Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/73/7c7bf6-2bdf-4c7d-9aec-1ef1cee661ca/1/Id8U0KikJDMCA2gX8az4sQQfDfw.roa
File: Id8U0KikJDMCA2gX8az4sQQfDfw.roa (raw, json)
Hash identifier: dh/Pd/oKHShcCOi8TQqR7U4ayiHRWB4zi2GPwoBvcGk=
Subject key identifier: 21:DF:14:D0:A8:A4:24:33:02:03:68:17:F1:AC:F8:B1:04:1F:0D:FC
Certificate issuer: /CN=4be1bbbe540079d2b7f270b92ceaf3b2a816e8fa
Certificate serial: 0182C53FE6FEC9B534B1F491417C8EA1F0AA
Authority key identifier: 4B:E1:BB:BE:54:00:79:D2:B7:F2:70:B9:2C:EA:F3:B2:A8:16:E8:FA
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/S-G7vlQAedK38nC5LOrzsqgW6Po.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/73/7c7bf6-2bdf-4c7d-9aec-1ef1cee661ca/1/Id8U0KikJDMCA2gX8az4sQQfDfw.roa
Signing time: Mon 22 Aug 2022 11:11:15 +0000
ROA not before: Mon 22 Aug 2022 11:11:15 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 204084
IP address blocks: 2a0b:8040::/29 maxlen: 29
2a0b:e9c0::/29 maxlen: 29
2a03:f7c0::/29 maxlen: 29
2a0c:f640::/29 maxlen: 29
2a0b:d900::/29 maxlen: 29
2a13:3300::/32 maxlen: 32
2a0c:5c0::/29 maxlen: 29
2a13:3303::/32 maxlen: 32
2a0c:5d00::/29 maxlen: 29
2a13:3301::/32 maxlen: 32
2a13:3302::/32 maxlen: 32
2a0c:65c0::/29 maxlen: 29
2a0c:6980::/29 maxlen: 29
Validation: Failed, RFC 3779 resource not subset of parent's resources
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:82:c5:3f:e6:fe:c9:b5:34:b1:f4:91:41:7c:8e:a1:f0:aa
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4be1bbbe540079d2b7f270b92ceaf3b2a816e8fa
Validity
Not Before: Aug 22 11:11:15 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=21df14d0a8a4243302036817f1acf8b1041f0dfc
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:89:fe:ef:c5:0e:41:81:68:8c:d4:83:ee:69:09:
5c:62:8c:a5:e4:a7:03:c0:c6:6f:84:60:04:41:8f:
27:bc:13:b0:63:33:45:bc:52:c2:79:1c:9d:17:c7:
ff:e8:2a:25:86:55:54:f5:59:1c:d0:48:2a:f8:d1:
31:3c:4b:e1:25:58:a5:b1:3f:34:f8:b4:aa:13:0c:
c3:c8:e0:fa:7a:38:81:91:51:c8:9f:e0:ac:60:a1:
87:43:d7:42:14:dc:c4:55:b4:3d:a2:f9:e2:88:c5:
e9:15:d0:a8:93:d3:d9:48:a4:59:b1:73:8e:7a:4d:
ba:c0:34:58:c6:55:47:22:ae:cf:05:ba:81:17:c9:
d1:ab:ad:27:cb:23:35:20:cf:3f:bc:d4:6b:2c:d3:
31:26:fb:fa:c8:e6:62:15:3a:ee:a6:8c:61:85:0c:
1e:7d:da:be:8b:29:2d:25:35:7c:77:22:fe:bf:93:
21:a9:21:61:96:8f:f8:b9:d2:1e:d6:e2:76:3e:6b:
b3:9c:43:20:28:27:86:f7:20:4c:7e:34:a3:55:95:
d2:e4:a8:d2:b8:23:01:da:d4:ad:1d:56:b3:f7:bf:
d3:af:21:49:71:7f:9b:f6:28:c2:98:78:51:a9:a0:
4b:85:bc:2e:69:6f:55:85:d1:c0:d0:34:c5:68:9e:
4e:8f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
21:DF:14:D0:A8:A4:24:33:02:03:68:17:F1:AC:F8:B1:04:1F:0D:FC
X509v3 Authority Key Identifier:
keyid:4B:E1:BB:BE:54:00:79:D2:B7:F2:70:B9:2C:EA:F3:B2:A8:16:E8:FA
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/S-G7vlQAedK38nC5LOrzsqgW6Po.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/73/7c7bf6-2bdf-4c7d-9aec-1ef1cee661ca/1/Id8U0KikJDMCA2gX8az4sQQfDfw.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/73/7c7bf6-2bdf-4c7d-9aec-1ef1cee661ca/1/S-G7vlQAedK38nC5LOrzsqgW6Po.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a03:f7c0::/29
2a0b:8040::/29
2a0b:d900::/29
2a0b:e9c0::/29
2a0c:5c0::/29
2a0c:5d00::/29
2a0c:65c0::/29
2a0c:6980::/29
2a0c:f640::/29
2a13:3300::/30
Signature Algorithm: sha256WithRSAEncryption
66:e0:94:ad:7e:b6:b4:95:88:42:1e:c6:7f:44:78:aa:1e:81:
a6:25:f5:91:ee:b5:05:88:bb:e4:67:e3:5e:00:38:45:ec:d0:
59:0a:75:2f:c5:48:d6:20:95:73:04:66:0e:52:71:00:eb:a5:
aa:ca:af:65:97:fb:86:08:77:2d:bc:9b:1c:6a:f3:40:cc:28:
65:fe:6d:3d:67:8d:8f:50:11:81:56:b1:6a:2e:67:e5:9a:1b:
be:1a:ad:66:4d:62:a5:39:71:b2:14:57:8b:2e:f2:f5:ba:b1:
58:ad:34:c0:27:56:38:b0:96:3c:95:7c:e2:59:ce:8e:08:04:
c0:1b:52:cb:d1:4e:ea:28:8d:91:ee:85:37:46:17:2f:c6:04:
84:04:b9:15:f9:01:db:19:40:fd:7e:25:1e:b9:06:6d:70:88:
8a:9c:bf:f4:4a:eb:88:97:2a:a8:68:55:b7:73:02:74:d6:b4:
76:b5:b0:9f:97:f7:57:e2:c3:35:aa:f7:a4:0f:86:8c:05:71:
9f:1e:6e:dd:72:a6:be:42:12:10:c3:59:ff:9f:09:13:e2:f7:
34:9d:06:84:06:27:ba:b3:8b:a8:37:87:9b:d5:c5:1e:81:bc:
a2:37:21:9f:64:27:40:32:99:1d:81:54:77:96:3d:86:74:0d:
92:96:6c:e2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 19:17:56 2024 by rpki-client on console-ams.rpki-client.org