Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/34/edaeb5-5e6e-411b-99cb-3c50180780b0/1/_3OZv5uSe7bTLCosamzvErUBQ6s.roa
File: _3OZv5uSe7bTLCosamzvErUBQ6s.roa (raw, json)
Hash identifier: xUmtpaE7QmYCEF2m97u6IT+FVHzjj2otNGwOaP5SDCE=
Subject key identifier: FF:73:99:BF:9B:92:7B:B6:D3:2C:2A:2C:6A:6C:EF:12:B5:01:43:AB
Certificate issuer: /CN=0c4579a4028829d37acac65f66c056063251e57e
Certificate serial: 018375F3B125A9ACF91EA052C2A4B1C38BDC
Authority key identifier: 0C:45:79:A4:02:88:29:D3:7A:CA:C6:5F:66:C0:56:06:32:51:E5:7E
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/DEV5pAKIKdN6ysZfZsBWBjJR5X4.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/34/edaeb5-5e6e-411b-99cb-3c50180780b0/1/_3OZv5uSe7bTLCosamzvErUBQ6s.roa
Signing time: Sun 25 Sep 2022 18:40:48 +0000
ROA not before: Sun 25 Sep 2022 18:40:48 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 34425
IP address blocks: 2a12:c1c0::/29 maxlen: 29
Validation: Failed, RFC 3779 resource not subset of parent's resources
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:83:75:f3:b1:25:a9:ac:f9:1e:a0:52:c2:a4:b1:c3:8b:dc
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=0c4579a4028829d37acac65f66c056063251e57e
Validity
Not Before: Sep 25 18:40:48 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=ff7399bf9b927bb6d32c2a2c6a6cef12b50143ab
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8b:c4:09:50:54:bd:8e:65:4f:87:66:21:1a:6c:
bf:5f:44:e6:9b:31:2e:4d:18:72:15:c5:ab:76:8a:
a7:19:07:b8:7b:16:e1:33:91:d9:a9:19:3c:4b:21:
2a:98:44:c4:f2:87:76:eb:fd:d9:54:f5:32:a4:24:
b0:02:7b:d5:73:e7:2f:e9:35:55:e9:96:8e:9e:56:
2e:c7:61:5f:59:5d:71:3f:0c:a1:42:65:33:20:c9:
29:9e:df:ff:6f:2c:1f:40:6f:22:68:2b:84:a9:15:
62:f6:f1:8c:07:56:2b:34:a1:9d:3f:3e:2f:5d:47:
61:42:2b:57:c0:b3:59:f3:2c:00:45:c3:51:84:15:
42:25:a7:09:07:c4:42:85:85:2a:17:ed:dd:44:0f:
29:6a:e1:e2:44:0c:78:6a:4b:7b:cc:b4:25:20:c6:
54:2c:46:31:bd:cf:35:97:6a:e4:b8:54:a9:26:c2:
c1:15:db:b6:83:9c:2c:6b:61:96:7e:5f:18:47:57:
72:36:af:f1:0b:a2:54:d2:a3:26:55:39:c4:c6:d8:
af:e2:07:dd:8e:f9:c7:84:b4:54:e2:9a:32:b8:b4:
1d:b2:90:70:be:d2:7f:e3:48:66:09:94:90:dd:2b:
e2:27:05:a3:5d:df:d0:31:de:74:db:f7:e4:87:5d:
6a:cb
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
FF:73:99:BF:9B:92:7B:B6:D3:2C:2A:2C:6A:6C:EF:12:B5:01:43:AB
X509v3 Authority Key Identifier:
keyid:0C:45:79:A4:02:88:29:D3:7A:CA:C6:5F:66:C0:56:06:32:51:E5:7E
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/DEV5pAKIKdN6ysZfZsBWBjJR5X4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/34/edaeb5-5e6e-411b-99cb-3c50180780b0/1/_3OZv5uSe7bTLCosamzvErUBQ6s.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/34/edaeb5-5e6e-411b-99cb-3c50180780b0/1/DEV5pAKIKdN6ysZfZsBWBjJR5X4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a12:c1c0::/29
