Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/33/1df18e-6c4d-434b-8e31-71eb95f50e5b/1/qNigwk_k6fCPQvWOWsM8U5l6qIA.roa
File: qNigwk_k6fCPQvWOWsM8U5l6qIA.roa (raw, json)
Hash identifier: iwYZE6A3M83Wsybo7A73Ya4k4WvRzgWCXViHGLu5BRY=
Subject key identifier: A8:D8:A0:C2:4F:E4:E9:F0:8F:42:F5:8E:5A:C3:3C:53:99:7A:A8:80
Certificate issuer: /CN=ff87e0ab032b0c05eb5e74cc2c08698dd324d963
Certificate serial: 018B434C2D69AAF23489E9E91A98608DF9E9
Authority key identifier: FF:87:E0:AB:03:2B:0C:05:EB:5E:74:CC:2C:08:69:8D:D3:24:D9:63
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/_4fgqwMrDAXrXnTMLAhpjdMk2WM.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/33/1df18e-6c4d-434b-8e31-71eb95f50e5b/1/qNigwk_k6fCPQvWOWsM8U5l6qIA.roa
Signing time: Wed 18 Oct 2023 14:59:07 +0000
ROA not before: Wed 18 Oct 2023 14:59:07 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 132335
IP address blocks: 109.122.200.0/24 maxlen: 24
Validation: Failed, RFC 3779 resource not subset of parent's resources
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8b:43:4c:2d:69:aa:f2:34:89:e9:e9:1a:98:60:8d:f9:e9
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=ff87e0ab032b0c05eb5e74cc2c08698dd324d963
Validity
Not Before: Oct 18 14:59:07 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=a8d8a0c24fe4e9f08f42f58e5ac33c53997aa880
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a1:8b:1b:32:ac:3f:c6:c7:21:55:b3:bc:f7:4b:
62:3a:1a:e7:eb:d8:61:dc:d8:90:4c:f8:44:29:49:
94:2e:69:1a:0b:ea:63:7f:84:8b:1e:55:14:95:fe:
18:fb:ac:b8:52:e2:e0:8d:c0:c7:b2:65:e0:6f:00:
c2:5a:f8:6c:13:82:5b:00:ae:02:80:3c:b8:31:ee:
7e:d8:fb:92:6c:34:54:6e:68:14:5e:35:e4:51:ae:
1f:03:e7:1f:ad:e3:87:b2:9d:1b:56:e7:7a:cf:93:
b7:cc:32:9e:64:9f:1c:07:76:f9:cf:d2:7b:46:65:
cb:67:89:7e:be:58:2e:c2:f3:83:72:05:75:78:41:
46:d6:2a:f4:ce:2a:d4:66:bd:83:ff:2a:0f:13:bd:
81:74:2e:d3:57:f5:27:38:32:bf:f3:1d:1e:71:aa:
78:cd:95:27:bc:0f:3e:c1:4c:1d:03:bb:26:c6:0e:
a7:d2:54:2f:37:ed:82:07:bf:a3:fc:a1:98:d7:9e:
88:d7:1a:a4:82:2a:60:eb:46:36:64:f9:97:48:5a:
d1:69:2c:ae:d3:c4:b2:3b:c0:84:bb:15:bc:44:64:
05:9b:21:49:a6:75:ec:2b:2d:4b:a4:c9:41:0f:e2:
ed:40:b3:70:e7:ef:ae:38:58:73:8d:c7:7b:cb:f3:
80:b9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A8:D8:A0:C2:4F:E4:E9:F0:8F:42:F5:8E:5A:C3:3C:53:99:7A:A8:80
X509v3 Authority Key Identifier:
keyid:FF:87:E0:AB:03:2B:0C:05:EB:5E:74:CC:2C:08:69:8D:D3:24:D9:63
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/_4fgqwMrDAXrXnTMLAhpjdMk2WM.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/33/1df18e-6c4d-434b-8e31-71eb95f50e5b/1/qNigwk_k6fCPQvWOWsM8U5l6qIA.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/33/1df18e-6c4d-434b-8e31-71eb95f50e5b/1/_4fgqwMrDAXrXnTMLAhpjdMk2WM.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
