Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/33/1df18e-6c4d-434b-8e31-71eb95f50e5b/1/nAmbYNyG145pfguEmax6BnASSkM.roa
File: nAmbYNyG145pfguEmax6BnASSkM.roa (raw, json)
Hash identifier: dqs43+rk6XkrjRtGCS94l6QgSUOAfGDkoPNLOoJijLA=
Subject key identifier: 9C:09:9B:60:DC:86:D7:8E:69:7E:0B:84:99:AC:7A:06:70:12:4A:43
Certificate issuer: /CN=ff87e0ab032b0c05eb5e74cc2c08698dd324d963
Certificate serial: 018E1A8892A9CDDBAD7685AD66C535060B97
Authority key identifier: FF:87:E0:AB:03:2B:0C:05:EB:5E:74:CC:2C:08:69:8D:D3:24:D9:63
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/_4fgqwMrDAXrXnTMLAhpjdMk2WM.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/33/1df18e-6c4d-434b-8e31-71eb95f50e5b/1/nAmbYNyG145pfguEmax6BnASSkM.roa
Signing time: Thu 07 Mar 2024 20:09:01 +0000
ROA not before: Thu 07 Mar 2024 20:09:01 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 60781
IP address blocks: 109.122.214.0/24 maxlen: 24
109.122.223.0/24 maxlen: 24
Validation: Failed, RFC 3779 resource not subset of parent's resources
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8e:1a:88:92:a9:cd:db:ad:76:85:ad:66:c5:35:06:0b:97
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=ff87e0ab032b0c05eb5e74cc2c08698dd324d963
Validity
Not Before: Mar 7 20:09:01 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=9c099b60dc86d78e697e0b8499ac7a0670124a43
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9a:2c:85:6c:f9:51:73:8b:62:b5:e6:85:8f:c5:
43:87:d4:49:5a:b7:5f:41:f9:a8:dd:5a:46:17:e5:
5d:f7:a7:38:84:c8:e2:10:54:57:f6:08:76:68:9f:
a9:de:09:9f:91:10:7d:af:8a:b4:dd:0d:40:47:5a:
9a:7d:ea:2b:9f:d0:23:c8:c4:49:50:58:f9:90:16:
99:86:7d:72:59:dd:8a:07:63:a8:1a:78:79:c5:ab:
6e:5f:ca:92:cd:54:f3:89:79:9c:53:1d:73:81:49:
5a:8f:b5:de:1d:9b:b3:9d:43:92:e6:a4:9e:ad:66:
11:e7:32:bd:1f:50:d6:66:74:6a:83:fb:b9:98:d0:
1c:3c:c0:61:f2:18:59:63:8c:62:3b:94:03:02:94:
e6:36:31:78:ab:c9:3c:5b:1c:5b:9b:a0:b8:2f:4b:
a0:20:32:a0:83:e4:a0:b6:00:0f:08:e3:47:4d:76:
ce:42:d6:da:48:90:a7:b5:12:94:0a:45:e9:cf:1e:
d6:9e:de:f3:eb:ad:9a:25:52:77:f3:52:aa:a4:48:
69:b9:62:d5:97:13:5d:93:5c:00:af:c9:64:37:77:
00:39:52:3b:72:05:ca:e4:9a:84:67:75:6e:24:ce:
f1:73:10:bc:e4:62:10:06:76:65:74:b2:05:b3:dc:
77:7f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
9C:09:9B:60:DC:86:D7:8E:69:7E:0B:84:99:AC:7A:06:70:12:4A:43
X509v3 Authority Key Identifier:
keyid:FF:87:E0:AB:03:2B:0C:05:EB:5E:74:CC:2C:08:69:8D:D3:24:D9:63
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/_4fgqwMrDAXrXnTMLAhpjdMk2WM.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/33/1df18e-6c4d-434b-8e31-71eb95f50e5b/1/nAmbYNyG145pfguEmax6BnASSkM.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/33/1df18e-6c4d-434b-8e31-71eb95f50e5b/1/_4fgqwMrDAXrXnTMLAhpjdMk2WM.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
109.122.214.0/24
109.122.223.0/24
Signature Algorithm: sha256WithRSAEncryption
07:ba:f9:14:73:ba:6a:14:d1:1b:0a:24:08:f3:de:f2:7e:55:
67:87:7b:e9:e4:16:8f:0b:6c:05:af:fc:90:49:72:9b:a1:53:
e2:69:44:ac:02:9b:76:06:c0:d6:8f:dc:92:7b:4b:c9:dd:20:
8e:4a:51:94:4b:ee:ec:05:7f:b5:60:05:fc:55:bd:fc:96:46:
48:e7:0f:52:1c:1e:42:8e:f2:69:6b:1a:ec:55:13:7a:03:37:
0e:3a:e7:e3:89:53:3d:03:d5:b5:f0:10:19:14:39:a6:66:a4:
a0:6d:b2:2f:9a:77:10:9b:68:cd:af:0b:e2:b5:22:52:84:1d:
45:95:e8:47:41:5b:89:a0:70:f6:f2:90:56:4f:f5:ff:38:6b:
34:90:e2:b5:43:af:6d:1f:38:b9:ba:53:34:26:54:be:fb:2b:
8e:ed:c4:e2:2e:46:9b:11:58:5d:62:f4:54:fe:cd:fd:70:db:
8f:9f:ef:12:f3:d6:3e:c4:db:74:d7:20:ab:c6:42:cc:c4:bd:
08:41:da:f1:80:fe:ba:b7:c1:5a:1b:7f:5c:da:e8:a6:b1:36:
c1:7c:ce:27:e2:8f:bf:39:9d:44:87:9b:06:d1:09:b7:d5:3c:
2c:27:e4:2a:15:63:1f:ff:8a:67:60:9e:60:ab:21:be:87:9a:
49:a5:f8:10
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:24:48 2024 by rpki-client on console-fra.rpki-client.org