Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/2e/6d59d9-9daf-4fcb-8d05-13bcc752119a/1/aSGAcdWBKf2nWKsdWsNd14NYKu8.roa
File: aSGAcdWBKf2nWKsdWsNd14NYKu8.roa (raw, json)
Hash identifier: gJPjJTV5CgGzoXSisBCcCC1o9eIXVZaFWh26FPGwIfY=
Subject key identifier: 69:21:80:71:D5:81:29:FD:A7:58:AB:1D:5A:C3:5D:D7:83:58:2A:EF
Certificate issuer: /CN=b07ab922565e2b3e2cc63d485a55dd4fc41d357e
Certificate serial: 0184E326DF65DE31E00495A4750FD7ABD857
Authority key identifier: B0:7A:B9:22:56:5E:2B:3E:2C:C6:3D:48:5A:55:DD:4F:C4:1D:35:7E
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/sHq5IlZeKz4sxj1IWlXdT8QdNX4.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/2e/6d59d9-9daf-4fcb-8d05-13bcc752119a/1/aSGAcdWBKf2nWKsdWsNd14NYKu8.roa
Signing time: Mon 05 Dec 2022 16:38:06 +0000
ROA not before: Mon 05 Dec 2022 16:38:06 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 23470
IP address blocks: 2a12:f8c2:200::/40 maxlen: 40
Validation: Failed, RFC 3779 resource not subset of parent's resources
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:84:e3:26:df:65:de:31:e0:04:95:a4:75:0f:d7:ab:d8:57
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=b07ab922565e2b3e2cc63d485a55dd4fc41d357e
Validity
Not Before: Dec 5 16:38:06 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=69218071d58129fda758ab1d5ac35dd783582aef
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:94:dd:31:16:77:67:75:8b:18:43:eb:f9:8c:12:
68:d0:a3:fd:9f:7f:12:60:2c:a2:5c:b2:2c:22:61:
ff:72:07:3e:40:39:a5:be:ea:27:44:41:d2:d2:92:
2c:d8:40:61:db:c8:62:a9:29:a4:b7:02:f7:43:e1:
b1:3a:c6:4e:e4:f6:68:b1:92:6a:bf:a5:0e:81:84:
3e:d6:14:1a:af:c5:fe:c3:81:48:a0:f6:94:2d:21:
81:0d:5a:d6:a8:3b:33:bb:ec:36:e1:f5:8f:20:d0:
fd:5b:76:f1:bd:7e:31:f8:1a:a4:e1:ea:69:0d:be:
3e:15:8d:84:a5:f9:bf:c4:0b:c5:fb:a1:73:20:fe:
0a:49:4c:a1:ce:16:24:1f:34:f6:51:ce:a0:a1:4b:
8f:d6:dc:ce:84:fc:59:26:34:17:0d:ef:5b:07:bf:
e4:f5:31:a3:71:d0:e4:33:e7:9a:46:97:74:f0:6b:
3e:71:2b:74:0a:f4:69:18:8a:6c:38:75:5e:9e:41:
c5:ac:ef:d4:e9:5b:89:32:64:a3:76:9d:39:58:03:
ff:b3:a4:45:7d:ea:0f:a0:49:af:2e:cf:f1:d3:23:
78:c1:be:31:6b:7b:8f:06:a0:e2:ad:8f:4b:fc:8d:
04:58:60:79:9f:f0:52:1f:7e:c8:82:c0:3d:51:ca:
66:91
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
69:21:80:71:D5:81:29:FD:A7:58:AB:1D:5A:C3:5D:D7:83:58:2A:EF
X509v3 Authority Key Identifier:
keyid:B0:7A:B9:22:56:5E:2B:3E:2C:C6:3D:48:5A:55:DD:4F:C4:1D:35:7E
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/sHq5IlZeKz4sxj1IWlXdT8QdNX4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/2e/6d59d9-9daf-4fcb-8d05-13bcc752119a/1/aSGAcdWBKf2nWKsdWsNd14NYKu8.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/2e/6d59d9-9daf-4fcb-8d05-13bcc752119a/1/sHq5IlZeKz4sxj1IWlXdT8QdNX4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a12:f8c2:200::/40
Signature Algorithm: sha256WithRSAEncryption
76:2b:66:a7:4e:6f:ec:38:a5:46:b8:45:d1:ee:51:b2:99:9d:
9a:25:2b:d7:e0:59:f0:bc:76:7e:8a:c8:43:7a:e2:a2:ee:0d:
c5:36:28:ba:b5:ac:59:ba:60:40:fb:e6:00:38:2e:c9:9d:22:
ba:a7:70:95:4e:9b:60:93:91:41:1e:3f:a9:f3:60:e4:1a:4f:
39:93:79:0c:d7:0e:74:99:48:7c:5a:22:2b:29:5e:02:e2:88:
1f:ba:c7:d8:c1:57:bf:6d:04:4c:17:2f:57:65:62:4b:3b:59:
47:61:19:a0:00:cf:28:72:01:c4:50:5a:91:98:d7:3a:f7:ad:
59:2e:70:f6:5f:aa:57:99:1b:41:64:b4:5c:23:42:f1:43:82:
ef:9b:d4:18:a7:5e:85:a8:2a:8a:9b:08:ab:a5:12:c2:8b:75:
c6:7d:09:04:3d:04:06:56:b7:68:82:9c:56:40:82:3a:7a:4e:
e4:ff:d3:72:f8:47:6d:75:2e:8f:d7:9b:fe:ae:2a:3c:4b:26:
56:2d:26:ba:d4:89:9a:98:89:e6:ed:d4:81:53:31:b3:5e:fe:
ac:90:67:0c:6d:9c:54:e6:11:61:fc:ea:9d:28:f7:11:ff:b7:
f0:5f:3c:b2:4f:4c:dd:a9:93:36:be:8c:2f:12:bc:4b:98:e4:
35:30:9d:f6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 11 21:28:49 2025 by rpki-client