Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/02/f96f73-6686-4164-b23f-bf4e527b9fa8/1/aYqC10NG0t9DGvWiKZilS2uhIkQ.roa
File: aYqC10NG0t9DGvWiKZilS2uhIkQ.roa (raw, json)
Hash identifier: +vwbltDESykKqX6MxX4hd4pK9Sbo9KBgpWKDwi/m3+M=
Subject key identifier: 69:8A:82:D7:43:46:D2:DF:43:1A:F5:A2:29:98:A5:4B:6B:A1:22:44
Certificate issuer: /CN=9e95a361fe2b2c5292626ba4c56a65a814e48008
Certificate serial: 0184569C25EE319180FCC06416BA21BB883F
Authority key identifier: 9E:95:A3:61:FE:2B:2C:52:92:62:6B:A4:C5:6A:65:A8:14:E4:80:08
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/npWjYf4rLFKSYmukxWplqBTkgAg.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/02/f96f73-6686-4164-b23f-bf4e527b9fa8/1/aYqC10NG0t9DGvWiKZilS2uhIkQ.roa
Signing time: Tue 08 Nov 2022 09:39:44 +0000
ROA not before: Tue 08 Nov 2022 09:39:44 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 205920
IP address blocks: 2001:67c:8dc::/48 maxlen: 48
2a10:a500::/32 maxlen: 32
2a10:a500:20::/48 maxlen: 48
2a10:a500::/48 maxlen: 48
Validation: Failed, RFC 3779 resource not subset of parent's resources
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:84:56:9c:25:ee:31:91:80:fc:c0:64:16:ba:21:bb:88:3f
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=9e95a361fe2b2c5292626ba4c56a65a814e48008
Validity
Not Before: Nov 8 09:39:44 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=698a82d74346d2df431af5a22998a54b6ba12244
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b3:65:41:cf:39:86:16:15:df:7a:73:aa:59:9d:
8f:32:75:98:fa:37:c4:a8:12:36:82:eb:c3:33:a1:
79:5f:3f:1a:d6:21:ee:68:03:51:25:b7:74:bc:fa:
9a:ac:03:19:61:6d:06:6a:c9:4a:62:56:fa:9c:b3:
08:34:72:ff:02:6a:e4:9c:a7:a5:06:54:d4:33:d3:
7b:33:0f:c2:b3:55:2f:99:47:5b:1f:dc:3f:12:e4:
65:74:b6:20:a2:4b:83:10:ba:0b:56:c6:2d:7b:3f:
35:60:cd:58:de:ac:30:eb:c3:5c:53:66:be:49:6a:
d3:20:b6:b7:75:c3:d6:a9:67:ef:43:98:4c:f0:19:
8d:03:97:90:9d:64:97:2a:e0:fa:1f:02:1c:ba:79:
b1:c6:4c:53:31:e6:63:2f:80:8a:83:f8:93:6b:b6:
b1:db:bb:48:a6:d5:1c:a2:79:22:3a:56:28:c5:bc:
45:53:75:41:dc:e6:9b:e9:c3:34:ba:1b:62:bd:94:
e6:ee:18:d8:f7:a1:7c:fc:87:17:54:47:40:36:c7:
0b:1b:ab:86:a2:f3:da:e9:06:bf:c1:03:19:d2:c4:
d0:f1:a5:05:7e:ff:2e:d0:44:bd:b5:4a:63:e5:b1:
09:9c:76:46:80:9f:d8:27:4c:8d:bf:26:91:f2:1b:
21:31
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
69:8A:82:D7:43:46:D2:DF:43:1A:F5:A2:29:98:A5:4B:6B:A1:22:44
X509v3 Authority Key Identifier:
keyid:9E:95:A3:61:FE:2B:2C:52:92:62:6B:A4:C5:6A:65:A8:14:E4:80:08
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/npWjYf4rLFKSYmukxWplqBTkgAg.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/02/f96f73-6686-4164-b23f-bf4e527b9fa8/1/aYqC10NG0t9DGvWiKZilS2uhIkQ.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/02/f96f73-6686-4164-b23f-bf4e527b9fa8/1/npWjYf4rLFKSYmukxWplqBTkgAg.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2001:67c:8dc::/48
2a10:a500::/32
Signature Algorithm: sha256WithRSAEncryption
9b:11:11:c6:a1:b2:94:bb:c2:99:5f:5b:da:f5:78:da:dc:ac:
6e:34:81:07:78:26:ab:01:05:d4:56:e6:e7:38:f1:01:3d:c3:
62:8c:79:e7:a7:1b:7d:f3:03:90:53:aa:ac:0a:14:57:d7:df:
57:07:e3:8f:3a:7e:ab:3b:31:cf:bd:37:1a:cd:af:1f:a4:ea:
24:19:1a:54:f6:78:b9:47:df:db:e5:46:7e:51:7d:53:96:47:
f7:38:02:ce:80:5e:43:f8:a9:3e:7e:99:af:ab:d0:d7:5e:72:
d7:c9:cb:4e:a0:f5:eb:8e:0e:57:a7:7c:a7:ec:1a:85:59:b7:
aa:7c:59:2a:de:f4:c8:23:b6:41:41:57:40:54:9e:ed:09:e2:
ff:1c:8d:d1:8d:55:ea:7b:37:04:02:7e:07:5c:9a:9b:55:55:
d6:dc:b8:a8:07:a7:4d:de:0a:b7:1e:49:29:77:15:73:ff:a3:
12:ee:32:88:b2:93:dd:0e:e0:fe:2d:da:d7:8b:67:fd:48:0f:
35:8a:4f:98:53:2b:cf:cd:71:e3:4b:72:02:55:24:3a:54:d8:
ae:d0:eb:3b:91:2c:43:9a:1b:de:5b:4d:d0:7b:77:38:75:40:
32:09:9b:72:f8:fa:0f:03:f0:34:cf:e4:61:9f:fc:c9:d8:4c:
93:32:14:94
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Feb 16 15:51:31 2025 by rpki-client