Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/34/edaeb5-5e6e-411b-99cb-3c50180780b0/1/1-ajDber1srk-5bqfN28sfy1w2pY.roa
File: 1-ajDber1srk-5bqfN28sfy1w2pY.roa (raw, json)
Hash identifier: hIY21+MRaBwMlZm73Ow2uZSml+1L1DWJVPRl9tSLBPY=
Subject key identifier: F9:A8:C3:6D:EA:F5:B2:B9:3E:E5:BA:9F:37:6F:2C:7F:2D:70:DA:96
Certificate issuer: /CN=0c4579a4028829d37acac65f66c056063251e57e
Certificate serial: 018CC5DC23DD0E888DAE94B738A7D813637D
Authority key identifier: 0C:45:79:A4:02:88:29:D3:7A:CA:C6:5F:66:C0:56:06:32:51:E5:7E
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/DEV5pAKIKdN6ysZfZsBWBjJR5X4.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/34/edaeb5-5e6e-411b-99cb-3c50180780b0/1/1-ajDber1srk-5bqfN28sfy1w2pY.roa
Signing time: Mon 01 Jan 2024 16:29:47 +0000
ROA not before: Mon 01 Jan 2024 16:29:47 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 47943
IP address blocks: 2001:b18:1017::/48 maxlen: 48
Validation: Failed, RFC 3779 resource not subset of parent's resources
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8c:c5:dc:23:dd:0e:88:8d:ae:94:b7:38:a7:d8:13:63:7d
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=0c4579a4028829d37acac65f66c056063251e57e
Validity
Not Before: Jan 1 16:29:47 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=f9a8c36deaf5b2b93ee5ba9f376f2c7f2d70da96
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8b:4c:5e:a4:ef:b0:da:fb:b3:41:4b:53:8c:e9:
ae:47:e5:94:4e:dd:ed:b0:c5:9e:0c:b7:28:bf:59:
14:68:47:0d:2b:24:92:51:16:41:4a:3a:6d:61:4e:
d8:a7:b1:a1:20:bb:34:d1:a7:12:de:b9:2e:01:04:
30:bd:92:e0:2e:32:20:61:1b:9d:74:32:f8:ce:35:
33:97:84:c5:db:79:f7:2d:aa:36:7f:8f:4c:59:e7:
db:b1:be:a6:f5:0c:91:46:e5:df:24:ea:dd:15:15:
95:16:7f:29:db:c8:fc:79:db:34:9d:25:ae:68:c6:
98:c2:0b:85:58:f7:9f:a0:87:c8:61:7d:51:f4:8f:
26:c6:ab:a2:fd:80:25:ee:49:93:ea:4e:97:9a:da:
b0:bf:a8:47:fc:92:b6:d5:60:0a:89:5b:37:e0:4d:
7b:1a:23:14:80:be:c1:79:6a:69:ae:f9:9e:05:89:
22:0e:73:51:a5:25:fb:9f:d6:7e:27:63:d9:1d:b9:
be:38:e9:d7:d9:86:be:80:f4:84:90:88:ac:75:b9:
60:0a:7c:d6:52:39:6c:be:91:a9:5a:a6:b2:f2:06:
96:2c:80:28:1f:b9:08:3a:60:fe:27:ba:88:37:03:
c2:0f:0d:d2:65:2f:00:73:fd:c4:4f:2b:c3:10:5f:
91:73
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F9:A8:C3:6D:EA:F5:B2:B9:3E:E5:BA:9F:37:6F:2C:7F:2D:70:DA:96
X509v3 Authority Key Identifier:
keyid:0C:45:79:A4:02:88:29:D3:7A:CA:C6:5F:66:C0:56:06:32:51:E5:7E
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/DEV5pAKIKdN6ysZfZsBWBjJR5X4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/34/edaeb5-5e6e-411b-99cb-3c50180780b0/1/1-ajDber1srk-5bqfN28sfy1w2pY.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/34/edaeb5-5e6e-411b-99cb-3c50180780b0/1/DEV5pAKIKdN6ysZfZsBWBjJR5X4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2001:b18:1017::/48
Signature Algorithm: sha256WithRSAEncryption
69:da:1e:7a:44:53:b3:ca:32:65:de:d1:1c:9d:55:43:ea:8b:
49:52:bd:fe:37:1c:ba:53:d6:34:23:2c:a9:79:91:6a:7f:bc:
f3:11:1a:91:8c:5d:8b:1b:b2:09:96:4b:53:10:ef:3a:26:89:
4b:af:f7:1a:4f:6e:5d:e9:97:15:2f:22:12:8b:08:da:aa:e5:
20:57:c9:24:08:e5:59:c4:2f:14:4f:9f:b8:b7:4e:0a:69:e5:
2f:bd:a2:21:8f:4a:68:9b:2a:a4:67:93:60:07:63:ca:d2:40:
c2:b4:c6:a3:66:94:1c:23:53:c8:cb:5d:56:56:1d:bc:e0:f9:
b5:4f:4a:23:58:0d:a2:49:f8:11:81:5e:af:49:3d:91:f4:5c:
0f:1a:46:27:9a:ee:df:e6:8c:ab:b6:e0:cb:d0:09:ad:28:c4:
4a:2a:e1:b1:b1:a5:c8:1e:9e:54:20:d4:da:d2:b1:66:97:f2:
a3:4d:a6:c9:16:d7:6f:61:c6:aa:40:44:8c:9e:c4:bc:e6:2b:
c3:3b:24:b8:0e:7b:da:a2:6f:de:27:76:1c:e8:63:5d:7c:91:
c1:13:a1:38:39:67:08:aa:68:c0:42:7f:74:aa:92:0a:8a:ef:
82:02:a4:91:6b:b6:75:66:b4:bb:42:73:42:83:27:a6:32:e2:
1b:fc:87:fc
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Feb 17 07:24:41 2025 by rpki-client