Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/34/edaeb5-5e6e-411b-99cb-3c50180780b0/1/Jto06-q0O4LZeTIu91P3Kmk1J4M.roa
File: Jto06-q0O4LZeTIu91P3Kmk1J4M.roa (raw, json)
Hash identifier: 4H4ocDUkkXy3S7XTfKAxs29nupbyjCHj8AYWaTLF50w=
Subject key identifier: 26:DA:34:EB:EA:B4:3B:82:D9:79:32:2E:F7:53:F7:2A:69:35:27:83
Certificate issuer: /CN=0c4579a4028829d37acac65f66c056063251e57e
Certificate serial: 01856E38D02B57CF3B332BA2C5EA2C8A2BC5
Authority key identifier: 0C:45:79:A4:02:88:29:D3:7A:CA:C6:5F:66:C0:56:06:32:51:E5:7E
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/DEV5pAKIKdN6ysZfZsBWBjJR5X4.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/34/edaeb5-5e6e-411b-99cb-3c50180780b0/1/Jto06-q0O4LZeTIu91P3Kmk1J4M.roa
Signing time: Sun 01 Jan 2023 16:44:55 +0000
ROA not before: Sun 01 Jan 2023 16:44:55 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 34425
IP address blocks: 2a12:c1c0::/29 maxlen: 29
Validation: Failed, RFC 3779 resource not subset of parent's resources
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:85:6e:38:d0:2b:57:cf:3b:33:2b:a2:c5:ea:2c:8a:2b:c5
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=0c4579a4028829d37acac65f66c056063251e57e
Validity
Not Before: Jan 1 16:44:55 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=26da34ebeab43b82d979322ef753f72a69352783
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d0:19:f9:8a:13:16:16:c5:c4:41:59:77:e9:ce:
f5:76:d2:4f:a7:e7:49:24:69:6d:28:77:b7:2e:a9:
dc:4a:2a:37:02:f6:76:0d:56:6f:b6:ec:92:6b:e6:
54:6b:da:ac:6f:ea:38:a1:c4:56:34:b9:62:5d:e8:
b3:eb:4f:a2:d4:88:27:f5:6f:20:55:04:bf:dd:60:
38:2f:32:3c:b4:7b:18:d8:70:76:e4:32:f5:9e:d0:
77:8a:ce:24:31:ca:e8:08:cc:58:f7:7a:14:21:ef:
7e:49:ad:f5:56:0c:a9:10:9f:b0:53:48:3f:95:a5:
9b:ba:c9:81:55:e6:78:2f:3b:82:2e:c3:8d:92:d3:
68:0d:38:4d:07:05:28:ff:00:9f:a0:63:07:96:49:
62:25:bd:e1:67:92:d8:39:4b:5a:36:b2:51:6e:ef:
70:cf:06:94:ec:c9:4e:5e:54:41:12:15:36:62:64:
87:86:57:80:48:9f:93:71:cb:18:73:e9:38:9b:79:
55:4d:0d:e1:0f:5b:d5:46:fe:15:fc:c1:1e:8c:9b:
dc:50:be:65:2c:95:2c:59:05:3a:d6:0f:bd:06:1f:
26:2f:d2:cb:78:9e:89:de:f9:fd:2b:8b:b4:60:f0:
71:b6:b2:1e:3d:d1:0d:87:28:93:18:57:3c:12:c2:
e6:e3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
26:DA:34:EB:EA:B4:3B:82:D9:79:32:2E:F7:53:F7:2A:69:35:27:83
X509v3 Authority Key Identifier:
keyid:0C:45:79:A4:02:88:29:D3:7A:CA:C6:5F:66:C0:56:06:32:51:E5:7E
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/DEV5pAKIKdN6ysZfZsBWBjJR5X4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/34/edaeb5-5e6e-411b-99cb-3c50180780b0/1/Jto06-q0O4LZeTIu91P3Kmk1J4M.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/34/edaeb5-5e6e-411b-99cb-3c50180780b0/1/DEV5pAKIKdN6ysZfZsBWBjJR5X4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a12:c1c0::/29
Signature Algorithm: sha256WithRSAEncryption
56:66:e4:98:49:ae:c1:4b:ac:a4:73:dd:51:2c:fe:d4:62:6a:
13:ed:14:72:81:55:87:44:32:32:5a:73:fe:0e:8f:d0:2e:f5:
46:3e:60:07:ee:65:e6:90:83:5a:e0:4a:67:7c:9f:25:74:38:
71:62:42:45:b3:80:6f:10:e0:42:cc:b4:45:13:f5:2b:1a:02:
26:f0:88:ee:8b:2a:af:68:0a:21:2b:b0:23:10:83:47:66:86:
d1:48:12:da:b0:b8:47:0a:4f:5c:1f:04:56:07:56:d6:a2:92:
21:1a:b0:bc:a5:5e:46:4b:1e:dd:c3:d7:2f:36:33:aa:df:8c:
34:1f:cc:9d:ea:92:2b:ed:7b:a5:55:7f:10:2b:a2:8f:b2:e7:
34:c9:c5:7a:e4:74:46:ec:ff:80:8f:0c:35:e6:f8:41:de:a8:
b4:26:21:7b:3f:ed:71:9f:f2:a4:63:c6:46:46:3b:3f:a0:37:
50:59:35:4e:2a:e5:c0:67:15:60:d0:14:22:1a:85:c3:81:d8:
28:b4:8b:87:0a:a4:76:6b:36:c0:0e:47:3d:9b:48:e7:e3:b8:
05:b2:63:8c:29:6b:1c:6f:bc:8e:2b:ee:08:05:e8:7b:e5:19:
8c:29:4e:44:67:78:c9:5d:36:59:9f:09:88:df:94:0d:49:b2:
3b:b8:ed:d0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 13 02:28:15 2025 by rpki-client