Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/8f/e64398-9601-4b7c-b783-079ba0570f75/1/bhR5G0_jj1nWdklnM3M6NnV1BLQ.roa
File: bhR5G0_jj1nWdklnM3M6NnV1BLQ.roa (raw, json)
Hash identifier: nBetX1ls7igKQuXZZXLIHWmHk4MAxPnyAfRRxbfSdRQ=
Subject key identifier: 6E:14:79:1B:4F:E3:8F:59:D6:76:49:67:33:73:3A:36:75:75:04:B4
Certificate issuer: /CN=a29d9751f3675f51332734da68ea960260045b12
Certificate serial: 01856E78CE5A8D940401AA71D2B1A006FD74
Authority key identifier: A2:9D:97:51:F3:67:5F:51:33:27:34:DA:68:EA:96:02:60:04:5B:12
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/op2XUfNnX1EzJzTaaOqWAmAEWxI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/8f/e64398-9601-4b7c-b783-079ba0570f75/1/bhR5G0_jj1nWdklnM3M6NnV1BLQ.roa
Signing time: Sun 01 Jan 2023 17:54:48 +0000
ROA not before: Sun 01 Jan 2023 17:54:48 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 207490
IP address blocks: 80.72.16.0/23 maxlen: 32
80.72.26.0/23 maxlen: 32
2a00:8740:500::/40 maxlen: 64
Validation: Failed, RFC 3779 resource not subset of parent's resources
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:85:6e:78:ce:5a:8d:94:04:01:aa:71:d2:b1:a0:06:fd:74
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=a29d9751f3675f51332734da68ea960260045b12
Validity
Not Before: Jan 1 17:54:48 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=6e14791b4fe38f59d676496733733a36757504b4
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:94:4a:25:6a:40:95:1f:ae:de:9d:30:ed:6e:61:
7c:b8:08:2a:98:1f:22:3a:f8:b0:43:df:3d:2f:b6:
68:58:1a:df:de:5f:5e:39:5d:cb:e0:ee:7d:68:08:
25:2d:13:94:36:f8:e2:c8:5d:af:f8:58:b0:06:6b:
f1:0e:90:eb:e4:0b:cf:94:ee:01:25:37:85:30:59:
b4:61:01:e8:73:01:06:c8:f4:59:1f:ca:af:39:a1:
ca:2c:b1:50:62:b4:0a:89:0a:b7:ab:f3:f0:32:ee:
4b:79:c2:6a:aa:8b:7f:18:4b:6c:b5:71:fa:65:d1:
71:10:ba:44:b6:44:07:09:be:23:66:b7:fa:86:64:
eb:ca:41:95:90:1f:fc:a7:91:17:8b:2a:25:43:a9:
e3:eb:30:11:b1:ac:91:75:00:78:d7:81:29:e1:cc:
32:9a:dc:14:7d:38:85:7a:bb:f8:0f:47:5e:8f:ce:
d8:52:89:85:a3:9e:67:64:33:3d:4a:ab:a5:53:99:
9e:2d:77:42:f6:b9:9b:34:8a:d7:16:da:44:d4:9f:
bd:a6:b2:4f:1e:63:96:02:18:d2:0e:40:6f:e0:fd:
ef:64:a0:96:c1:b7:3d:5b:fe:3f:be:02:28:9a:b9:
f7:1c:9c:9f:35:66:18:e4:b7:41:31:2c:bd:17:67:
1e:6b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
6E:14:79:1B:4F:E3:8F:59:D6:76:49:67:33:73:3A:36:75:75:04:B4
X509v3 Authority Key Identifier:
keyid:A2:9D:97:51:F3:67:5F:51:33:27:34:DA:68:EA:96:02:60:04:5B:12
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/op2XUfNnX1EzJzTaaOqWAmAEWxI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/8f/e64398-9601-4b7c-b783-079ba0570f75/1/bhR5G0_jj1nWdklnM3M6NnV1BLQ.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/8f/e64398-9601-4b7c-b783-079ba0570f75/1/op2XUfNnX1EzJzTaaOqWAmAEWxI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
80.72.16.0/23
80.72.26.0/23
IPv6:
2a00:8740:500::/40
Signature Algorithm: sha256WithRSAEncryption
57:d9:2a:d0:4c:c6:62:e5:d8:bc:01:15:b1:9f:2f:54:7b:a2:
8a:61:24:3c:61:bb:b5:21:8f:30:e8:bb:ad:ec:ca:5f:3f:23:
42:c5:70:e7:e5:ad:85:d8:de:fe:a1:fe:76:c4:81:96:84:3e:
8b:88:83:51:aa:8d:20:d6:b1:73:9c:8a:31:19:14:5a:3d:35:
9d:ad:2a:95:ca:15:aa:96:b2:01:5c:ee:1a:29:9a:ec:09:87:
68:d4:c8:a8:5c:28:18:09:45:7f:5b:7b:2d:c1:c7:9b:8f:2b:
fe:86:ed:58:b3:31:b9:f3:22:15:43:ab:06:7d:3a:f4:51:47:
14:7c:a0:b6:be:09:fb:38:72:57:e5:31:c2:63:cd:7b:87:ab:
c3:dc:8f:a7:ab:94:9a:dd:0c:37:59:e4:0d:64:7e:4d:b2:16:
b0:07:7c:f4:1d:0e:96:d8:ef:9f:a9:2a:1d:59:9e:70:06:bd:
c2:e4:ee:57:71:2a:14:4e:b3:79:dd:8e:49:8c:c7:be:c8:a6:
e7:b9:bf:39:51:16:ea:f3:d0:11:1b:1a:d5:d8:e3:cd:76:cf:
a6:d5:e9:36:95:2a:b4:6a:72:ff:fd:fe:9d:7f:8f:23:4c:b3:
c0:96:bd:fa:ea:71:91:50:33:a2:ba:be:8c:54:b0:a1:89:37:
dd:ea:24:68
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:39:05 2024 by rpki-client on console-fra.rpki-client.org