Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/33/1df18e-6c4d-434b-8e31-71eb95f50e5b/1/ywOVh1Uj3QAXZtwSxHwAcbDzzwI.roa
File: ywOVh1Uj3QAXZtwSxHwAcbDzzwI.roa (raw, json)
Hash identifier: zQ58hOBwuTlQejXqPebusO4gAOoDfdOgbO47nADMVgY=
Subject key identifier: CB:03:95:87:55:23:DD:00:17:66:DC:12:C4:7C:00:71:B0:F3:CF:02
Certificate issuer: /CN=ff87e0ab032b0c05eb5e74cc2c08698dd324d963
Certificate serial: 018D3797318C8F59B246775A1A4518472002
Authority key identifier: FF:87:E0:AB:03:2B:0C:05:EB:5E:74:CC:2C:08:69:8D:D3:24:D9:63
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/_4fgqwMrDAXrXnTMLAhpjdMk2WM.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/33/1df18e-6c4d-434b-8e31-71eb95f50e5b/1/ywOVh1Uj3QAXZtwSxHwAcbDzzwI.roa
Signing time: Tue 23 Jan 2024 18:31:11 +0000
ROA not before: Tue 23 Jan 2024 18:31:11 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 30277
IP address blocks: 109.122.197.0/24 maxlen: 24
Validation: Failed, RFC 3779 resource not subset of parent's resources
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8d:37:97:31:8c:8f:59:b2:46:77:5a:1a:45:18:47:20:02
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=ff87e0ab032b0c05eb5e74cc2c08698dd324d963
Validity
Not Before: Jan 23 18:31:11 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=cb0395875523dd001766dc12c47c0071b0f3cf02
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:91:c8:81:b6:ec:ae:e4:79:eb:73:2c:41:e8:f4:
60:be:70:f3:af:1d:33:70:9c:9d:13:33:5f:ea:02:
f2:c4:ac:34:dd:94:94:53:91:db:89:49:43:f1:30:
e9:ab:73:7c:9f:11:ae:a1:a1:35:6e:e2:a7:fc:b7:
fe:e9:41:0a:52:d4:b5:43:bb:d7:58:9a:d6:f9:00:
d8:1e:bd:6a:fe:36:cd:5e:12:8d:db:de:4a:13:0c:
5b:4c:54:ba:b2:19:75:0d:09:a4:5b:d9:a6:01:ea:
8c:0f:6e:a9:82:76:b7:98:5b:b3:9f:cb:df:38:61:
32:12:b4:28:39:c7:8e:13:3f:3c:dd:0c:93:02:b6:
49:96:22:a8:71:2e:73:86:45:3c:c3:b2:24:30:a9:
a8:3f:28:ad:46:3e:3d:5a:0c:71:3e:85:66:b5:ec:
3f:3c:e9:51:81:f6:7f:08:a6:e5:b1:89:23:ca:f5:
4a:9d:f8:50:19:6e:62:a9:f4:12:bc:00:90:f3:78:
93:9e:ae:57:a8:17:ad:40:16:9e:b9:e7:0f:2d:07:
21:e0:dc:a8:fa:ea:2a:04:9a:6c:8a:6e:13:07:0f:
31:11:de:47:78:69:08:5e:5c:f8:43:9f:3e:8f:db:
a9:49:19:3d:fd:a0:9b:ac:bb:93:e1:c5:99:53:0c:
7b:73
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
CB:03:95:87:55:23:DD:00:17:66:DC:12:C4:7C:00:71:B0:F3:CF:02
X509v3 Authority Key Identifier:
keyid:FF:87:E0:AB:03:2B:0C:05:EB:5E:74:CC:2C:08:69:8D:D3:24:D9:63
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/_4fgqwMrDAXrXnTMLAhpjdMk2WM.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/33/1df18e-6c4d-434b-8e31-71eb95f50e5b/1/ywOVh1Uj3QAXZtwSxHwAcbDzzwI.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/33/1df18e-6c4d-434b-8e31-71eb95f50e5b/1/_4fgqwMrDAXrXnTMLAhpjdMk2WM.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
109.122.197.0/24
Signature Algorithm: sha256WithRSAEncryption
16:b9:06:76:48:8a:1b:e0:e9:6a:c6:f2:9e:9d:a0:3d:64:d4:
bf:31:38:1b:5e:76:1b:7e:c5:03:34:df:83:1c:2f:72:ae:b6:
02:f7:3c:29:3f:61:7b:57:fe:b6:e7:2d:54:26:07:e1:b1:5b:
c6:14:b3:91:8b:30:9a:57:19:32:40:bb:94:f6:99:16:c4:46:
33:5f:00:45:65:d2:74:e1:31:f7:a5:f5:5a:93:86:d9:39:14:
68:a7:2f:26:75:44:4f:c4:b1:78:d3:c9:8c:98:86:73:2b:f8:
8d:ce:2b:e2:be:86:a0:7d:02:7f:19:66:b4:67:7a:2e:f0:75:
e3:8c:d3:62:79:0f:fc:17:4b:0e:3f:29:8f:de:98:2a:bc:66:
bf:b3:94:1b:3a:6a:39:25:c3:33:93:ce:2c:86:53:5c:8f:af:
3d:c7:f6:f5:01:a0:c8:02:63:a2:0c:d1:b0:16:0d:f8:40:c1:
5f:da:bd:94:d9:a9:7d:51:fb:23:f0:76:10:39:71:7b:a2:c3:
3b:2f:02:3f:fa:19:fa:3a:48:29:b4:3f:3c:5d:93:4f:18:af:
77:72:2b:ac:6f:57:0d:24:db:23:79:f8:0c:0d:83:54:e1:d6:
15:3b:74:0e:c6:9e:dd:33:a6:2b:2d:aa:8d:a0:2a:2f:bb:4f:
9b:4f:e1:03
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Feb 16 20:43:30 2025 by rpki-client