Route Origin Authorization
$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/ff9fa84e-9783-4a0b-a58d-6dc8e2433d33/8b6b5297-7527-440e-af18-4babf8b597ed.roa
File: 8b6b5297-7527-440e-af18-4babf8b597ed.roa (raw, json)
Hash identifier: kyeXKF/wH095GagGS4Q4AWak0FLnUmbQlNeB1oP0Y0U=
Subject key identifier: 08:42:50:7B:05:F5:B2:D7:16:81:C9:4D:F1:96:0B:07:7E:3C:3A:27
Certificate issuer: /CN=1b1fe67321cf669f9c2b75369cc0fdd38c163c58b1d42d0107
Certificate serial: 7C1BA58F7B4DDF3AD078BE6D78272C4DD29D72CE
Authority key identifier: 15:F4:EF:04:F5:AF:23:96:C9:5F:16:42:E3:79:07:8B:48:8C:16:0B
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/aaa76394-48fc-4ff3-b6aa-0693c55d758f/1b1fe67321cf669f9c2b75369cc0fdd38c163c58b1d42d0107.cer
Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/ff9fa84e-9783-4a0b-a58d-6dc8e2433d33/8b6b5297-7527-440e-af18-4babf8b597ed.roa
Signing time: Mon 22 Apr 2024 00:00:00 +0000
ROA not before: Mon 22 Apr 2024 00:00:00 +0000
ROA not after: Mon 27 May 2024 23:59:59 +0000
asID: 16509
IP address blocks: 173.82.27.0/24 maxlen: 24
Validation: Failed, RFC 3779 resource not subset of parent's resources
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
7c:1b:a5:8f:7b:4d:df:3a:d0:78:be:6d:78:27:2c:4d:d2:9d:72:ce
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=1b1fe67321cf669f9c2b75369cc0fdd38c163c58b1d42d0107
Validity
Not Before: Apr 22 00:00:00 2024 GMT
Not After : May 27 23:59:59 2024 GMT
Subject: serialNumber=2ca4774f8ae94f90115563aa0499c0c4c2bd51780c29fd01274c52af2e734e34, CN=35095e3e-84cb-4ad0-bda1-6c6f8da69f61
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b8:db:6c:a2:86:c0:90:48:00:c9:05:58:4d:d0:
5b:2d:e0:95:c3:f7:d5:a6:cb:c6:16:15:f9:c9:e5:
10:14:e5:ea:aa:52:92:7f:ec:df:23:51:4c:a4:d5:
45:a1:26:10:ac:c0:c7:3e:88:6d:e4:e1:cd:2f:e2:
24:3f:1b:eb:3f:7e:6f:92:31:d1:33:2a:87:01:79:
bf:81:75:06:76:2f:17:a2:67:db:08:0f:ef:78:5d:
2a:10:29:7d:07:fc:45:f6:57:a5:5f:56:ce:09:d2:
47:c1:19:4e:a0:4e:44:7d:95:e1:b5:b8:49:03:a3:
5e:09:d0:00:b4:52:10:d7:20:54:49:d4:ad:2f:c7:
50:1f:b4:4f:c2:ba:b6:d0:98:ad:9b:3c:7f:2c:9c:
98:bd:5b:3f:df:c2:47:3d:fa:ce:a1:70:77:41:9b:
f4:f1:16:3c:ee:31:9d:f8:5b:d2:e4:05:35:d9:88:
15:91:2e:b9:db:5d:fa:73:7f:cf:5d:bb:5b:02:7a:
b0:a0:e0:ba:c0:a9:ad:30:11:71:77:71:5a:fc:de:
40:6d:96:74:71:f7:52:d5:71:33:4c:d9:a8:a5:3b:
ed:48:72:f4:71:76:30:05:fc:ec:23:c4:04:31:cc:
81:c9:95:50:55:9b:16:57:f4:5e:3f:0a:bb:4a:26:
77:39
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
08:42:50:7B:05:F5:B2:D7:16:81:C9:4D:F1:96:0B:07:7E:3C:3A:27
X509v3 Authority Key Identifier:
keyid:15:F4:EF:04:F5:AF:23:96:C9:5F:16:42:E3:79:07:8B:48:8C:16:0B
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/aaa76394-48fc-4ff3-b6aa-0693c55d758f/1b1fe67321cf669f9c2b75369cc0fdd38c163c58b1d42d0107.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/ff9fa84e-9783-4a0b-a58d-6dc8e2433d33/8b6b5297-7527-440e-af18-4babf8b597ed.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/ff9fa84e-9783-4a0b-a58d-6dc8e2433d33/z2afnCt1NpzA_dOMFjxYsdQtAQc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
173.82.27.0/24
Signature Algorithm: sha256WithRSAEncryption
9c:24:2a:7f:a6:f3:d0:25:ff:47:bb:45:e6:bd:cc:ef:af:ee:
7d:48:45:db:23:0b:79:b4:dd:6e:a2:d4:86:50:ee:e8:84:b4:
3b:62:d9:40:5e:e3:65:a7:ec:fa:93:0a:79:ba:d3:78:cb:47:
85:db:e1:8b:44:82:2b:c0:7f:a7:06:c4:f4:4d:1a:f0:1f:5d:
3e:5f:f1:e1:a8:3c:70:ab:28:db:d0:93:5b:63:87:34:3f:44:
70:0d:c3:53:19:e5:2b:31:98:3a:ce:46:1b:1e:62:a0:06:97:
7e:0c:33:1e:ff:80:1b:2c:9d:1b:d4:77:0c:93:4f:19:08:02:
f1:b8:b3:d0:6f:ce:32:75:40:61:8f:49:c7:33:df:7f:1c:67:
07:43:7f:19:0b:8e:b4:c5:d7:c3:6c:57:d8:1f:12:6f:69:e7:
bc:d3:78:f5:db:c6:ba:27:94:6b:de:21:ea:97:ec:d3:2e:22:
d9:ea:39:06:79:15:68:7b:d2:12:ea:70:1b:87:7d:be:4a:ec:
4d:9d:c5:7f:4d:a0:62:7e:50:40:78:fd:42:20:8f:99:09:11:
a0:35:d0:93:15:60:2e:a6:ef:5f:a8:d8:f3:1b:6f:b0:17:83:
27:14:97:7f:a8:7e:b8:ff:2c:71:66:c8:21:06:8c:92:d0:43:
85:ab:fe:0c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Apr 25 22:33:20 2024 by rpki-client on console-fra.rpki-client.org