Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/8f/e64398-9601-4b7c-b783-079ba0570f75/1/ZlvkepNvcPUuQBkPpsR95TG5h1U.roa
File: ZlvkepNvcPUuQBkPpsR95TG5h1U.roa (raw, json)
Hash identifier: uWcSK5f13HCLEYUhO5XExklaoKkxH41XB4BB2/mz3qM=
Subject key identifier: 66:5B:E4:7A:93:6F:70:F5:2E:40:19:0F:A6:C4:7D:E5:31:B9:87:55
Certificate issuer: /CN=a29d9751f3675f51332734da68ea960260045b12
Certificate serial: 0D7C6C4A
Authority key identifier: A2:9D:97:51:F3:67:5F:51:33:27:34:DA:68:EA:96:02:60:04:5B:12
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/op2XUfNnX1EzJzTaaOqWAmAEWxI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/8f/e64398-9601-4b7c-b783-079ba0570f75/1/ZlvkepNvcPUuQBkPpsR95TG5h1U.roa
Signing time: Sat 01 Jan 2022 14:02:13 +0000
ROA not before: Sat 01 Jan 2022 14:02:13 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 211282
IP address blocks: 80.72.18.0/23 maxlen: 32
2a00:8740:600::/40 maxlen: 64
Validation: Failed, RFC 3779 resource not subset of parent's resources
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 226257994 (0xd7c6c4a)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=a29d9751f3675f51332734da68ea960260045b12
Validity
Not Before: Jan 1 14:02:13 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=665be47a936f70f52e40190fa6c47de531b98755
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8d:84:5b:ea:38:ed:74:c3:db:0c:25:e7:61:f2:
2b:d4:99:32:2a:39:e0:f3:d7:5c:0c:50:e7:ef:63:
5e:0b:4f:c8:8f:33:77:0b:c3:e9:b9:08:d9:47:93:
e4:3c:3b:6e:11:7b:c6:0d:7b:56:fe:37:e6:ef:c0:
6a:af:17:1f:5e:f8:28:33:44:87:f2:44:74:07:73:
08:c4:a1:0e:e9:73:08:c5:0e:65:d5:fc:06:e7:ee:
3c:fa:41:ae:5a:2f:9e:55:cf:af:b5:e8:fb:ef:53:
2d:23:d6:da:c7:66:45:ab:f5:88:ce:a5:58:06:5d:
1a:05:de:ac:37:c0:c4:e3:85:29:24:83:c0:7d:da:
68:47:7a:25:3a:da:29:77:b1:d4:4f:33:4f:01:17:
ef:da:47:ac:81:1e:b2:39:53:9d:6a:cd:11:75:cb:
e4:09:20:94:dc:60:49:1d:a6:6d:f2:57:57:a1:a7:
13:47:72:58:2a:ba:1b:d2:f0:88:d5:0c:64:f5:d7:
74:5b:dd:fe:78:73:f3:d4:d2:cf:1e:35:35:a7:a9:
4e:47:e0:49:bd:c1:5d:a4:be:be:53:50:3c:3b:8d:
31:d0:47:a9:63:2b:bc:73:39:3c:0f:dd:df:7a:e2:
d6:00:30:9c:e0:0b:9f:ad:fa:d8:fa:96:5e:e3:c4:
62:2d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
66:5B:E4:7A:93:6F:70:F5:2E:40:19:0F:A6:C4:7D:E5:31:B9:87:55
X509v3 Authority Key Identifier:
keyid:A2:9D:97:51:F3:67:5F:51:33:27:34:DA:68:EA:96:02:60:04:5B:12
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/op2XUfNnX1EzJzTaaOqWAmAEWxI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/8f/e64398-9601-4b7c-b783-079ba0570f75/1/ZlvkepNvcPUuQBkPpsR95TG5h1U.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/8f/e64398-9601-4b7c-b783-079ba0570f75/1/op2XUfNnX1EzJzTaaOqWAmAEWxI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
80.72.18.0/23
IPv6:
2a00:8740:600::/40
Signature Algorithm: sha256WithRSAEncryption
20:a1:af:f9:0a:56:57:d4:c5:f7:06:af:d9:32:8b:13:a9:e7:
51:ed:1b:0d:99:35:39:d2:e6:16:35:8e:b8:70:f9:e9:25:d5:
bc:ab:ee:f9:df:53:41:e1:6b:d8:d6:4f:a3:62:d8:11:43:67:
1b:5f:0d:1d:be:91:38:44:2a:19:3b:7f:78:59:ef:be:26:be:
ae:e0:7b:bd:9f:ec:19:7a:c1:22:3f:ab:ef:1d:e0:ba:09:e1:
45:ae:56:4e:f1:d7:00:f7:3f:06:b3:53:24:a9:0c:a6:71:59:
47:f1:59:27:c4:d5:96:e4:34:17:02:a6:df:2b:9f:fb:79:29:
68:cd:05:64:0c:96:1b:f7:08:99:c7:b1:81:65:1a:2e:dc:fe:
6e:5d:43:fe:90:af:6b:1f:7e:92:87:63:75:e1:3b:c9:e8:76:
44:69:59:37:af:f5:01:5f:ee:69:10:c0:8c:6c:67:d6:88:3a:
82:84:d5:ae:b0:4c:57:56:6f:3a:e7:dd:bc:8e:16:e1:07:d3:
1b:22:d2:5a:03:dd:db:f3:76:3a:7a:89:ad:a2:13:c2:e4:35:
72:91:35:e1:15:41:d9:12:07:a9:ae:cc:67:a2:b3:2f:25:eb:
9a:8c:c7:03:05:76:d5:5e:6e:78:3f:76:09:24:3e:de:55:4c:
51:a9:87:1d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:39:05 2024 by rpki-client on console-fra.rpki-client.org