Route Origin Authorization
$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/df326975-0dc7-473b-8ae0-be3d206caf28.roa
File: df326975-0dc7-473b-8ae0-be3d206caf28.roa (raw, json)
Hash identifier: AfFLANKk16o0gOvww7J+HbLsMgCLbgsPXY0vf6oXlkM=
Subject key identifier: E7:E1:ED:0D:B4:AD:5D:19:6E:FC:DF:C4:A2:B6:D3:94:43:57:16:12
Certificate issuer: /CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7
Certificate serial: 06527A653F1C02458D7F38595FC26B0742FAB752
Authority key identifier: 10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer
Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/df326975-0dc7-473b-8ae0-be3d206caf28.roa
Signing time: Mon 29 Jan 2024 00:00:00 +0000
ROA not before: Mon 29 Jan 2024 00:00:00 +0000
ROA not after: Mon 04 Mar 2024 23:59:59 +0000
asID: 16509
IP address blocks: 206.55.128.0/19 maxlen: 24
Validation: Failed, RFC 3779 resource not subset of parent's resources
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
06:52:7a:65:3f:1c:02:45:8d:7f:38:59:5f:c2:6b:07:42:fa:b7:52
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7
Validity
Not Before: Jan 29 00:00:00 2024 GMT
Not After : Mar 4 23:59:59 2024 GMT
Subject: serialNumber=12e312a99d5fa1a91455364fd0c277bbee40ddfe5f91d23f84939e0454972ab7, CN=b25c970f-d813-445c-bfe2-62668518c87e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cf:d6:7b:44:83:06:32:70:f1:13:2c:c5:e7:be:
d4:4c:37:c1:b8:b1:84:70:30:af:b7:32:31:9d:72:
a5:19:5c:71:19:50:0e:8b:8c:6a:ca:64:b1:fd:65:
60:c3:3c:b0:64:55:4d:7c:49:c7:52:13:df:29:82:
e6:3d:0e:8e:d1:fb:43:e9:2b:64:8f:ef:61:2e:b0:
cd:a3:24:91:72:44:de:4b:75:2b:34:65:de:33:8b:
d6:d9:7f:55:dc:54:b6:f6:31:f1:43:cf:67:8e:81:
c2:66:72:4a:ee:de:32:39:ca:40:90:f8:ba:38:48:
36:32:74:d1:28:3e:f5:41:0b:1c:7b:c0:e5:10:34:
14:40:c1:a6:44:b0:1b:55:f6:79:12:85:35:3e:90:
7e:9c:f0:7d:a0:51:f5:0a:29:b6:77:67:7f:38:46:
4e:d5:d8:f6:df:7b:4a:1c:3d:4c:36:57:11:72:7b:
9b:4b:af:ea:f1:9e:fe:6d:17:7a:64:33:9e:b4:1d:
2a:51:eb:7e:ed:a8:91:76:ed:29:d4:ac:96:c9:f8:
8f:18:64:0f:c9:81:c8:b8:a2:73:26:1f:f9:6c:6f:
ca:e8:e6:d2:cf:3d:3a:8f:5b:f6:81:fa:7e:43:a5:
7d:9a:f0:2f:c5:12:ad:4f:9c:d3:61:2b:35:c5:bc:
df:35
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E7:E1:ED:0D:B4:AD:5D:19:6E:FC:DF:C4:A2:B6:D3:94:43:57:16:12
X509v3 Authority Key Identifier:
keyid:10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/df326975-0dc7-473b-8ae0-be3d206caf28.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
206.55.128.0/19
Signature Algorithm: sha256WithRSAEncryption
88:b1:31:e4:73:f2:cf:ec:a5:02:f8:2c:72:1e:0c:5f:bb:61:
a6:46:fb:42:6a:ce:f3:f0:51:2b:dc:b5:cc:dd:91:e2:1d:26:
b5:e3:18:12:ce:71:9c:a6:2e:37:78:e8:08:98:d1:29:02:06:
1e:67:9a:fc:18:f6:f7:ac:03:be:77:63:92:6a:8c:9f:23:0e:
27:5b:f9:d5:b7:21:28:9f:38:f3:8d:bc:16:67:3d:83:d9:98:
63:50:bd:74:d4:f0:9e:f5:7f:7c:a8:99:ce:5b:e8:98:87:0a:
8b:66:a7:49:6a:a7:d5:00:e6:1e:81:8e:f4:6f:c3:96:8d:85:
3b:cb:07:41:29:67:ad:1a:b3:89:2c:6c:79:b8:d5:25:49:7f:
4f:28:f1:7c:cc:8c:f0:9c:5f:3e:00:bb:10:e9:9c:80:ee:ad:
b0:b0:8a:ac:47:4a:c5:f3:5c:9d:d2:8e:5a:0d:9c:07:99:e5:
72:2e:9f:ff:4f:05:a7:52:02:40:3f:52:46:68:d6:f3:e6:f3:
52:19:28:49:5c:09:5e:45:b6:e3:4a:48:5e:47:80:04:46:fb:
39:6b:ea:69:11:4d:ea:90:81:fe:c6:c4:19:44:75:8c:4a:42:
5c:22:c4:2d:78:5a:8e:27:67:0c:ec:fe:92:2f:54:68:72:4c:
00:a8:c6:49
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 16:41:52 2024 by rpki-client on console-fra.rpki-client.org