Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/2e/6d59d9-9daf-4fcb-8d05-13bcc752119a/1/7vwgAmfC1LDdSWtTjfFZpINciH8.roa
File: 7vwgAmfC1LDdSWtTjfFZpINciH8.roa (raw, json)
Hash identifier: TFiJVT5+lm8QajPHkuu7eBmggljv21AgMcxl2CvL81E=
Subject key identifier: EE:FC:20:02:67:C2:D4:B0:DD:49:6B:53:8D:F1:59:A4:83:5C:88:7F
Certificate issuer: /CN=b07ab922565e2b3e2cc63d485a55dd4fc41d357e
Certificate serial: 01841D2CB4AA0EE0172BF03DE1EBF155E821
Authority key identifier: B0:7A:B9:22:56:5E:2B:3E:2C:C6:3D:48:5A:55:DD:4F:C4:1D:35:7E
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/sHq5IlZeKz4sxj1IWlXdT8QdNX4.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/2e/6d59d9-9daf-4fcb-8d05-13bcc752119a/1/7vwgAmfC1LDdSWtTjfFZpINciH8.roa
Signing time: Fri 28 Oct 2022 05:59:39 +0000
ROA not before: Fri 28 Oct 2022 05:59:39 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 202118
IP address blocks: 2a12:f8c1:20::/44 maxlen: 44
Validation: Failed, RFC 3779 resource not subset of parent's resources
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:84:1d:2c:b4:aa:0e:e0:17:2b:f0:3d:e1:eb:f1:55:e8:21
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=b07ab922565e2b3e2cc63d485a55dd4fc41d357e
Validity
Not Before: Oct 28 05:59:39 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=eefc200267c2d4b0dd496b538df159a4835c887f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:96:92:35:91:25:2d:f2:ee:da:1a:72:09:e6:27:
92:85:42:ed:d0:8a:10:ff:72:55:05:88:24:8e:2c:
a1:50:9e:89:1e:76:92:b3:dd:77:09:41:01:43:44:
57:c0:4e:b8:76:a7:6d:9d:21:b8:c2:98:0f:63:15:
98:b4:5d:fd:e7:0d:11:3d:56:f6:6f:a2:c9:d7:37:
bc:e0:e8:a7:6f:f8:d7:a9:3c:d5:a2:69:c4:64:9a:
1c:1b:e1:6f:46:3b:d6:06:2e:cc:29:f4:bd:aa:05:
43:16:c5:a6:5c:7e:5e:1b:48:03:fd:dc:8c:57:e2:
6a:4c:1c:e6:9c:a2:2c:38:eb:6c:dc:2c:dc:9a:18:
32:c2:6f:7e:db:31:ab:70:22:54:0c:47:9f:09:2c:
7c:c4:6d:db:6b:6d:68:42:3f:4c:23:47:f3:2a:45:
c5:8e:e5:7f:0b:8c:01:d5:6e:c1:be:ac:44:eb:b6:
be:19:b3:61:b7:52:a4:eb:ac:0e:d7:78:45:bc:de:
a8:b4:bd:31:ca:f8:2c:ce:97:ee:37:b2:3d:17:85:
7f:96:82:61:32:3a:f5:46:2a:5c:83:f8:25:4e:22:
cf:cc:19:aa:3a:58:bb:72:1e:a4:ff:fd:da:a7:fa:
79:3a:07:42:0c:c3:d2:b2:88:f5:f2:64:8f:32:8f:
f7:7b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
EE:FC:20:02:67:C2:D4:B0:DD:49:6B:53:8D:F1:59:A4:83:5C:88:7F
X509v3 Authority Key Identifier:
keyid:B0:7A:B9:22:56:5E:2B:3E:2C:C6:3D:48:5A:55:DD:4F:C4:1D:35:7E
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/sHq5IlZeKz4sxj1IWlXdT8QdNX4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/2e/6d59d9-9daf-4fcb-8d05-13bcc752119a/1/7vwgAmfC1LDdSWtTjfFZpINciH8.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/2e/6d59d9-9daf-4fcb-8d05-13bcc752119a/1/sHq5IlZeKz4sxj1IWlXdT8QdNX4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a12:f8c1:20::/44
