Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/33/1df18e-6c4d-434b-8e31-71eb95f50e5b/1/guWVqsdBq-ZR4VAtgX8toyJCTwQ.roa
File: guWVqsdBq-ZR4VAtgX8toyJCTwQ.roa (raw, json)
Hash identifier: NRShx7NFcgA/M2UjEJErHjgzeoF5kxhtljO8a9GYnUQ=
Subject key identifier: 82:E5:95:AA:C7:41:AB:E6:51:E1:50:2D:81:7F:2D:A3:22:42:4F:04
Certificate issuer: /CN=ff87e0ab032b0c05eb5e74cc2c08698dd324d963
Certificate serial: 018CC501453DD708EE3517FA2E6E0585BF74
Authority key identifier: FF:87:E0:AB:03:2B:0C:05:EB:5E:74:CC:2C:08:69:8D:D3:24:D9:63
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/_4fgqwMrDAXrXnTMLAhpjdMk2WM.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/33/1df18e-6c4d-434b-8e31-71eb95f50e5b/1/guWVqsdBq-ZR4VAtgX8toyJCTwQ.roa
Signing time: Mon 01 Jan 2024 12:30:43 +0000
ROA not before: Mon 01 Jan 2024 12:30:43 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 210030
IP address blocks: 109.122.198.0/24 maxlen: 24
Validation: Failed, RFC 3779 resource not subset of parent's resources
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8c:c5:01:45:3d:d7:08:ee:35:17:fa:2e:6e:05:85:bf:74
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=ff87e0ab032b0c05eb5e74cc2c08698dd324d963
Validity
Not Before: Jan 1 12:30:43 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=82e595aac741abe651e1502d817f2da322424f04
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:97:c0:7f:c2:73:fb:b8:ff:e8:83:7e:77:98:44:
47:48:79:71:b6:8f:e5:58:34:4d:e7:36:ce:00:79:
6f:9a:b9:51:cb:3f:7d:96:b6:0b:43:a1:fc:7c:4a:
e4:17:0c:c2:fb:ce:35:1b:48:64:41:88:22:51:54:
b6:82:6c:75:db:be:28:24:9d:68:e8:8d:66:dd:49:
25:90:f4:02:cc:0d:48:d2:d8:34:a7:d0:f7:fc:29:
82:74:6b:d2:29:d3:58:35:1f:3f:aa:bf:a5:64:d6:
d6:92:1c:09:94:d8:ce:50:2b:22:7e:6f:e9:cd:3b:
d4:aa:10:c2:dc:0e:2d:21:87:88:8e:d0:b5:98:3b:
95:1d:52:28:ec:a5:f2:05:c6:98:d5:b2:f8:e5:60:
8c:4b:81:03:81:51:59:93:8c:21:4a:a5:b3:09:24:
af:96:cb:17:e1:38:70:26:02:60:f0:9d:18:46:14:
d9:76:cc:24:1d:e7:ec:79:13:8d:5f:cc:b2:ec:16:
95:f4:b0:db:5d:76:31:3e:ee:de:4f:ce:e4:2e:4a:
ce:a0:0d:66:f1:cd:93:ee:54:a7:16:83:bc:0c:81:
d3:a8:c6:0a:b8:00:ea:ec:d3:39:b6:b0:ba:32:e1:
30:86:82:d3:07:32:b7:1e:22:51:c7:8a:49:72:e7:
5f:03
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
82:E5:95:AA:C7:41:AB:E6:51:E1:50:2D:81:7F:2D:A3:22:42:4F:04
X509v3 Authority Key Identifier:
keyid:FF:87:E0:AB:03:2B:0C:05:EB:5E:74:CC:2C:08:69:8D:D3:24:D9:63
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/_4fgqwMrDAXrXnTMLAhpjdMk2WM.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/33/1df18e-6c4d-434b-8e31-71eb95f50e5b/1/guWVqsdBq-ZR4VAtgX8toyJCTwQ.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/33/1df18e-6c4d-434b-8e31-71eb95f50e5b/1/_4fgqwMrDAXrXnTMLAhpjdMk2WM.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
109.122.198.0/24
Signature Algorithm: sha256WithRSAEncryption
46:fa:9e:4d:b4:51:88:e9:87:90:3f:6d:18:da:fc:ca:7c:f5:
13:e8:2a:5e:1a:a2:74:6a:4b:46:3f:48:c5:92:d9:ac:99:35:
f5:70:26:78:fc:23:27:da:77:6c:31:4e:98:78:bb:b3:da:9d:
87:e4:4c:b1:75:bd:aa:ea:d6:a9:4a:26:0d:3b:7a:62:73:4d:
b0:11:67:5c:02:8c:4b:32:a5:7e:bb:91:83:4e:4e:30:0b:49:
09:cd:bc:fc:70:48:03:4a:5b:e2:ac:6b:d0:54:7b:45:86:b1:
75:84:bd:53:1c:d2:13:ab:1c:45:94:ae:18:f7:b1:d2:7f:1b:
cf:e5:80:47:b9:f2:b7:9d:80:52:e1:67:0b:0a:70:2f:89:25:
ac:9d:5a:d9:ec:d5:90:ef:84:ad:b1:88:5e:83:0c:bc:d9:11:
26:af:22:e1:42:18:09:9b:5c:2c:94:61:72:c7:11:0a:5f:8b:
0d:02:dd:b4:ae:82:73:62:c2:1c:42:5e:80:61:2f:6e:75:c2:
98:5d:b2:64:d0:a6:b3:9f:df:15:81:83:b2:85:37:e1:e4:e2:
21:50:35:6e:1e:84:e9:21:9d:fb:a9:dd:5e:12:3c:51:91:21:
b6:0b:51:c6:6d:2e:97:e9:50:ef:f7:61:26:7d:65:c6:a3:65:
79:1c:da:c9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Jan 15 20:07:25 2024 by rpki-client on console-fra.rpki-client.org