Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/34/edaeb5-5e6e-411b-99cb-3c50180780b0/1/8ICyodUo85zpWQpjHHXYBQcfJYs.roa
File: 8ICyodUo85zpWQpjHHXYBQcfJYs.roa (raw, json)
Hash identifier: o/MFlSJGUcMFMKHQjjIY/uV5eoE27ICyOsTvjx80SBY=
Subject key identifier: F0:80:B2:A1:D5:28:F3:9C:E9:59:0A:63:1C:75:D8:05:07:1F:25:8B
Certificate issuer: /CN=0c4579a4028829d37acac65f66c056063251e57e
Certificate serial: 018CC5DC23149E1D381C86D41630646014CB
Authority key identifier: 0C:45:79:A4:02:88:29:D3:7A:CA:C6:5F:66:C0:56:06:32:51:E5:7E
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/DEV5pAKIKdN6ysZfZsBWBjJR5X4.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/34/edaeb5-5e6e-411b-99cb-3c50180780b0/1/8ICyodUo85zpWQpjHHXYBQcfJYs.roa
Signing time: Mon 01 Jan 2024 16:29:47 +0000
ROA not before: Mon 01 Jan 2024 16:29:47 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 34425
IP address blocks: 2a12:c1c0::/29 maxlen: 29
Validation: Failed, RFC 3779 resource not subset of parent's resources
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8c:c5:dc:23:14:9e:1d:38:1c:86:d4:16:30:64:60:14:cb
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=0c4579a4028829d37acac65f66c056063251e57e
Validity
Not Before: Jan 1 16:29:47 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=f080b2a1d528f39ce9590a631c75d805071f258b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:88:58:b7:03:9e:e8:8d:a7:72:78:4c:a3:80:9b:
a5:4e:69:8c:01:da:43:94:ca:6a:1f:2e:d8:82:77:
7e:67:af:76:a3:6c:30:e8:b6:9e:74:0c:f0:16:df:
c8:ce:5a:77:cd:db:ec:ba:02:1c:35:0e:04:47:83:
1a:b6:0d:b4:c5:75:08:ae:ac:5d:8e:88:6f:30:23:
04:55:92:97:b1:0d:4c:d2:6a:ee:d1:a3:32:db:af:
df:5a:92:fc:dc:f9:bb:7e:ae:60:23:d6:fd:07:07:
ee:ce:1b:8e:49:9e:1e:8e:a5:e5:d0:cc:09:a4:e1:
b2:b2:12:e8:9b:73:2a:c4:68:fd:13:7e:5c:51:11:
a9:cd:a4:38:1b:7f:ca:49:99:04:4c:ea:02:d3:fc:
30:84:e3:ee:b3:4c:d2:54:17:1b:0c:fa:b7:7c:04:
4b:6a:f6:66:a8:19:1d:5c:5d:e6:63:fc:cf:db:67:
b8:e6:18:a8:96:07:82:9a:37:17:fb:b8:5e:1a:f9:
c5:f7:06:0f:9f:8f:b7:a9:89:62:cd:e5:17:59:ea:
ec:1d:55:59:48:2f:de:0a:53:19:1c:a1:0c:5e:cf:
5f:6b:64:ae:2f:90:80:e2:44:be:6a:da:3e:c1:02:
86:3f:a8:f0:56:0b:f2:1c:c6:28:bf:eb:04:20:d0:
d6:4d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F0:80:B2:A1:D5:28:F3:9C:E9:59:0A:63:1C:75:D8:05:07:1F:25:8B
X509v3 Authority Key Identifier:
keyid:0C:45:79:A4:02:88:29:D3:7A:CA:C6:5F:66:C0:56:06:32:51:E5:7E
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/DEV5pAKIKdN6ysZfZsBWBjJR5X4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/34/edaeb5-5e6e-411b-99cb-3c50180780b0/1/8ICyodUo85zpWQpjHHXYBQcfJYs.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/34/edaeb5-5e6e-411b-99cb-3c50180780b0/1/DEV5pAKIKdN6ysZfZsBWBjJR5X4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a12:c1c0::/29
Signature Algorithm: sha256WithRSAEncryption
78:25:e8:fc:fb:ac:25:db:91:14:8a:b2:bc:d1:98:b1:51:0f:
17:cf:8d:21:dd:06:20:9c:5c:6d:74:2d:84:9c:64:f7:0f:d5:
96:23:70:82:01:91:ca:da:56:65:09:c2:ea:52:80:71:c8:63:
67:98:4f:a5:e4:12:31:7b:8d:36:01:a1:15:90:28:4d:eb:47:
22:d4:b1:7e:68:08:95:2b:11:50:9a:40:60:e6:e8:2e:70:d0:
67:b7:cf:23:ad:14:7b:ca:7a:95:3d:92:cd:98:e4:92:19:22:
07:73:ac:e1:49:3c:67:22:a6:a1:22:a1:0f:fc:a0:9c:b9:22:
c5:11:fd:61:be:b8:8f:20:44:34:cf:77:9b:1a:2f:f5:0c:c7:
55:2e:9d:86:79:f0:4c:b1:fd:3d:a4:c5:b2:46:29:9d:fc:18:
8d:8f:7e:4b:fa:43:31:e2:b2:75:5a:a0:3a:77:ac:a0:ca:f1:
3d:78:52:a4:cf:2a:5d:63:2b:ab:43:4b:56:09:42:90:11:a4:
7c:11:f1:8c:ca:5f:9e:41:eb:16:42:bc:50:81:4a:50:53:80:
d5:3a:47:fd:ef:3b:c3:0b:ba:11:3b:26:98:49:82:04:0d:6d:
3b:93:a6:4f:5a:c2:aa:06:c2:54:43:69:bc:16:14:8d:9b:6b:
99:fc:1b:93
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Feb 17 07:37:08 2025 by rpki-client