Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/2e/6d59d9-9daf-4fcb-8d05-13bcc752119a/1/CXartV-aJRwCdFe-7Asas0Y18rE.roa
File: CXartV-aJRwCdFe-7Asas0Y18rE.roa (raw, json)
Hash identifier: 9yu5zQ7Jw5NUfMVPOa7WxIbXKEnamU5LXAt7dyNz7G0=
Subject key identifier: 09:76:AB:B5:5F:9A:25:1C:02:74:57:BE:EC:0B:1A:B3:46:35:F2:B1
Certificate issuer: /CN=b07ab922565e2b3e2cc63d485a55dd4fc41d357e
Certificate serial: 018B8E71210CC884B23B68166AF21C00F483
Authority key identifier: B0:7A:B9:22:56:5E:2B:3E:2C:C6:3D:48:5A:55:DD:4F:C4:1D:35:7E
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/sHq5IlZeKz4sxj1IWlXdT8QdNX4.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/2e/6d59d9-9daf-4fcb-8d05-13bcc752119a/1/CXartV-aJRwCdFe-7Asas0Y18rE.roa
Signing time: Thu 02 Nov 2023 05:11:00 +0000
ROA not before: Thu 02 Nov 2023 05:11:00 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 150298
IP address blocks: 2a12:f8c1:200::/40 maxlen: 40
2a12:f8c1:8::/48 maxlen: 48
Validation: Failed, RFC 3779 resource not subset of parent's resources
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8b:8e:71:21:0c:c8:84:b2:3b:68:16:6a:f2:1c:00:f4:83
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=b07ab922565e2b3e2cc63d485a55dd4fc41d357e
Validity
Not Before: Nov 2 05:11:00 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=0976abb55f9a251c027457beec0b1ab34635f2b1
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bf:1e:2a:24:31:44:18:67:9a:ac:76:e1:3a:b6:
e6:02:38:7f:46:d0:8e:9b:2b:61:ad:2c:08:e6:e6:
7a:10:a4:e9:29:20:ab:bb:d8:f1:44:08:2e:3a:12:
e2:36:2d:7c:bc:27:62:80:9d:3d:0a:e5:1c:37:58:
11:57:bb:27:80:2f:6c:46:fc:ab:c5:36:42:67:68:
03:1a:60:01:e4:d4:88:18:37:41:29:af:a2:62:71:
0a:db:d0:b6:cb:ea:ba:8f:a8:1c:38:e0:8c:03:a3:
e8:ad:ca:4b:eb:42:2c:21:96:b8:99:7b:91:38:6d:
4e:67:29:06:5e:cc:5e:0f:e9:05:99:f6:56:83:34:
cc:9b:60:e9:85:ca:72:c3:dc:74:71:27:da:4b:83:
ef:b8:07:9f:6e:e2:78:f9:76:2c:d8:6e:d4:36:88:
a0:56:36:18:ee:c1:9a:52:9c:83:1b:61:a6:43:ca:
2c:94:62:7c:fe:50:d4:a7:f7:2e:f0:e5:5e:03:03:
96:02:3c:ed:b2:bf:6b:25:51:7d:cc:b5:cc:ea:43:
0d:5f:b0:12:d0:4f:82:d1:09:7b:96:7d:94:bb:ec:
47:d3:e7:ea:dc:2a:d2:cb:af:4b:1e:56:f7:4d:17:
cf:ec:e8:21:77:c9:6d:b7:6a:53:2a:1f:7b:3b:67:
e3:b7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
09:76:AB:B5:5F:9A:25:1C:02:74:57:BE:EC:0B:1A:B3:46:35:F2:B1
X509v3 Authority Key Identifier:
keyid:B0:7A:B9:22:56:5E:2B:3E:2C:C6:3D:48:5A:55:DD:4F:C4:1D:35:7E
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/sHq5IlZeKz4sxj1IWlXdT8QdNX4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/2e/6d59d9-9daf-4fcb-8d05-13bcc752119a/1/CXartV-aJRwCdFe-7Asas0Y18rE.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/2e/6d59d9-9daf-4fcb-8d05-13bcc752119a/1/sHq5IlZeKz4sxj1IWlXdT8QdNX4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a12:f8c1:8::/48
