Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/33/1df18e-6c4d-434b-8e31-71eb95f50e5b/1/z8jsCgyMIFxtgT5ApNCmz4xb3wQ.roa
File: z8jsCgyMIFxtgT5ApNCmz4xb3wQ.roa (raw, json)
Hash identifier: nuE7iuOUYuJz3Ha0lDVAHKgrdDDgSIeOF595XrqWi+U=
Subject key identifier: CF:C8:EC:0A:0C:8C:20:5C:6D:81:3E:40:A4:D0:A6:CF:8C:5B:DF:04
Certificate issuer: /CN=ff87e0ab032b0c05eb5e74cc2c08698dd324d963
Certificate serial: 0187A866CCCE06DAD2E50239E0A28E2A865C
Authority key identifier: FF:87:E0:AB:03:2B:0C:05:EB:5E:74:CC:2C:08:69:8D:D3:24:D9:63
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/_4fgqwMrDAXrXnTMLAhpjdMk2WM.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/33/1df18e-6c4d-434b-8e31-71eb95f50e5b/1/z8jsCgyMIFxtgT5ApNCmz4xb3wQ.roa
Signing time: Sat 22 Apr 2023 09:58:41 +0000
ROA not before: Sat 22 Apr 2023 09:58:41 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 211440
IP address blocks: 109.122.206.0/24 maxlen: 24
109.122.202.0/24 maxlen: 24
109.122.212.0/24 maxlen: 24
Validation: Failed, RFC 3779 resource not subset of parent's resources
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:87:a8:66:cc:ce:06:da:d2:e5:02:39:e0:a2:8e:2a:86:5c
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=ff87e0ab032b0c05eb5e74cc2c08698dd324d963
Validity
Not Before: Apr 22 09:58:41 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=cfc8ec0a0c8c205c6d813e40a4d0a6cf8c5bdf04
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:87:69:2e:cc:87:30:9c:a6:fb:55:aa:c9:e0:7f:
73:4d:f5:de:1e:d8:20:14:9f:0d:8c:fa:04:dd:f8:
9a:aa:e0:56:0d:fe:24:11:b4:7a:c4:55:e1:c8:8d:
10:02:c3:2e:a1:a9:9b:7f:06:70:90:f6:69:ba:f3:
2e:fc:99:bf:32:35:f4:ce:22:98:d4:0b:d3:dd:3f:
12:f2:2c:c1:1c:26:9f:d0:5d:5c:00:97:3b:d5:74:
08:33:0a:90:5c:76:61:35:18:6f:06:78:70:13:07:
0f:84:bc:27:73:6f:7f:51:2a:01:f9:72:00:54:39:
e6:c0:fb:f1:f8:a9:15:69:e8:b3:24:33:79:e1:9c:
50:17:97:5e:e1:8a:6e:06:7c:e5:cb:1c:24:2e:b9:
d7:a1:f5:8e:d6:17:ff:1d:d7:73:3a:ab:a8:dc:1f:
79:58:e5:91:27:12:b3:8c:97:3b:e9:e5:b7:05:ee:
fd:12:1c:1c:45:d8:0a:17:7b:6a:53:41:b1:3f:18:
9b:99:b8:be:e4:13:b2:93:97:90:46:b1:03:25:67:
12:6a:98:2a:9c:76:d4:67:0b:5c:cb:2f:bc:41:7d:
df:dd:87:bc:34:36:a4:bd:dc:f6:87:bb:e0:fd:d0:
c6:bb:cc:e4:5d:08:d8:e1:05:a3:9c:eb:1d:89:43:
4c:2f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
CF:C8:EC:0A:0C:8C:20:5C:6D:81:3E:40:A4:D0:A6:CF:8C:5B:DF:04
X509v3 Authority Key Identifier:
keyid:FF:87:E0:AB:03:2B:0C:05:EB:5E:74:CC:2C:08:69:8D:D3:24:D9:63
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/_4fgqwMrDAXrXnTMLAhpjdMk2WM.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/33/1df18e-6c4d-434b-8e31-71eb95f50e5b/1/z8jsCgyMIFxtgT5ApNCmz4xb3wQ.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/33/1df18e-6c4d-434b-8e31-71eb95f50e5b/1/_4fgqwMrDAXrXnTMLAhpjdMk2WM.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
109.122.202.0/24
109.122.206.0/24
109.122.212.0/24
Signature Algorithm: sha256WithRSAEncryption
74:51:91:e2:96:87:a2:07:aa:52:43:82:ef:6e:7b:99:e4:ed:
58:b2:db:f0:54:dc:75:73:65:c0:0e:41:89:07:cc:f0:ba:50:
ac:58:6d:38:9a:4a:47:8f:e9:c8:82:20:21:9a:31:0a:66:ea:
c7:5b:fe:be:c6:ba:21:99:59:44:ce:ca:c5:7e:5e:a6:92:aa:
bb:ee:b0:84:c2:a3:5d:07:b5:3d:a8:ac:3d:8c:67:cd:69:e9:
c6:a4:12:21:fa:b5:4e:e7:a6:9f:05:ae:2f:a0:46:be:e1:13:
0d:4c:bb:60:e3:70:f4:dc:50:8d:7e:f4:49:7d:79:36:c3:60:
cb:fa:6d:2f:f1:d5:28:6c:a2:bb:79:35:13:f1:81:ab:24:11:
21:cf:65:12:68:43:da:c7:eb:76:02:fa:db:fb:17:f1:82:e0:
3c:66:5b:52:73:31:40:55:eb:43:f8:42:81:8f:5e:e5:1c:76:
15:1d:15:83:aa:f1:c9:d0:c0:c4:de:69:a3:8d:29:90:91:1b:
13:f2:4b:0f:03:0c:84:6d:f4:56:78:25:d1:53:ac:22:d4:1f:
2f:e1:fb:16:c5:05:8a:08:13:4e:0e:c7:7a:35:2f:c3:ea:b3:
d7:33:91:18:6c:bd:ff:6e:3a:96:ef:1b:94:34:7a:3b:cf:31:
5a:fc:35:03
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Feb 17 08:16:02 2025 by rpki-client