Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/33/1df18e-6c4d-434b-8e31-71eb95f50e5b/1/wJLPtUj-qByJrsc9pQQ1CyWukeE.roa
File: wJLPtUj-qByJrsc9pQQ1CyWukeE.roa (raw, json)
Hash identifier: 4/J24immzuNtQSL/PgYv0MC5/QprKoxsV7tjWKSmIR4=
Subject key identifier: C0:92:CF:B5:48:FE:A8:1C:89:AE:C7:3D:A5:04:35:0B:25:AE:91:E1
Certificate issuer: /CN=ff87e0ab032b0c05eb5e74cc2c08698dd324d963
Certificate serial: 018C308E4E86710E9660218CA8BCDC88359F
Authority key identifier: FF:87:E0:AB:03:2B:0C:05:EB:5E:74:CC:2C:08:69:8D:D3:24:D9:63
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/_4fgqwMrDAXrXnTMLAhpjdMk2WM.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/33/1df18e-6c4d-434b-8e31-71eb95f50e5b/1/wJLPtUj-qByJrsc9pQQ1CyWukeE.roa
Signing time: Sun 03 Dec 2023 16:41:21 +0000
ROA not before: Sun 03 Dec 2023 16:41:21 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 60117
IP address blocks: 109.122.194.0/24 maxlen: 24
109.122.203.0/24 maxlen: 24
109.122.211.0/24 maxlen: 24
109.122.212.0/24 maxlen: 24
Validation: Failed, RFC 3779 resource not subset of parent's resources
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8c:30:8e:4e:86:71:0e:96:60:21:8c:a8:bc:dc:88:35:9f
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=ff87e0ab032b0c05eb5e74cc2c08698dd324d963
Validity
Not Before: Dec 3 16:41:21 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=c092cfb548fea81c89aec73da504350b25ae91e1
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:89:d4:32:ac:ba:8f:1e:fd:92:98:95:35:be:f0:
d0:0d:80:8b:58:36:6e:bc:56:f8:69:e8:09:9b:91:
d2:c2:7c:53:52:fd:21:cf:b3:d6:50:1b:dd:3b:d6:
2d:a5:c4:e9:16:85:bf:de:f1:d6:08:1b:ea:c4:ab:
a2:8c:76:78:9e:ea:c9:82:1d:d7:a8:8f:79:b4:6c:
6f:bb:9a:ed:f9:14:53:a5:0f:43:10:f6:b2:58:e8:
fd:b1:b6:1e:31:00:39:e9:c8:a9:c8:ad:9d:d7:50:
be:12:82:26:3a:73:d0:40:7c:ef:b2:0f:7b:1b:50:
9f:95:a2:be:1d:c6:d5:c6:6c:8b:47:ad:23:9f:52:
b4:22:df:a1:ed:23:d5:04:6f:37:b5:ca:1e:ef:9a:
d1:b7:5c:2b:93:2e:e3:11:24:01:d6:d6:b0:01:63:
1f:69:01:e5:1a:7a:22:2b:db:6f:f2:55:b1:1d:f0:
48:70:d1:33:58:26:b4:73:8f:f1:f6:5b:26:73:ff:
40:34:5a:ec:69:80:a7:c1:30:fe:54:a3:95:83:54:
e6:f3:ef:bc:81:8f:f3:58:a5:85:1e:7d:b1:77:b1:
21:9a:99:b6:aa:5c:f0:50:8b:af:f4:ef:95:3b:d9:
8e:18:b4:52:fb:cd:68:44:af:bf:18:c1:70:be:ee:
43:ef
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C0:92:CF:B5:48:FE:A8:1C:89:AE:C7:3D:A5:04:35:0B:25:AE:91:E1
X509v3 Authority Key Identifier:
keyid:FF:87:E0:AB:03:2B:0C:05:EB:5E:74:CC:2C:08:69:8D:D3:24:D9:63
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/_4fgqwMrDAXrXnTMLAhpjdMk2WM.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/33/1df18e-6c4d-434b-8e31-71eb95f50e5b/1/wJLPtUj-qByJrsc9pQQ1CyWukeE.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/33/1df18e-6c4d-434b-8e31-71eb95f50e5b/1/_4fgqwMrDAXrXnTMLAhpjdMk2WM.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
