Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/33/1df18e-6c4d-434b-8e31-71eb95f50e5b/1/Te2hM5QJSyzrSbmoOLu4ER6zt98.roa
File: Te2hM5QJSyzrSbmoOLu4ER6zt98.roa (raw, json)
Hash identifier: zkgMc2UnLqeiFZQxU6FsBpL1Xhyk5e/TH2DwDUeIrEw=
Subject key identifier: 4D:ED:A1:33:94:09:4B:2C:EB:49:B9:A8:38:BB:B8:11:1E:B3:B7:DF
Certificate issuer: /CN=ff87e0ab032b0c05eb5e74cc2c08698dd324d963
Certificate serial: 018B434C2E1F3A9623D0A724FCE329DC07C2
Authority key identifier: FF:87:E0:AB:03:2B:0C:05:EB:5E:74:CC:2C:08:69:8D:D3:24:D9:63
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/_4fgqwMrDAXrXnTMLAhpjdMk2WM.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/33/1df18e-6c4d-434b-8e31-71eb95f50e5b/1/Te2hM5QJSyzrSbmoOLu4ER6zt98.roa
Signing time: Wed 18 Oct 2023 14:59:07 +0000
ROA not before: Wed 18 Oct 2023 14:59:07 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 207459
IP address blocks: 109.122.212.0/24 maxlen: 24
Validation: Failed, RFC 3779 resource not subset of parent's resources
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8b:43:4c:2e:1f:3a:96:23:d0:a7:24:fc:e3:29:dc:07:c2
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=ff87e0ab032b0c05eb5e74cc2c08698dd324d963
Validity
Not Before: Oct 18 14:59:07 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=4deda13394094b2ceb49b9a838bbb8111eb3b7df
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8b:03:38:53:f0:1c:1b:bf:b7:c6:5a:74:b1:c5:
4f:21:2d:7d:51:9f:17:82:6c:c2:1b:0b:0b:2c:3f:
03:ee:aa:c0:23:9c:63:85:91:78:8c:7c:1c:16:e2:
df:2e:5d:98:de:f9:77:ee:39:e4:c2:b6:66:1b:01:
8f:2b:e1:39:85:07:aa:bd:4b:b7:17:da:73:f6:86:
fe:45:28:ec:0f:df:1b:a6:dc:fc:91:2c:07:f1:21:
3d:8c:b9:92:57:ba:f8:19:97:60:ed:7b:2a:8b:15:
ab:b2:5e:ba:8a:36:75:14:30:a1:e2:33:6b:f8:1d:
13:a9:43:fd:b5:cc:d7:88:b3:0d:fd:09:96:58:da:
75:61:ec:e7:07:0f:f6:a5:0c:cf:4a:08:67:93:b0:
4d:6a:b6:61:fd:fa:b8:c1:57:4e:9d:30:09:5b:12:
19:e2:c7:6a:31:e8:c1:8d:a0:2f:9e:39:13:68:85:
07:98:67:8b:86:53:99:b1:a0:dc:c2:1b:ce:23:9f:
0a:c1:c7:f5:9c:64:68:7d:e8:67:2f:66:c9:32:44:
7b:e8:9a:c8:80:a4:77:f9:32:b8:25:ef:89:ad:f6:
29:92:66:d1:fd:5f:bf:e6:5b:ff:ab:00:f3:e1:da:
36:69:6a:b5:4e:6b:52:41:4e:18:65:6e:ab:41:23:
9c:89
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
4D:ED:A1:33:94:09:4B:2C:EB:49:B9:A8:38:BB:B8:11:1E:B3:B7:DF
X509v3 Authority Key Identifier:
keyid:FF:87:E0:AB:03:2B:0C:05:EB:5E:74:CC:2C:08:69:8D:D3:24:D9:63
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/_4fgqwMrDAXrXnTMLAhpjdMk2WM.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/33/1df18e-6c4d-434b-8e31-71eb95f50e5b/1/Te2hM5QJSyzrSbmoOLu4ER6zt98.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/33/1df18e-6c4d-434b-8e31-71eb95f50e5b/1/_4fgqwMrDAXrXnTMLAhpjdMk2WM.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
109.122.212.0/24
Signature Algorithm: sha256WithRSAEncryption
50:ae:bb:f5:cc:93:c7:ae:8b:7e:b7:13:5b:7a:1a:25:40:ea:
2d:13:f4:f4:e6:e2:f1:54:c2:e7:45:ff:92:e1:8c:3a:da:e2:
a2:63:89:ef:d5:20:23:d6:f4:18:a2:2e:4d:e2:84:fc:18:b0:
0a:93:65:96:b4:9d:3c:09:b3:ea:25:db:55:46:04:51:c7:b4:
3a:c1:0b:fa:b0:1d:1f:cd:d3:b4:3e:cb:e7:c5:80:5f:f3:c2:
bd:73:50:1d:33:65:85:29:08:e4:af:a3:0a:15:dd:bc:35:6e:
f6:c2:4e:fd:9f:98:ab:ab:d5:dc:e7:b2:fd:2e:cc:15:23:48:
3c:e9:65:cd:ab:22:43:b0:6c:9e:b8:8a:13:29:e8:f9:18:c0:
b8:0a:1e:10:2e:ff:79:01:67:16:3b:7a:08:57:c1:78:0d:53:
a7:bb:39:1f:bd:9b:d4:16:68:e9:1a:67:ac:b0:b7:64:11:0d:
a2:08:9c:fa:3e:d2:62:13:70:07:52:b6:ff:da:ac:54:d2:77:
97:80:73:df:21:61:c0:d5:66:e1:8a:aa:05:d4:b5:65:67:27:
d9:a7:8a:0c:fb:04:c3:eb:f3:f7:81:8f:35:32:7f:05:c3:27:
eb:b2:b0:e7:d8:68:c1:9b:ef:2f:b3:60:25:11:ad:64:2b:ff:
c6:3f:52:50
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 19:02:04 2024 by rpki-client on console-ams.rpki-client.org