Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/6c/1c60ac-ba3f-440b-868b-ea12ef9422ec/1/bJcXgZ5TuCxsFHQDSwu6zYnRtf4.roa
File: bJcXgZ5TuCxsFHQDSwu6zYnRtf4.roa (raw, json)
Hash identifier: uYjACjDtH6+yAhI5oBSOImsRYLdW08kwidjqJFY2X+A=
Subject key identifier: 6C:97:17:81:9E:53:B8:2C:6C:14:74:03:4B:0B:BA:CD:89:D1:B5:FE
Certificate issuer: /CN=7222c5ab7db3dd3966192faafe07f3115b0c8ee5
Certificate serial: 018DF09710AA1C49D897172434DE568AEE4B
Authority key identifier: 72:22:C5:AB:7D:B3:DD:39:66:19:2F:AA:FE:07:F3:11:5B:0C:8E:E5
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/ciLFq32z3TlmGS-q_gfzEVsMjuU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/6c/1c60ac-ba3f-440b-868b-ea12ef9422ec/1/bJcXgZ5TuCxsFHQDSwu6zYnRtf4.roa
Signing time: Wed 28 Feb 2024 16:40:48 +0000
ROA not before: Wed 28 Feb 2024 16:40:48 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 9009
IP address blocks: 109.122.204.0/24 maxlen: 24
Validation: Failed, RFC 3779 resource not subset of parent's resources
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8d:f0:97:10:aa:1c:49:d8:97:17:24:34:de:56:8a:ee:4b
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=7222c5ab7db3dd3966192faafe07f3115b0c8ee5
Validity
Not Before: Feb 28 16:40:48 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=6c9717819e53b82c6c1474034b0bbacd89d1b5fe
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:82:fd:a0:ef:8a:a2:f4:6d:59:97:9e:df:4a:64:
8e:16:4a:bd:97:e9:ff:5d:d2:b5:26:7f:b1:48:55:
04:40:fa:0e:af:ea:fc:9b:35:e2:be:20:4e:16:f4:
49:72:ba:01:d2:89:5b:88:ac:4c:75:d1:99:bc:f1:
e1:74:3d:c6:60:02:3c:34:8a:71:d5:3d:5b:e2:8c:
c6:bc:a3:4f:92:fa:8e:55:07:3a:43:7b:0e:d5:d0:
fe:21:de:94:e1:59:e0:e0:cc:d3:9e:b5:d1:50:57:
31:13:9d:a2:00:71:93:dc:74:3f:c5:e3:c4:a4:80:
59:e4:3e:c2:04:4f:2d:a0:1a:27:f5:30:f9:a9:f4:
be:35:42:a3:8e:67:2c:c9:53:1c:4e:94:16:dc:c6:
93:46:77:5a:1f:1f:3d:37:4e:cb:59:6c:33:b1:32:
75:98:67:ba:31:8a:4e:c6:a0:8c:08:1f:20:2f:83:
2b:7b:3c:57:b0:a6:7f:9f:c9:0f:0d:3b:a9:5f:91:
c3:1c:2d:3d:0a:8f:e0:99:c0:61:ab:71:ec:b1:72:
60:fb:93:0f:05:e8:49:6e:77:8f:17:e6:60:29:0a:
5d:87:66:cf:b4:13:45:52:3a:0b:57:37:65:b1:a2:
dc:19:70:f9:b9:10:ea:b2:58:80:16:ec:df:40:6a:
be:87
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
6C:97:17:81:9E:53:B8:2C:6C:14:74:03:4B:0B:BA:CD:89:D1:B5:FE
X509v3 Authority Key Identifier:
keyid:72:22:C5:AB:7D:B3:DD:39:66:19:2F:AA:FE:07:F3:11:5B:0C:8E:E5
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ciLFq32z3TlmGS-q_gfzEVsMjuU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/6c/1c60ac-ba3f-440b-868b-ea12ef9422ec/1/bJcXgZ5TuCxsFHQDSwu6zYnRtf4.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/6c/1c60ac-ba3f-440b-868b-ea12ef9422ec/1/ciLFq32z3TlmGS-q_gfzEVsMjuU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
109.122.204.0/24
Signature Algorithm: sha256WithRSAEncryption
b2:25:82:c3:b8:e7:91:74:0a:6b:c9:b9:e5:f3:56:98:47:d9:
3e:1d:fc:cc:61:4a:45:5c:e2:37:c1:e6:1a:9a:ec:b9:79:76:
28:fe:d9:ce:b0:fa:d7:aa:a8:2f:0d:9b:a3:42:27:19:4a:a5:
e2:71:ac:89:19:41:e1:b2:32:06:81:c1:db:c1:e2:62:43:ef:
51:0f:e2:68:91:5f:af:f0:8d:83:b5:2d:8a:54:51:01:94:bb:
e8:f4:54:dc:dc:c5:4e:08:78:a4:59:75:f4:f8:c8:79:a1:b5:
19:3a:40:45:f7:5a:cb:19:a8:ec:af:6f:3d:4c:ec:d0:74:ea:
32:10:1c:de:88:6c:03:2f:27:83:87:d9:e4:85:b2:c5:61:f0:
2c:4c:b4:fd:6d:8b:6e:5d:b9:dc:5b:ac:d4:e9:a5:67:00:51:
20:d0:ec:73:02:96:37:19:82:4b:14:39:a7:d6:1b:9d:ec:45:
bb:57:b3:04:5c:38:44:3f:cd:43:bc:88:06:f6:19:2b:7e:8c:
2e:b6:ce:56:77:81:8d:d7:51:9d:cf:26:75:e2:86:64:bd:2f:
f7:65:c4:a1:c8:2f:dc:a0:42:b8:8e:47:f5:4d:05:e1:11:60:
30:91:0e:88:ce:ba:6d:7d:4a:1d:33:66:81:a9:d9:7e:63:46:
56:3b:1c:ab
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 21 07:53:00 2025 by rpki-client