Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/33/1df18e-6c4d-434b-8e31-71eb95f50e5b/1/fW18WwHq3NucIDZ2V8ySo2rBsHA.roa
File: fW18WwHq3NucIDZ2V8ySo2rBsHA.roa (raw, json)
Hash identifier: L1neAfBwfo53qy1CDwa3kV7SOCT8VedbgvG/3kNmnws=
Subject key identifier: 7D:6D:7C:5B:01:EA:DC:DB:9C:20:36:76:57:CC:92:A3:6A:C1:B0:70
Certificate issuer: /CN=ff87e0ab032b0c05eb5e74cc2c08698dd324d963
Certificate serial: 018C91F718D42DF5CFB0BE7BB90DCEB88C9E
Authority key identifier: FF:87:E0:AB:03:2B:0C:05:EB:5E:74:CC:2C:08:69:8D:D3:24:D9:63
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/_4fgqwMrDAXrXnTMLAhpjdMk2WM.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/33/1df18e-6c4d-434b-8e31-71eb95f50e5b/1/fW18WwHq3NucIDZ2V8ySo2rBsHA.roa
Signing time: Fri 22 Dec 2023 14:38:59 +0000
ROA not before: Fri 22 Dec 2023 14:38:59 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 149457
IP address blocks: 109.122.222.0/24 maxlen: 24
Validation: Failed, RFC 3779 resource not subset of parent's resources
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8c:91:f7:18:d4:2d:f5:cf:b0:be:7b:b9:0d:ce:b8:8c:9e
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=ff87e0ab032b0c05eb5e74cc2c08698dd324d963
Validity
Not Before: Dec 22 14:38:59 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=7d6d7c5b01eadcdb9c20367657cc92a36ac1b070
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b4:4c:a2:1a:2f:39:e5:7d:32:e0:5e:fc:06:b0:
5d:16:25:5f:5a:f5:8f:ac:e0:11:58:d6:58:71:d3:
50:30:9e:7a:a4:88:b1:4e:08:e6:54:ec:77:04:14:
e9:04:c2:cd:06:11:f7:38:a8:41:72:f7:6f:d0:d3:
37:2d:f7:dd:bd:aa:04:13:74:d6:e4:9b:99:2f:c6:
52:c1:d2:1d:ad:ab:52:51:ab:e2:23:f7:46:0e:99:
da:32:85:f8:a2:04:9a:75:fe:fb:14:bd:42:fb:df:
18:9e:1b:d2:23:e1:66:42:a7:56:b1:c7:ae:e6:74:
5f:ec:ed:7e:49:ab:c4:98:d5:fc:4d:02:d5:aa:a4:
16:23:94:b5:e4:d6:02:80:a3:7c:e7:ca:3b:5d:b1:
4e:58:c7:7c:ca:78:82:07:b6:ea:86:06:33:43:65:
c6:10:ef:1d:c9:1a:1a:1c:29:6b:e8:57:b2:86:1d:
66:59:36:71:3f:3f:bf:5e:4e:0b:c5:3f:5b:52:fc:
f9:e0:f9:2a:7f:26:47:ac:40:f2:d8:c6:70:e5:f0:
0b:9e:c8:b5:42:86:46:5c:4b:03:50:89:c9:5d:a5:
60:70:1f:f5:b2:27:81:70:a5:19:21:5e:24:99:19:
76:a0:31:0e:f4:e4:8c:26:e1:e0:9d:8e:0e:c3:1d:
ef:7b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
7D:6D:7C:5B:01:EA:DC:DB:9C:20:36:76:57:CC:92:A3:6A:C1:B0:70
X509v3 Authority Key Identifier:
keyid:FF:87:E0:AB:03:2B:0C:05:EB:5E:74:CC:2C:08:69:8D:D3:24:D9:63
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/_4fgqwMrDAXrXnTMLAhpjdMk2WM.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/33/1df18e-6c4d-434b-8e31-71eb95f50e5b/1/fW18WwHq3NucIDZ2V8ySo2rBsHA.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/33/1df18e-6c4d-434b-8e31-71eb95f50e5b/1/_4fgqwMrDAXrXnTMLAhpjdMk2WM.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
