Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/50/f6ada1-7e8a-4b3e-b7e8-f8589f682691/1/bvXfelB8zeaVaxJRA-uxzkuZXYQ.roa
File: bvXfelB8zeaVaxJRA-uxzkuZXYQ.roa (raw, json)
Hash identifier: mc9xUM3lYGl6ug21EygjAIBySPwg9GG5as6St0Mo3/U=
Subject key identifier: 6E:F5:DF:7A:50:7C:CD:E6:95:6B:12:51:03:EB:B1:CE:4B:99:5D:84
Certificate issuer: /CN=ccd76159bfd9e337523ee930f3df111d6bae7306
Certificate serial: 0182E45D3BC3108EE2E1339DD591E19F90CE
Authority key identifier: CC:D7:61:59:BF:D9:E3:37:52:3E:E9:30:F3:DF:11:1D:6B:AE:73:06
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/zNdhWb_Z4zdSPukw898RHWuucwY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/50/f6ada1-7e8a-4b3e-b7e8-f8589f682691/1/bvXfelB8zeaVaxJRA-uxzkuZXYQ.roa
Signing time: Sun 28 Aug 2022 12:11:31 +0000
ROA not before: Sun 28 Aug 2022 12:11:31 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 12608
IP address blocks: 2a0d:b844::/30 maxlen: 30
2a09:4304::/30 maxlen: 30
2a0d:f140::/30 maxlen: 30
2a0d:c100::/30 maxlen: 30
2a09:9604::/30 maxlen: 30
2a09:5400::/30 maxlen: 30
2a09:e04::/30 maxlen: 30
2a09:2d04::/30 maxlen: 30
2a09:1804::/30 maxlen: 30
2a0d:afc0::/30 maxlen: 30
2a0d:d3c4::/30 maxlen: 30
2a09:2d00::/30 maxlen: 30
2a09:9600::/30 maxlen: 30
2a09:1800::/30 maxlen: 30
2a0d:e344::/30 maxlen: 30
2a09:4300::/30 maxlen: 30
2a0d:b840::/30 maxlen: 30
2a09:e00::/30 maxlen: 30
2a0d:f144::/30 maxlen: 30
2a0d:f5c4::/30 maxlen: 30
2a0d:d3c0::/30 maxlen: 30
2a0d:e340::/30 maxlen: 30
2a0d:afc4::/30 maxlen: 30
2a09:5404::/30 maxlen: 30
2a0d:c104::/30 maxlen: 30
Validation: Failed, RFC 3779 resource not subset of parent's resources
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:82:e4:5d:3b:c3:10:8e:e2:e1:33:9d:d5:91:e1:9f:90:ce
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=ccd76159bfd9e337523ee930f3df111d6bae7306
Validity
Not Before: Aug 28 12:11:31 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=6ef5df7a507ccde6956b125103ebb1ce4b995d84
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:93:b2:fd:58:11:d5:a2:74:65:29:04:93:d8:c3:
6b:e4:a5:e0:54:9e:a0:6c:ed:6f:b3:c2:4b:19:9b:
ae:58:cc:1f:fc:74:4e:10:98:cb:e6:c9:88:be:7e:
32:46:36:d8:73:90:96:43:97:e1:69:d0:55:34:85:
bf:ec:24:83:7b:08:1e:72:ba:89:c3:87:2a:e9:9d:
b4:0c:c9:02:c4:6b:e8:c6:c6:c7:e5:c5:87:c7:b2:
e5:19:c2:b6:eb:9e:dc:4a:5f:a4:f8:9c:53:9f:9b:
26:3a:c6:e1:3e:31:a0:29:c3:8a:1a:b4:7f:f9:b6:
0d:3e:f1:91:63:39:c1:d8:a6:98:83:8f:4b:c3:74:
80:73:6e:0a:40:fd:e0:3a:0c:3e:25:94:c0:db:5b:
1b:d0:47:d2:37:ed:66:c0:01:f8:30:ed:c0:cf:ab:
75:31:e2:3a:00:49:d9:06:9a:b3:cc:d3:6a:81:86:
c1:ce:73:91:27:f2:28:19:7e:b1:37:a0:fc:86:5a:
09:f0:41:9a:5d:5d:94:a3:9e:6b:e6:50:17:a4:a9:
f9:fe:07:e2:e1:0e:5b:5d:85:af:7e:8a:ae:96:60:
63:ed:c0:7d:78:80:e9:08:d0:27:c5:48:4a:32:30:
2b:c4:cb:14:29:00:65:cf:ba:9d:6c:e6:cc:8e:c3:
59:61
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
6E:F5:DF:7A:50:7C:CD:E6:95:6B:12:51:03:EB:B1:CE:4B:99:5D:84
X509v3 Authority Key Identifier:
keyid:CC:D7:61:59:BF:D9:E3:37:52:3E:E9:30:F3:DF:11:1D:6B:AE:73:06
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/zNdhWb_Z4zdSPukw898RHWuucwY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/50/f6ada1-7e8a-4b3e-b7e8-f8589f682691/1/bvXfelB8zeaVaxJRA-uxzkuZXYQ.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/50/f6ada1-7e8a-4b3e-b7e8-f8589f682691/1/zNdhWb_Z4zdSPukw898RHWuucwY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a09:e00::/29
2a09:1800::/29
2a09:2d00::/29
2a09:4300::/29
2a09:5400::/29
2a09:9600::/29
2a0d:afc0::/29
2a0d:b840::/29
2a0d:c100::/29
2a0d:d3c0::/29
2a0d:e340::/29
2a0d:f140::/29
2a0d:f5c4::/30
Signature Algorithm: sha256WithRSAEncryption
71:59:7e:22:f3:99:0a:5a:90:41:73:48:29:d0:d2:4f:62:f4:
f6:d4:29:22:c1:c7:87:53:92:d0:f0:d8:2c:57:29:48:df:19:
4a:ce:5d:b2:15:eb:e0:64:04:5a:71:25:e6:c7:24:a7:cc:a3:
37:a5:4a:ad:5c:00:7b:00:c6:a6:40:8e:64:2a:45:60:65:94:
03:2f:e8:d8:9c:e9:fd:d0:02:bd:a1:e7:df:e8:83:79:16:57:
9f:1c:28:17:5f:15:fb:ab:97:66:28:e1:2f:66:9a:6b:2f:77:
a7:07:7a:31:09:31:c4:d7:35:68:78:ab:2d:8c:72:83:f7:2a:
7e:fd:66:af:85:9f:33:01:55:30:55:fe:2c:9f:5e:c7:d5:7e:
c8:6d:01:34:f1:ff:e8:3a:90:b8:29:cc:b7:0e:86:d9:b0:33:
82:3c:5e:be:45:38:53:70:df:2d:16:ee:da:ba:77:0d:23:1c:
8c:fa:4c:95:83:3b:5b:dc:4c:a4:de:f1:90:85:02:af:7d:fa:
b1:4e:1f:2b:3d:4f:01:e8:38:76:b7:f0:76:65:50:22:3c:e6:
f8:c5:df:5c:a3:e6:c0:87:d7:ca:7b:e9:48:c8:e7:ff:f4:9b:
76:fb:27:37:c6:d2:2b:53:be:95:80:14:48:0c:86:0a:a8:2b:
73:58:ea:ec
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 19:08:46 2024 by rpki-client on console-ams.rpki-client.org