Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/33/1df18e-6c4d-434b-8e31-71eb95f50e5b/1/W6dP8pY9pEMB_pSBHJrjEykfIgo.roa
File: W6dP8pY9pEMB_pSBHJrjEykfIgo.roa (raw, json)
Hash identifier: OGzeKN9h95izzRa1it7G0jH3d8Re1XBmER+JMkjErJw=
Subject key identifier: 5B:A7:4F:F2:96:3D:A4:43:01:FE:94:81:1C:9A:E3:13:29:1F:22:0A
Certificate issuer: /CN=ff87e0ab032b0c05eb5e74cc2c08698dd324d963
Certificate serial: 0187A865E1CA6432FBC98D77DC481689CA47
Authority key identifier: FF:87:E0:AB:03:2B:0C:05:EB:5E:74:CC:2C:08:69:8D:D3:24:D9:63
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/_4fgqwMrDAXrXnTMLAhpjdMk2WM.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/33/1df18e-6c4d-434b-8e31-71eb95f50e5b/1/W6dP8pY9pEMB_pSBHJrjEykfIgo.roa
Signing time: Sat 22 Apr 2023 09:57:41 +0000
ROA not before: Sat 22 Apr 2023 09:57:41 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 9050
IP address blocks: 109.122.221.0/24 maxlen: 24
Validation: Failed, RFC 3779 resource not subset of parent's resources
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:87:a8:65:e1:ca:64:32:fb:c9:8d:77:dc:48:16:89:ca:47
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=ff87e0ab032b0c05eb5e74cc2c08698dd324d963
Validity
Not Before: Apr 22 09:57:41 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=5ba74ff2963da44301fe94811c9ae313291f220a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a7:a8:39:73:c9:54:12:86:30:9c:2e:6f:5d:73:
f9:51:f4:20:91:74:a4:c4:7d:77:c0:b7:b6:bd:82:
31:07:3b:71:91:d8:31:a1:88:cb:29:96:12:cd:a7:
a9:c5:c5:8c:1f:1c:ea:1d:3b:1b:8e:b4:68:a4:ba:
a4:75:28:ee:89:cb:f7:e8:42:6d:91:5d:56:02:0b:
16:7c:12:48:4b:75:64:7a:2b:a8:d1:94:28:fb:63:
57:14:c6:b7:83:8a:09:f5:13:a2:9c:39:03:e0:d8:
b3:85:4e:c5:d0:b9:35:e5:29:fa:56:93:d5:99:9a:
f5:fa:4c:27:08:93:85:93:f7:5d:b2:be:11:c9:67:
93:42:e4:fa:2c:8c:e7:5e:b1:a2:95:86:1a:31:41:
1d:bc:83:63:71:e6:5f:48:be:eb:8a:90:61:5f:29:
34:37:0f:3c:8d:bf:93:9d:32:68:d3:02:ac:4c:d0:
e8:10:c8:31:40:e3:71:bf:00:64:b1:c3:4e:37:c4:
f4:62:f8:0d:3b:f1:06:e3:f7:15:02:e9:0b:04:4c:
d8:89:60:3d:2f:8c:01:93:23:90:f1:da:c8:8a:a5:
4c:88:d6:de:71:84:8f:61:e5:52:0b:d3:1c:8f:86:
6f:4e:1c:ef:61:69:37:4c:4d:f4:52:c1:78:94:b1:
32:ed
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
5B:A7:4F:F2:96:3D:A4:43:01:FE:94:81:1C:9A:E3:13:29:1F:22:0A
X509v3 Authority Key Identifier:
keyid:FF:87:E0:AB:03:2B:0C:05:EB:5E:74:CC:2C:08:69:8D:D3:24:D9:63
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/_4fgqwMrDAXrXnTMLAhpjdMk2WM.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/33/1df18e-6c4d-434b-8e31-71eb95f50e5b/1/W6dP8pY9pEMB_pSBHJrjEykfIgo.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/33/1df18e-6c4d-434b-8e31-71eb95f50e5b/1/_4fgqwMrDAXrXnTMLAhpjdMk2WM.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
