Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/33/1df18e-6c4d-434b-8e31-71eb95f50e5b/1/dWaMoWWTMr536nVd9VH0LU8nO44.roa
File: dWaMoWWTMr536nVd9VH0LU8nO44.roa (raw, json)
Hash identifier: ioLNof7XcNoFSYa4KlBQpFmJxKxmB2PcQuGnitdknfA=
Subject key identifier: 75:66:8C:A1:65:93:32:BE:77:EA:75:5D:F5:51:F4:2D:4F:27:3B:8E
Certificate issuer: /CN=ff87e0ab032b0c05eb5e74cc2c08698dd324d963
Certificate serial: 018E1A8894098B50025EED03CF1810B6EC07
Authority key identifier: FF:87:E0:AB:03:2B:0C:05:EB:5E:74:CC:2C:08:69:8D:D3:24:D9:63
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/_4fgqwMrDAXrXnTMLAhpjdMk2WM.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/33/1df18e-6c4d-434b-8e31-71eb95f50e5b/1/dWaMoWWTMr536nVd9VH0LU8nO44.roa
Signing time: Thu 07 Mar 2024 20:09:02 +0000
ROA not before: Thu 07 Mar 2024 20:09:02 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 211440
IP address blocks: 109.122.202.0/24 maxlen: 24
109.122.206.0/24 maxlen: 24
Validation: Failed, RFC 3779 resource not subset of parent's resources
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8e:1a:88:94:09:8b:50:02:5e:ed:03:cf:18:10:b6:ec:07
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=ff87e0ab032b0c05eb5e74cc2c08698dd324d963
Validity
Not Before: Mar 7 20:09:02 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=75668ca1659332be77ea755df551f42d4f273b8e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9e:9f:1c:3b:43:dd:20:d4:4e:30:34:ae:c6:c7:
8f:7f:be:04:8a:5d:04:6b:5b:a4:b6:0f:c3:3a:de:
38:e8:05:ef:23:fd:24:f6:24:4f:91:0a:ac:63:eb:
4f:24:b4:82:b0:3d:dc:d8:d8:b2:24:6e:5a:f5:74:
b6:1a:25:c7:82:40:68:49:ae:b5:f2:7d:c5:bc:7e:
c4:f0:ea:9f:98:2b:da:19:27:7c:10:ae:d0:ce:d9:
43:d2:ac:85:54:db:0c:f7:30:b6:45:f8:8c:39:6e:
fb:c7:8b:13:4e:da:71:26:65:ae:44:9d:4c:19:64:
18:0a:a0:02:23:79:cc:b6:fd:6b:38:6a:98:12:8f:
9a:f7:ce:41:ac:52:d8:2e:84:1b:85:97:c4:85:5a:
bc:25:72:a0:84:8a:26:92:56:0f:50:dc:7a:4f:6b:
bf:bd:50:90:69:ca:8e:78:af:50:0b:d1:0a:72:26:
73:b1:f8:7d:97:34:01:34:de:d7:13:d7:77:ee:50:
fa:ed:8d:b5:a4:0e:90:37:e0:58:53:29:ee:8a:a3:
b2:31:a1:c5:0f:a1:74:0c:9a:a5:45:40:15:0e:12:
14:4e:a3:9a:34:2a:a1:5b:8e:bb:81:14:9f:53:dc:
c4:4a:87:98:7f:3a:47:d8:89:f0:b1:fc:a5:63:ec:
4f:fb
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
75:66:8C:A1:65:93:32:BE:77:EA:75:5D:F5:51:F4:2D:4F:27:3B:8E
X509v3 Authority Key Identifier:
keyid:FF:87:E0:AB:03:2B:0C:05:EB:5E:74:CC:2C:08:69:8D:D3:24:D9:63
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/_4fgqwMrDAXrXnTMLAhpjdMk2WM.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/33/1df18e-6c4d-434b-8e31-71eb95f50e5b/1/dWaMoWWTMr536nVd9VH0LU8nO44.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/33/1df18e-6c4d-434b-8e31-71eb95f50e5b/1/_4fgqwMrDAXrXnTMLAhpjdMk2WM.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
109.122.202.0/24
109.122.206.0/24
Signature Algorithm: sha256WithRSAEncryption
00:0b:ef:19:8c:f0:45:38:da:50:f9:14:e1:f8:1a:c7:86:f5:
17:37:2a:c6:39:2b:53:a8:fd:75:cd:bd:74:50:5c:6d:f8:15:
b0:e8:67:57:fc:37:61:7e:dc:11:f1:ac:11:ba:95:14:bf:f8:
79:c5:3c:ea:56:a8:70:e1:3b:3a:b5:e0:87:4c:7f:86:6e:a1:
a0:46:72:29:13:a0:db:fd:99:b3:db:b4:4c:1a:d7:73:9a:67:
e2:0f:b1:a9:2b:66:0d:7b:27:82:da:97:83:3f:90:4f:f9:5c:
5e:94:82:aa:78:77:d7:f9:36:ca:d5:00:66:42:d0:a5:8e:fe:
d2:e9:07:3d:ce:e6:91:cf:8a:f6:83:9e:37:5a:d3:33:25:4a:
fe:62:ad:c1:c1:b9:9e:88:47:e7:2d:63:5d:76:71:5d:78:96:
0f:7a:e6:bc:18:21:be:48:3a:15:70:6b:aa:e8:a1:ba:b1:2a:
58:f5:b4:15:9c:ea:da:f2:92:2b:e4:cb:38:35:83:3b:d7:74:
28:36:53:36:64:49:2e:ac:c8:8f:3c:b9:2a:51:13:c3:13:fb:
f2:e7:c4:0a:94:39:22:55:8a:b6:ee:35:99:e1:38:48:10:70:
8b:34:5b:77:4a:84:a1:8b:d0:88:71:1a:ad:70:72:ca:30:7a:
5f:c2:f3:9c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 19:02:04 2024 by rpki-client on console-ams.rpki-client.org