Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/33/1df18e-6c4d-434b-8e31-71eb95f50e5b/1/eHo5w3uyXJk9j5vel649tGDbwpU.roa
File: eHo5w3uyXJk9j5vel649tGDbwpU.roa (raw, json)
Hash identifier: TQ8WV7109Xc6iIePOeRT/h91IOfgWo/HrsBYAqZ3orw=
Subject key identifier: 78:7A:39:C3:7B:B2:5C:99:3D:8F:9B:DE:97:AE:3D:B4:60:DB:C2:95
Certificate issuer: /CN=ff87e0ab032b0c05eb5e74cc2c08698dd324d963
Certificate serial: 0187EA6E06BBF3B94AEB4C7E86377C0CB525
Authority key identifier: FF:87:E0:AB:03:2B:0C:05:EB:5E:74:CC:2C:08:69:8D:D3:24:D9:63
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/_4fgqwMrDAXrXnTMLAhpjdMk2WM.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/33/1df18e-6c4d-434b-8e31-71eb95f50e5b/1/eHo5w3uyXJk9j5vel649tGDbwpU.roa
Signing time: Fri 05 May 2023 05:41:31 +0000
ROA not before: Fri 05 May 2023 05:41:31 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 834
IP address blocks: 109.122.197.0/24 maxlen: 24
109.122.195.0/24 maxlen: 24
109.122.210.0/24 maxlen: 24
Validation: Failed, RFC 3779 resource not subset of parent's resources
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:87:ea:6e:06:bb:f3:b9:4a:eb:4c:7e:86:37:7c:0c:b5:25
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=ff87e0ab032b0c05eb5e74cc2c08698dd324d963
Validity
Not Before: May 5 05:41:31 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=787a39c37bb25c993d8f9bde97ae3db460dbc295
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:97:39:cd:36:f1:60:ec:df:a6:89:f5:6d:21:dc:
a2:05:ee:de:d7:92:ed:8b:2b:36:d3:c4:32:7c:e8:
33:2d:71:22:25:6a:9e:f9:4f:60:22:b3:89:40:8e:
46:19:c3:13:fa:80:14:50:9e:b3:cc:d0:6e:c3:b8:
be:d2:39:77:35:f4:70:4b:5a:f1:10:df:74:a0:03:
e3:ce:86:85:be:b0:dc:64:38:a7:89:58:31:9a:f1:
af:70:58:3a:f5:76:a9:ee:fc:98:6a:2f:c1:42:20:
17:41:36:f3:fd:bb:dc:e6:fe:61:2a:9e:85:7c:bb:
da:3b:3b:c5:a8:26:17:61:36:d9:7f:f4:c6:60:3c:
4f:58:c2:48:98:2c:a8:0a:da:22:0f:94:ea:2f:c5:
b2:d8:56:8c:09:f2:e6:a0:50:d0:0a:0b:45:c3:24:
b9:aa:ee:97:30:39:92:c5:41:13:da:0f:85:cb:1f:
ed:53:0c:bd:70:02:0f:36:ed:29:bd:a8:87:90:01:
38:69:4d:33:7f:b5:af:69:b7:ef:3c:5e:ae:9a:bb:
5f:1b:cb:f5:7f:08:02:54:8f:7d:40:7b:ee:36:9c:
00:1a:0d:3b:9e:4d:66:74:63:b7:ee:94:89:64:c5:
d3:93:78:0b:48:19:a6:48:e8:f0:fc:38:e1:12:a3:
65:d9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
78:7A:39:C3:7B:B2:5C:99:3D:8F:9B:DE:97:AE:3D:B4:60:DB:C2:95
X509v3 Authority Key Identifier:
keyid:FF:87:E0:AB:03:2B:0C:05:EB:5E:74:CC:2C:08:69:8D:D3:24:D9:63
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/_4fgqwMrDAXrXnTMLAhpjdMk2WM.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/33/1df18e-6c4d-434b-8e31-71eb95f50e5b/1/eHo5w3uyXJk9j5vel649tGDbwpU.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/33/1df18e-6c4d-434b-8e31-71eb95f50e5b/1/_4fgqwMrDAXrXnTMLAhpjdMk2WM.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
109.122.195.0/24
109.122.197.0/24
109.122.210.0/24
Signature Algorithm: sha256WithRSAEncryption
62:83:55:e0:62:07:6f:3a:bc:94:b6:43:52:6a:46:cc:16:1c:
fa:0d:a1:0f:56:8e:aa:b6:15:bb:5b:40:1d:51:3d:17:2f:09:
0e:7b:6e:9f:60:62:63:78:79:f9:35:ae:e2:e0:b2:87:32:ce:
00:9f:ba:90:76:34:c7:fe:a7:03:79:ee:d6:88:5f:a5:8d:d6:
4f:75:1d:b7:55:0b:51:7e:df:b3:bf:e0:81:77:e8:3f:9d:34:
51:c1:e2:fa:41:19:80:7a:3c:44:97:d9:85:ae:e0:20:cc:70:
db:7f:16:8b:21:3a:93:9c:e5:ef:44:31:4c:63:6f:da:62:24:
e7:bd:54:37:ab:ff:0d:64:86:44:4d:b8:fb:11:c6:2a:cf:bc:
4d:5b:8d:bf:e6:12:7f:8d:b7:77:49:b2:d6:e0:49:72:de:38:
ba:2d:19:1a:c5:99:26:19:0d:66:32:3f:92:26:b1:50:0e:5a:
85:04:ca:20:81:41:a0:7a:ca:c8:c2:b6:59:58:1c:7c:7c:00:
fc:38:d7:44:a7:7c:9a:41:e3:d8:29:de:aa:bf:65:75:ca:2a:
47:fe:76:87:6e:fb:1e:1d:e6:bd:f3:25:80:08:9c:74:2b:24:
c4:3c:8c:11:7a:e8:ae:78:ec:f1:8b:34:a9:29:06:45:b9:38:
f8:51:e2:b0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 19:02:04 2024 by rpki-client on console-ams.rpki-client.org