Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/1e/3caa51-7a21-499d-a545-bafbdfc8132a/1/Sb_ppmk6Pm2r8yduMLYI0I9nQQw.roa
File: Sb_ppmk6Pm2r8yduMLYI0I9nQQw.roa (raw, json)
Hash identifier: zNXcR6xbPcKhWDRNC5ILz+tJWcS/mPzR5z1fN69tBBM=
Subject key identifier: 49:BF:E9:A6:69:3A:3E:6D:AB:F3:27:6E:30:B6:08:D0:8F:67:41:0C
Certificate issuer: /CN=4f14112d05e9d876149d2778d48edaaa324db0a5
Certificate serial: 018DA8B922C7A99999ED1873C59380827FB2
Authority key identifier: 4F:14:11:2D:05:E9:D8:76:14:9D:27:78:D4:8E:DA:AA:32:4D:B0:A5
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/TxQRLQXp2HYUnSd41I7aqjJNsKU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/1e/3caa51-7a21-499d-a545-bafbdfc8132a/1/Sb_ppmk6Pm2r8yduMLYI0I9nQQw.roa
Signing time: Wed 14 Feb 2024 17:45:21 +0000
ROA not before: Wed 14 Feb 2024 17:45:21 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 200216
IP address blocks: 2a13:d3c0::/29 maxlen: 29
2a13:dec0::/29 maxlen: 29
2a14:1300::/29 maxlen: 29
2a14:1500::/29 maxlen: 29
Validation: Failed, RFC 3779 resource not subset of parent's resources
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8d:a8:b9:22:c7:a9:99:99:ed:18:73:c5:93:80:82:7f:b2
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4f14112d05e9d876149d2778d48edaaa324db0a5
Validity
Not Before: Feb 14 17:45:21 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=49bfe9a6693a3e6dabf3276e30b608d08f67410c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bc:5b:6f:21:16:10:2d:20:1a:1c:51:c0:d8:40:
37:cc:61:24:23:71:d4:02:b8:e0:49:21:0f:4d:be:
20:e0:6c:2f:3b:5f:21:f6:62:76:1b:dd:d7:9f:cc:
c6:c8:6f:2d:e0:90:4f:55:62:e8:40:37:3a:79:da:
b4:d0:ae:ea:32:84:ba:9e:ad:8f:7b:b2:4c:ab:8f:
78:c7:63:7c:67:1d:58:38:a3:08:c5:76:2b:26:66:
36:e0:76:71:c9:4b:68:6a:0b:42:8f:57:12:75:b1:
37:a2:c0:0c:0c:b7:81:f0:be:9b:da:ae:b6:df:a9:
7c:0a:90:2b:02:5b:38:a5:19:6a:ab:ee:0e:f7:f4:
4c:35:cc:ea:6e:94:b9:2d:34:54:8a:5a:7a:3c:f2:
cb:94:93:55:4f:dc:75:ec:a5:e0:32:dd:2a:4b:f5:
b1:f0:67:d6:0d:08:0b:8f:df:46:4c:75:25:54:04:
34:da:88:c3:9d:8b:6a:38:8e:11:5a:b9:05:78:4d:
c4:5b:b4:fa:ce:3c:e4:8b:05:cb:f6:a1:ac:f7:e7:
2a:ad:76:c1:a3:7e:50:5d:8e:a2:19:e7:0a:17:96:
a0:b6:d0:42:73:64:25:60:5e:d6:45:a0:0e:c4:e2:
0b:19:e6:bb:b5:ea:63:c6:f7:bf:90:91:4e:60:33:
57:b9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
49:BF:E9:A6:69:3A:3E:6D:AB:F3:27:6E:30:B6:08:D0:8F:67:41:0C
X509v3 Authority Key Identifier:
keyid:4F:14:11:2D:05:E9:D8:76:14:9D:27:78:D4:8E:DA:AA:32:4D:B0:A5
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/TxQRLQXp2HYUnSd41I7aqjJNsKU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/1e/3caa51-7a21-499d-a545-bafbdfc8132a/1/Sb_ppmk6Pm2r8yduMLYI0I9nQQw.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/1e/3caa51-7a21-499d-a545-bafbdfc8132a/1/TxQRLQXp2HYUnSd41I7aqjJNsKU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a13:d3c0::/29
2a13:dec0::/29
2a14:1300::/29
2a14:1500::/29
Signature Algorithm: sha256WithRSAEncryption
4e:3e:9e:69:92:8c:95:b9:d9:dc:4b:a2:6f:a6:1f:09:11:df:
f8:35:82:3c:98:cd:99:e0:2e:a8:07:dc:0d:19:af:1a:83:0a:
94:34:ce:71:8c:19:b1:9a:bc:28:0d:f7:27:d7:e3:90:93:14:
5a:df:ee:1b:88:21:d2:b1:f2:10:84:03:db:3c:80:5b:95:1d:
c3:2d:19:ff:58:f9:90:3b:46:0c:56:3e:31:c8:30:c2:d3:5c:
6d:56:50:d4:03:93:8c:8f:d9:4d:bf:b6:87:b6:eb:67:72:2c:
9c:30:81:47:40:0f:cc:f8:e4:72:fa:09:26:a6:0d:5e:3c:23:
5b:01:0b:d8:11:be:8d:69:5d:a8:5e:e2:c7:1a:e3:84:e2:d7:
70:68:d9:cc:f5:1f:e5:a4:8e:24:42:3a:98:d5:8f:a8:e8:5a:
43:1b:5e:06:78:9c:4a:22:19:79:d0:6d:bb:bc:a2:e6:80:2b:
b8:b3:05:dd:8f:a8:1a:6c:f2:a1:ec:28:4f:0d:81:d8:8e:c0:
a9:80:91:bd:49:94:97:17:ea:f6:d4:c2:d6:54:e5:2a:4e:64:
e0:7f:d9:ae:2e:63:af:90:88:e3:b9:7a:ba:b2:fe:c1:43:fb:
6c:ab:61:b1:11:17:30:e6:9a:f6:f0:4b:f1:18:de:a2:91:6b:
90:cb:9e:4d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Feb 17 08:13:46 2025 by rpki-client