Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/68/67d3b8-c43d-44b7-afa6-8b9cddb73408/1/fE8LTsGYR40S2cX_Fba1k5IjdA0.roa
File: fE8LTsGYR40S2cX_Fba1k5IjdA0.roa (raw, json)
Hash identifier: hnn197AYxMyj1n+gtVKOhZTrii0l4LxHiwJ3UcUO21w=
Subject key identifier: 7C:4F:0B:4E:C1:98:47:8D:12:D9:C5:FF:15:B6:B5:93:92:23:74:0D
Certificate issuer: /CN=38401e58890bf230dcae5d0305119ff2c2b8d433
Certificate serial: 018D7E499B55810A865DD5AE4DE8E39C57F4
Authority key identifier: 38:40:1E:58:89:0B:F2:30:DC:AE:5D:03:05:11:9F:F2:C2:B8:D4:33
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/OEAeWIkL8jDcrl0DBRGf8sK41DM.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/68/67d3b8-c43d-44b7-afa6-8b9cddb73408/1/fE8LTsGYR40S2cX_Fba1k5IjdA0.roa
Signing time: Tue 06 Feb 2024 11:59:29 +0000
ROA not before: Tue 06 Feb 2024 11:59:29 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 56603
IP address blocks: 2a09:6280:1::/48 maxlen: 48
Validation: Failed, RFC 3779 resource not subset of parent's resources
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8d:7e:49:9b:55:81:0a:86:5d:d5:ae:4d:e8:e3:9c:57:f4
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=38401e58890bf230dcae5d0305119ff2c2b8d433
Validity
Not Before: Feb 6 11:59:29 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=7c4f0b4ec198478d12d9c5ff15b6b5939223740d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:84:39:f6:8b:4e:f0:0e:17:2d:bd:06:ed:b7:93:
c5:a3:b9:aa:9d:64:f8:c3:a1:a1:b0:f0:85:a0:91:
08:ed:9e:23:22:b6:b8:ae:3d:a1:0e:45:00:8e:84:
18:67:22:6c:8c:0d:53:c6:8e:6f:c9:57:06:ed:00:
6b:98:3e:a4:f5:7a:df:bd:d5:76:33:c7:af:dc:1a:
33:d2:a1:36:40:18:19:2b:05:46:12:2c:01:4c:68:
5e:df:95:d6:cf:c7:31:55:8a:2f:ad:58:16:55:3b:
90:05:bd:13:d0:50:53:1a:57:7e:b8:c1:61:6e:eb:
2c:96:7e:43:39:6b:c4:0a:c7:52:fc:cb:5a:fc:ec:
96:5f:f8:2e:5b:bf:5f:d3:59:b0:54:03:f9:59:e7:
57:3f:85:9a:da:1e:bc:12:5d:b3:3d:84:a5:e6:dc:
4c:64:62:4e:11:ad:7a:c0:9d:c6:ee:6d:a4:de:ef:
ad:75:68:5a:78:fd:22:81:bd:66:c3:46:d5:19:db:
1d:08:5b:74:3f:9e:16:34:d8:00:52:0a:ac:44:ba:
02:11:f7:f9:11:2e:0b:86:75:b1:aa:22:5f:f9:57:
36:af:94:86:c5:73:7f:52:0e:20:b7:c0:0a:1e:ac:
2e:1e:2b:77:7d:f9:90:18:9e:ac:30:08:28:15:30:
77:1b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
7C:4F:0B:4E:C1:98:47:8D:12:D9:C5:FF:15:B6:B5:93:92:23:74:0D
X509v3 Authority Key Identifier:
keyid:38:40:1E:58:89:0B:F2:30:DC:AE:5D:03:05:11:9F:F2:C2:B8:D4:33
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/OEAeWIkL8jDcrl0DBRGf8sK41DM.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/68/67d3b8-c43d-44b7-afa6-8b9cddb73408/1/fE8LTsGYR40S2cX_Fba1k5IjdA0.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/68/67d3b8-c43d-44b7-afa6-8b9cddb73408/1/OEAeWIkL8jDcrl0DBRGf8sK41DM.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a09:6280:1::/48
