Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/2e/6d59d9-9daf-4fcb-8d05-13bcc752119a/1/GjNggXAFjDJJ4PJ57XZMabD1rM4.roa
File: GjNggXAFjDJJ4PJ57XZMabD1rM4.roa (raw, json)
Hash identifier: vDwFawE5fNuNWo7n1KRBt9EjaUjFSz/Zmn7XBRCebck=
Subject key identifier: 1A:33:60:81:70:05:8C:32:49:E0:F2:79:ED:76:4C:69:B0:F5:AC:CE
Certificate issuer: /CN=b07ab922565e2b3e2cc63d485a55dd4fc41d357e
Certificate serial: 01877F0BA2006C84A0241A437A6C736B87E1
Authority key identifier: B0:7A:B9:22:56:5E:2B:3E:2C:C6:3D:48:5A:55:DD:4F:C4:1D:35:7E
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/sHq5IlZeKz4sxj1IWlXdT8QdNX4.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/2e/6d59d9-9daf-4fcb-8d05-13bcc752119a/1/GjNggXAFjDJJ4PJ57XZMabD1rM4.roa
Signing time: Fri 14 Apr 2023 09:14:41 +0000
ROA not before: Fri 14 Apr 2023 09:14:41 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 148996
IP address blocks: 2a12:f8c2:200::/40 maxlen: 40
Validation: Failed, RFC 3779 resource not subset of parent's resources
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:87:7f:0b:a2:00:6c:84:a0:24:1a:43:7a:6c:73:6b:87:e1
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=b07ab922565e2b3e2cc63d485a55dd4fc41d357e
Validity
Not Before: Apr 14 09:14:41 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=1a33608170058c3249e0f279ed764c69b0f5acce
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b0:6f:5e:66:14:9e:9d:e5:fe:2e:1a:9c:29:72:
42:08:94:4b:a9:c5:bc:ff:23:7a:09:89:3d:6c:be:
28:e6:0b:7c:db:e3:28:bd:51:2d:cf:ef:04:f0:88:
84:7f:26:06:84:b9:6f:a5:94:b6:7f:c8:b7:f4:20:
28:56:39:68:b6:e3:97:74:01:87:1c:a2:de:05:43:
55:ee:5a:b8:f5:ca:57:cd:23:38:f8:46:5a:c3:69:
26:e2:11:1e:92:7b:52:59:cc:84:01:20:f2:f3:4f:
2c:3a:75:2b:ac:c9:11:5b:67:42:0d:de:3a:a4:92:
0f:29:80:ff:40:fe:99:2b:d4:c6:d9:82:04:0d:73:
c0:06:f1:e1:8d:e9:17:4f:c3:9f:26:c5:8e:db:40:
b9:94:03:2d:48:a7:e1:31:0a:06:c0:7a:d7:98:34:
18:12:c8:c4:7a:d3:ee:5c:9b:65:35:7d:8a:70:8e:
90:15:40:cc:e2:e2:ce:a4:4a:b7:6c:53:0a:8f:54:
f7:98:4a:2d:b8:7a:1b:6a:d6:ea:2b:b8:e1:14:f2:
03:cd:8c:1d:b7:a9:38:04:84:e8:bd:de:67:07:0d:
fa:31:d1:94:98:20:ee:eb:fa:ed:11:af:02:e9:44:
a5:cb:9c:c7:fa:58:6d:6a:b6:16:a9:e6:7f:92:bd:
07:03
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
1A:33:60:81:70:05:8C:32:49:E0:F2:79:ED:76:4C:69:B0:F5:AC:CE
X509v3 Authority Key Identifier:
keyid:B0:7A:B9:22:56:5E:2B:3E:2C:C6:3D:48:5A:55:DD:4F:C4:1D:35:7E
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/sHq5IlZeKz4sxj1IWlXdT8QdNX4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/2e/6d59d9-9daf-4fcb-8d05-13bcc752119a/1/GjNggXAFjDJJ4PJ57XZMabD1rM4.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/2e/6d59d9-9daf-4fcb-8d05-13bcc752119a/1/sHq5IlZeKz4sxj1IWlXdT8QdNX4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a12:f8c2:200::/40
Signature Algorithm: sha256WithRSAEncryption
6e:8c:2f:6e:f5:b2:c5:b0:1c:42:ba:e7:1c:dd:a5:f5:b8:41:
72:4b:a4:3c:85:53:c1:09:87:eb:e5:3a:28:ba:5c:27:29:92:
f1:ff:5a:00:a6:f0:68:9b:bc:81:20:ef:1d:82:dd:1d:fd:a9:
86:14:fe:59:0f:49:96:fb:3b:c2:39:18:27:38:85:73:2f:24:
73:82:e3:3c:cc:83:5e:81:63:11:cb:5b:27:e3:24:a8:f8:ea:
e1:05:32:ee:5a:44:33:64:cb:48:00:07:15:21:0f:21:e0:ba:
e0:8e:6e:89:56:83:c4:b7:5f:06:e5:2c:e3:fe:3b:26:ce:18:
87:3a:ef:9a:11:75:bc:9c:26:e2:eb:fe:89:6e:a8:5c:8c:19:
ae:ef:64:a3:ba:fc:b7:ac:5f:1b:8b:9e:44:44:c3:b6:aa:24:
83:70:4e:bf:f8:4f:d4:22:97:14:70:d3:85:c8:26:3b:e8:d3:
bf:d1:24:f0:d5:d5:82:95:a2:bd:8c:03:85:30:b9:f4:c7:2f:
b0:96:42:2a:da:3c:95:b6:32:ba:0f:b3:5f:00:a7:08:1b:3e:
2e:ce:b3:9e:25:df:be:2a:0a:84:0c:b5:be:fb:ed:17:e5:0b:
b2:bd:9c:ec:3a:bd:ff:51:80:90:2e:da:76:ce:9b:28:34:86:
df:df:fc:e3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 19:00:55 2024 by rpki-client on console-ams.rpki-client.org