Route Origin Authorization
$ rpki-client -vvf repo.rpki.space/repo/Infiniroute/0/326130623a396534363a3a2f33322d3332203d3e20323135353331.roa
File: 326130623a396534363a3a2f33322d3332203d3e20323135353331.roa (raw, json)
Hash identifier: 23g18AMT8gulup6FbzG2FVZb8Reg/U54JbHfoINAYpI=
Subject key identifier: C9:1E:78:79:87:57:BE:20:BE:AD:CC:A1:CC:49:91:5F:3D:41:87:EC
Certificate issuer: /CN=7A7ECB46F513D542514E077E26624E43153E7F2C
Certificate serial: 06433D56A83EA3C235210625DE5B7D2B8DE59A33
Authority key identifier: 7A:7E:CB:46:F5:13:D5:42:51:4E:07:7E:26:62:4E:43:15:3E:7F:2C
Authority info access: rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/2/7A7ECB46F513D542514E077E26624E43153E7F2C.cer
Subject info access: rsync://repo.rpki.space/repo/Infiniroute/0/326130623a396534363a3a2f33322d3332203d3e20323135353331.roa
Signing time: Tue 04 Jun 2024 18:20:05 +0000
ROA not before: Tue 04 Jun 2024 18:15:05 +0000
ROA not after: Tue 03 Jun 2025 18:20:05 +0000
asID: 215531
IP address blocks: 2a0b:9e46::/32 maxlen: 32
Validation: Failed, RFC 3779 resource not subset of parent's resources
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
06:43:3d:56:a8:3e:a3:c2:35:21:06:25:de:5b:7d:2b:8d:e5:9a:33
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=7A7ECB46F513D542514E077E26624E43153E7F2C
Validity
Not Before: Jun 4 18:15:05 2024 GMT
Not After : Jun 3 18:20:05 2025 GMT
Subject: CN=C91E78798757BE20BEADCCA1CC49915F3D4187EC
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a9:b0:d0:3b:dd:f5:2e:99:4b:ff:8e:19:51:67:
e6:43:27:f7:ff:43:f3:e2:17:08:78:ed:a7:85:fe:
60:b4:30:31:d0:2f:95:12:dd:3d:5d:9a:43:5a:6d:
01:0e:eb:b9:0c:1f:ba:86:6b:4a:65:60:89:a0:5a:
0b:23:d5:77:1b:bd:f6:46:62:cc:0e:76:41:0e:62:
d0:af:b5:51:f8:a8:89:8d:6a:75:52:14:bf:77:a8:
93:7d:6c:90:44:d8:de:b0:04:2d:44:37:71:5a:38:
a1:d8:8c:f6:40:77:4d:b1:a2:7d:92:61:b7:f9:90:
76:2d:03:11:b2:00:d5:83:57:2b:82:66:36:62:c5:
fd:58:91:b3:94:48:8e:e0:26:72:f8:4d:5e:33:4f:
50:fe:84:3e:c1:6a:4d:27:8a:0c:bb:cb:4c:7a:4f:
dd:10:c0:14:6e:14:04:a4:1b:3c:12:ae:16:e0:de:
ec:3f:d7:1e:da:ea:cf:71:10:e0:8c:c5:cb:7a:46:
90:6a:3d:9c:c5:bb:13:bc:cb:23:d6:5d:15:8e:da:
21:45:7c:52:03:0c:10:ae:b3:0d:2f:70:16:53:9b:
4c:c1:2d:2e:b2:7e:8a:8a:90:20:71:82:8d:57:31:
74:cd:d7:a7:ca:8e:cc:d0:f4:76:5c:d6:ea:4c:3f:
43:a3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C9:1E:78:79:87:57:BE:20:BE:AD:CC:A1:CC:49:91:5F:3D:41:87:EC
X509v3 Authority Key Identifier:
keyid:7A:7E:CB:46:F5:13:D5:42:51:4E:07:7E:26:62:4E:43:15:3E:7F:2C
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://repo.rpki.space/repo/Infiniroute/0/7A7ECB46F513D542514E077E26624E43153E7F2C.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/2/7A7ECB46F513D542514E077E26624E43153E7F2C.cer
Subject Information Access:
Signed Object - URI:rsync://repo.rpki.space/repo/Infiniroute/0/326130623a396534363a3a2f33322d3332203d3e20323135353331.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a0b:9e46::/32
Signature Algorithm: sha256WithRSAEncryption
47:5b:6c:d5:32:3d:ad:c6:36:e3:58:22:57:24:1b:15:01:63:
c5:d8:bc:32:4b:72:16:a7:d3:0f:60:6c:ee:33:e4:21:f3:7d:
3c:a6:56:9f:c2:d4:b9:8b:2b:9b:2d:df:a5:57:2a:1b:69:fe:
93:d3:d3:50:14:79:f9:97:0c:99:2d:80:a0:59:07:a9:6d:a7:
ab:41:19:b4:23:4a:d7:4a:9f:1c:81:49:e4:a9:ce:21:49:f1:
83:b7:e2:26:9c:6b:5e:62:ca:37:53:e5:64:40:96:59:e5:92:
f6:7e:4b:89:f5:ee:b4:b2:e6:47:78:d9:97:ea:f8:04:60:7f:
62:b1:b6:6f:8c:92:e5:82:90:7a:69:d6:1e:a3:06:d2:fa:c7:
26:4d:41:98:a2:09:42:8b:a7:13:6d:74:89:30:cc:24:07:4c:
3f:32:c7:b0:1f:7a:92:13:0d:28:09:fd:41:7b:45:d6:bf:2a:
40:f0:1e:a7:7a:83:e3:c7:d2:93:65:30:a5:3a:e8:fc:d7:0d:
51:8a:69:a0:8f:f3:d4:d8:ee:81:03:46:65:64:02:30:97:e0:
31:8b:54:32:50:dc:4e:a4:28:cb:af:b6:40:ac:f5:51:30:f4:
9d:15:17:c3:97:ff:39:e0:af:b7:7a:7b:d3:75:00:32:73:2f:
66:95:20:2e
-----BEGIN CERTIFICATE-----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==
-----END CERTIFICATE-----
Generated at Sun Feb 16 21:08:21 2025 by rpki-client