Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/36/c800c9-51b5-4589-9260-063fcdd3a057/1/AJNX2iKCRqLz6Qqu6708asP9h2E.roa
File: AJNX2iKCRqLz6Qqu6708asP9h2E.roa (raw, json)
Hash identifier: ar2bbLooiD9U7FI66S1EyfFynuZiB0xnqkn8zhxgivQ=
Subject key identifier: 00:93:57:DA:22:82:46:A2:F3:E9:0A:AE:EB:BD:3C:6A:C3:FD:87:61
Certificate issuer: /CN=7c3c39d1899e699bf5177418ee381489edff4380
Certificate serial: 1BE26024
Authority key identifier: 7C:3C:39:D1:89:9E:69:9B:F5:17:74:18:EE:38:14:89:ED:FF:43:80
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/fDw50YmeaZv1F3QY7jgUie3_Q4A.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/36/c800c9-51b5-4589-9260-063fcdd3a057/1/AJNX2iKCRqLz6Qqu6708asP9h2E.roa
Signing time: Wed 15 Jun 2022 15:05:44 +0000
ROA not before: Wed 15 Jun 2022 15:05:44 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 1239
IP address blocks: 109.246.240.0/20 maxlen: 24
109.246.144.0/20 maxlen: 24
185.27.178.0/23 maxlen: 24
109.246.160.0/20 maxlen: 24
109.246.176.0/20 maxlen: 24
109.246.192.0/20 maxlen: 24
109.246.208.0/20 maxlen: 24
109.246.224.0/20 maxlen: 24
109.246.128.0/20 maxlen: 24
109.246.128.0/17 maxlen: 24
Validation: Failed, RFC 3779 resource not subset of parent's resources
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 467820580 (0x1be26024)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=7c3c39d1899e699bf5177418ee381489edff4380
Validity
Not Before: Jun 15 15:05:44 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=009357da228246a2f3e90aaeebbd3c6ac3fd8761
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bc:f3:87:77:e9:f2:cc:62:08:91:41:03:38:ab:
96:4e:ec:dd:67:d5:fa:91:61:dc:14:8f:d4:9f:f3:
06:7a:72:1c:ad:b1:5a:18:0f:96:88:0c:ad:09:1a:
c3:0f:fa:71:01:72:c8:1b:52:76:4a:f6:5c:ba:bc:
aa:bc:40:04:70:8f:08:f8:6b:d9:9c:69:6c:e1:29:
2f:71:42:88:14:86:de:27:1d:57:86:25:9d:76:90:
c6:d8:68:81:37:16:85:49:16:a7:2f:9d:c1:ed:c9:
b6:67:16:3d:07:4a:b7:15:50:31:17:cc:82:cc:f0:
14:2f:4e:7d:9f:18:21:7c:b3:df:f3:fc:f7:10:4b:
6b:08:5e:40:ad:a9:4d:12:4c:18:9d:ce:59:6a:5e:
21:df:74:0d:6e:d3:83:32:dd:02:87:e9:e3:40:0a:
6b:8e:2f:d7:c3:07:ba:ac:54:e7:b9:75:db:d5:6a:
f3:18:c7:e7:f4:af:ba:bc:4c:29:b7:39:0a:0c:2d:
05:32:a9:6e:4f:bd:cf:45:ef:cb:67:bd:d1:fc:de:
ec:8f:6b:1f:ae:c8:35:49:d7:f1:61:6e:b0:5e:27:
b3:bd:f7:eb:ff:2d:53:41:2b:92:ff:26:cc:4e:b8:
00:87:ea:56:fa:d5:97:36:59:a1:48:0b:11:57:5e:
55:b1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
00:93:57:DA:22:82:46:A2:F3:E9:0A:AE:EB:BD:3C:6A:C3:FD:87:61
X509v3 Authority Key Identifier:
keyid:7C:3C:39:D1:89:9E:69:9B:F5:17:74:18:EE:38:14:89:ED:FF:43:80
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/fDw50YmeaZv1F3QY7jgUie3_Q4A.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/36/c800c9-51b5-4589-9260-063fcdd3a057/1/AJNX2iKCRqLz6Qqu6708asP9h2E.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/36/c800c9-51b5-4589-9260-063fcdd3a057/1/fDw50YmeaZv1F3QY7jgUie3_Q4A.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
109.246.128.0/17
185.27.178.0/23
Signature Algorithm: sha256WithRSAEncryption
86:8b:51:85:3f:19:0b:b2:f8:64:6b:30:79:39:b5:84:f7:39:
2d:fd:b1:7f:4a:86:41:b5:0c:0d:e5:1f:55:13:54:26:b3:4a:
fa:31:cf:83:4d:01:a9:a5:9b:f1:be:6e:95:77:07:a5:0c:0d:
dd:3a:36:0b:c1:54:20:f1:78:e7:12:7f:2a:9a:62:c7:40:eb:
31:ea:12:da:5b:55:44:75:37:f3:91:86:7d:c1:79:70:c0:7c:
60:75:3b:64:83:cd:f2:bc:ce:c7:5f:b8:e2:cd:df:17:cc:4e:
02:3f:b6:1f:07:33:63:02:70:12:a0:d5:08:98:6b:0e:61:01:
6b:a7:55:7f:b6:50:a5:e8:a4:a3:34:11:3f:fc:e2:36:f0:09:
d0:b4:1a:f7:3c:1c:de:72:9c:c2:55:4d:dd:6b:5c:1f:3a:22:
ac:b4:9e:97:a7:81:45:81:24:9f:11:e9:c2:cf:6a:b4:7a:00:
5c:d5:93:61:8b:07:ae:72:e6:53:ee:3e:0f:16:37:91:ab:e5:
51:f3:9e:ac:2e:91:07:d1:dc:c5:98:6b:32:5d:66:90:1e:a1:
a0:91:45:96:80:b3:06:42:0c:d8:a1:fe:9b:46:ca:57:1f:ff:
7f:80:32:6f:ce:e0:2b:d9:e6:2b:a0:b6:b6:c1:8d:27:85:60:
78:8e:9a:e1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 19 23:50:18 2023 by rpki-client on console-ams.rpki-client.org