109.122.200.0/24
Signature Algorithm: sha256WithRSAEncryption
17:0d:fd:89:98:ab:5e:ec:84:ec:16:22:a0:90:ef:06:09:a1:
a3:e5:b6:1e:50:37:ae:cf:96:05:cc:9d:3c:e6:03:f6:dd:c6:
2e:73:d6:10:47:17:b4:f2:e0:05:e4:56:c3:c8:a0:7f:95:70:
07:92:82:8d:38:94:04:3e:35:5f:98:62:c3:9b:de:65:ff:58:
a2:71:79:46:11:18:d4:7f:56:c2:fc:bb:fb:c6:78:55:f2:39:
2c:9c:65:08:db:9d:e6:57:a0:2a:0c:02:3a:ce:2f:bc:2c:71:
5f:94:52:e4:55:fd:2a:38:ce:dd:62:e1:54:f7:99:11:23:9c:
c4:70:16:ea:01:c5:7d:44:ba:d4:61:67:6b:0b:9b:d4:6a:3e:
95:52:9c:1c:1e:1d:13:88:9a:82:d5:a2:5d:47:f1:90:39:fe:
93:4e:a1:6f:35:03:26:9f:69:5d:c5:a7:eb:e4:3f:ab:00:54:
ec:c4:ad:46:8e:02:3b:fe:04:ad:8e:51:8d:81:58:b6:70:da:
c3:3f:f1:e1:d8:bc:8c:59:e8:29:c9:38:8d:63:0a:c6:21:79:
08:ac:bd:43:78:87:f5:8a:88:ac:09:db:9c:e0:a4:cd:52:85:
d7:d5:35:3e:3c:2b:24:9c:d5:31:35:ea:99:ac:f1:c0:6c:46:
5a:62:36:2d
-----BEGIN CERTIFICATE-----
MIIE/TCCA+WgAwIBAgISAYtDTC1pqvI0ienpGphgjfnpMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGZmODdlMGFiMDMyYjBjMDVlYjVlNzRjYzJjMDg2OThkZDMy
NGQ5NjMwHhcNMjMxMDE4MTQ1OTA3WhcNMjQwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EyhhOGQ4YTBjMjRmZTRlOWYwOGY0MmY1OGU1YWMzM2M1Mzk5N2FhODgwMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAoYsbMqw/xschVbO890tiOhrn69hh
3NiQTPhEKUmULmkaC+pjf4SLHlUUlf4Y+6y4UuLgjcDHsmXgbwDCWvhsE4JbAK4C
gDy4Me5+2PuSbDRUbmgUXjXkUa4fA+cfreOHsp0bVud6z5O3zDKeZJ8cB3b5z9J7
RmXLZ4l+vlguwvODcgV1eEFG1ir0zirUZr2D/yoPE72BdC7TV/UnODK/8x0ecap4
zZUnvA8+wUwdA7smxg6n0lQvN+2CB7+j/KGY156I1xqkgipg60Y2ZPmXSFrRaSyu
08SyO8CEuxW8RGQFmyFJpnXsKy1LpMlBD+LtQLNw5++uOFhzjcd7y/OAuQIDAQAB
o4ICCTCCAgUwHQYDVR0OBBYEFKjYoMJP5Onwj0L1jlrDPFOZeqiAMB8GA1UdIwQY
MBaAFP+H4KsDKwwF6150zCwIaY3TJNljMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvXzRmZ3F3TXJEQVhyWG5UTUxBaHBqZE1rMldNLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8zMy8xZGYxOGUtNmM0ZC00MzRiLThlMzEt
NzFlYjk1ZjUwZTViLzEvcU5pZ3drX2s2ZkNQUXZXT1dzTThVNWw2cUlBLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8zMy8xZGYxOGUtNmM0ZC00MzRiLThlMzEtNzFlYjk1ZjUwZTVi
LzEvXzRmZ3F3TXJEQVhyWG5UTUxBaHBqZE1rMldNLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAbXrIMA0G
CSqGSIb3DQEBCwUAA4IBAQAXDf2JmKte7ITsFiKgkO8GCaGj5bYeUDeuz5YFzJ08
5gP23cYuc9YQRxe08uAF5FbDyKB/lXAHkoKNOJQEPjVfmGLDm95l/1iicXlGERjU
f1bC/Lv7xnhV8jksnGUI253mV6AqDAI6zi+8LHFflFLkVf0qOM7dYuFU95kRI5zE
cBbqAcV9RLrUYWdrC5vUaj6VUpwcHh0TiJqC1aJdR/GQOf6TTqFvNQMmn2ldxafr
5D+rAFTsxK1GjgI7/gStjlGNgVi2cNrDP/Hh2LyMWegpyTiNYwrGIXkIrL1DeIf1
ioisCduc4KTNUoXX1TU+PCsknNUxNeqZrPHAbEZaYjYt
-----END CERTIFICATE-----
Generated at Thu Jun 6 17:24:48 2024 by rpki-client on console-fra.rpki-client.org