Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/2e/6d59d9-9daf-4fcb-8d05-13bcc752119a/1/_0QN8vXs3FolD5AAwmTd44QRRa4.roa
File: _0QN8vXs3FolD5AAwmTd44QRRa4.roa (raw, json)
Hash identifier: nV+q67GF2q5NWXXaajJGNYeERDDL4xhSxt1XQAoQ2tA=
Subject key identifier: FF:44:0D:F2:F5:EC:DC:5A:25:0F:90:00:C2:64:DD:E3:84:11:45:AE
Certificate issuer: /CN=b07ab922565e2b3e2cc63d485a55dd4fc41d357e
Certificate serial: 018B8E71208E68FA6B1000DB7ACF5E78C08F
Authority key identifier: B0:7A:B9:22:56:5E:2B:3E:2C:C6:3D:48:5A:55:DD:4F:C4:1D:35:7E
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/sHq5IlZeKz4sxj1IWlXdT8QdNX4.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/2e/6d59d9-9daf-4fcb-8d05-13bcc752119a/1/_0QN8vXs3FolD5AAwmTd44QRRa4.roa
Signing time: Thu 02 Nov 2023 05:11:00 +0000
ROA not before: Thu 02 Nov 2023 05:11:00 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 149852
IP address blocks: 2a12:f8c1:6::/48 maxlen: 48
Validation: Failed, RFC 3779 resource not subset of parent's resources
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8b:8e:71:20:8e:68:fa:6b:10:00:db:7a:cf:5e:78:c0:8f
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=b07ab922565e2b3e2cc63d485a55dd4fc41d357e
Validity
Not Before: Nov 2 05:11:00 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=ff440df2f5ecdc5a250f9000c264dde3841145ae
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c7:58:a5:22:b5:b7:fe:5f:4f:3f:8e:60:dc:de:
ed:f1:93:d9:ef:d2:15:77:81:6a:bd:da:8c:93:6d:
0d:55:97:1d:cc:6b:83:71:a0:e6:e3:4c:30:d5:77:
65:18:62:8f:3f:63:93:03:f5:31:48:99:06:91:b0:
95:8d:a1:01:c1:5d:17:14:40:a2:0c:88:42:4e:72:
01:07:95:fa:3f:c0:74:b7:5f:f2:2c:f0:3c:30:28:
d2:51:a7:24:f5:95:8e:a1:af:10:3d:a6:cc:92:1c:
da:a4:d8:fe:29:bc:91:47:3d:1a:4e:56:be:63:e9:
8b:99:60:ca:05:7f:cc:86:3f:ba:db:dd:44:5b:3f:
17:ed:55:0c:9b:52:d9:8d:03:ec:b5:f8:33:19:14:
e1:1d:92:05:e9:fc:40:a7:38:53:99:ab:63:35:76:
80:cb:58:4c:dd:9c:8d:f4:53:fd:72:d4:d0:e7:20:
57:e7:90:f6:64:ef:65:12:39:e8:3e:d5:0c:e8:4c:
19:6a:1c:ad:3b:34:99:bc:ea:75:29:9b:90:71:b3:
92:3e:fe:8b:77:cd:8f:11:17:e6:cf:90:79:ac:7b:
3a:1f:d7:0a:a1:f8:1e:0b:05:04:4a:6b:8c:d2:5a:
37:36:35:a8:23:ee:0d:b7:5b:aa:35:73:55:8d:be:
d6:17
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
FF:44:0D:F2:F5:EC:DC:5A:25:0F:90:00:C2:64:DD:E3:84:11:45:AE
X509v3 Authority Key Identifier:
keyid:B0:7A:B9:22:56:5E:2B:3E:2C:C6:3D:48:5A:55:DD:4F:C4:1D:35:7E
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/sHq5IlZeKz4sxj1IWlXdT8QdNX4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/2e/6d59d9-9daf-4fcb-8d05-13bcc752119a/1/_0QN8vXs3FolD5AAwmTd44QRRa4.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/2e/6d59d9-9daf-4fcb-8d05-13bcc752119a/1/sHq5IlZeKz4sxj1IWlXdT8QdNX4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a12:f8c1:6::/48
Signature Algorithm: sha256WithRSAEncryption
81:cf:ac:98:42:88:3b:89:f2:0e:a0:07:f7:08:4e:4c:3d:e3:
da:4c:1a:9d:7e:41:24:49:6c:cb:43:c1:88:f7:7f:af:36:77:
16:19:72:ec:a7:f8:e2:8b:13:9f:a0:2b:56:4c:fa:b2:a6:58:
86:7c:b6:f1:eb:2a:69:df:8c:da:fa:11:9d:c2:70:72:50:c4:
79:d3:9f:c7:34:86:ed:ed:67:eb:17:ea:7d:d1:89:e4:11:0d:
1f:98:6b:67:df:50:5c:72:45:15:a1:48:aa:d3:1c:09:1e:3c:
ae:67:f9:f8:f4:e2:ae:11:a8:14:d8:21:a6:b3:de:09:4a:59:
99:b9:b7:c2:d3:b6:30:4c:98:55:c1:05:6b:07:94:19:5a:09:
7a:5f:9a:89:3a:9a:7e:4d:8b:59:dd:52:f1:e6:56:45:a1:b0:
ff:19:f0:15:ed:63:61:62:5c:d1:0b:df:42:fb:57:b2:2a:a6:
69:8d:91:ac:1c:ff:6e:6d:03:1a:62:d2:0a:ea:4d:c1:43:13:
d7:43:d9:54:dd:d2:67:89:73:ee:2c:f5:83:71:8d:54:dc:89:
44:7e:0f:62:49:51:db:f3:40:fd:63:46:67:80:09:52:e8:b6:
e6:35:df:89:84:61:2e:3a:8d:ba:49:06:79:8e:1a:c5:f6:5e:
c5:60:71:fd
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 13 02:52:49 2025 by rpki-client