Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/2e/6d59d9-9daf-4fcb-8d05-13bcc752119a/1/6zKEU-buEnu3iACA_5M0swmYMk0.roa
File: 6zKEU-buEnu3iACA_5M0swmYMk0.roa (raw, json)
Hash identifier: TRciSvgscrHggrvpoW4z8XfmZniKMXgqqT7FkfLQDGc=
Subject key identifier: EB:32:84:53:E6:EE:12:7B:B7:88:00:80:FF:93:34:B3:09:98:32:4D
Certificate issuer: /CN=b07ab922565e2b3e2cc63d485a55dd4fc41d357e
Certificate serial: 018223B02762FF72B8304CF6E3C18F554110
Authority key identifier: B0:7A:B9:22:56:5E:2B:3E:2C:C6:3D:48:5A:55:DD:4F:C4:1D:35:7E
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/sHq5IlZeKz4sxj1IWlXdT8QdNX4.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/2e/6d59d9-9daf-4fcb-8d05-13bcc752119a/1/6zKEU-buEnu3iACA_5M0swmYMk0.roa
Signing time: Fri 22 Jul 2022 02:15:23 +0000
ROA not before: Fri 22 Jul 2022 02:15:23 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 204214
IP address blocks: 2a12:f8c1::/48 maxlen: 48
Validation: Failed, RFC 3779 resource not subset of parent's resources
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:82:23:b0:27:62:ff:72:b8:30:4c:f6:e3:c1:8f:55:41:10
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=b07ab922565e2b3e2cc63d485a55dd4fc41d357e
Validity
Not Before: Jul 22 02:15:23 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=eb328453e6ee127bb7880080ff9334b30998324d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9c:7a:10:7d:99:dd:02:df:29:5c:73:f0:d4:46:
49:ba:0b:39:fd:e1:47:41:ab:1b:df:bd:c5:34:2a:
03:0b:f5:a0:9d:7b:c3:ef:a1:a2:ea:ed:bd:67:02:
ce:6d:a9:48:0d:2a:76:0d:b4:5b:d2:34:bf:93:8e:
63:77:03:09:61:48:d1:3a:7a:c5:28:8b:10:3e:ce:
b9:7d:7b:de:41:47:0a:89:67:24:a6:53:44:a8:35:
88:be:bc:f8:b6:5a:01:f9:3d:98:8a:8f:bb:55:92:
84:f3:38:05:f9:b0:03:d3:1d:11:2d:b5:04:fa:f7:
f1:12:20:7a:d5:98:4b:e3:b7:33:1f:5d:c5:a1:de:
6d:d3:af:15:76:68:58:d3:9c:6f:8e:33:85:77:8e:
c3:6b:06:ce:7c:ae:1b:35:77:72:74:63:39:31:4e:
c1:c8:89:43:41:b2:d1:c5:8b:4a:97:74:0c:e8:3d:
97:39:64:7d:b5:dd:a7:3d:b2:b1:e4:2c:21:62:e0:
e7:ff:01:9c:bb:37:23:f5:15:48:d0:c1:71:86:4d:
90:41:29:e2:80:81:fb:ac:36:3a:8a:e9:36:15:95:
c4:f6:18:3b:f3:bd:21:a5:f8:24:38:e6:e5:62:ce:
21:13:18:9d:b8:e4:5c:34:2c:d6:25:bf:78:fd:14:
7a:cd
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
EB:32:84:53:E6:EE:12:7B:B7:88:00:80:FF:93:34:B3:09:98:32:4D
X509v3 Authority Key Identifier:
keyid:B0:7A:B9:22:56:5E:2B:3E:2C:C6:3D:48:5A:55:DD:4F:C4:1D:35:7E
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/sHq5IlZeKz4sxj1IWlXdT8QdNX4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/2e/6d59d9-9daf-4fcb-8d05-13bcc752119a/1/6zKEU-buEnu3iACA_5M0swmYMk0.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/2e/6d59d9-9daf-4fcb-8d05-13bcc752119a/1/sHq5IlZeKz4sxj1IWlXdT8QdNX4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a12:f8c1::/48
Signature Algorithm: sha256WithRSAEncryption
5c:55:94:b4:d7:af:d1:7f:4e:93:dd:10:3d:af:2b:47:ae:fb:
5d:22:0f:04:0d:38:41:b1:a1:a6:ba:63:2c:fb:6f:fe:a7:13:
bc:0a:e1:8c:d9:7c:de:52:20:48:15:6c:83:29:14:ac:cc:9f:
24:44:0f:db:9f:93:d3:ab:61:c8:28:6d:49:b1:85:80:48:e9:
06:2f:3d:84:00:1e:4c:d6:d5:2a:6b:df:bc:2f:07:49:32:bf:
9f:78:35:92:c5:cb:8b:74:db:90:03:a2:11:8c:a5:b8:84:ca:
c6:fa:c5:59:a3:7d:0f:5e:c3:81:91:cf:62:04:fe:0b:1a:9a:
5b:f0:c2:4f:26:14:87:21:17:f8:77:ff:55:ae:fa:49:8b:4b:
4e:3a:28:a8:11:23:b8:11:98:9a:95:b1:8e:6c:dc:21:69:be:
79:11:84:ee:3b:e3:2f:73:07:ac:fe:ab:4b:82:c1:c0:ec:22:
d1:f6:38:1f:d9:6f:5f:59:ef:79:4b:bb:31:83:73:04:8b:6b:
ce:dd:90:3a:b1:8c:ed:4f:d2:a6:f7:1a:20:1f:a6:59:f3:bd:
37:e9:51:57:c4:6e:1e:6a:52:35:b0:8c:d5:cf:4a:28:32:6b:
bc:2b:e0:49:7a:94:15:d1:0f:05:93:38:0f:a6:d9:cd:2c:d9:
fd:f3:4b:cc
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 13 02:11:10 2025 by rpki-client