Signature Algorithm: sha256WithRSAEncryption
af:31:5c:28:0d:04:0f:33:d8:76:67:95:69:5b:52:92:f5:4d:
b3:97:0c:e2:a6:ac:9b:0e:c3:77:b8:b7:21:1f:0c:a2:26:2c:
05:a3:98:58:50:91:1d:45:dc:09:38:e0:70:93:31:43:2c:bc:
c7:44:21:66:ad:02:11:ab:5f:ba:9c:6a:9d:d7:cc:82:87:6f:
76:0c:f2:3f:0a:37:38:96:42:19:1a:c5:d3:ef:75:26:a7:51:
49:fb:04:13:ca:a9:df:96:9f:b5:ad:dd:b4:17:0a:f8:8f:6b:
b9:e4:9b:e5:f9:a0:7f:55:ae:9e:7b:9a:12:7c:1e:71:8a:58:
d8:76:f3:fa:6e:a0:0d:82:55:5e:78:6e:28:f0:cb:ca:2f:f0:
71:5a:1e:2d:67:f3:f9:46:04:ec:6b:16:6b:06:8f:4b:b1:c1:
51:5d:41:01:63:5c:2b:a5:21:56:b4:38:28:ea:11:19:99:cf:
21:c8:ef:8d:cf:c5:aa:b3:c9:e7:c9:1f:a5:50:f6:5c:ea:71:
f5:8b:b6:0e:09:4e:3e:c2:e7:cc:67:d6:77:d2:fe:b1:d3:b1:
76:29:44:c4:af:a1:9c:10:f3:6e:5c:1e:7b:4b:bd:b4:13:9f:
c3:94:e3:ad:de:09:a1:75:9e:f2:b4:dd:a3:31:e7:92:58:25:
f0:81:d4:27
-----BEGIN CERTIFICATE-----
MIIFADCCA+igAwIBAgISAY1+SZtVgQqGXdWuTejjnFf0MA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDM4NDAxZTU4ODkwYmYyMzBkY2FlNWQwMzA1MTE5ZmYyYzJi
OGQ0MzMwHhcNMjQwMjA2MTE1OTI5WhcNMjUwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
Eyg3YzRmMGI0ZWMxOTg0NzhkMTJkOWM1ZmYxNWI2YjU5MzkyMjM3NDBkMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAhDn2i07wDhctvQbtt5PFo7mqnWT4
w6GhsPCFoJEI7Z4jIra4rj2hDkUAjoQYZyJsjA1Txo5vyVcG7QBrmD6k9XrfvdV2
M8ev3Boz0qE2QBgZKwVGEiwBTGhe35XWz8cxVYovrVgWVTuQBb0T0FBTGld+uMFh
bussln5DOWvECsdS/Mta/OyWX/guW79f01mwVAP5WedXP4Wa2h68El2zPYSl5txM
ZGJOEa16wJ3G7m2k3u+tdWhaeP0igb1mw0bVGdsdCFt0P54WNNgAUgqsRLoCEff5
ES4LhnWxqiJf+Vc2r5SGxXN/Ug4gt8AKHqwuHit3ffmQGJ6sMAgoFTB3GwIDAQAB
o4ICDDCCAggwHQYDVR0OBBYEFHxPC07BmEeNEtnF/xW2tZOSI3QNMB8GA1UdIwQY
MBaAFDhAHliJC/Iw3K5dAwURn/LCuNQzMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvT0VBZVdJa0w4akRjcmwwREJSR2Y4c0s0MURNLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC82OC82N2QzYjgtYzQzZC00NGI3LWFmYTYt
OGI5Y2RkYjczNDA4LzEvZkU4TFRzR1lSNDBTMmNYX0ZiYTFrNUlqZEEwLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC82OC82N2QzYjgtYzQzZC00NGI3LWFmYTYtOGI5Y2RkYjczNDA4
LzEvT0VBZVdJa0w4akRjcmwwREJSR2Y4c0s0MURNLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCIGCCsGAQUFBwEHAQH/BBMwETAPBAIAAjAJAwcAKgligAAB
MA0GCSqGSIb3DQEBCwUAA4IBAQCvMVwoDQQPM9h2Z5VpW1KS9U2zlwzipqybDsN3
uLchHwyiJiwFo5hYUJEdRdwJOOBwkzFDLLzHRCFmrQIRq1+6nGqd18yCh292DPI/
Cjc4lkIZGsXT73Ump1FJ+wQTyqnflp+1rd20Fwr4j2u55Jvl+aB/Va6ee5oSfB5x
iljYdvP6bqANglVeeG4o8MvKL/BxWh4tZ/P5RgTsaxZrBo9LscFRXUEBY1wrpSFW
tDgo6hEZmc8hyO+Nz8Wqs8nnyR+lUPZc6nH1i7YOCU4+wufMZ9Z30v6x07F2KUTE
r6GcEPNuXB57S720E5/DlOOt3gmhdZ7ytN2jMeeSWCXwgdQn
-----END CERTIFICATE-----
Generated at Thu Jun 6 19:15:36 2024 by rpki-client on console-ams.rpki-client.org