Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/2e/6d59d9-9daf-4fcb-8d05-13bcc752119a/1/vmfO3kvYnMsSZz_qHCJmD84lUnk.roa
File: vmfO3kvYnMsSZz_qHCJmD84lUnk.roa (raw, json)
Hash identifier: ilj7FVB+kJPERdQkEvbpDUPlQC2l5A1RmoeHjiknbpM=
Subject key identifier: BE:67:CE:DE:4B:D8:9C:CB:12:67:3F:EA:1C:22:66:0F:CE:25:52:79
Certificate issuer: /CN=b07ab922565e2b3e2cc63d485a55dd4fc41d357e
Certificate serial: 018CC64B26CBB45FA4D6798D11D6F8190489
Authority key identifier: B0:7A:B9:22:56:5E:2B:3E:2C:C6:3D:48:5A:55:DD:4F:C4:1D:35:7E
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/sHq5IlZeKz4sxj1IWlXdT8QdNX4.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/2e/6d59d9-9daf-4fcb-8d05-13bcc752119a/1/vmfO3kvYnMsSZz_qHCJmD84lUnk.roa
Signing time: Mon 01 Jan 2024 18:31:03 +0000
ROA not before: Mon 01 Jan 2024 18:31:03 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 149852
IP address blocks: 2a12:f8c1:6::/48 maxlen: 48
Validation: Failed, RFC 3779 resource not subset of parent's resources
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8c:c6:4b:26:cb:b4:5f:a4:d6:79:8d:11:d6:f8:19:04:89
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=b07ab922565e2b3e2cc63d485a55dd4fc41d357e
Validity
Not Before: Jan 1 18:31:03 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=be67cede4bd89ccb12673fea1c22660fce255279
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:80:96:f3:2b:b8:41:2d:3f:b3:b9:66:40:4f:51:
00:b5:2c:4e:c8:6c:87:4f:53:26:db:4c:82:94:c6:
3a:ab:f4:a1:6c:03:91:74:bb:31:de:7d:d1:56:2a:
0a:c6:b3:13:ad:18:eb:9b:ac:7d:eb:99:b1:44:af:
61:96:1d:fe:5b:1f:63:c3:ed:61:18:30:e2:d7:99:
41:bd:4b:96:e4:0f:75:ff:ab:5e:a0:59:22:01:da:
72:77:a4:79:5d:79:d3:f9:d2:49:8a:b2:87:c6:12:
f2:93:6e:54:08:2f:1a:cb:93:af:d8:c8:d7:7a:8d:
7b:1c:73:b7:b3:b2:52:a4:e3:ce:30:78:53:a1:72:
e2:e2:4a:9e:76:62:10:c8:37:f2:89:48:a0:88:a2:
67:f5:00:94:40:f9:a9:3e:97:d2:47:8d:12:9b:80:
b7:ee:e8:e2:44:78:e5:66:94:74:20:fb:3d:d0:1e:
0a:39:dd:78:ae:4d:ae:03:31:7b:60:8f:66:53:64:
9b:1d:3c:bf:a4:9e:89:dd:84:e3:d0:32:df:fe:6f:
68:5d:60:68:24:3c:2b:aa:2e:33:7b:28:5c:b3:ec:
1d:26:70:c4:9d:59:47:65:00:c7:e5:16:be:6e:fc:
33:c6:cd:3b:5c:40:a3:f2:61:fd:b0:7a:84:b1:d0:
34:d7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
BE:67:CE:DE:4B:D8:9C:CB:12:67:3F:EA:1C:22:66:0F:CE:25:52:79
X509v3 Authority Key Identifier:
keyid:B0:7A:B9:22:56:5E:2B:3E:2C:C6:3D:48:5A:55:DD:4F:C4:1D:35:7E
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/sHq5IlZeKz4sxj1IWlXdT8QdNX4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/2e/6d59d9-9daf-4fcb-8d05-13bcc752119a/1/vmfO3kvYnMsSZz_qHCJmD84lUnk.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/2e/6d59d9-9daf-4fcb-8d05-13bcc752119a/1/sHq5IlZeKz4sxj1IWlXdT8QdNX4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a12:f8c1:6::/48
Signature Algorithm: sha256WithRSAEncryption
a9:21:d3:d6:e1:d0:d2:a2:c2:14:36:d6:5d:48:45:31:c8:f1:
3a:ca:b8:b8:04:f3:69:97:78:21:b4:a4:a4:1e:6a:18:76:1b:
4c:d4:6b:30:46:fa:56:b9:e4:03:24:e1:59:1b:12:55:1b:30:
20:62:f2:fa:d0:11:03:13:cb:06:37:77:d3:a5:38:bc:97:0e:
e1:2e:4b:f8:ba:2f:2f:91:2b:d4:1b:1e:05:58:f8:88:f8:98:
f7:43:c8:37:22:b4:d0:fc:01:e7:ca:87:3b:c2:f3:17:ba:dc:
55:bb:96:f6:6f:ac:8d:28:f5:81:d9:e4:b8:b6:63:64:28:0d:
b0:bf:c5:72:fc:d0:9d:27:c7:c2:10:dd:51:19:b0:7b:23:f8:
ab:37:3d:cc:2c:e7:95:1d:ce:11:ba:e5:1f:e6:cf:8c:d9:69:
9a:6a:4e:09:93:4f:56:0c:97:4e:6f:bc:e9:38:4c:f9:ff:02:
57:71:90:b3:7f:c7:40:15:15:ee:ba:b0:26:e0:28:5b:f0:ae:
31:78:17:b3:9c:5c:83:ff:1c:c5:df:a8:db:40:e2:12:30:40:
24:f2:e2:63:5b:d1:a4:5c:b6:d0:61:c2:92:43:ec:6e:d8:fa:
0d:22:9d:2b:0b:0f:85:4c:7b:c1:5a:b7:19:bb:5b:f5:d7:0b:
d4:b8:f4:6a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Feb 17 07:13:30 2025 by rpki-client