Signature Algorithm: sha256WithRSAEncryption
a8:24:89:ea:0c:06:b5:c6:59:10:e8:ec:52:50:bc:5e:34:c2:
07:9f:b8:15:61:9c:c0:22:3c:21:0d:b9:d9:eb:77:83:eb:ff:
9b:4d:d8:69:91:71:ca:95:31:48:55:e1:11:90:75:2d:29:27:
98:e9:7e:d7:fa:9c:79:d7:8e:da:ed:b9:35:df:63:68:d2:17:
b3:3b:cc:11:a8:94:72:47:59:dd:ce:c3:00:32:a9:9d:0b:d5:
f1:a1:09:2f:21:e5:00:28:1b:4d:73:1b:f9:ea:fb:74:a7:3a:
66:0e:a8:cf:2f:8a:ca:a2:46:5e:2f:02:33:f7:0e:32:31:32:
94:cb:89:04:0e:05:35:13:e6:25:f5:2d:63:84:5c:ce:c7:1f:
8f:53:8c:4f:e3:f8:e9:e7:d4:5f:b6:85:7e:a9:44:7a:d4:59:
ed:ff:88:36:cf:35:62:d2:36:2c:00:79:4f:5d:e0:05:e1:39:
36:50:75:f7:43:d5:ae:e4:d7:1e:e4:15:20:2b:e6:47:ed:21:
79:31:3d:ba:7d:b1:be:60:ff:3c:83:93:f9:92:70:ed:3d:88:
04:30:dd:68:de:94:f3:28:23:25:83:e9:88:42:7d:16:5d:59:
3a:67:22:bb:78:18:b0:57:4e:9c:14:15:11:90:aa:e9:45:43:
77:45:c7:20
-----BEGIN CERTIFICATE-----
MIIFADCCA+igAwIBAgISAYQdLLSqDuAXK/A94evxVeghMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGIwN2FiOTIyNTY1ZTJiM2UyY2M2M2Q0ODVhNTVkZDRmYzQx
ZDM1N2UwHhcNMjIxMDI4MDU1OTM5WhcNMjMwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EyhlZWZjMjAwMjY3YzJkNGIwZGQ0OTZiNTM4ZGYxNTlhNDgzNWM4ODdmMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAlpI1kSUt8u7aGnIJ5ieShULt0IoQ
/3JVBYgkjiyhUJ6JHnaSs913CUEBQ0RXwE64dqdtnSG4wpgPYxWYtF395w0RPVb2
b6LJ1ze84Oinb/jXqTzVomnEZJocG+FvRjvWBi7MKfS9qgVDFsWmXH5eG0gD/dyM
V+JqTBzmnKIsOOts3Czcmhgywm9+2zGrcCJUDEefCSx8xG3ba21oQj9MI0fzKkXF
juV/C4wB1W7BvqxE67a+GbNht1Kk66wO13hFvN6otL0xyvgszpfuN7I9F4V/loJh
Mjr1Ripcg/glTiLPzBmqOli7ch6k//3ap/p5OgdCDMPSsoj18mSPMo/3ewIDAQAB
o4ICDDCCAggwHQYDVR0OBBYEFO78IAJnwtSw3UlrU43xWaSDXIh/MB8GA1UdIwQY
MBaAFLB6uSJWXis+LMY9SFpV3U/EHTV+MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvc0hxNUlsWmVLejRzeGoxSVdsWGRUOFFkTlg0LmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8yZS82ZDU5ZDktOWRhZi00ZmNiLThkMDUt
MTNiY2M3NTIxMTlhLzEvN3Z3Z0FtZkMxTERkU1d0VGpmRlpwSU5jaUg4LnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8yZS82ZDU5ZDktOWRhZi00ZmNiLThkMDUtMTNiY2M3NTIxMTlh
LzEvc0hxNUlsWmVLejRzeGoxSVdsWGRUOFFkTlg0LmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCIGCCsGAQUFBwEHAQH/BBMwETAPBAIAAjAJAwcEKhL4wQAg
MA0GCSqGSIb3DQEBCwUAA4IBAQCoJInqDAa1xlkQ6OxSULxeNMIHn7gVYZzAIjwh
DbnZ63eD6/+bTdhpkXHKlTFIVeERkHUtKSeY6X7X+px5147a7bk132No0hezO8wR
qJRyR1ndzsMAMqmdC9XxoQkvIeUAKBtNcxv56vt0pzpmDqjPL4rKokZeLwIz9w4y
MTKUy4kEDgU1E+Yl9S1jhFzOxx+PU4xP4/jp59RftoV+qUR61Fnt/4g2zzVi0jYs
AHlPXeAF4Tk2UHX3Q9Wu5Nce5BUgK+ZH7SF5MT26fbG+YP88g5P5knDtPYgEMN1o
3pTzKCMlg+mIQn0WXVk6ZyK7eBiwV06cFBURkKrpRUN3Rccg
-----END CERTIFICATE-----
Generated at Mon Feb 17 07:18:42 2025 by rpki-client