109.122.221.0/24
Signature Algorithm: sha256WithRSAEncryption
3b:ae:e9:6e:c7:18:b4:68:59:bc:50:6e:5e:63:da:30:07:ee:
d9:26:a4:eb:31:7c:71:0b:82:31:7c:9a:48:8c:55:df:0c:ac:
87:5e:aa:a6:ad:c2:1e:fa:e0:e1:ef:08:4b:c5:62:b0:d9:56:
12:ad:9b:d8:ea:cf:d3:6f:f9:39:4e:6a:5f:8b:b9:8d:50:2a:
ad:12:d6:ca:7d:33:85:f6:65:77:8d:ea:08:c1:15:c2:46:b5:
3e:c0:af:56:bf:86:01:44:a0:d5:8d:1c:b6:6f:c5:b5:70:47:
88:3a:51:cc:1b:69:cf:d4:41:ef:2a:d9:88:33:72:cc:00:f0:
db:2e:3b:f6:67:60:1a:9e:cd:fd:b7:c7:46:d1:38:3a:71:43:
ed:9e:8a:9d:89:a4:06:05:43:6e:01:91:2c:69:46:89:e1:ee:
69:44:f3:ef:7d:09:dc:01:42:3e:b1:6a:1d:63:fa:04:81:32:
79:56:45:15:86:2c:c0:cf:25:05:cd:a4:2d:7e:c2:16:28:28:
80:ec:34:23:0c:9b:15:88:bd:3c:17:27:0b:3b:68:90:49:2e:
c3:6a:53:7e:b1:37:65:3e:5f:39:6d:78:e1:2f:98:07:37:18:
95:1b:6c:fa:53:b4:0b:45:51:7c:59:25:f2:c8:35:cf:17:4f:
70:7a:14:e0
-----BEGIN CERTIFICATE-----
MIIE/TCCA+WgAwIBAgISAYeoZeHKZDL7yY133EgWicpHMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGZmODdlMGFiMDMyYjBjMDVlYjVlNzRjYzJjMDg2OThkZDMy
NGQ5NjMwHhcNMjMwNDIyMDk1NzQxWhcNMjQwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
Eyg1YmE3NGZmMjk2M2RhNDQzMDFmZTk0ODExYzlhZTMxMzI5MWYyMjBhMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAp6g5c8lUEoYwnC5vXXP5UfQgkXSk
xH13wLe2vYIxBztxkdgxoYjLKZYSzaepxcWMHxzqHTsbjrRopLqkdSjuicv36EJt
kV1WAgsWfBJIS3Vkeiuo0ZQo+2NXFMa3g4oJ9ROinDkD4NizhU7F0Lk15Sn6VpPV
mZr1+kwnCJOFk/ddsr4RyWeTQuT6LIznXrGilYYaMUEdvINjceZfSL7ripBhXyk0
Nw88jb+TnTJo0wKsTNDoEMgxQONxvwBkscNON8T0YvgNO/EG4/cVAukLBEzYiWA9
L4wBkyOQ8drIiqVMiNbecYSPYeVSC9Mcj4ZvThzvYWk3TE30UsF4lLEy7QIDAQAB
o4ICCTCCAgUwHQYDVR0OBBYEFFunT/KWPaRDAf6UgRya4xMpHyIKMB8GA1UdIwQY
MBaAFP+H4KsDKwwF6150zCwIaY3TJNljMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvXzRmZ3F3TXJEQVhyWG5UTUxBaHBqZE1rMldNLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8zMy8xZGYxOGUtNmM0ZC00MzRiLThlMzEt
NzFlYjk1ZjUwZTViLzEvVzZkUDhwWTlwRU1CX3BTQkhKcmpFeWtmSWdvLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8zMy8xZGYxOGUtNmM0ZC00MzRiLThlMzEtNzFlYjk1ZjUwZTVi
LzEvXzRmZ3F3TXJEQVhyWG5UTUxBaHBqZE1rMldNLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAbXrdMA0G
CSqGSIb3DQEBCwUAA4IBAQA7ruluxxi0aFm8UG5eY9owB+7ZJqTrMXxxC4IxfJpI
jFXfDKyHXqqmrcIe+uDh7whLxWKw2VYSrZvY6s/Tb/k5Tmpfi7mNUCqtEtbKfTOF
9mV3jeoIwRXCRrU+wK9Wv4YBRKDVjRy2b8W1cEeIOlHMG2nP1EHvKtmIM3LMAPDb
Ljv2Z2Aans39t8dG0Tg6cUPtnoqdiaQGBUNuAZEsaUaJ4e5pRPPvfQncAUI+sWod
Y/oEgTJ5VkUVhizAzyUFzaQtfsIWKCiA7DQjDJsViL08FycLO2iQSS7DalN+sTdl
Pl85bXjhL5gHNxiVG2z6U7QLRVF8WSXyyDXPF09wehTg
-----END CERTIFICATE-----
Generated at Mon Feb 17 08:09:39 2025 by rpki-client