Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/33/1df18e-6c4d-434b-8e31-71eb95f50e5b/1/zbMeBwh8NMr455ukJ5OWYW9pELs.roa
File: zbMeBwh8NMr455ukJ5OWYW9pELs.roa (raw, json)
Hash identifier: Lz2CEcYszBj1POK19mwwVmAPkDMUIUsV4xuRM6xOsS4=
Subject key identifier: CD:B3:1E:07:08:7C:34:CA:F8:E7:9B:A4:27:93:96:61:6F:69:10:BB
Certificate issuer: /CN=ff87e0ab032b0c05eb5e74cc2c08698dd324d963
Certificate serial: 0188F934A4506546EC494CC22EEB3D19A399
Authority key identifier: FF:87:E0:AB:03:2B:0C:05:EB:5E:74:CC:2C:08:69:8D:D3:24:D9:63
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/_4fgqwMrDAXrXnTMLAhpjdMk2WM.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/33/1df18e-6c4d-434b-8e31-71eb95f50e5b/1/zbMeBwh8NMr455ukJ5OWYW9pELs.roa
Signing time: Mon 26 Jun 2023 19:35:56 +0000
ROA not before: Mon 26 Jun 2023 19:35:56 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 834
IP address blocks: 109.122.212.0/24 maxlen: 24
109.122.215.0/24 maxlen: 24
Validation: Failed, RFC 3779 resource not subset of parent's resources
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:88:f9:34:a4:50:65:46:ec:49:4c:c2:2e:eb:3d:19:a3:99
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=ff87e0ab032b0c05eb5e74cc2c08698dd324d963
Validity
Not Before: Jun 26 19:35:56 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=cdb31e07087c34caf8e79ba4279396616f6910bb
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8d:db:6f:0f:9a:34:63:a1:4e:87:fc:98:84:33:
68:08:f9:d5:e1:00:6e:81:81:ef:98:bf:4d:e8:3b:
bf:15:79:09:e2:eb:d1:76:6a:0b:a1:3a:12:59:6d:
31:09:3c:e1:18:57:e2:65:5f:83:79:00:d4:c3:9e:
df:df:7f:0e:d5:e9:50:03:63:2b:a0:35:2a:d8:a0:
f4:7c:1e:41:fe:df:46:8d:08:f4:8e:15:57:85:92:
c4:5e:79:ab:4c:89:d5:d3:cf:80:a6:29:c7:df:69:
98:65:12:ec:61:f8:73:f7:19:7b:55:71:18:8d:62:
b0:21:4e:4a:64:e4:b3:26:15:29:fb:76:ca:8a:50:
b2:d7:c8:7d:7b:c8:10:8d:e0:93:08:33:77:1f:da:
26:3e:39:7d:d4:bc:0e:d3:27:a7:c7:82:f7:ff:6a:
6b:83:5e:d5:a2:c5:85:37:d4:3c:ce:64:c1:ae:a8:
bd:ee:2c:b1:1d:db:0a:56:9b:d9:38:fb:d7:9a:6d:
53:58:9a:73:b7:7f:43:0f:27:c5:28:bc:a3:0e:fb:
ad:4a:b2:57:5c:ef:57:d7:0f:c4:c0:47:7a:58:93:
20:7b:f2:1a:d7:9c:fe:74:43:ca:46:6d:f9:e2:a3:
e4:1d:96:2a:a7:f8:ab:9f:55:9f:0c:b1:dc:97:4c:
0c:19
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
CD:B3:1E:07:08:7C:34:CA:F8:E7:9B:A4:27:93:96:61:6F:69:10:BB
X509v3 Authority Key Identifier:
keyid:FF:87:E0:AB:03:2B:0C:05:EB:5E:74:CC:2C:08:69:8D:D3:24:D9:63
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/_4fgqwMrDAXrXnTMLAhpjdMk2WM.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/33/1df18e-6c4d-434b-8e31-71eb95f50e5b/1/zbMeBwh8NMr455ukJ5OWYW9pELs.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/33/1df18e-6c4d-434b-8e31-71eb95f50e5b/1/_4fgqwMrDAXrXnTMLAhpjdMk2WM.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
109.122.212.0/24
109.122.215.0/24
Signature Algorithm: sha256WithRSAEncryption
50:50:79:e0:75:c1:3d:ff:b6:b3:e9:b4:48:76:ca:4d:07:3f:
31:14:f6:1c:38:19:60:34:3e:cb:3a:26:93:48:13:84:32:63:
b6:fb:d5:75:82:2b:ec:62:d2:6b:b6:88:1f:8f:10:06:9c:fd:
09:1e:af:8f:a8:e1:68:2f:53:6b:a4:61:46:14:b5:dd:37:af:
be:cf:c4:0c:44:84:17:af:0a:2b:1e:6c:36:de:86:98:f7:74:
e3:3a:24:a5:8e:25:b3:e1:1f:74:c9:f2:66:c8:fc:4d:41:19:
62:3c:62:16:79:2a:d9:f4:ad:26:27:80:9e:97:d0:5f:50:c0:
27:4d:b0:90:2c:b5:38:b9:50:d1:6d:9b:3c:52:39:5d:51:e7:
cf:11:a7:74:1c:4b:eb:c1:18:a8:a9:54:f8:20:9a:cf:7d:d5:
d8:73:0d:bc:81:af:97:e7:0a:3e:65:6e:51:e5:8e:eb:38:b1:
28:1e:c7:f0:71:5c:2f:a8:bb:6c:81:d3:65:d3:6b:e7:b1:9d:
f9:3e:c4:02:94:04:35:d3:6f:36:24:5d:4f:57:69:95:a1:d8:
b2:29:45:fd:14:50:4f:f0:e8:9c:e5:ee:ab:61:2a:fe:ef:ef:
e6:de:95:83:1f:ea:55:f0:c1:f3:af:61:67:ff:a2:11:f9:e0:
f4:fa:04:20
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 19:02:05 2024 by rpki-client on console-ams.rpki-client.org