Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/33/1df18e-6c4d-434b-8e31-71eb95f50e5b/1/d38j0dMZ8fvMFO0hrM1U5nZOAXA.roa
File: d38j0dMZ8fvMFO0hrM1U5nZOAXA.roa (raw, json)
Hash identifier: kD3cpmO5TsF4B81oXBj7lFS4Qx7WjWXhpL/D5VFj8xo=
Subject key identifier: 77:7F:23:D1:D3:19:F1:FB:CC:14:ED:21:AC:CD:54:E6:76:4E:01:70
Certificate issuer: /CN=ff87e0ab032b0c05eb5e74cc2c08698dd324d963
Certificate serial: 018D379735F3712AF15660D3B0CB77CA2FFE
Authority key identifier: FF:87:E0:AB:03:2B:0C:05:EB:5E:74:CC:2C:08:69:8D:D3:24:D9:63
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/_4fgqwMrDAXrXnTMLAhpjdMk2WM.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/33/1df18e-6c4d-434b-8e31-71eb95f50e5b/1/d38j0dMZ8fvMFO0hrM1U5nZOAXA.roa
Signing time: Tue 23 Jan 2024 18:31:13 +0000
ROA not before: Tue 23 Jan 2024 18:31:13 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 210030
IP address blocks: 109.122.198.0/24 maxlen: 24
Validation: Failed, RFC 3779 resource not subset of parent's resources
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8d:37:97:35:f3:71:2a:f1:56:60:d3:b0:cb:77:ca:2f:fe
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=ff87e0ab032b0c05eb5e74cc2c08698dd324d963
Validity
Not Before: Jan 23 18:31:13 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=777f23d1d319f1fbcc14ed21accd54e6764e0170
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:86:c5:14:6b:9e:c5:68:c8:dc:d8:ab:8c:55:8f:
50:a3:e0:e5:55:13:09:12:f3:b0:40:2b:ff:2f:03:
43:5d:1f:73:22:85:f6:09:98:82:cd:f0:7c:0a:0b:
ec:c0:65:63:65:b0:54:de:74:fc:8b:f4:1e:3b:dd:
5e:c2:ac:5b:3c:e2:2b:b3:12:76:f4:26:2b:ec:f1:
71:2f:b9:77:1b:70:d3:dd:98:e6:8f:ab:43:46:09:
e7:fb:5d:96:6f:b7:9d:6d:f9:b0:79:34:61:40:66:
9a:c4:ae:74:db:53:b2:b1:db:93:4f:29:0a:af:3b:
97:78:4b:4e:8b:fb:c3:db:ef:e9:fd:0c:67:4f:3b:
89:03:03:2d:37:bd:ee:81:a5:3c:07:56:75:19:fd:
84:0d:49:e6:10:50:fb:a1:34:4a:9e:13:d3:c8:3b:
f2:4f:88:da:99:24:e3:df:50:84:6d:83:ea:0a:71:
e5:31:66:aa:ee:09:e8:8d:73:a3:0d:6c:c0:49:ac:
5a:a7:b8:91:15:7a:94:2d:8b:b2:b0:fa:de:be:36:
a7:d3:68:9d:15:c8:4a:31:aa:de:d1:d5:3e:24:13:
c0:6c:94:5d:e6:f8:f1:3e:02:75:19:72:81:f8:d9:
e5:e7:29:75:46:9e:a8:ec:bb:8d:a0:85:23:c3:97:
0a:fd
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
77:7F:23:D1:D3:19:F1:FB:CC:14:ED:21:AC:CD:54:E6:76:4E:01:70
X509v3 Authority Key Identifier:
keyid:FF:87:E0:AB:03:2B:0C:05:EB:5E:74:CC:2C:08:69:8D:D3:24:D9:63
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/_4fgqwMrDAXrXnTMLAhpjdMk2WM.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/33/1df18e-6c4d-434b-8e31-71eb95f50e5b/1/d38j0dMZ8fvMFO0hrM1U5nZOAXA.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/33/1df18e-6c4d-434b-8e31-71eb95f50e5b/1/_4fgqwMrDAXrXnTMLAhpjdMk2WM.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
109.122.198.0/24
Signature Algorithm: sha256WithRSAEncryption
6c:27:21:d6:04:b5:35:ce:9d:fa:24:3b:25:8b:c5:a5:04:5f:
2b:80:0d:ba:2a:11:22:30:d9:7a:4b:2d:71:26:ec:70:10:3b:
e3:77:0d:e7:70:7f:94:02:04:8b:fb:5d:fe:e3:38:48:91:c8:
18:1c:ff:96:d8:68:b3:eb:7b:85:61:b6:da:e1:f3:c2:1c:5f:
9f:67:d7:a3:e3:67:59:14:4e:96:f3:b5:9a:59:79:bd:f7:03:
2f:d1:9a:48:ba:26:3a:06:79:85:36:20:6e:39:70:7d:2e:6a:
08:e4:6d:8c:4d:57:27:cc:14:ce:46:48:fa:bb:39:72:e6:d8:
7f:aa:3a:5e:89:b7:ba:15:50:a3:d7:87:07:09:f8:04:b2:4b:
99:91:66:77:26:17:4b:5f:42:e6:43:30:1a:a4:07:c3:9a:6d:
1f:15:06:93:d9:42:06:9d:53:e4:bf:3b:33:3f:b3:a0:ea:49:
9d:51:1e:8f:5b:ea:da:09:9c:ec:86:53:f7:7f:4c:d6:79:ce:
db:30:bc:b9:fe:cf:6e:cb:a7:4f:7d:85:bc:db:43:44:fe:88:
33:f8:78:c1:d3:e4:44:b4:a0:3e:8b:84:0b:63:88:2e:7f:f8:
dc:66:7a:a7:c9:0d:ab:6c:ad:84:97:63:d0:87:d1:d0:88:b1:
a6:a7:a3:5e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:24:48 2024 by rpki-client on console-fra.rpki-client.org