2:
7d:83:c7:34:cc:fa:63:c4:1b:d3:de:b4:26:31:18:
5b:fb:7f:82:db:05:58:55:e8:8c:38:2f:34:08:04:
f8:54:98:d4:be:c9:a0:54:63:62:0f:62:b6:0c:4a:
60:3e:c0:43:af:75:a4:54:2c:23:46:ea:ec:9e:c3:
99:09:d0:c6:db:57:45:0e:cd:73:16:01:77:8b:63:
32:81:57:a9:8d:48:18:d9:38:7a:0e:aa:51:24:31:
79:62:5a:84:a7:7b:9c:22:de:d7:9a:29:ad:a4:01:
5a:b8:c4:ba:67:3e:89:bc:b0:d9:fe:88:7a:ea:a9:
6f:a9:b8:5b:46:10:f2:d1:f9:f3:00:74:98:05:f6:
09:e3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
4C:30:FE:71:14:68:6D:32:E9:5F:D2:D3:B7:35:03:38:F5:FA:94:71
X509v3 Authority Key Identifier:
keyid:FF:87:E0:AB:03:2B:0C:05:EB:5E:74:CC:2C:08:69:8D:D3:24:D9:63
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/_4fgqwMrDAXrXnTMLAhpjdMk2WM.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/33/1df18e-6c4d-434b-8e31-71eb95f50e5b/1/TDD-cRRobTLpX9LTtzUDOPX6lHE.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/33/1df18e-6c4d-434b-8e31-71eb95f50e5b/1/_4fgqwMrDAXrXnTMLAhpjdMk2WM.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
109.122.200.0/24
Signature Algorithm: sha256WithRSAEncryption
40:9a:03:2e:24:b9:49:ca:1e:1d:f2:6d:b4:a8:b8:90:39:1f:
36:9f:c2:ec:ce:18:55:f4:1d:3e:ba:97:2b:78:01:c3:5f:16:
dc:8d:0b:08:86:f4:b3:55:e2:5e:26:f1:e1:a4:7e:1e:ba:ec:
f9:0d:9c:f3:0c:79:74:4b:7d:57:45:98:f9:9a:21:10:e3:24:
35:6f:71:2b:d8:15:3a:c1:74:ee:17:ab:e0:74:d8:68:41:3a:
bd:af:df:88:bb:ef:b9:9d:86:07:46:91:2c:6c:7b:e1:5a:04:
54:10:49:fc:df:df:19:22:aa:00:53:2e:81:da:83:1b:de:9a:
0c:15:39:02:ed:e4:6c:75:95:8f:d8:a1:2c:09:9e:57:42:43:
1e:8e:ad:b6:fa:fa:c3:4d:42:51:08:61:47:1d:89:78:fa:45:
93:14:8f:34:2b:1a:25:f5:12:d3:0a:fd:23:be:cb:a3:ad:f1:
32:3e:2a:07:78:da:f9:d2:1c:73:44:22:bd:c0:e4:d1:82:55:
9f:66:4e:f7:e4:30:a6:00:f3:50:e2:d2:71:28:fd:00:00:ec:
37:79:ed:ef:20:98:25:58:86:80:d6:0d:d7:1f:f0:6b:4e:6b:
11:a9:c6:0e:bd:17:5b:bf:18:76:13:29:9e:71:6f:e1:8b:e9:
4b:26:54:0a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 19:02:04 2024 by rpki-client on console-ams.rpki-client.org