2a12:f8c1:200::/40
Signature Algorithm: sha256WithRSAEncryption
40:c1:cd:d6:c3:1a:79:f0:2a:5b:65:4b:04:36:59:58:92:88:
db:69:7f:ed:a4:f7:24:ea:bb:9d:1f:bd:ca:a7:12:65:ff:30:
72:b5:bf:a6:65:56:c8:7e:ff:d6:49:24:30:83:c4:8a:bf:c5:
d5:be:06:44:5f:cc:81:44:19:c9:cd:4d:01:2c:53:47:e0:1f:
1e:db:d4:c2:11:c6:88:78:64:e3:48:71:16:56:95:4d:26:d3:
2a:17:37:95:ca:d5:ee:d3:8b:36:61:15:6d:91:d3:4b:00:8f:
e0:64:13:d3:3d:b6:e4:f4:33:6e:42:f4:cc:81:32:67:1f:59:
00:60:d2:8d:80:c6:9a:fb:8a:30:d1:f0:7f:db:71:7f:85:53:
00:59:d5:2c:ed:1c:10:ea:7f:98:01:a4:29:b7:1b:6b:45:b8:
02:82:cd:0f:c2:9d:d3:f6:9a:bd:77:b5:12:aa:98:20:13:f5:
1d:55:e0:43:97:ac:7b:8e:b5:f7:65:d5:40:83:44:14:24:bb:
f3:8c:28:53:9f:6a:10:44:a3:2a:ac:95:91:87:1b:23:b1:66:
f1:4e:e0:b4:c9:40:4c:2c:90:52:cf:33:7a:d0:e6:83:dd:28:
fd:6b:f3:b7:08:46:d1:e0:32:cf:ea:53:d8:3c:5d:5a:fd:6c:
ce:c0:df:6d
-----BEGIN CERTIFICATE-----
MIIFCDCCA/CgAwIBAgISAYuOcSEMyISyO2gWavIcAPSDMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGIwN2FiOTIyNTY1ZTJiM2UyY2M2M2Q0ODVhNTVkZDRmYzQx
ZDM1N2UwHhcNMjMxMTAyMDUxMTAwWhcNMjQwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EygwOTc2YWJiNTVmOWEyNTFjMDI3NDU3YmVlYzBiMWFiMzQ2MzVmMmIxMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAvx4qJDFEGGearHbhOrbmAjh/RtCO
mythrSwI5uZ6EKTpKSCru9jxRAguOhLiNi18vCdigJ09CuUcN1gRV7sngC9sRvyr
xTZCZ2gDGmAB5NSIGDdBKa+iYnEK29C2y+q6j6gcOOCMA6PorcpL60IsIZa4mXuR
OG1OZykGXsxeD+kFmfZWgzTMm2Dphcpyw9x0cSfaS4PvuAefbuJ4+XYs2G7UNoig
VjYY7sGaUpyDG2GmQ8oslGJ8/lDUp/cu8OVeAwOWAjztsr9rJVF9zLXM6kMNX7AS
0E+C0Ql7ln2Uu+xH0+fq3CrSy69LHlb3TRfP7Oghd8ltt2pTKh97O2fjtwIDAQAB
o4ICFDCCAhAwHQYDVR0OBBYEFAl2q7VfmiUcAnRXvuwLGrNGNfKxMB8GA1UdIwQY
MBaAFLB6uSJWXis+LMY9SFpV3U/EHTV+MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvc0hxNUlsWmVLejRzeGoxSVdsWGRUOFFkTlg0LmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8yZS82ZDU5ZDktOWRhZi00ZmNiLThkMDUt
MTNiY2M3NTIxMTlhLzEvQ1hhcnRWLWFKUndDZEZlLTdBc2FzMFkxOHJFLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8yZS82ZDU5ZDktOWRhZi00ZmNiLThkMDUtMTNiY2M3NTIxMTlh
LzEvc0hxNUlsWmVLejRzeGoxSVdsWGRUOFFkTlg0LmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCoGCCsGAQUFBwEHAQH/BBswGTAXBAIAAjARAwcAKhL4wQAI
AwYAKhL4wQIwDQYJKoZIhvcNAQELBQADggEBAEDBzdbDGnnwKltlSwQ2WViSiNtp
f+2k9yTqu50fvcqnEmX/MHK1v6ZlVsh+/9ZJJDCDxIq/xdW+BkRfzIFEGcnNTQEs
U0fgHx7b1MIRxoh4ZONIcRZWlU0m0yoXN5XK1e7TizZhFW2R00sAj+BkE9M9tuT0
M25C9MyBMmcfWQBg0o2Axpr7ijDR8H/bcX+FUwBZ1SztHBDqf5gBpCm3G2tFuAKC
zQ/CndP2mr13tRKqmCAT9R1V4EOXrHuOtfdl1UCDRBQku/OMKFOfahBEoyqslZGH
GyOxZvFO4LTJQEwskFLPM3rQ5oPdKP1r87cIRtHgMs/qU9g8XVr9bM7A320=
-----END CERTIFICATE-----
Generated at Mon Feb 17 07:36:52 2025 by rpki-client