Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/2e/6d59d9-9daf-4fcb-8d05-13bcc752119a/1/X4zFF7-sdsfky_KIw8T90aJDKhU.roa
File: X4zFF7-sdsfky_KIw8T90aJDKhU.roa (raw, json)
Hash identifier: Zwg8JZPvTEcRJm4Ys2EfSRQf2vm4LZPdkqtyelowgpg=
Subject key identifier: 5F:8C:C5:17:BF:AC:76:C7:E4:CB:F2:88:C3:C4:FD:D1:A2:43:2A:15
Certificate issuer: /CN=b07ab922565e2b3e2cc63d485a55dd4fc41d357e
Certificate serial: 01857039B13438085A9E22CB47976F10BE41
Authority key identifier: B0:7A:B9:22:56:5E:2B:3E:2C:C6:3D:48:5A:55:DD:4F:C4:1D:35:7E
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/sHq5IlZeKz4sxj1IWlXdT8QdNX4.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/2e/6d59d9-9daf-4fcb-8d05-13bcc752119a/1/X4zFF7-sdsfky_KIw8T90aJDKhU.roa
Signing time: Mon 02 Jan 2023 02:05:07 +0000
ROA not before: Mon 02 Jan 2023 02:05:07 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 204214
IP address blocks: 2a12:f8c1::/48 maxlen: 48
Validation: Failed, RFC 3779 resource not subset of parent's resources
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:85:70:39:b1:34:38:08:5a:9e:22:cb:47:97:6f:10:be:41
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=b07ab922565e2b3e2cc63d485a55dd4fc41d357e
Validity
Not Before: Jan 2 02:05:07 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=5f8cc517bfac76c7e4cbf288c3c4fdd1a2432a15
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a0:89:23:27:f4:4c:9c:c9:ac:6c:d5:02:01:51:
b1:b7:b0:9d:b6:d0:ce:51:ee:7d:8b:98:05:0b:3f:
a2:0b:4f:10:eb:70:f0:26:79:a2:57:5d:1b:78:04:
a4:14:8b:31:c7:fc:c8:22:e8:5f:9d:71:a7:06:a0:
5e:2f:df:16:8a:ff:0f:85:1b:52:e2:59:53:33:f9:
eb:aa:37:90:c2:3c:6f:a3:fa:fa:bc:83:5e:f0:48:
3a:ae:97:c6:21:d0:4b:58:68:46:26:aa:85:c3:30:
1e:69:ee:ea:22:8c:cc:9c:d1:04:4d:fd:33:44:4f:
ec:21:21:1d:8d:02:74:ef:ee:d7:3b:b7:61:ab:8a:
4e:16:39:70:73:a1:18:f1:d2:4e:e7:57:9a:97:6d:
c6:d8:f6:36:70:0f:13:c0:5e:a9:19:55:31:bd:e3:
e7:94:10:52:a8:5b:5b:c9:fa:0b:7c:c3:27:9e:d2:
08:ad:de:4b:c5:fd:b3:bb:5e:9c:de:bb:6f:5b:97:
9a:54:5a:3d:d0:a0:9c:52:ae:0e:59:10:51:99:8d:
70:6d:f3:c4:fc:71:8b:c2:b9:9e:d5:0a:fa:22:9d:
ad:ce:17:46:a7:ed:89:8f:4e:47:78:2f:56:67:44:
99:72:df:cc:09:5f:58:63:f7:68:e1:c7:f0:ef:67:
dc:cb
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
5F:8C:C5:17:BF:AC:76:C7:E4:CB:F2:88:C3:C4:FD:D1:A2:43:2A:15
X509v3 Authority Key Identifier:
keyid:B0:7A:B9:22:56:5E:2B:3E:2C:C6:3D:48:5A:55:DD:4F:C4:1D:35:7E
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/sHq5IlZeKz4sxj1IWlXdT8QdNX4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/2e/6d59d9-9daf-4fcb-8d05-13bcc752119a/1/X4zFF7-sdsfky_KIw8T90aJDKhU.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/2e/6d59d9-9daf-4fcb-8d05-13bcc752119a/1/sHq5IlZeKz4sxj1IWlXdT8QdNX4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a12:f8c1::/48
Signature Algorithm: sha256WithRSAEncryption
6b:31:e2:4e:b0:4e:20:88:22:2d:03:8a:cc:0a:5c:86:0e:a8:
d8:15:0c:74:a2:09:78:67:4c:10:49:c3:ee:1b:3c:94:82:04:
3b:c3:33:ac:ce:da:6e:ca:e7:ce:b0:9f:a0:80:21:1d:ed:29:
5c:d3:be:4a:53:0f:de:3c:08:05:9a:c8:7f:97:c9:7f:d5:3d:
40:ad:67:43:aa:86:1c:03:89:75:d1:fc:d2:84:14:87:4b:bc:
2b:1c:f0:8a:4b:dd:de:00:7c:0e:73:6b:ce:e9:70:73:a0:39:
49:b1:59:5e:8c:b7:fd:9f:67:f2:7e:52:63:12:40:af:17:52:
c2:bf:4c:7b:67:dd:b9:04:24:65:e8:23:54:8d:39:11:c0:72:
d9:9b:2c:96:6c:15:8e:43:c3:72:89:3e:44:85:90:11:e1:c1:
8d:ed:ce:f0:89:b9:0b:28:6b:90:85:78:8e:0c:f7:fb:fb:5a:
2b:7e:54:49:d1:6b:84:dc:ff:86:64:24:1f:67:7e:89:aa:2f:
d5:79:8b:4e:58:b1:e2:56:b5:e1:3c:04:27:42:cd:21:46:0c:
c3:6d:24:79:63:c6:ca:52:c5:a5:3e:e4:62:af:55:3d:fb:37:
cb:89:55:b9:37:5b:3f:48:fe:fb:e1:60:39:d3:fd:33:4c:f1:
17:eb:7d:92
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 19:00:55 2024 by rpki-client on console-ams.rpki-client.org