Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/72/c2e16e-ab68-4429-96ee-002f26e3b898/1/flh4zH5Hgs24IyiAXY8S8EUY78o.roa
File: flh4zH5Hgs24IyiAXY8S8EUY78o.roa (raw, json)
Hash identifier: dQKLPJ5klZHQDq2Wqk+WIoFrTkRSXQj8V5gDAElHt14=
Subject key identifier: 7E:58:78:CC:7E:47:82:CD:B8:23:28:80:5D:8F:12:F0:45:18:EF:CA
Certificate issuer: /CN=2f5cab8a09a9fde23c9635f8e164aef09e17948c
Certificate serial: 0C32B9
Authority key identifier: 2F:5C:AB:8A:09:A9:FD:E2:3C:96:35:F8:E1:64:AE:F0:9E:17:94:8C
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/L1yrigmp_eI8ljX44WSu8J4XlIw.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/72/c2e16e-ab68-4429-96ee-002f26e3b898/1/flh4zH5Hgs24IyiAXY8S8EUY78o.roa
Signing time: Fri 25 Mar 2022 18:32:15 +0000
ROA not before: Fri 25 Mar 2022 18:32:15 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 35830
IP address blocks: 109.236.55.0/24 maxlen: 24
Validation: Failed, RFC 3779 resource not subset of parent's resources
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 799417 (0xc32b9)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2f5cab8a09a9fde23c9635f8e164aef09e17948c
Validity
Not Before: Mar 25 18:32:15 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=7e5878cc7e4782cdb82328805d8f12f04518efca
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a9:9d:c7:cd:4d:67:14:1b:8b:e2:66:fe:34:12:
43:26:5a:21:53:29:43:02:e1:10:81:bd:5b:7f:21:
98:b9:8b:f1:17:06:e1:be:20:ec:eb:25:99:fd:97:
4b:64:e3:02:c6:0a:22:ff:a1:0c:dc:68:63:e0:6b:
5b:ab:ef:fa:7d:06:39:1d:1f:7b:a3:25:71:2b:5e:
4b:68:8e:86:46:4d:61:7d:97:bc:77:42:c4:ba:c2:
a9:ae:3f:f0:20:30:e0:94:36:55:3c:8a:f8:d0:92:
9e:f2:a9:b5:eb:0e:4c:c9:b1:c9:54:a9:79:56:e7:
7c:86:89:a1:20:62:4f:03:96:a2:30:ea:0e:2a:5c:
50:68:d6:04:62:7f:f1:58:57:1e:27:e4:f1:41:f6:
35:bb:09:01:3b:a0:9f:a9:e3:e0:78:e8:d3:5c:3b:
1e:57:c3:a7:96:7e:2b:dc:d4:21:6c:92:e1:a2:fd:
f9:96:c5:b8:93:05:03:fa:d1:57:36:49:4a:fc:37:
74:46:07:70:f2:31:17:37:c1:fc:81:0d:18:d7:7f:
fb:a4:61:48:cf:63:50:1d:9c:6d:5a:5e:7a:07:f9:
84:7f:65:e6:45:89:25:23:b1:15:24:39:e1:f5:93:
fa:dc:21:53:f4:7c:55:a0:60:2e:f3:c8:f4:5e:4d:
f8:95
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
7E:58:78:CC:7E:47:82:CD:B8:23:28:80:5D:8F:12:F0:45:18:EF:CA
X509v3 Authority Key Identifier:
keyid:2F:5C:AB:8A:09:A9:FD:E2:3C:96:35:F8:E1:64:AE:F0:9E:17:94:8C
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/L1yrigmp_eI8ljX44WSu8J4XlIw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/72/c2e16e-ab68-4429-96ee-002f26e3b898/1/flh4zH5Hgs24IyiAXY8S8EUY78o.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/72/c2e16e-ab68-4429-96ee-002f26e3b898/1/L1yrigmp_eI8ljX44WSu8J4XlIw.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
109.236.55.0/24
Signature Algorithm: sha256WithRSAEncryption
bf:64:91:bb:5d:54:45:7b:5c:4a:a3:67:53:12:8f:69:82:54:
ad:3e:2a:94:3a:23:66:c2:00:24:07:75:38:b8:50:cf:4a:63:
3b:e2:ce:78:cf:6f:f3:8c:37:bf:51:9b:5e:bc:2f:36:72:27:
c5:55:9f:44:c8:3a:b3:00:60:f2:dc:b3:63:09:1c:6d:4c:9a:
ad:ee:82:6a:3a:44:9a:ad:60:f9:c0:66:bd:5c:d0:41:7d:13:
9e:d4:a1:2f:d8:70:11:37:fb:bf:bf:29:7f:7f:b8:59:f1:5e:
ba:f8:8b:b9:8d:d2:f2:5d:94:ae:7d:3f:84:db:ed:e5:46:31:
5c:52:a1:02:38:dd:59:e7:f0:e4:8f:55:6d:7f:01:92:a4:a2:
18:9b:32:ff:42:1f:bc:ed:43:43:c9:cc:dc:ac:0c:e6:ae:d9:
2b:42:a8:2b:69:12:8b:25:d4:d1:e3:ac:13:bf:2b:ca:55:b0:
33:d5:d5:1c:2d:89:a6:23:b5:0f:a1:88:9d:f7:04:24:ff:94:
80:8e:06:74:5b:fe:0c:f1:f8:62:14:d1:ff:7f:a1:3b:33:cd:
94:1e:03:02:ae:7b:2e:c6:97:8d:ad:df:f5:b7:27:6d:c7:31:
32:6d:fb:13:f4:e3:d4:45:9a:2b:7f:b2:0c:d9:16:89:25:e4:
53:ac:88:94
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jul 20 00:01:32 2023 by rpki-client on console-ams.rpki-client.org