Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/50/f6ada1-7e8a-4b3e-b7e8-f8589f682691/1/WkQyARAINNI_dDZ3pjftLQVh10E.roa
File: WkQyARAINNI_dDZ3pjftLQVh10E.roa (raw, json)
Hash identifier: cBaYA2kSWlzBcmKKYdccop+ohKeOujMztGIoittGpZc=
Subject key identifier: 5A:44:32:01:10:08:34:D2:3F:74:36:77:A6:37:ED:2D:05:61:D7:41
Certificate issuer: /CN=ccd76159bfd9e337523ee930f3df111d6bae7306
Certificate serial: 0183883661DEC2B368B2CDC49AF25FF112AC
Authority key identifier: CC:D7:61:59:BF:D9:E3:37:52:3E:E9:30:F3:DF:11:1D:6B:AE:73:06
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/zNdhWb_Z4zdSPukw898RHWuucwY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/50/f6ada1-7e8a-4b3e-b7e8-f8589f682691/1/WkQyARAINNI_dDZ3pjftLQVh10E.roa
Signing time: Thu 29 Sep 2022 07:46:48 +0000
ROA not before: Thu 29 Sep 2022 07:46:48 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 12608
IP address blocks: 2a0e:e680::/32 maxlen: 32
2a09:4304::/30 maxlen: 30
2a0d:f140::/30 maxlen: 30
2a0d:c100::/30 maxlen: 30
2a09:e04::/30 maxlen: 30
2a09:2d04::/30 maxlen: 30
2a0d:afc0::/30 maxlen: 30
2a09:4281::/32 maxlen: 32
2a06:77c1::/32 maxlen: 32
2a09:2d00::/30 maxlen: 30
2a0d:e344::/30 maxlen: 30
2a09:e701::/32 maxlen: 32
2a09:4481::/32 maxlen: 32
2a0d:b840::/30 maxlen: 30
2a09:3a81::/32 maxlen: 32
2a09:e700::/32 maxlen: 32
2a09:4480::/32 maxlen: 32
2a09:9981::/32 maxlen: 32
2a0f:b741::/32 maxlen: 32
2a09:af81::/32 maxlen: 32
2a09:4280::/32 maxlen: 32
2a0d:f5c4::/30 maxlen: 30
2a0d:d3c0::/30 maxlen: 30
2a06:77c0::/32 maxlen: 32
2a0e:19c0::/32 maxlen: 32
2a0e:c480::/32 maxlen: 32
2a09:7b80::/32 maxlen: 32
2a09:5404::/30 maxlen: 30
2a0e:e681::/32 maxlen: 32
2a0d:b844::/30 maxlen: 30
2a09:9380::/32 maxlen: 32
2a09:9604::/30 maxlen: 30
2a09:5400::/30 maxlen: 30
2a09:1804::/30 maxlen: 30
2a0e:4b40::/32 maxlen: 32
2a09:7881::/32 maxlen: 32
2a0d:d3c4::/30 maxlen: 30
2a09:9600::/30 maxlen: 30
2a09:1800::/30 maxlen: 30
2a09:7880::/32 maxlen: 32
2a09:4300::/30 maxlen: 30
2a09:e00::/30 maxlen: 30
2a0d:f144::/30 maxlen: 30
2a09:3a80::/32 maxlen: 32
2a0e:19c1::/32 maxlen: 32
2a0d:e340::/30 maxlen: 30
2a0e:c481::/32 maxlen: 32
2a09:7b81::/32 maxlen: 32
2a09:af80::/32 maxlen: 32
2a0d:afc4::/30 maxlen: 30
2a09:9980::/32 maxlen: 32
2a0e:4b41::/32 maxlen: 32
2a0f:b740::/32 maxlen: 32
2a09:9381::/32 maxlen: 32
2a0d:c104::/30 maxlen: 30
Validation: Failed, RFC 3779 resource not subset of parent's resources
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:83:88:36:61:de:c2:b3:68:b2:cd:c4:9a:f2:5f:f1:12:ac
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=ccd76159bfd9e337523ee930f3df111d6bae7306
Validity
Not Before: Sep 29 07:46:48 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=5a443201100834d23f743677a637ed2d0561d741
