Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/33/1df18e-6c4d-434b-8e31-71eb95f50e5b/1/beywcv7gtSPCUcGpF0x237cF648.roa
File: beywcv7gtSPCUcGpF0x237cF648.roa (raw, json)
Hash identifier: 1wZ4wOdvCCOWQm8dpfw+rsWypnDBchKDXgPw7kY5Sbw=
Subject key identifier: 6D:EC:B0:72:FE:E0:B5:23:C2:51:C1:A9:17:4C:76:DF:B7:05:EB:8F
Certificate issuer: /CN=ff87e0ab032b0c05eb5e74cc2c08698dd324d963
Certificate serial: 018D3797341156D42BB40C966A744679FC47
Authority key identifier: FF:87:E0:AB:03:2B:0C:05:EB:5E:74:CC:2C:08:69:8D:D3:24:D9:63
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/_4fgqwMrDAXrXnTMLAhpjdMk2WM.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/33/1df18e-6c4d-434b-8e31-71eb95f50e5b/1/beywcv7gtSPCUcGpF0x237cF648.roa
Signing time: Tue 23 Jan 2024 18:31:12 +0000
ROA not before: Tue 23 Jan 2024 18:31:12 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 132335
IP address blocks: 109.122.200.0/24 maxlen: 24
Validation: Failed, RFC 3779 resource not subset of parent's resources
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8d:37:97:34:11:56:d4:2b:b4:0c:96:6a:74:46:79:fc:47
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=ff87e0ab032b0c05eb5e74cc2c08698dd324d963
Validity
Not Before: Jan 23 18:31:12 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=6decb072fee0b523c251c1a9174c76dfb705eb8f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ac:12:03:5f:ce:02:2a:01:1b:0f:ae:93:bf:95:
2b:ae:cd:2e:73:6f:72:68:ca:b0:98:1d:6e:45:b9:
f1:d0:d6:f2:d7:cd:39:ea:9b:3b:fc:50:65:2d:4b:
27:34:0e:45:59:36:87:2d:d6:a2:1c:9e:9e:ad:ac:
68:cd:63:96:9d:00:a8:98:90:83:b9:83:89:27:26:
93:fe:3b:ab:30:58:2f:a1:a2:10:2e:49:02:52:8e:
05:40:18:06:3e:90:4c:f0:9b:03:6a:58:04:85:6f:
58:97:45:82:ba:cf:7a:e6:a4:f6:90:f7:28:2c:08:
24:f4:8a:a8:ae:af:cf:ae:4c:85:6f:e9:1a:56:ec:
e0:9a:6d:cb:bb:33:26:64:17:1e:a3:8f:7e:17:bb:
68:fd:70:d9:57:76:5b:89:cd:14:6e:78:5b:98:56:
77:8e:0b:c9:92:3c:fa:d3:34:3e:6f:6a:39:19:5c:
07:b2:46:a1:4b:a6:1b:32:95:fe:26:07:38:74:a6:
f8:48:37:f6:5d:36:59:e2:98:57:fb:11:0d:36:f0:
84:b5:4c:44:19:54:8d:dd:71:e9:ad:09:65:c2:fd:
aa:15:b9:3a:bd:0d:c0:e4:d9:27:b9:5b:9f:99:7a:
ca:5f:16:14:64:3b:a9:83:06:91:99:fc:39:78:44:
a9:c7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
6D:EC:B0:72:FE:E0:B5:23:C2:51:C1:A9:17:4C:76:DF:B7:05:EB:8F
X509v3 Authority Key Identifier:
keyid:FF:87:E0:AB:03:2B:0C:05:EB:5E:74:CC:2C:08:69:8D:D3:24:D9:63
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/_4fgqwMrDAXrXnTMLAhpjdMk2WM.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/33/1df18e-6c4d-434b-8e31-71eb95f50e5b/1/beywcv7gtSPCUcGpF0x237cF648.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/33/1df18e-6c4d-434b-8e31-71eb95f50e5b/1/_4fgqwMrDAXrXnTMLAhpjdMk2WM.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
109.122.200.0/24
Signature Algorithm: sha256WithRSAEncryption
98:4f:69:2e:57:5c:c5:32:b0:d4:cf:ce:50:eb:65:48:7e:3f:
1e:a6:60:2c:e1:61:22:ac:6a:71:d7:43:1d:83:4a:d0:d6:3d:
cd:46:02:62:28:7c:62:67:9c:89:40:bd:13:be:56:a8:96:a7:
76:85:54:f4:e0:1d:5e:3e:8d:d9:9d:70:f7:54:52:9f:10:70:
51:4e:12:8b:d3:54:0c:e2:d2:04:56:13:cb:2c:20:81:a1:18:
c3:82:f8:a8:1e:87:29:11:03:63:59:3c:8f:6b:04:1d:57:e1:
46:5b:96:83:d3:8e:14:9e:cd:5a:1d:29:d8:d7:bf:9a:fe:3a:
b8:48:19:2a:21:d8:26:30:08:2a:2d:d0:55:50:10:fe:f2:0e:
bd:63:86:72:01:13:cf:ab:3b:ef:1e:bb:1c:7b:67:42:cc:64:
99:a2:9f:03:20:b6:c5:bf:0a:71:73:45:cd:26:3d:3f:5f:81:
fc:4b:c8:1c:64:7b:0f:35:9c:df:6c:7c:41:a6:45:c3:c1:79:
47:6f:2a:7c:19:36:e3:03:2a:09:70:80:f9:b9:20:39:a1:c4:
16:dd:6c:cc:3d:98:61:ca:78:ac:23:05:e2:ff:4d:c7:b5:40:
bb:40:f1:ff:f7:48:97:4f:4b:25:f6:71:f4:75:9e:22:6f:cc:
9b:33:44:bb
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Feb 17 07:58:17 2025 by rpki-client