Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/cf/a8947f-e52c-4de1-bade-70c0a506d797/1/u8h-J_jU-k5vqR_QZYGl64wUv8A.roa
File: u8h-J_jU-k5vqR_QZYGl64wUv8A.roa (raw, json)
Hash identifier: Zvu0DHK3SnBMdZrDQqBjY52j1B9nra9hsONawn9I9Cg=
Subject key identifier: BB:C8:7E:27:F8:D4:FA:4E:6F:A9:1F:D0:65:81:A5:EB:8C:14:BF:C0
Certificate issuer: /CN=02b980c10d7110f91fff9e0eceb639d9e75b35e2
Certificate serial: 01922E2AEA6439CE13D5336A3B6B32A2E97D
Authority key identifier: 02:B9:80:C1:0D:71:10:F9:1F:FF:9E:0E:CE:B6:39:D9:E7:5B:35:E2
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/ArmAwQ1xEPkf_54OzrY52edbNeI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/cf/a8947f-e52c-4de1-bade-70c0a506d797/1/u8h-J_jU-k5vqR_QZYGl64wUv8A.roa
Signing time: Thu 26 Sep 2024 11:50:17 +0000
ROA not before: Thu 26 Sep 2024 11:50:17 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 29676
IP address blocks: 109.224.192.0/20 maxlen: 20
109.224.220.0/23 maxlen: 23
109.224.222.0/24 maxlen: 24
109.224.233.0/24 maxlen: 24
109.224.244.0/22 maxlen: 22
Validation: Failed, RFC 3779 resource not subset of parent's resources
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:92:2e:2a:ea:64:39:ce:13:d5:33:6a:3b:6b:32:a2:e9:7d
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=02b980c10d7110f91fff9e0eceb639d9e75b35e2
Validity
Not Before: Sep 26 11:50:17 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=bbc87e27f8d4fa4e6fa91fd06581a5eb8c14bfc0
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ed:36:4a:cd:44:a9:2b:06:1e:d5:e1:75:ea:79:
03:f3:81:ec:88:fb:6a:0a:1e:61:44:fd:cd:71:b0:
d2:7a:3b:76:4d:2a:90:62:ad:11:1d:c3:a3:5f:10:
46:fd:bc:c1:fa:8d:c3:da:46:ca:84:6f:55:3a:f9:
81:2b:ff:7a:ec:bd:81:e2:ec:fe:d3:6d:76:82:24:
fc:22:88:99:d6:39:f2:c9:2b:01:6a:6e:70:57:04:
06:e1:92:5c:16:60:e4:ba:7b:e8:fe:74:0b:44:e7:
c2:c9:b3:1d:81:29:98:83:51:46:73:2a:f7:04:ba:
53:4d:1b:89:fd:5d:04:ea:a7:d3:39:29:9c:05:a2:
c9:90:65:ed:5b:7b:09:c5:4e:fc:d8:01:a3:b0:2c:
31:4c:d3:3b:74:6f:b8:c9:ee:23:ea:b1:89:1a:b2:
d1:13:6d:93:8c:e6:7b:ac:05:0d:10:e1:b6:3e:6c:
64:d2:3c:5c:66:12:cb:9a:d0:82:40:fc:e8:f9:50:
98:82:9c:0d:df:50:e0:44:7f:dd:bc:51:bb:e4:03:
4e:19:20:7d:00:82:14:4c:1a:f5:12:bb:1d:61:e6:
04:b5:2c:81:94:a2:18:cd:d5:4f:b3:51:6d:ae:e2:
39:03:b5:94:d1:2e:6a:70:5e:e1:29:03:13:a5:ca:
d5:4b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
BB:C8:7E:27:F8:D4:FA:4E:6F:A9:1F:D0:65:81:A5:EB:8C:14:BF:C0
X509v3 Authority Key Identifier:
keyid:02:B9:80:C1:0D:71:10:F9:1F:FF:9E:0E:CE:B6:39:D9:E7:5B:35:E2
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ArmAwQ1xEPkf_54OzrY52edbNeI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/cf/a8947f-e52c-4de1-bade-70c0a506d797/1/u8h-J_jU-k5vqR_QZYGl64wUv8A.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/cf/a8947f-e52c-4de1-bade-70c0a506d797/1/ArmAwQ1xEPkf_54OzrY52edbNeI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
109.224.192.0/20
109.224.220.0-109.224.222.255
109.224.233.0/24
109.224.244.0/22
Signature Algorithm: sha256WithRSAEncryption
6d:9b:d0:3f:25:0d:09:05:8e:08:eb:94:29:17:b1:e6:64:fd:
c6:20:a2:ac:e4:a1:90:a9:95:51:c5:96:89:d5:63:f2:65:d7:
3b:01:27:54:2d:4a:89:55:07:b9:61:61:3c:7a:0b:60:33:71:
62:6e:38:f6:89:b5:a0:77:38:dc:29:53:9f:9a:71:c6:6b:96:
af:51:3e:5e:4f:f1:f5:63:46:c3:10:e7:26:05:ed:b3:74:f3:
93:e4:c8:43:ce:2f:0a:e5:22:c7:fe:82:0c:d6:f2:f6:33:5c:
dd:38:cb:31:f0:fb:f5:86:20:b0:15:e3:de:6d:e3:28:67:c8:
e0:6a:5e:66:b1:fe:47:da:18:f1:55:7e:3d:c2:35:75:79:05:
47:49:cb:52:9b:bf:36:91:d6:be:9b:e1:ad:de:38:85:02:a8:
42:9d:7a:ae:2d:5a:26:c1:2c:92:23:8f:c0:2e:a1:0c:47:f3:
72:05:26:d1:d9:56:be:3b:a5:4c:17:6c:23:c1:68:f3:ee:e4:
12:01:94:38:f9:ad:6f:49:99:71:a6:57:db:07:18:1a:32:68:
ee:0a:1e:48:07:94:06:9a:f7:45:41:d5:62:30:97:92:5d:3c:
f5:e2:f8:8b:5b:4e:28:24:48:54:43:33:4e:26:0d:0d:40:f2:
22:5c:6f:2a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Oct 24 16:00:44 2024 by rpki-client on console-ams.rpki-client.org