Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/50/f6ada1-7e8a-4b3e-b7e8-f8589f682691/1/BUOxf5jlr_t74Qp5mo5kyWB6FRQ.roa
File: BUOxf5jlr_t74Qp5mo5kyWB6FRQ.roa (raw, json)
Hash identifier: SfEkztq2jzT4ekYGROboy7YTDmMC6sNuPfMUqY6Th7I=
Subject key identifier: 05:43:B1:7F:98:E5:AF:FB:7B:E1:0A:79:9A:8E:64:C9:60:7A:15:14
Certificate issuer: /CN=ccd76159bfd9e337523ee930f3df111d6bae7306
Certificate serial: 018699C4EF0A1CC1B8C48031EDEAC5F880CA
Authority key identifier: CC:D7:61:59:BF:D9:E3:37:52:3E:E9:30:F3:DF:11:1D:6B:AE:73:06
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/zNdhWb_Z4zdSPukw898RHWuucwY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/50/f6ada1-7e8a-4b3e-b7e8-f8589f682691/1/BUOxf5jlr_t74Qp5mo5kyWB6FRQ.roa
Signing time: Tue 28 Feb 2023 20:44:25 +0000
ROA not before: Tue 28 Feb 2023 20:44:25 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 12608
IP address blocks: 2a09:7880::/32 maxlen: 32
2a09:3a81::/32 maxlen: 32
2a0e:e680::/32 maxlen: 32
2a09:e700::/32 maxlen: 32
2a09:4480::/32 maxlen: 32
2a09:9380::/32 maxlen: 32
2a09:9981::/32 maxlen: 32
2a09:3a80::/32 maxlen: 32
2a09:af81::/32 maxlen: 32
2a09:4280::/32 maxlen: 32
2a0e:c481::/32 maxlen: 32
2a06:77c0::/32 maxlen: 32
2a09:7b81::/32 maxlen: 32
2a09:af80::/32 maxlen: 32
2a09:7b80::/32 maxlen: 32
2a0e:c480::/32 maxlen: 32
2a09:4281::/32 maxlen: 32
2a09:7881::/32 maxlen: 32
2a09:9980::/32 maxlen: 32
2a06:77c1::/32 maxlen: 32
2a09:9381::/32 maxlen: 32
2a0e:e681::/32 maxlen: 32
2a09:e701::/32 maxlen: 32
2a09:4481::/32 maxlen: 32
Validation: Failed, RFC 3779 resource not subset of parent's resources
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:86:99:c4:ef:0a:1c:c1:b8:c4:80:31:ed:ea:c5:f8:80:ca
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=ccd76159bfd9e337523ee930f3df111d6bae7306
Validity
Not Before: Feb 28 20:44:25 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=0543b17f98e5affb7be10a799a8e64c9607a1514
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c3:b5:e3:04:c6:85:c1:a6:cd:a5:02:21:4c:a1:
da:0b:bf:f4:87:dd:da:88:97:64:7e:73:2c:de:1e:
ee:3d:31:db:0b:3f:05:db:cb:5b:7a:af:d8:48:91:
92:26:27:ef:0c:ea:78:b8:e0:c3:34:3e:61:e6:2e:
7e:c2:cc:29:35:cf:01:84:ad:7e:9c:f8:37:76:66:
3c:6c:c5:8b:a1:77:88:69:2f:27:a6:b2:c9:d7:d6:
e6:fb:08:12:f8:7d:6d:de:6c:f7:04:2b:5f:c9:fb:
3c:22:1f:b2:a4:b0:66:c3:e3:46:06:87:1f:56:91:
21:25:34:6c:0c:91:cf:21:dc:21:65:e3:70:45:cd:
2b:a5:9f:a5:00:01:e0:97:15:a7:97:56:d9:42:3b:
4a:c5:3d:ad:a4:bb:cb:ed:c4:e9:ed:21:d5:db:4f:
00:6a:97:01:4e:e2:46:36:72:26:08:de:ec:4d:67:
89:0c:0b:53:a4:9c:05:7e:b9:69:3e:0f:15:19:df:
d7:73:f6:8b:50:47:bd:bf:b8:87:ae:22:3b:15:f0:
de:70:88:21:44:eb:2c:f0:20:25:93:82:37:92:da:
7d:02:e5:3a:eb:6d:ca:bb:f8:f8:82:51:1f:94:17:
97:20:11:f2:9a:fe:f0:96:ba:c3:25:44:ec:8a:ce:
47:e1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
05:43:B1:7F:98:E5:AF:FB:7B:E1:0A:79:9A:8E:64:C9:60:7A:15:14
X509v3 Authority Key Identifier:
keyid:CC:D7:61:59:BF:D9:E3:37:52:3E:E9:30:F3:DF:11:1D:6B:AE:73:06
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/zNdhWb_Z4zdSPukw898RHWuucwY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/50/f6ada1-7e8a-4b3e-b7e8-f8589f682691/1/BUOxf5jlr_t74Qp5mo5kyWB6FRQ.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/50/f6ada1-7e8a-4b3e-b7e8-f8589f682691/1/zNdhWb_Z4zdSPukw898RHWuucwY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a06:77c0::/31
2a09:3a80::/31
2a09:4280::/31
2a09:4480::/31
2a09:7880::/31
2a09:7b80::/31
2a09:9380::/31
2a09:9980::/31
2a09:af80::/31
2a09:e700::/31
2a0e:c480::/31
2a0e:e680::/31
Signature Algorithm: sha256WithRSAEncryption
b1:9e:bc:c2:64:93:ae:bc:73:99:fb:fc:53:ae:87:a9:bc:0a:
97:d0:a5:46:b8:a5:47:e5:fc:35:78:17:84:6a:88:04:fc:24:
e4:9b:71:77:b0:3b:7a:23:0d:18:a3:55:83:97:13:92:16:6d:
b7:1c:4e:65:57:ee:90:4e:a4:9a:a5:cd:47:34:c2:9a:8a:3d:
9d:60:7e:08:e8:27:3f:82:1b:40:86:ae:6a:1b:6d:1d:79:d3:
3e:28:7a:0b:47:b7:3b:5c:98:0b:73:bb:4b:27:95:f0:4e:a9:
5d:00:67:39:f1:fe:25:1f:bd:3e:92:5d:ea:35:6d:6d:9a:96:
a7:c1:49:b7:81:15:7a:7d:42:ff:34:1e:a4:b5:7a:3c:4f:47:
97:d2:ed:41:67:26:c5:b4:17:4c:46:54:ea:20:19:82:63:93:
ba:f0:bd:97:81:cf:fd:d3:5e:d4:45:b4:a5:54:bc:ef:28:d8:
59:6b:82:ba:4a:15:69:a5:11:7f:d4:d5:71:6e:04:74:09:98:
0a:ae:59:92:2d:02:29:54:44:4d:8b:1d:5f:a3:36:28:78:5f:
6a:36:8f:b8:6b:74:76:e1:c8:10:d9:77:4f:40:f7:bd:e5:7b:
86:a3:75:b0:92:53:fb:18:ac:71:61:f8:47:20:dc:af:67:c6:
3b:38:c3:8c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 21 19:22:31 2025 by rpki-client