Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/33/1df18e-6c4d-434b-8e31-71eb95f50e5b/1/Yr1RMJlApc_9u4u5X_-21DK-gag.roa
File: Yr1RMJlApc_9u4u5X_-21DK-gag.roa (raw, json)
Hash identifier: JfJi1DiAd+SdJ9DWfxusJConfuUQ0/qu2aMtNIshxVM=
Subject key identifier: 62:BD:51:30:99:40:A5:CF:FD:BB:8B:B9:5F:FF:B6:D4:32:BE:81:A8
Certificate issuer: /CN=ff87e0ab032b0c05eb5e74cc2c08698dd324d963
Certificate serial: 018C91F7183201ABC1630A9C3F1C94EFB68E
Authority key identifier: FF:87:E0:AB:03:2B:0C:05:EB:5E:74:CC:2C:08:69:8D:D3:24:D9:63
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/_4fgqwMrDAXrXnTMLAhpjdMk2WM.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/33/1df18e-6c4d-434b-8e31-71eb95f50e5b/1/Yr1RMJlApc_9u4u5X_-21DK-gag.roa
Signing time: Fri 22 Dec 2023 14:38:59 +0000
ROA not before: Fri 22 Dec 2023 14:38:59 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 60781
IP address blocks: 109.122.214.0/24 maxlen: 24
109.122.223.0/24 maxlen: 24
Validation: Failed, RFC 3779 resource not subset of parent's resources
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8c:91:f7:18:32:01:ab:c1:63:0a:9c:3f:1c:94:ef:b6:8e
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=ff87e0ab032b0c05eb5e74cc2c08698dd324d963
Validity
Not Before: Dec 22 14:38:59 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=62bd51309940a5cffdbb8bb95fffb6d432be81a8
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9e:2c:dd:43:8c:76:f7:a2:2a:3e:d3:8a:5a:c2:
f6:79:04:79:79:85:db:6b:24:c8:8b:0d:2c:10:5a:
d9:b4:b5:2e:ec:a6:7e:94:10:80:b1:e7:c7:a1:f4:
59:27:23:50:72:49:81:11:04:bf:6c:1d:77:3e:86:
cf:ef:ca:6c:1d:9c:be:08:85:0e:57:ce:e3:df:ff:
92:2f:30:a5:93:c4:1d:92:85:67:8c:8c:f5:6b:e9:
72:b1:e6:1b:8a:c0:8d:5d:56:d3:92:45:b6:0b:3e:
3c:51:bf:48:1e:1c:5c:44:3f:82:ca:41:38:75:c5:
ab:b2:a0:53:81:62:cf:a7:03:5d:db:cc:9b:e3:6e:
4b:f3:d4:bf:39:f9:e2:16:b2:20:f4:48:b0:54:d9:
ea:69:f2:7b:06:be:e7:56:6d:75:76:20:c8:4f:38:
b9:d6:96:6a:70:f5:7e:8d:8b:91:52:34:7a:4c:f7:
be:0a:ac:26:21:29:42:3a:7f:c2:1f:12:60:df:63:
26:0a:25:08:c8:81:dd:dc:de:09:4d:6e:93:78:82:
0c:b9:aa:27:dc:6b:8f:e1:68:74:78:63:85:f8:f2:
7b:90:4c:05:f5:92:b0:e2:c2:e4:c3:6a:a5:f6:d4:
cb:c9:09:f3:fd:28:3e:f3:ab:d1:b1:34:d7:a3:22:
7b:6f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
62:BD:51:30:99:40:A5:CF:FD:BB:8B:B9:5F:FF:B6:D4:32:BE:81:A8
X509v3 Authority Key Identifier:
keyid:FF:87:E0:AB:03:2B:0C:05:EB:5E:74:CC:2C:08:69:8D:D3:24:D9:63
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/_4fgqwMrDAXrXnTMLAhpjdMk2WM.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/33/1df18e-6c4d-434b-8e31-71eb95f50e5b/1/Yr1RMJlApc_9u4u5X_-21DK-gag.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/33/1df18e-6c4d-434b-8e31-71eb95f50e5b/1/_4fgqwMrDAXrXnTMLAhpjdMk2WM.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
109.122.214.0/24
109.122.223.0/24
Signature Algorithm: sha256WithRSAEncryption
55:b2:4d:fc:39:f6:ca:ba:06:76:7e:ac:bd:9a:f9:83:1e:cb:
30:cb:66:6b:f2:e6:68:67:1c:c2:be:7d:6c:d1:b5:e3:32:dc:
fd:e6:12:b5:5e:e2:31:3b:2b:5a:78:df:0f:bf:9c:97:98:0c:
0d:66:53:84:da:1c:6f:e9:db:7d:ce:88:b2:39:fd:f9:1a:12:
32:94:65:74:fc:0a:1c:fe:1e:38:fe:b9:9e:b6:16:c9:bc:89:
06:f5:ae:25:24:41:c0:72:84:95:fc:3c:25:60:65:fa:03:c9:
cc:12:b3:5a:7a:43:0b:2c:70:36:6a:97:aa:30:28:90:74:9e:
aa:e0:6d:c4:24:70:61:2d:23:75:79:97:5d:8f:00:a5:b8:53:
74:3e:47:6e:26:0e:d5:65:a5:4e:cf:d0:19:4a:ef:46:51:16:
95:c1:a6:d2:a8:1c:5f:05:ed:02:a3:5e:e7:bc:ed:fd:d9:bf:
bc:ff:63:e6:2d:a7:ec:e9:ce:ff:9a:c4:af:0a:1f:ee:90:ed:
42:c3:91:e9:c8:75:64:1a:6a:ac:6d:d3:48:eb:1e:bf:93:35:
dd:9b:b8:0a:b0:53:8e:4d:ca:6e:fb:21:68:6e:f2:0b:9c:2e:
8e:9e:5e:0d:60:93:10:1a:76:55:80:07:26:00:07:43:86:b5:
4f:52:ac:4c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 19:02:04 2024 by rpki-client on console-ams.rpki-client.org