Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/2e/6d59d9-9daf-4fcb-8d05-13bcc752119a/1/nY-oK3mmU52aP8bJkqa6Ugk7NQ8.roa
File: nY-oK3mmU52aP8bJkqa6Ugk7NQ8.roa (raw, json)
Hash identifier: MQ54yukFX18lMTPPHKaZFeFibPID+BZ+S5HscrLo+2c=
Subject key identifier: 9D:8F:A8:2B:79:A6:53:9D:9A:3F:C6:C9:92:A6:BA:52:09:3B:35:0F
Certificate issuer: /CN=b07ab922565e2b3e2cc63d485a55dd4fc41d357e
Certificate serial: 01887172BCB298DF49CDA8391E0635F9C6CE
Authority key identifier: B0:7A:B9:22:56:5E:2B:3E:2C:C6:3D:48:5A:55:DD:4F:C4:1D:35:7E
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/sHq5IlZeKz4sxj1IWlXdT8QdNX4.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/2e/6d59d9-9daf-4fcb-8d05-13bcc752119a/1/nY-oK3mmU52aP8bJkqa6Ugk7NQ8.roa
Signing time: Wed 31 May 2023 10:55:24 +0000
ROA not before: Wed 31 May 2023 10:55:24 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 150296
IP address blocks: 2a12:f8c1:30::/44 maxlen: 44
2a12:f8c1:100::/40 maxlen: 40
2a12:f8c2:800::/40 maxlen: 48
2a12:f8c2::/40 maxlen: 40
Validation: Failed, RFC 3779 resource not subset of parent's resources
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:88:71:72:bc:b2:98:df:49:cd:a8:39:1e:06:35:f9:c6:ce
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=b07ab922565e2b3e2cc63d485a55dd4fc41d357e
Validity
Not Before: May 31 10:55:24 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=9d8fa82b79a6539d9a3fc6c992a6ba52093b350f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:dc:78:42:58:8f:86:ee:4e:81:b0:b2:a4:71:19:
5d:ea:62:59:31:65:f6:6c:b5:ce:16:42:a2:db:a6:
0b:2d:7d:1a:e1:bb:f0:23:ef:c3:3c:28:db:fe:b3:
c3:31:1f:8e:c2:1b:77:1b:f8:ae:a5:6b:08:04:d7:
f9:77:2b:9d:df:da:ea:57:40:e3:2f:c7:82:b3:2e:
5e:8d:d9:f4:e5:b7:0a:83:c8:55:9e:34:4c:33:cf:
b1:8c:f2:b5:b1:c1:a2:a4:48:6b:33:83:51:5c:a2:
27:d2:db:cf:86:74:76:9f:41:7a:72:e6:8f:79:48:
9c:bf:b4:35:5c:8d:03:0c:25:74:1e:6b:f9:4e:28:
15:57:4a:72:78:0c:56:f7:14:e4:88:1c:21:30:8e:
d6:c6:0d:aa:cf:b4:38:e5:16:48:c8:74:56:ed:19:
e1:4a:36:bb:33:bf:e5:0e:d9:af:45:11:67:f1:4b:
25:0f:a4:1b:7d:4e:d1:7f:07:8d:89:c7:ef:b8:34:
71:20:f5:f7:9e:60:32:fa:65:d8:6e:8c:d8:67:8a:
fb:24:9a:da:2f:4a:8c:4c:12:a1:6e:7d:6a:57:17:
05:fb:a6:a9:5b:49:cd:91:dc:66:d3:91:ac:50:80:
ac:97:31:40:89:b2:6b:2d:49:82:92:55:ba:a0:44:
3d:eb
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
9D:8F:A8:2B:79:A6:53:9D:9A:3F:C6:C9:92:A6:BA:52:09:3B:35:0F
X509v3 Authority Key Identifier:
keyid:B0:7A:B9:22:56:5E:2B:3E:2C:C6:3D:48:5A:55:DD:4F:C4:1D:35:7E
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/sHq5IlZeKz4sxj1IWlXdT8QdNX4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/2e/6d59d9-9daf-4fcb-8d05-13bcc752119a/1/nY-oK3mmU52aP8bJkqa6Ugk7NQ8.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/2e/6d59d9-9daf-4fcb-8d05-13bcc752119a/1/sHq5IlZeKz4sxj1IWlXdT8QdNX4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a12:f8c1:30::/44
2a12:f8c1:100::/40
2a12:f8c2::/40
2a12:f8c2:800::/40
Signature Algorithm: sha256WithRSAEncryption
5b:73:23:ec:e4:59:86:1d:50:4e:ef:7c:a5:9c:e0:98:cb:04:
e3:08:4d:8e:c0:ab:d6:f0:9d:27:a3:ed:63:80:f7:99:23:3c:
cd:b1:2a:ae:47:87:2a:88:dd:fc:a3:86:91:c2:9e:9a:bd:99:
85:16:d4:dc:f8:f2:56:5d:d0:20:80:6b:1a:62:f9:2a:3e:ef:
dd:84:3d:85:1e:23:4a:54:7d:d3:70:5a:c6:38:dd:cc:c1:60:
56:4f:08:79:25:68:9b:21:76:f3:6b:cf:57:38:51:8a:33:8e:
7d:c3:7a:40:54:ab:9c:11:ff:e6:ba:24:7c:bf:96:bc:21:b1:
12:76:0b:ed:80:ad:b4:0b:1d:7b:72:8d:34:b0:3d:6b:2d:0b:
5b:04:f2:d7:03:13:23:90:d4:ad:d6:d8:9d:23:08:41:9d:2d:
f2:8d:24:5c:fa:36:10:c1:ee:7a:bf:13:fe:35:db:af:2c:92:
4e:44:e5:f9:68:ac:f0:c4:52:9a:d6:e3:82:e7:7f:d8:bf:92:
d7:15:74:d4:8f:e7:af:41:bc:3a:a4:a6:58:b0:de:5b:b3:b2:
79:53:ca:0a:fb:11:2b:de:01:71:27:b2:ff:32:fc:e6:24:97:
f9:62:0a:2f:ed:ac:cb:89:d8:05:2d:57:a5:c0:70:5b:ca:f9:
9b:f4:9b:3c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 19:00:55 2024 by rpki-client on console-ams.rpki-client.org