Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/33/1df18e-6c4d-434b-8e31-71eb95f50e5b/1/wTnS1d_PWv5hUWDAtB-Y4FSNvis.roa
File: wTnS1d_PWv5hUWDAtB-Y4FSNvis.roa (raw, json)
Hash identifier: zAdBx0u3ZrdzKDufw/KekIq9EHJPXTVyh+dbWH/1mEo=
Subject key identifier: C1:39:D2:D5:DF:CF:5A:FE:61:51:60:C0:B4:1F:98:E0:54:8D:BE:2B
Certificate issuer: /CN=ff87e0ab032b0c05eb5e74cc2c08698dd324d963
Certificate serial: 018E1A88935F73C12F83B867AE697BBCBA3B
Authority key identifier: FF:87:E0:AB:03:2B:0C:05:EB:5E:74:CC:2C:08:69:8D:D3:24:D9:63
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/_4fgqwMrDAXrXnTMLAhpjdMk2WM.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/33/1df18e-6c4d-434b-8e31-71eb95f50e5b/1/wTnS1d_PWv5hUWDAtB-Y4FSNvis.roa
Signing time: Thu 07 Mar 2024 20:09:01 +0000
ROA not before: Thu 07 Mar 2024 20:09:01 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 149457
IP address blocks: 109.122.222.0/24 maxlen: 24
Validation: Failed, RFC 3779 resource not subset of parent's resources
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8e:1a:88:93:5f:73:c1:2f:83:b8:67:ae:69:7b:bc:ba:3b
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=ff87e0ab032b0c05eb5e74cc2c08698dd324d963
Validity
Not Before: Mar 7 20:09:01 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=c139d2d5dfcf5afe615160c0b41f98e0548dbe2b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:94:0a:7a:76:f5:76:a5:ba:49:87:b0:45:87:2c:
eb:15:01:ed:47:c3:e1:73:53:82:de:76:b2:a8:78:
81:6e:22:3a:c0:af:a7:42:60:b5:7e:6a:ff:32:3c:
e3:a4:00:ad:7c:2b:54:c1:66:42:20:91:c7:b4:f5:
fc:3f:07:ac:9a:0d:1f:05:21:23:79:3b:65:d1:bf:
fa:9f:8c:87:46:88:51:9e:9e:91:e8:8b:2c:5f:91:
f9:af:d8:20:ed:b3:fc:ca:c6:a8:62:af:a3:8d:1c:
4f:27:c8:73:14:59:f7:46:e7:e4:c2:6f:08:e8:4a:
fc:bc:36:d4:20:66:ed:0e:32:c8:99:a1:e6:3c:51:
2d:6e:d3:46:8f:6a:08:bd:5e:b8:4a:76:96:24:a3:
ba:d1:2c:80:6e:59:87:d8:04:4c:6b:90:93:88:25:
80:0c:0f:c0:1c:14:d4:2b:ab:c5:9b:4a:1d:cd:29:
2e:66:9a:5d:d6:de:33:8d:50:cd:27:cf:e3:68:ba:
8a:7c:07:84:ae:0a:ef:65:c1:f1:25:a2:68:e7:58:
ff:ea:29:c1:83:55:51:28:80:60:fc:9e:15:b8:2b:
fb:af:c5:d7:fe:f4:42:41:d9:3e:c7:88:d9:f9:d3:
57:e4:ba:ca:bc:a5:2d:54:93:19:91:52:3e:96:fa:
39:89
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C1:39:D2:D5:DF:CF:5A:FE:61:51:60:C0:B4:1F:98:E0:54:8D:BE:2B
X509v3 Authority Key Identifier:
keyid:FF:87:E0:AB:03:2B:0C:05:EB:5E:74:CC:2C:08:69:8D:D3:24:D9:63
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/_4fgqwMrDAXrXnTMLAhpjdMk2WM.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/33/1df18e-6c4d-434b-8e31-71eb95f50e5b/1/wTnS1d_PWv5hUWDAtB-Y4FSNvis.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/33/1df18e-6c4d-434b-8e31-71eb95f50e5b/1/_4fgqwMrDAXrXnTMLAhpjdMk2WM.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
109.122.222.0/24
Signature Algorithm: sha256WithRSAEncryption
0e:ec:44:a3:b4:81:dd:6e:5b:d1:a8:fa:6a:1b:81:25:85:73:
ae:f1:82:ee:75:c9:cf:c8:4b:ae:90:88:54:b2:0b:23:08:bb:
02:2b:53:2e:9f:e6:a6:32:1a:85:fc:05:f0:98:b9:b7:72:e5:
96:22:6d:68:34:74:06:d4:96:9f:4d:2a:b9:0b:64:6a:ab:2b:
52:b6:18:2e:6d:4d:43:80:1b:b8:0a:3f:02:b6:53:df:36:b7:
f4:b1:5b:49:cc:4b:7c:08:b6:5a:36:b9:5f:c1:50:e3:c8:80:
43:53:e3:42:3a:5f:20:fe:fa:82:5e:c4:f4:e3:7d:b9:d2:dc:
55:70:16:49:56:41:6d:ba:7a:74:f1:6f:9a:2e:66:80:4f:fc:
15:d3:d9:46:3a:d2:86:8d:38:c0:4f:e9:0e:39:2f:22:5e:69:
fa:e8:c4:03:f3:21:83:b1:9c:dc:7d:28:93:9f:92:64:b5:d1:
7a:5d:04:c4:5b:5a:b0:c4:6e:4e:10:ca:23:bb:a3:4f:a3:0c:
6a:33:c5:14:ec:59:f2:de:74:c4:94:93:82:bb:40:21:3b:19:
09:fd:5a:7a:c7:7d:6a:13:14:e7:99:be:bf:ea:e0:87:ad:3b:
76:19:09:1e:6f:b6:fc:25:44:f8:ae:f1:dc:40:3a:1e:b8:87:
f9:d6:c7:3b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:24:48 2024 by rpki-client on console-fra.rpki-client.org