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:99:64:ac:90:63:0c:58:d5:d1:39:4d:70:03:bb:
52:f4:85:72:a4:b8:6d:cd:c1:04:04:da:03:e1:2d:
10:04:55:aa:1e:5e:fd:f3:0b:25:f7:8b:fb:d3:f1:
d0:69:30:51:9e:47:fa:d7:ea:e2:4e:ec:07:68:f8:
8e:b4:d6:ab:99:10:7e:51:e3:9a:cf:a8:ae:ce:9a:
ba:4f:0f:97:3e:bb:10:55:7e:1b:00:85:47:33:d8:
6f:2f:38:9f:c5:fd:a5:8c:05:1e:96:55:05:93:80:
29:3d:a5:b5:06:c5:17:42:dc:78:7f:33:3f:66:aa:
60:5e:00:8e:79:ed:58:bf:bd:3d:cf:4f:b0:c2:0e:
d7:95:e9:4c:73:78:cc:d8:ab:0e:c2:cd:5e:bc:b7:
43:78:1e:c3:48:75:6a:7b:20:ea:1a:2d:e2:ed:25:
c2:ee:cc:ac:2e:36:56:b8:d7:ee:10:e3:55:97:63:
ee:05:1a:9d:02:a9:53:33:e9:b8:be:80:d8:2f:38:
d9:b8:32:49:83:d2:4a:20:c6:99:d7:b5:c9:9a:0f:
b5:07:bb:e9:47:07:6b:64:76:5d:07:cc:65:c7:0f:
3a:f8:b4:57:9d:fa:e3:3d:c4:7b:61:69:32:2a:02:
3e:f8:25:55:a2:be:96:b8:76:78:0e:03:75:0e:44:
c9:7d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
5A:44:32:01:10:08:34:D2:3F:74:36:77:A6:37:ED:2D:05:61:D7:41
X509v3 Authority Key Identifier:
keyid:CC:D7:61:59:BF:D9:E3:37:52:3E:E9:30:F3:DF:11:1D:6B:AE:73:06
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/zNdhWb_Z4zdSPukw898RHWuucwY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/50/f6ada1-7e8a-4b3e-b7e8-f8589f682691/1/WkQyARAINNI_dDZ3pjftLQVh10E.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/50/f6ada1-7e8a-4b3e-b7e8-f8589f682691/1/zNdhWb_Z4zdSPukw898RHWuucwY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a06:77c0::/31
2a09:e00::/29
2a09:1800::/29
2a09:2d00::/29
2a09:3a80::/31
2a09:4280::/31
2a09:4300::/29
2a09:4480::/31
2a09:5400::/29
2a09:7880::/31
2a09:7b80::/31
2a09:9380::/31
2a09:9600::/29
2a09:9980::/31
2a09:af80::/31
2a09:e700::/31
2a0d:afc0::/29
2a0d:b840::/29
2a0d:c100::/29
2a0d:d3c0::/29
2a0d:e340::/29
2a0d:f140::/29
2a0d:f5c4::/30
2a0e:19c0::/31
2a0e:4b40::/31
2a0e:c480::/31
2a0e:e680::/31
2a0f:b740::/31
Signature Algorithm: sha256WithRSAEncryption
b4:76:b4:11:37:01:31:7c:08:da:e3:61:5e:39:52:15:66:73:
4f:83:92:77:df:14:97:fa:d4:f5:6d:40:6a:df:55:b0:c9:7d:
46:18:4b:e6:18:96:5d:99:dd:f4:61:79:35:72:dc:23:a4:5b:
3a:24:f8:b7:cb:95:a1:d4:58:79:27:27:a8:44:dd:bd:ce:69:
f0:cc:6b:33:6a:c1:d5:1c:32:95:0b:50:5a:18:32:97:a3:c8:
f9:cb:e7:84:51:c2:2b:3c:59:d1:f8:bf:b6:51:45:ca:63:9a:
e1:24:26:f2:5a:e6:dc:45:9f:8e:dd:1f:8c:b4:a7:5a:d7:69:
29:38:7b:06:27:f5:bd:f9:ce:87:79:5f:76:22:5a:93:5a:1f:
fd:4a:7f:20:89:4c:35:ea:c9:26:e2:f0:3f:51:bd:83:66:46:
3b:2e:98:6e:1b:58:42:fa:16:79:b4:79:68:84:e8:24:eb:fc:
7d:c0:bb:37:11:da:5b:60:b2:80:24:2d:bb:fb:70:ee:9a:c1:
c6:7c:60:a0:68:35:95:bb:57:1a:e2:d2:9d:5c:89:50:76:5c:
88:fa:36:45:a6:b1:0a:2a:10:c7:0b:f3:f5:6b:18:61:06:16:
ac:3c:dd:f1:d0:22:d2:5f:14:f9:7e:5d:2b:4c:e0:3f:52:fb:
58:c4:4b:e0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 19:08:46 2024 by rpki-client on console-ams.rpki-client.org