Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/2e/6d59d9-9daf-4fcb-8d05-13bcc752119a/1/dgdfCsJO8vRXVQa3pl94GEt-Ks8.roa
File: dgdfCsJO8vRXVQa3pl94GEt-Ks8.roa (raw, json)
Hash identifier: TzbgamcLz0ssjBYG+w/MKd1uBVhHAD3DcB/uQGde3dI=
Subject key identifier: 76:07:5F:0A:C2:4E:F2:F4:57:55:06:B7:A6:5F:78:18:4B:7E:2A:CF
Certificate issuer: /CN=b07ab922565e2b3e2cc63d485a55dd4fc41d357e
Certificate serial: 0E1AF8
Authority key identifier: B0:7A:B9:22:56:5E:2B:3E:2C:C6:3D:48:5A:55:DD:4F:C4:1D:35:7E
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/sHq5IlZeKz4sxj1IWlXdT8QdNX4.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/2e/6d59d9-9daf-4fcb-8d05-13bcc752119a/1/dgdfCsJO8vRXVQa3pl94GEt-Ks8.roa
Signing time: Tue 24 May 2022 04:22:30 +0000
ROA not before: Tue 24 May 2022 04:22:30 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 60445
IP address blocks: 2a12:f8c0::/29 maxlen: 48
Validation: Failed, RFC 3779 resource not subset of parent's resources
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 924408 (0xe1af8)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=b07ab922565e2b3e2cc63d485a55dd4fc41d357e
Validity
Not Before: May 24 04:22:30 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=76075f0ac24ef2f4575506b7a65f78184b7e2acf
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ba:70:33:b3:26:5d:92:3b:f7:50:ea:20:bb:07:
e2:0b:76:7a:97:a1:4f:e9:fe:af:e0:d6:7c:a3:51:
4f:e0:07:02:d5:7c:04:9b:a9:b5:b8:a4:67:60:73:
00:e6:59:b6:46:96:fa:4f:b6:10:fb:d2:a4:6d:35:
15:be:f1:a0:8b:f7:7a:fc:2f:0d:0f:c3:de:55:08:
64:c4:b4:64:93:bc:6c:42:37:48:cd:31:d3:af:5c:
5f:59:4b:5a:70:6e:63:6b:2f:51:80:ba:a9:88:fb:
b5:f2:0f:7c:e0:94:4f:31:51:c2:b8:31:76:c7:8b:
07:5b:57:8d:70:e1:16:90:3e:f7:7d:7c:79:bc:24:
e7:fc:69:81:e8:da:65:63:d8:4e:ec:3b:77:31:d7:
e6:28:d9:41:21:7e:c8:1a:14:7f:ec:e3:95:cb:ac:
d5:ec:00:a8:98:0e:05:ee:e9:2f:f4:6b:a7:88:76:
5a:34:4c:6a:eb:cd:5c:d3:f4:62:59:57:40:40:f7:
72:06:14:05:e9:27:59:6b:28:4a:9e:a7:ba:b2:40:
09:c3:3d:18:bb:7d:9b:16:fa:39:97:48:a1:1d:d8:
be:86:48:49:5e:84:97:48:fd:07:2b:bb:67:5c:98:
be:86:81:a6:6d:c6:a1:62:1f:47:aa:01:12:eb:6a:
36:91
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
76:07:5F:0A:C2:4E:F2:F4:57:55:06:B7:A6:5F:78:18:4B:7E:2A:CF
X509v3 Authority Key Identifier:
keyid:B0:7A:B9:22:56:5E:2B:3E:2C:C6:3D:48:5A:55:DD:4F:C4:1D:35:7E
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/sHq5IlZeKz4sxj1IWlXdT8QdNX4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/2e/6d59d9-9daf-4fcb-8d05-13bcc752119a/1/dgdfCsJO8vRXVQa3pl94GEt-Ks8.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/2e/6d59d9-9daf-4fcb-8d05-13bcc752119a/1/sHq5IlZeKz4sxj1IWlXdT8QdNX4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a12:f8c0::/29
Signature Algorithm: sha256WithRSAEncryption
7c:6f:fe:28:15:2c:83:e8:a8:0e:b1:b6:01:e2:81:87:7d:c3:
1a:f3:46:12:45:f8:8e:79:6a:e7:25:10:cc:43:0c:a2:9e:cb:
6d:37:a3:b1:09:0f:ec:18:58:2c:68:d1:09:61:87:08:6d:91:
be:b5:2f:10:9f:8e:50:26:c4:41:34:5b:6e:31:c4:91:47:1d:
8c:ca:35:17:8d:c1:62:01:17:e9:44:ff:42:07:f2:82:48:58:
9f:c1:b3:f2:f7:2b:f5:fe:40:5f:4a:54:a3:22:b9:7f:a5:31:
6d:6b:40:6c:f1:7c:52:25:d1:3a:96:c2:ba:c6:04:d5:c8:a2:
6f:fb:9c:01:a1:41:c7:98:c6:51:19:91:d8:63:b1:fd:4f:f1:
2d:5e:8b:d1:83:78:14:4b:a6:27:d3:dc:d4:97:e1:ac:b7:be:
71:6b:bf:06:8c:54:ee:d0:ca:98:f6:ef:61:20:58:8d:d1:31:
c5:c1:34:6b:5d:38:75:b1:c7:d7:09:06:0e:03:25:ce:a8:96:
0d:ac:af:b5:7f:8f:31:6a:6e:47:72:b2:94:86:08:29:a7:c5:
12:57:06:26:43:94:ce:db:92:03:d6:e8:b3:43:24:65:41:18:
19:66:96:48:1d:51:cc:42:89:9a:bb:16:15:da:e4:d4:bd:b0:
4e:8a:a9:75
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 11 21:30:29 2025 by rpki-client