Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/42/41f6f5-cef0-4a57-8e47-0a85986208a9/1/ljpfE_B3EouxlqqSpNi-7oZSaxM.roa
File: ljpfE_B3EouxlqqSpNi-7oZSaxM.roa (raw, json)
Hash identifier: X693EXecd8+weuNj6yBybmKbUGXxjD92fdkdqp+PJgQ=
Subject key identifier: 96:3A:5F:13:F0:77:12:8B:B1:96:AA:92:A4:D8:BE:EE:86:52:6B:13
Certificate issuer: /CN=5f51bcd89eb7f5b3ab08806ef51a7c2f6eb98efc
Certificate serial: 018E43F5CA1BA125E46CCA044380E8E4D27A
Authority key identifier: 5F:51:BC:D8:9E:B7:F5:B3:AB:08:80:6E:F5:1A:7C:2F:6E:B9:8E:FC
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/X1G82J639bOrCIBu9Rp8L265jvw.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/42/41f6f5-cef0-4a57-8e47-0a85986208a9/1/ljpfE_B3EouxlqqSpNi-7oZSaxM.roa
Signing time: Fri 15 Mar 2024 21:12:45 +0000
ROA not before: Fri 15 Mar 2024 21:12:45 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 50259
IP address blocks: 109.95.60.0/24 maxlen: 24
109.95.61.0/24 maxlen: 24
Validation: Failed, RFC 3779 resource not subset of parent's resources
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8e:43:f5:ca:1b:a1:25:e4:6c:ca:04:43:80:e8:e4:d2:7a
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=5f51bcd89eb7f5b3ab08806ef51a7c2f6eb98efc
Validity
Not Before: Mar 15 21:12:45 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=963a5f13f077128bb196aa92a4d8beee86526b13
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b7:cd:82:85:47:36:f7:62:f2:70:c7:9f:7c:11:
a6:3d:75:a6:36:61:fa:35:2f:cc:ee:8d:49:6d:91:
58:c6:1c:74:e4:38:b8:0a:ae:ba:ce:0b:9e:71:ea:
1f:4d:01:82:9b:85:c8:d4:bf:68:be:7a:99:97:c4:
f3:ff:2b:f1:00:33:4f:fa:fe:35:15:80:c6:d1:34:
73:44:97:28:08:69:66:38:a6:f2:cf:ea:1f:5c:7f:
d9:6d:7d:9f:49:d8:c4:86:84:71:48:52:bf:8a:17:
9a:56:e9:69:07:81:c5:23:94:9a:d9:5b:f9:ad:4f:
c2:39:66:b4:1a:7e:df:c5:c8:8c:c0:bf:5b:a3:6e:
ef:95:db:85:7e:5f:7d:1a:52:a4:e9:78:1e:42:ec:
f0:ec:88:45:e2:93:b9:11:ad:66:7b:e7:0d:03:a9:
41:93:57:35:be:d2:c2:24:31:ba:ed:ae:63:5c:70:
8e:46:e5:d5:50:f4:89:bb:f5:4b:0f:af:cc:0e:21:
6e:4b:c4:df:2f:fe:4b:d1:c7:eb:c4:8b:c6:e8:e1:
92:23:01:d6:b2:06:b5:bf:8f:19:18:36:ff:31:8c:
42:5a:a7:b3:2b:ab:45:5c:16:df:75:13:13:8d:33:
ac:7c:9a:b4:0e:cc:e0:dd:40:c1:67:66:77:6d:96:
b1:29
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
96:3A:5F:13:F0:77:12:8B:B1:96:AA:92:A4:D8:BE:EE:86:52:6B:13
X509v3 Authority Key Identifier:
keyid:5F:51:BC:D8:9E:B7:F5:B3:AB:08:80:6E:F5:1A:7C:2F:6E:B9:8E:FC
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/X1G82J639bOrCIBu9Rp8L265jvw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/42/41f6f5-cef0-4a57-8e47-0a85986208a9/1/ljpfE_B3EouxlqqSpNi-7oZSaxM.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/42/41f6f5-cef0-4a57-8e47-0a85986208a9/1/X1G82J639bOrCIBu9Rp8L265jvw.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
109.95.60.0/23
Signature Algorithm: sha256WithRSAEncryption
4f:30:3f:c8:df:a1:50:48:ef:30:33:ee:08:58:6a:45:8b:cb:
91:78:e2:5c:c1:7d:92:51:af:cd:e6:c8:03:46:cd:aa:e1:1f:
75:78:bd:8b:62:86:05:c8:56:2d:8f:ca:18:f9:11:71:6a:b7:
b2:69:36:c7:2c:a8:74:83:83:6a:c3:b9:50:58:8a:fe:e1:09:
8c:f2:49:bc:18:93:b0:36:98:92:dc:98:bc:01:4f:d2:f7:80:
78:2a:2f:73:1f:c7:30:30:18:56:f5:d0:fb:f4:74:94:ab:5b:
37:3a:1a:f8:a8:25:87:b7:ba:b6:36:8c:01:b5:47:9e:0a:16:
23:5c:c7:7d:35:27:2f:3b:b8:18:06:0a:f6:94:1f:3b:c1:2a:
7e:13:3c:b6:d9:31:da:48:92:35:9d:a4:d5:f8:fc:f5:25:3e:
40:07:da:0e:69:8f:ed:98:83:48:04:bd:26:e6:70:5f:8e:96:
4d:a1:06:69:6a:5c:32:25:99:15:df:38:bf:f5:50:c9:be:ee:
f9:82:6d:a8:49:e6:8e:2c:b6:d1:5c:50:fe:56:d3:cf:11:48:
06:c0:0f:72:d6:e8:21:f2:79:f9:d9:fc:38:58:74:f9:88:09:
39:73:29:ca:ea:ec:ce:7e:4b:89:71:cf:e3:9c:62:f2:ec:3c:
93:61:d8:1a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Feb 17 08:15:24 2025 by rpki-client