Signature Algorithm: sha256WithRSAEncryption
4c:42:c0:38:8c:ea:ca:b8:01:ab:aa:be:86:28:bd:ae:1d:ad:
29:1c:1f:30:df:23:4c:36:d1:c9:07:72:4e:6a:ab:cb:fb:74:
a6:e2:63:f3:a9:34:f8:53:fd:f7:31:7c:d2:59:2a:61:7b:a6:
e3:9f:8f:4d:0a:7e:67:16:e4:ad:99:0d:df:51:db:ee:da:a5:
c7:be:c0:34:ad:9a:93:22:18:b2:30:00:7f:8a:cc:e3:3e:49:
2c:f2:79:00:f6:47:16:07:aa:fe:53:b7:ad:1e:f1:36:39:24:
34:a2:fa:6d:29:43:08:9b:a7:fe:3f:48:a6:32:fd:f0:1f:04:
0c:2d:6b:e0:d3:57:a1:7d:6b:69:bd:ee:c1:7d:d0:ae:0b:ad:
9d:cd:c1:f4:0b:a8:c6:86:bc:cc:b2:ca:53:5e:4c:98:c9:98:
9d:4c:fd:16:0f:b8:83:6e:2c:cc:87:3b:32:d7:a2:74:d4:ae:
56:9c:80:6b:ac:d4:7e:8f:a4:cd:78:e8:7d:a6:1e:5a:52:3a:
57:07:a8:96:26:e7:80:bb:43:8c:f7:8f:90:98:79:d9:fa:82:
ba:8e:c7:24:79:81:b9:a0:32:af:ad:0a:d4:ec:d7:28:5c:0b:
17:83:1f:45:9d:dd:26:47:1f:da:66:d3:b3:10:d3:3e:f1:85:
58:dc:44:e7
-----BEGIN CERTIFICATE-----
MIIE/jCCA+agAwIBAgISAYN187Elqaz5HqBSwqSxw4vcMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDBjNDU3OWE0MDI4ODI5ZDM3YWNhYzY1ZjY2YzA1NjA2MzI1
MWU1N2UwHhcNMjIwOTI1MTg0MDQ4WhcNMjMwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EyhmZjczOTliZjliOTI3YmI2ZDMyYzJhMmM2YTZjZWYxMmI1MDE0M2FiMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAi8QJUFS9jmVPh2YhGmy/X0TmmzEu
TRhyFcWrdoqnGQe4exbhM5HZqRk8SyEqmETE8od26/3ZVPUypCSwAnvVc+cv6TVV
6ZaOnlYux2FfWV1xPwyhQmUzIMkpnt//bywfQG8iaCuEqRVi9vGMB1YrNKGdPz4v
XUdhQitXwLNZ8ywARcNRhBVCJacJB8RChYUqF+3dRA8pauHiRAx4akt7zLQlIMZU
LEYxvc81l2rkuFSpJsLBFdu2g5wsa2GWfl8YR1dyNq/xC6JU0qMmVTnExtiv4gfd
jvnHhLRU4poyuLQdspBwvtJ/40hmCZSQ3SviJwWjXd/QMd502/fkh11qywIDAQAB
o4ICCjCCAgYwHQYDVR0OBBYEFP9zmb+bknu20ywqLGps7xK1AUOrMB8GA1UdIwQY
MBaAFAxFeaQCiCnTesrGX2bAVgYyUeV+MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvREVWNXBBS0lLZE42eXNaZlpzQldCakpSNVg0LmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8zNC9lZGFlYjUtNWU2ZS00MTFiLTk5Y2It
M2M1MDE4MDc4MGIwLzEvXzNPWnY1dVNlN2JUTENvc2FtenZFclVCUTZzLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8zNC9lZGFlYjUtNWU2ZS00MTFiLTk5Y2ItM2M1MDE4MDc4MGIw
LzEvREVWNXBBS0lLZE42eXNaZlpzQldCakpSNVg0LmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCAGCCsGAQUFBwEHAQH/BBEwDzANBAIAAjAHAwUDKhLBwDAN
BgkqhkiG9w0BAQsFAAOCAQEATELAOIzqyrgBq6q+hii9rh2tKRwfMN8jTDbRyQdy
Tmqry/t0puJj86k0+FP99zF80lkqYXum45+PTQp+ZxbkrZkN31Hb7tqlx77ANK2a
kyIYsjAAf4rM4z5JLPJ5APZHFgeq/lO3rR7xNjkkNKL6bSlDCJun/j9IpjL98B8E
DC1r4NNXoX1rab3uwX3Qrgutnc3B9Auoxoa8zLLKU15MmMmYnUz9Fg+4g24szIc7
MteidNSuVpyAa6zUfo+kzXjofaYeWlI6VweolibngLtDjPePkJh52fqCuo7HJHmB
uaAyr60K1OzXKFwLF4MfRZ3dJkcf2mbTsxDTPvGFWNxE5w==
-----END CERTIFICATE-----
Generated at Thu Jun 6 19:02:26 2024 by rpki-client on console-ams.rpki-client.org