Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/33/1df18e-6c4d-434b-8e31-71eb95f50e5b/1/y1yePRGA7At-CIZXBcKpdNp80AI.roa
File: y1yePRGA7At-CIZXBcKpdNp80AI.roa (raw, json)
Hash identifier: oHoF5Kf9wuYaKwXnG/52aZQp9Kyz7b9m3M/AdlykB2Y=
Subject key identifier: CB:5C:9E:3D:11:80:EC:0B:7E:08:86:57:05:C2:A9:74:DA:7C:D0:02
Certificate issuer: /CN=ff87e0ab032b0c05eb5e74cc2c08698dd324d963
Certificate serial: 018C91F7153E40FD534BE13520E1C28E5E9E
Authority key identifier: FF:87:E0:AB:03:2B:0C:05:EB:5E:74:CC:2C:08:69:8D:D3:24:D9:63
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/_4fgqwMrDAXrXnTMLAhpjdMk2WM.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/33/1df18e-6c4d-434b-8e31-71eb95f50e5b/1/y1yePRGA7At-CIZXBcKpdNp80AI.roa
Signing time: Fri 22 Dec 2023 14:38:58 +0000
ROA not before: Fri 22 Dec 2023 14:38:58 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 9009
IP address blocks: 109.122.204.0/24 maxlen: 24
Validation: Failed, RFC 3779 resource not subset of parent's resources
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8c:91:f7:15:3e:40:fd:53:4b:e1:35:20:e1:c2:8e:5e:9e
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=ff87e0ab032b0c05eb5e74cc2c08698dd324d963
Validity
Not Before: Dec 22 14:38:58 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=cb5c9e3d1180ec0b7e08865705c2a974da7cd002
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b7:6d:6b:d0:70:8a:bf:b0:6f:5b:41:77:ec:e9:
bf:40:3e:dc:29:1c:40:f6:4d:9c:3f:06:c8:7d:93:
a1:a0:33:b2:f1:c7:b5:1f:7a:33:f8:fe:67:e8:4a:
02:4d:67:e0:24:52:cc:04:c5:68:a9:82:ca:7f:e7:
4f:e7:72:4a:a8:a8:d8:06:b7:2a:d6:f8:5a:40:53:
58:f0:ef:52:57:7c:94:fc:7e:7b:07:98:f6:ee:54:
36:d1:59:6c:71:01:1d:66:a5:08:e0:dc:e1:31:96:
e1:48:d3:78:7a:bb:34:e9:6f:6f:f4:b9:5e:36:16:
76:d7:72:27:51:a0:e6:e9:5d:f2:f3:5f:ca:e3:cb:
f7:ac:69:4e:80:21:cd:e7:1c:26:a5:3b:c5:66:21:
75:2d:6c:e0:4f:2a:a5:61:5e:6b:19:6b:15:bc:d0:
00:51:09:36:45:84:5a:48:c3:04:53:14:3c:13:fb:
2b:9f:89:df:1a:49:e5:dc:87:c6:e7:1f:81:04:32:
1f:00:33:65:c1:2b:87:47:da:bf:a5:cf:6d:b0:78:
cb:d3:75:55:bd:39:22:e3:f1:a9:32:76:93:7a:21:
83:ac:59:08:a8:50:b1:62:73:94:5e:a1:87:af:51:
19:4e:4d:96:a4:9d:98:cb:6c:1c:87:77:b4:5e:ed:
03:d3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
CB:5C:9E:3D:11:80:EC:0B:7E:08:86:57:05:C2:A9:74:DA:7C:D0:02
X509v3 Authority Key Identifier:
keyid:FF:87:E0:AB:03:2B:0C:05:EB:5E:74:CC:2C:08:69:8D:D3:24:D9:63
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/_4fgqwMrDAXrXnTMLAhpjdMk2WM.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/33/1df18e-6c4d-434b-8e31-71eb95f50e5b/1/y1yePRGA7At-CIZXBcKpdNp80AI.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/33/1df18e-6c4d-434b-8e31-71eb95f50e5b/1/_4fgqwMrDAXrXnTMLAhpjdMk2WM.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
109.122.204.0/24
Signature Algorithm: sha256WithRSAEncryption
05:00:55:92:97:7b:79:91:b9:d6:4d:47:9c:a4:5e:fb:4c:2f:
66:eb:6e:69:bc:d6:ea:34:08:72:64:5f:b5:17:0e:db:fe:16:
b4:fc:4e:43:a4:14:7d:d8:fa:11:64:e0:1d:29:69:0a:c9:db:
51:14:8e:89:fc:46:ef:90:0b:24:e0:c9:01:cf:8b:90:df:97:
9b:6c:6c:7f:30:73:9c:ec:c6:99:dc:f0:4d:ed:6d:aa:86:d2:
07:b4:0f:a0:5e:7f:41:b6:11:00:ea:ef:24:2b:13:48:e6:0b:
a2:fd:40:20:44:c5:e6:3d:96:ac:1d:8e:4c:19:e8:d1:16:a7:
f2:ca:d8:6c:0f:ec:f6:d7:6c:d0:60:63:8b:bb:cb:43:9d:ba:
27:4e:e8:1a:07:20:93:f2:54:b1:20:73:66:a4:ea:e4:36:1b:
3d:e1:76:59:85:5c:66:0b:61:fa:a2:e6:d9:bb:72:d0:74:90:
c1:af:ef:a2:5c:c5:db:8c:de:31:21:d9:78:ef:53:c9:ff:15:
f6:d7:25:7c:29:e8:30:7f:73:53:21:f4:4f:b7:98:72:8a:0b:
2e:f3:32:bc:62:4c:0a:7a:16:2c:b6:8a:dd:8a:aa:de:d0:c6:
26:33:3b:6a:c7:62:f6:02:56:45:37:07:09:42:76:d7:0c:ca:
a0:cb:49:82
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 19:02:04 2024 by rpki-client on console-ams.rpki-client.org