Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/33/1df18e-6c4d-434b-8e31-71eb95f50e5b/1/ty8C1sYRbE1COhrmfFAhZ4d6FC8.roa
File: ty8C1sYRbE1COhrmfFAhZ4d6FC8.roa (raw, json)
Hash identifier: mke7iJn5y9unVNAUG2aIlu+Gpk9a/dgGb97ZNhP3lPU=
Subject key identifier: B7:2F:02:D6:C6:11:6C:4D:42:3A:1A:E6:7C:50:21:67:87:7A:14:2F
Certificate issuer: /CN=ff87e0ab032b0c05eb5e74cc2c08698dd324d963
Certificate serial: 018B851A02607F05A7D95162E3DA6325EC20
Authority key identifier: FF:87:E0:AB:03:2B:0C:05:EB:5E:74:CC:2C:08:69:8D:D3:24:D9:63
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/_4fgqwMrDAXrXnTMLAhpjdMk2WM.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/33/1df18e-6c4d-434b-8e31-71eb95f50e5b/1/ty8C1sYRbE1COhrmfFAhZ4d6FC8.roa
Signing time: Tue 31 Oct 2023 09:39:16 +0000
ROA not before: Tue 31 Oct 2023 09:39:16 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 43260
IP address blocks: 109.122.192.0/24 maxlen: 24
109.122.195.0/24 maxlen: 24
109.122.197.0/24 maxlen: 24
Validation: Failed, RFC 3779 resource not subset of parent's resources
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8b:85:1a:02:60:7f:05:a7:d9:51:62:e3:da:63:25:ec:20
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=ff87e0ab032b0c05eb5e74cc2c08698dd324d963
Validity
Not Before: Oct 31 09:39:16 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=b72f02d6c6116c4d423a1ae67c502167877a142f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:81:64:87:b6:dc:ff:77:b2:e9:e5:69:00:9a:c8:
3a:1a:e5:39:30:ef:d3:b8:13:a0:7d:d4:60:14:2c:
a0:fc:8c:fe:b5:bb:3c:4c:49:8a:05:c0:bb:64:cb:
78:d7:bf:bf:a2:e8:92:4c:6f:2c:2a:99:37:0d:28:
06:73:7a:e4:cd:a7:4e:c9:bf:4a:4d:0a:5b:25:d0:
2f:c5:3f:97:e5:0f:0a:16:49:5c:a3:72:0a:08:17:
4a:d7:7e:b8:ca:b1:67:36:26:ce:aa:6b:07:a8:3c:
e3:b4:c4:69:0e:70:1b:a1:6b:de:71:af:2c:5e:4a:
20:a8:03:92:c1:19:df:38:67:c6:77:cd:8f:68:a6:
b9:cf:8a:33:e2:d7:93:51:27:9f:bc:24:ba:fd:cc:
89:93:59:4d:04:c4:d8:f4:ea:55:ec:e6:9e:52:93:
96:c9:9e:5d:16:25:fd:18:52:9e:b4:ed:47:10:99:
9c:66:51:70:5b:ba:b2:77:44:e9:1e:65:be:fa:25:
09:52:fe:f9:7a:2b:5a:20:b7:70:eb:f8:3d:48:40:
6b:c7:1a:b2:da:7a:09:59:bb:f7:8a:59:49:da:f0:
6e:fa:09:f5:27:ca:9f:59:80:f0:78:45:f5:ce:1e:
b6:1e:d2:7d:8d:64:5d:c7:5c:0a:29:a4:8d:ae:8a:
ec:6d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B7:2F:02:D6:C6:11:6C:4D:42:3A:1A:E6:7C:50:21:67:87:7A:14:2F
X509v3 Authority Key Identifier:
keyid:FF:87:E0:AB:03:2B:0C:05:EB:5E:74:CC:2C:08:69:8D:D3:24:D9:63
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/_4fgqwMrDAXrXnTMLAhpjdMk2WM.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/33/1df18e-6c4d-434b-8e31-71eb95f50e5b/1/ty8C1sYRbE1COhrmfFAhZ4d6FC8.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/33/1df18e-6c4d-434b-8e31-71eb95f50e5b/1/_4fgqwMrDAXrXnTMLAhpjdMk2WM.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
109.122.192.0/24
109.122.195.0/24
109.122.197.0/24
Signature Algorithm: sha256WithRSAEncryption
93:f8:d8:8d:7d:93:2c:00:d7:b5:d9:f5:8b:78:a4:f1:f2:58:
1b:28:9d:3d:83:e0:6b:49:ed:ad:cd:31:25:96:c1:91:3a:2b:
62:1c:8b:14:0b:f2:55:3c:32:ac:61:56:79:b7:d0:35:7e:60:
d1:6d:89:5d:86:b1:ac:44:13:c5:2b:8d:63:a4:6f:9d:2b:95:
2c:7c:f9:05:45:09:78:08:29:dc:db:f1:3b:30:e5:8f:88:68:
f8:1e:a7:87:aa:13:cf:63:b2:42:bb:7a:4a:95:79:bf:fc:9a:
dc:f3:11:f7:33:c5:13:22:72:81:08:b6:4b:96:ba:67:cb:1b:
70:fd:93:63:be:d4:bc:26:92:30:e3:e8:52:c4:d8:68:ca:db:
b3:c2:28:0d:56:3c:76:3d:fb:73:65:e6:97:08:8e:2d:89:d0:
78:00:2a:7a:ea:1e:a5:ff:60:a6:b2:14:96:66:28:7c:f1:6f:
e7:f0:99:53:eb:d4:13:78:0c:7a:a9:b7:d8:9c:2e:60:76:a3:
61:92:9b:a2:16:03:8a:8d:b7:db:bb:34:db:02:a5:48:86:ec:
15:45:c5:91:98:8b:dc:e1:0a:3d:b3:30:b5:9a:2c:99:d2:be:
42:0f:a2:ed:a2:bf:7e:47:f8:55:bb:9f:6c:6a:db:61:75:62:
7c:a5:48:d8
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Feb 17 08:12:01 2025 by rpki-client