Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/68/67d3b8-c43d-44b7-afa6-8b9cddb73408/1/WVnKpjFJJAWhiN0wQcl5gxOAccU.roa
File: WVnKpjFJJAWhiN0wQcl5gxOAccU.roa (raw, json)
Hash identifier: yMjjESEE0tA7iWCkBVosGij807F5pLiwMN23Qe0tTPE=
Subject key identifier: 59:59:CA:A6:31:49:24:05:A1:88:DD:30:41:C9:79:83:13:80:71:C5
Certificate issuer: /CN=38401e58890bf230dcae5d0305119ff2c2b8d433
Certificate serial: 018CCA991042C8BC8969FE9DEC23AA2D9C89
Authority key identifier: 38:40:1E:58:89:0B:F2:30:DC:AE:5D:03:05:11:9F:F2:C2:B8:D4:33
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/OEAeWIkL8jDcrl0DBRGf8sK41DM.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/68/67d3b8-c43d-44b7-afa6-8b9cddb73408/1/WVnKpjFJJAWhiN0wQcl5gxOAccU.roa
Signing time: Tue 02 Jan 2024 14:34:37 +0000
ROA not before: Tue 02 Jan 2024 14:34:37 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 203493
IP address blocks: 2a09:6280:3::/48 maxlen: 48
Validation: Failed, RFC 3779 resource not subset of parent's resources
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8c:ca:99:10:42:c8:bc:89:69:fe:9d:ec:23:aa:2d:9c:89
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=38401e58890bf230dcae5d0305119ff2c2b8d433
Validity
Not Before: Jan 2 14:34:37 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=5959caa631492405a188dd3041c97983138071c5
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:91:f6:64:6a:dd:8b:ce:50:a8:99:37:10:90:d6:
79:03:a1:19:33:eb:17:47:fd:e0:b6:03:46:62:48:
91:b4:46:98:57:b0:5b:2e:1c:2e:00:10:bf:5d:2e:
30:23:d2:a7:1a:f3:f4:e8:fb:84:ea:ec:e0:28:30:
06:cc:24:05:93:1d:78:1a:f2:09:74:73:93:03:64:
b3:ca:6a:be:e0:84:47:1a:d2:96:38:c8:98:5a:0f:
e5:7f:6a:1d:aa:42:dd:e7:48:56:c4:40:01:fe:67:
09:17:f8:4f:39:ea:dc:42:ac:ce:33:71:01:00:33:
a2:1c:3e:6f:f1:68:53:36:b7:a3:3f:40:be:5c:f9:
d1:80:56:d7:65:97:b4:af:c5:59:a5:76:e6:1b:13:
f0:3b:c5:33:46:6b:77:e4:5e:22:59:99:27:a9:7c:
09:32:10:0e:59:b9:3c:85:a4:9b:5c:a2:6c:b9:6a:
ed:50:97:5e:b2:86:81:4e:b0:e7:ca:a1:dc:2a:ea:
9a:8a:af:b2:87:4f:04:2d:d3:67:4c:28:6d:c4:79:
7e:7a:6b:73:c4:10:b2:c7:65:78:45:d5:d8:c6:8a:
1c:f2:2d:a6:f8:c0:8f:a5:0d:fa:35:58:65:49:58:
6a:3c:4c:56:37:1e:ce:e0:39:ec:6d:5b:f7:55:1c:
f9:75
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
59:59:CA:A6:31:49:24:05:A1:88:DD:30:41:C9:79:83:13:80:71:C5
X509v3 Authority Key Identifier:
keyid:38:40:1E:58:89:0B:F2:30:DC:AE:5D:03:05:11:9F:F2:C2:B8:D4:33
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/OEAeWIkL8jDcrl0DBRGf8sK41DM.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/68/67d3b8-c43d-44b7-afa6-8b9cddb73408/1/WVnKpjFJJAWhiN0wQcl5gxOAccU.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/68/67d3b8-c43d-44b7-afa6-8b9cddb73408/1/OEAeWIkL8jDcrl0DBRGf8sK41DM.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a09:6280:3::/48
Signature Algorithm: sha256WithRSAEncryption
02:c9:87:ea:cd:9b:4b:02:d9:62:aa:be:73:c0:a7:68:7b:17:
be:16:95:3f:fa:16:34:d1:19:e1:96:13:5e:7d:f4:10:95:cc:
41:1c:6e:e5:40:78:3f:5e:59:b3:dd:7e:50:98:03:06:16:95:
7f:be:96:3c:53:50:e2:e3:de:b3:81:d0:91:eb:5f:b2:01:3f:
2a:b7:13:d8:04:61:c1:db:77:32:0b:8b:68:49:4c:e4:c9:63:
56:f9:42:c6:bc:85:38:0d:d9:e4:91:42:45:a4:bd:28:73:c4:
e5:1e:f6:9e:f1:b5:c3:83:03:e3:dc:67:db:1a:85:90:2d:0c:
ff:46:b8:68:ac:91:4c:8d:7d:93:9e:e9:81:04:b9:55:54:54:
d3:ea:ee:08:92:3b:25:88:c9:9e:e1:2d:9d:f3:86:7e:b6:d6:
2c:36:0c:2e:c1:72:f3:6e:b3:e7:e8:f6:b8:14:42:cd:b6:f5:
2d:de:aa:e2:b2:3c:4e:9a:5b:59:d9:79:3e:86:8a:59:ec:56:
a4:26:65:ff:ee:15:d0:e8:01:3b:24:83:44:10:18:77:01:d0:
e5:df:47:15:52:d7:d6:8d:f1:65:ee:97:a0:14:cc:3e:7e:da:
7a:e9:a0:08:3b:b0:95:6f:30:25:76:30:7b:b4:49:ce:4b:1f:
c4:33:63:c7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 19:15:36 2024 by rpki-client on console-ams.rpki-client.org