Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/2e/6d59d9-9daf-4fcb-8d05-13bcc752119a/1/dKECpQSw2MM7FUxLfLucW-1My9c.roa
File: dKECpQSw2MM7FUxLfLucW-1My9c.roa (raw, json)
Hash identifier: /ciaFKUmuWdPhpUeQZfanY3O9Ke10KXcrNsX7mew8DE=
Subject key identifier: 74:A1:02:A5:04:B0:D8:C3:3B:15:4C:4B:7C:BB:9C:5B:ED:4C:CB:D7
Certificate issuer: /CN=b07ab922565e2b3e2cc63d485a55dd4fc41d357e
Certificate serial: 5E15D2
Authority key identifier: B0:7A:B9:22:56:5E:2B:3E:2C:C6:3D:48:5A:55:DD:4F:C4:1D:35:7E
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/sHq5IlZeKz4sxj1IWlXdT8QdNX4.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/2e/6d59d9-9daf-4fcb-8d05-13bcc752119a/1/dKECpQSw2MM7FUxLfLucW-1My9c.roa
Signing time: Fri 01 Jul 2022 04:19:58 +0000
ROA not before: Fri 01 Jul 2022 04:19:58 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 211481
IP address blocks: 2a12:f8c0::/32 maxlen: 48
Validation: Failed, RFC 3779 resource not subset of parent's resources
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 6165970 (0x5e15d2)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=b07ab922565e2b3e2cc63d485a55dd4fc41d357e
Validity
Not Before: Jul 1 04:19:58 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=74a102a504b0d8c33b154c4b7cbb9c5bed4ccbd7
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8f:b6:f7:07:3c:47:d9:c0:ec:40:bf:1a:70:37:
3b:c4:9b:d1:52:9b:52:13:4b:f7:29:d9:e4:01:a0:
7b:cf:6f:1e:6c:f6:1d:8a:11:a1:e2:ef:50:e0:c9:
c7:5d:a8:62:1d:01:58:3a:75:38:15:76:5b:bf:5e:
e7:e4:bd:6c:4d:60:f0:29:e7:1e:f0:4a:93:ce:12:
e1:7f:c3:3a:20:f2:8f:de:11:a9:53:c7:db:40:28:
bb:b1:60:72:6e:53:8b:40:18:a6:da:7b:0a:48:01:
b4:bf:76:31:37:1a:f5:29:bd:34:57:8f:bb:89:49:
2a:9b:d4:89:e9:66:76:1f:a8:a5:b0:37:5e:17:bc:
f1:51:49:c5:5c:91:f3:79:59:c1:33:f4:b6:0a:bd:
8f:7e:d7:af:5c:82:d7:62:1b:ea:95:5f:f0:cc:c4:
92:8e:9b:ba:46:c0:79:ac:d7:4d:19:a7:ca:9d:ab:
b3:1e:26:d4:74:11:6a:c1:e4:55:41:8f:28:14:e9:
7d:50:92:38:21:79:c5:2b:dd:7f:f0:cc:1e:55:cb:
55:7f:69:c4:67:0f:c0:92:36:c3:7d:06:ac:b2:b3:
cf:03:a8:f7:0c:24:0a:62:b6:df:75:01:e1:f3:70:
00:bc:99:97:97:f2:b5:2e:96:f3:b6:89:1a:ed:b2:
d0:ed
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
74:A1:02:A5:04:B0:D8:C3:3B:15:4C:4B:7C:BB:9C:5B:ED:4C:CB:D7
X509v3 Authority Key Identifier:
keyid:B0:7A:B9:22:56:5E:2B:3E:2C:C6:3D:48:5A:55:DD:4F:C4:1D:35:7E
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/sHq5IlZeKz4sxj1IWlXdT8QdNX4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/2e/6d59d9-9daf-4fcb-8d05-13bcc752119a/1/dKECpQSw2MM7FUxLfLucW-1My9c.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/2e/6d59d9-9daf-4fcb-8d05-13bcc752119a/1/sHq5IlZeKz4sxj1IWlXdT8QdNX4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a12:f8c0::/32
Signature Algorithm: sha256WithRSAEncryption
4c:93:88:b9:62:f1:d3:8b:46:d8:de:03:20:7d:68:1d:86:73:
96:0b:8b:e4:ff:6a:63:a8:e8:07:cb:1b:2c:59:e8:ae:a0:70:
ec:76:4d:83:69:14:96:86:6d:39:90:bc:bb:34:93:22:df:64:
d6:a8:04:4c:31:c3:05:aa:1e:46:53:70:a2:aa:28:54:79:90:
e6:f8:af:1b:88:e0:00:36:c0:09:ce:3f:fa:24:06:93:0f:7c:
42:a7:32:91:9a:8c:fa:8f:bc:73:f7:f0:74:ec:0a:a5:f2:70:
25:d5:95:47:f7:af:90:0b:48:52:25:66:6a:a8:d4:7a:c1:9d:
df:f7:fa:6c:07:a1:09:8d:a1:03:8c:f6:51:26:44:69:a5:63:
22:0c:ac:8d:67:9c:77:37:fa:c7:f7:c9:e6:ba:19:db:46:f5:
20:dc:89:5e:1a:ec:d8:c5:3d:20:82:a0:6e:b5:d0:da:67:02:
3c:6a:ec:34:de:42:05:bf:a6:cc:d9:32:fc:5f:3a:52:b6:d3:
84:52:a0:a1:51:a2:51:28:72:24:1d:92:89:e9:ab:85:30:c0:
fc:2a:24:13:cc:d5:1b:21:bf:e8:65:fe:72:88:7e:ed:0a:67:
d5:93:ac:19:6d:d7:df:f4:62:df:f8:44:b7:85:cf:b8:78:11:
44:3a:ea:54
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 11 21:22:08 2025 by rpki-client