109.122.194.0/24
109.122.203.0/24
109.122.211.0-109.122.212.255
Signature Algorithm: sha256WithRSAEncryption
8a:a7:6b:de:1a:59:02:5a:2d:bf:55:a8:f7:3d:22:ac:e5:6a:
37:3b:bc:c1:2f:ac:9f:0b:14:c6:6e:46:93:15:05:6d:3f:48:
63:67:61:ef:ea:b8:57:24:a0:a4:3d:5b:7f:ca:4e:db:e5:70:
24:55:8e:c6:2a:09:cd:47:fd:2d:7b:e2:08:05:b3:05:e4:1e:
79:30:91:2a:01:e5:03:53:ca:c1:b8:6c:33:cf:9f:fd:93:5a:
77:02:34:11:a9:36:ea:7e:0f:f7:cd:33:50:2f:fb:3f:53:55:
66:30:2d:ad:2d:60:f7:45:68:8b:24:54:8b:a4:17:f4:56:ec:
5d:23:41:78:dc:5a:61:3d:34:e5:21:4c:f5:cf:10:b6:c6:f5:
f7:14:23:85:3a:e5:9c:0e:a7:f3:7b:b0:10:f4:60:33:92:7c:
97:6d:3b:dc:5d:a5:d5:7d:fd:4b:ed:10:ca:5d:1f:cc:67:65:
a1:ef:ca:12:ab:f0:2a:58:81:9c:c1:dc:69:91:38:83:7b:7f:
5b:42:fc:21:40:b1:42:14:ca:68:72:2a:f3:f4:cc:fd:df:43:
f1:d9:af:99:1e:72:7e:4a:46:e3:24:59:a6:74:b3:65:47:01:
06:33:f3:c2:50:c0:67:0a:86:9e:24:27:d7:15:1a:52:92:c7:
f6:d9:9b:04
-----BEGIN CERTIFICATE-----
MIIFETCCA/mgAwIBAgISAYwwjk6GcQ6WYCGMqLzciDWfMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGZmODdlMGFiMDMyYjBjMDVlYjVlNzRjYzJjMDg2OThkZDMy
NGQ5NjMwHhcNMjMxMjAzMTY0MTIxWhcNMjQwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EyhjMDkyY2ZiNTQ4ZmVhODFjODlhZWM3M2RhNTA0MzUwYjI1YWU5MWUxMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAidQyrLqPHv2SmJU1vvDQDYCLWDZu
vFb4aegJm5HSwnxTUv0hz7PWUBvdO9YtpcTpFoW/3vHWCBvqxKuijHZ4nurJgh3X
qI95tGxvu5rt+RRTpQ9DEPayWOj9sbYeMQA56cipyK2d11C+EoImOnPQQHzvsg97
G1CflaK+HcbVxmyLR60jn1K0It+h7SPVBG83tcoe75rRt1wrky7jESQB1tawAWMf
aQHlGnoiK9tv8lWxHfBIcNEzWCa0c4/x9lsmc/9ANFrsaYCnwTD+VKOVg1Tm8++8
gY/zWKWFHn2xd7Ehmpm2qlzwUIuv9O+VO9mOGLRS+81oRK+/GMFwvu5D7wIDAQAB
o4ICHTCCAhkwHQYDVR0OBBYEFMCSz7VI/qgcia7HPaUENQslrpHhMB8GA1UdIwQY
MBaAFP+H4KsDKwwF6150zCwIaY3TJNljMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvXzRmZ3F3TXJEQVhyWG5UTUxBaHBqZE1rMldNLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8zMy8xZGYxOGUtNmM0ZC00MzRiLThlMzEt
NzFlYjk1ZjUwZTViLzEvd0pMUHRVai1xQnlKcnNjOXBRUTFDeVd1a2VFLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8zMy8xZGYxOGUtNmM0ZC00MzRiLThlMzEtNzFlYjk1ZjUwZTVi
LzEvXzRmZ3F3TXJEQVhyWG5UTUxBaHBqZE1rMldNLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMDMGCCsGAQUFBwEHAQH/BCQwIjAgBAIAATAaAwQAbXrCAwQA
bXrLMAwDBABtetMDBABtetQwDQYJKoZIhvcNAQELBQADggEBAIqna94aWQJaLb9V
qPc9Iqzlajc7vMEvrJ8LFMZuRpMVBW0/SGNnYe/quFckoKQ9W3/KTtvlcCRVjsYq
Cc1H/S174ggFswXkHnkwkSoB5QNTysG4bDPPn/2TWncCNBGpNup+D/fNM1Av+z9T
VWYwLa0tYPdFaIskVIukF/RW7F0jQXjcWmE9NOUhTPXPELbG9fcUI4U65ZwOp/N7
sBD0YDOSfJdtO9xdpdV9/UvtEMpdH8xnZaHvyhKr8CpYgZzB3GmROIN7f1tC/CFA
sUIUymhyKvP0zP3fQ/HZr5kecn5KRuMkWaZ0s2VHAQYz88JQwGcKhp4kJ9cVGlKS
x/bZmwQ=
-----END CERTIFICATE-----
Generated at Thu Jun 6 19:02:04 2024 by rpki-client on console-ams.rpki-client.org