109.122.222.0/24
Signature Algorithm: sha256WithRSAEncryption
2a:37:47:c2:b9:23:9d:77:91:e3:20:fc:f0:00:99:ec:49:99:
12:cc:22:62:15:b5:3e:e9:aa:8b:2e:64:be:c4:c0:5f:ce:17:
11:59:2c:17:f7:b6:e3:40:47:16:bf:1f:17:fa:b3:70:d4:f8:
52:1a:25:4a:a4:ec:22:7a:6b:6d:26:08:4d:b3:b5:95:97:13:
0d:fc:fc:13:11:96:09:a3:b4:e4:1d:fe:97:d0:00:eb:f1:60:
df:7d:9c:66:ef:f9:a6:94:d6:39:40:87:b7:18:00:82:63:6f:
82:db:fc:90:a5:cb:c9:3f:a5:e0:a8:74:cb:48:14:ec:4f:07:
8c:01:0a:3e:86:91:9c:7d:48:ad:95:83:5d:65:b6:37:4c:46:
d1:1b:f2:fd:04:45:5d:2e:78:3e:71:56:fb:80:13:28:6d:69:
d0:12:b2:08:d5:0f:32:2e:96:fe:42:a6:7e:bc:26:2a:3a:df:
82:57:d5:ee:b6:a4:1a:13:10:be:94:4e:83:ca:94:7a:64:fe:
2c:f8:62:a2:e3:2e:f4:0e:53:c9:94:16:cb:55:b9:b2:f8:d9:
4f:c6:79:d0:6f:79:a1:7c:28:18:ce:53:1b:f6:30:9c:8d:da:
bc:a3:8a:fb:4c:8d:c5:08:fb:86:a8:a3:84:83:ac:c3:95:52:
9a:94:be:97
-----BEGIN CERTIFICATE-----
MIIE/TCCA+WgAwIBAgISAYyR9xjULfXPsL57uQ3OuIyeMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGZmODdlMGFiMDMyYjBjMDVlYjVlNzRjYzJjMDg2OThkZDMy
NGQ5NjMwHhcNMjMxMjIyMTQzODU5WhcNMjQwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
Eyg3ZDZkN2M1YjAxZWFkY2RiOWMyMDM2NzY1N2NjOTJhMzZhYzFiMDcwMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAtEyiGi855X0y4F78BrBdFiVfWvWP
rOARWNZYcdNQMJ56pIixTgjmVOx3BBTpBMLNBhH3OKhBcvdv0NM3LffdvaoEE3TW
5JuZL8ZSwdIdratSUaviI/dGDpnaMoX4ogSadf77FL1C+98YnhvSI+FmQqdWsceu
5nRf7O1+SavEmNX8TQLVqqQWI5S15NYCgKN858o7XbFOWMd8yniCB7bqhgYzQ2XG
EO8dyRoaHClr6Feyhh1mWTZxPz+/Xk4LxT9bUvz54PkqfyZHrEDy2MZw5fALnsi1
QoZGXEsDUInJXaVgcB/1sieBcKUZIV4kmRl2oDEO9OSMJuHgnY4Owx3vewIDAQAB
o4ICCTCCAgUwHQYDVR0OBBYEFH1tfFsB6tzbnCA2dlfMkqNqwbBwMB8GA1UdIwQY
MBaAFP+H4KsDKwwF6150zCwIaY3TJNljMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvXzRmZ3F3TXJEQVhyWG5UTUxBaHBqZE1rMldNLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8zMy8xZGYxOGUtNmM0ZC00MzRiLThlMzEt
NzFlYjk1ZjUwZTViLzEvZlcxOFd3SHEzTnVjSURaMlY4eVNvMnJCc0hBLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8zMy8xZGYxOGUtNmM0ZC00MzRiLThlMzEtNzFlYjk1ZjUwZTVi
LzEvXzRmZ3F3TXJEQVhyWG5UTUxBaHBqZE1rMldNLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAbXreMA0G
CSqGSIb3DQEBCwUAA4IBAQAqN0fCuSOdd5HjIPzwAJnsSZkSzCJiFbU+6aqLLmS+
xMBfzhcRWSwX97bjQEcWvx8X+rNw1PhSGiVKpOwiemttJghNs7WVlxMN/PwTEZYJ
o7TkHf6X0ADr8WDffZxm7/mmlNY5QIe3GACCY2+C2/yQpcvJP6XgqHTLSBTsTweM
AQo+hpGcfUitlYNdZbY3TEbRG/L9BEVdLng+cVb7gBMobWnQErII1Q8yLpb+QqZ+
vCYqOt+CV9XutqQaExC+lE6DypR6ZP4s+GKi4y70DlPJlBbLVbmy+NlPxnnQb3mh
fCgYzlMb9jCcjdq8o4r7TI3FCPuGqKOEg6zDlVKalL6X
-----END CERTIFICATE-----
Generated at Thu Jun 6 17:24:48 2024 by rpki-client on console-fra.rpki-client.org