Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/36/c800c9-51b5-4589-9260-063fcdd3a057/1/rCS9Eluhn77-HJSU9IQJJ3Cr1Eg.roa
File: rCS9Eluhn77-HJSU9IQJJ3Cr1Eg.roa (raw, json)
Hash identifier: bNffksvVuYRr7eG78sqHf7am0a+qc40HrkesHgwIITw=
Subject key identifier: AC:24:BD:12:5B:A1:9F:BE:FE:1C:94:94:F4:84:09:27:70:AB:D4:48
Certificate issuer: /CN=7c3c39d1899e699bf5177418ee381489edff4380
Certificate serial: 1B372E99
Authority key identifier: 7C:3C:39:D1:89:9E:69:9B:F5:17:74:18:EE:38:14:89:ED:FF:43:80
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/fDw50YmeaZv1F3QY7jgUie3_Q4A.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/36/c800c9-51b5-4589-9260-063fcdd3a057/1/rCS9Eluhn77-HJSU9IQJJ3Cr1Eg.roa
Signing time: Mon 04 Apr 2022 09:33:17 +0000
ROA not before: Mon 04 Apr 2022 09:33:17 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 1239
IP address blocks: 109.246.240.0/20 maxlen: 24
109.246.144.0/20 maxlen: 24
185.27.178.0/23 maxlen: 24
109.246.160.0/20 maxlen: 24
185.18.123.0/24 maxlen: 24
109.246.176.0/20 maxlen: 24
185.18.122.0/24 maxlen: 24
109.246.192.0/20 maxlen: 24
109.246.208.0/20 maxlen: 24
109.246.0.0/17 maxlen: 24
109.246.224.0/20 maxlen: 24
109.246.128.0/20 maxlen: 24
Validation: Failed, RFC 3779 resource not subset of parent's resources
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 456601241 (0x1b372e99)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=7c3c39d1899e699bf5177418ee381489edff4380
Validity
Not Before: Apr 4 09:33:17 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=ac24bd125ba19fbefe1c9494f484092770abd448
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:f2:09:96:7a:da:67:71:0a:d7:d0:86:31:98:e1:
bf:8e:0f:76:e2:98:70:b6:7b:7a:dc:09:df:8f:7e:
9f:e3:c6:46:c3:72:54:f1:ec:7d:3a:75:ef:a8:b7:
4c:6a:61:9b:34:a7:fd:5e:3c:ea:36:7a:ab:87:5d:
aa:8c:a5:f3:16:dc:2f:5f:ca:00:1f:68:b1:50:f5:
88:7f:df:c7:6b:8c:25:22:39:1e:41:eb:b9:b6:c8:
69:85:0e:57:a9:5e:52:65:0f:b8:f5:f4:46:3c:28:
cd:5a:c5:71:78:23:9d:9d:a5:6a:8b:07:89:63:d1:
88:65:4b:09:0a:0f:b8:62:83:c6:14:40:80:78:b1:
6a:53:82:63:33:d4:c8:63:84:da:67:e8:f8:f1:57:
37:be:10:73:0d:67:50:4a:34:99:2d:5e:dc:d7:13:
ea:48:a8:e2:ad:fb:40:bf:0f:11:1d:07:fd:60:b6:
73:e6:22:39:cf:a1:db:2b:b7:e0:59:f7:0c:fa:e5:
14:85:c3:6b:22:23:39:ba:d5:7a:39:21:5b:f3:7a:
b7:40:3d:5b:11:47:a7:9c:f3:e3:94:0c:b0:cc:f3:
f3:f8:cd:1e:55:49:3a:5e:9a:35:88:08:2e:bc:e2:
f9:bd:c7:a0:b3:79:c6:10:01:f9:f2:97:9f:17:62:
4a:81
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
AC:24:BD:12:5B:A1:9F:BE:FE:1C:94:94:F4:84:09:27:70:AB:D4:48
X509v3 Authority Key Identifier:
keyid:7C:3C:39:D1:89:9E:69:9B:F5:17:74:18:EE:38:14:89:ED:FF:43:80
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/fDw50YmeaZv1F3QY7jgUie3_Q4A.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/36/c800c9-51b5-4589-9260-063fcdd3a057/1/rCS9Eluhn77-HJSU9IQJJ3Cr1Eg.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/36/c800c9-51b5-4589-9260-063fcdd3a057/1/fDw50YmeaZv1F3QY7jgUie3_Q4A.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
109.246.0.0/16
185.18.122.0/23
185.27.178.0/23
Signature Algorithm: sha256WithRSAEncryption
6a:00:8b:64:c4:1f:51:14:d1:36:b7:02:50:02:33:75:ed:c6:
3f:ca:22:65:5b:13:d4:e7:5c:41:af:b3:90:37:d9:ee:1f:50:
98:8b:a9:c9:e8:f4:28:6d:1a:5c:ab:23:c2:80:ea:9f:3f:ba:
30:20:ca:4f:21:52:89:26:54:a5:67:4c:15:0d:07:4c:7d:ab:
a4:b2:d7:61:43:3d:47:e5:20:29:4b:4a:1e:b1:1b:80:ef:93:
64:e1:b1:69:d6:15:c6:74:19:88:84:34:0b:bf:0e:52:9c:4b:
8b:14:70:6e:a2:5c:6f:76:76:a2:9c:5e:8a:61:84:d3:af:52:
82:9e:9c:2c:b6:7d:f0:ab:3a:97:52:c3:70:41:49:b5:ae:42:
4d:8a:81:e8:e1:c9:5e:36:60:3e:97:70:4d:ff:35:17:b4:1f:
45:e2:c4:93:1b:b4:93:99:4a:f1:6e:ee:5a:b1:70:80:7a:6b:
a9:d4:3f:a9:a2:7f:a0:4c:db:0d:7b:a9:e1:f6:36:c5:60:10:
fb:c9:a3:6e:b4:a6:fa:25:73:4b:8b:9f:b9:e0:36:fe:8c:3b:
72:ec:8f:28:56:6e:33:d1:bb:56:f9:88:94:0b:5b:5c:32:c9:
77:96:08:11:34:bb:39:31:ae:f5:12:60:d8:41:aa:3e:6b:b1:
17:7a:be:09
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 19 23:50:18 2023 by rpki-client on console-ams.rpki-client.org