Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/75/c072ae-15d7-42a8-bfc2-bc93ca679e1f/1/smxtunAvuwVl7VA4eJFp9OAuEeE.roa
File: smxtunAvuwVl7VA4eJFp9OAuEeE.roa (raw, json)
Hash identifier: vsm3kM5rrg0dXu1eTZs7BBtTYDRIipRLgFl8mbMMCgg=
Subject key identifier: B2:6C:6D:BA:70:2F:BB:05:65:ED:50:38:78:91:69:F4:E0:2E:11:E1
Certificate issuer: /CN=215266435617fa0f1fd2837ec80c6d83b0b9d608
Certificate serial: 018D4B823031C4E59F22882088067EE1A0A0
Authority key identifier: 21:52:66:43:56:17:FA:0F:1F:D2:83:7E:C8:0C:6D:83:B0:B9:D6:08
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/IVJmQ1YX-g8f0oN-yAxtg7C51gg.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/75/c072ae-15d7-42a8-bfc2-bc93ca679e1f/1/smxtunAvuwVl7VA4eJFp9OAuEeE.roa
Signing time: Sat 27 Jan 2024 15:20:39 +0000
ROA not before: Sat 27 Jan 2024 15:20:39 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 204104
IP address blocks: 2a05:9080:1::/48 maxlen: 48
Validation: Failed, RFC 3779 resource not subset of parent's resources
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8d:4b:82:30:31:c4:e5:9f:22:88:20:88:06:7e:e1:a0:a0
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=215266435617fa0f1fd2837ec80c6d83b0b9d608
Validity
Not Before: Jan 27 15:20:39 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=b26c6dba702fbb0565ed5038789169f4e02e11e1
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ae:b0:a7:e4:b9:b5:d9:c3:b6:ed:34:60:2f:54:
d7:29:61:b7:21:36:22:ea:a8:d4:e8:93:46:55:b4:
34:f1:dd:96:1d:c1:d2:20:27:d6:dc:06:54:1b:8e:
bc:28:3e:ef:99:c5:88:88:59:c4:fc:4e:68:03:7f:
17:56:0a:df:bb:18:d8:c9:a5:9e:4f:26:ea:e8:fa:
fb:6c:48:23:1f:e0:78:b3:ee:c0:e6:4b:82:5f:06:
af:91:40:19:a1:f1:e3:1f:f8:0c:14:ce:b9:dc:87:
6e:16:a1:e1:2f:3f:25:bf:84:3c:ee:cb:dc:bb:a2:
8a:29:78:88:62:08:72:a2:ee:91:8d:3a:f7:a9:2f:
d4:18:0d:f7:21:63:3a:85:5a:dc:af:a6:c7:ce:5c:
aa:4a:28:c3:f5:5b:d4:cc:a3:6e:1f:e6:77:c8:51:
b2:24:d7:fa:90:72:ea:fb:0e:af:78:a6:01:c3:f0:
96:84:97:3a:f7:3d:c9:31:ca:48:2c:8a:5e:a9:a7:
90:56:80:0e:fd:7e:92:18:c5:5f:6e:73:03:68:81:
90:44:67:4c:0a:3e:3c:91:8d:87:92:9a:86:12:d5:
f9:66:70:d3:de:97:c3:87:04:ff:eb:09:f9:a5:d0:
8a:ea:ae:74:a6:19:51:36:ef:93:2e:1b:96:a9:b1:
db:0d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B2:6C:6D:BA:70:2F:BB:05:65:ED:50:38:78:91:69:F4:E0:2E:11:E1
X509v3 Authority Key Identifier:
keyid:21:52:66:43:56:17:FA:0F:1F:D2:83:7E:C8:0C:6D:83:B0:B9:D6:08
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/IVJmQ1YX-g8f0oN-yAxtg7C51gg.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/75/c072ae-15d7-42a8-bfc2-bc93ca679e1f/1/smxtunAvuwVl7VA4eJFp9OAuEeE.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/75/c072ae-15d7-42a8-bfc2-bc93ca679e1f/1/IVJmQ1YX-g8f0oN-yAxtg7C51gg.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a05:9080:1::/48
Signature Algorithm: sha256WithRSAEncryption
64:75:a9:94:0e:57:f4:0d:76:dc:44:26:c0:2a:89:56:bf:4b:
6b:49:54:61:a6:7c:2a:07:51:ea:3e:3b:c2:5f:17:6f:6f:62:
29:cb:79:0c:bb:f4:ed:4b:1c:eb:8d:3b:9f:6f:98:12:1e:44:
4c:7d:69:89:f9:db:66:85:63:47:d8:de:08:aa:f6:96:cc:52:
54:c2:b4:52:b6:3c:94:aa:28:b6:33:84:e3:3c:2d:9e:c1:b6:
b0:73:1e:61:5c:f2:e3:58:99:60:ac:2e:b0:21:bb:e8:6e:c4:
f6:db:2c:9b:a7:cc:05:d9:61:9e:6d:b9:8d:a2:dc:38:5b:2d:
70:56:0d:34:26:4f:4f:3f:fe:b1:fb:10:0b:ac:c3:56:63:ca:
1f:01:6a:14:e5:ca:cb:f7:2f:71:fd:27:ba:84:66:7e:cf:fa:
a2:09:c8:8c:2f:b9:69:4b:2d:3d:cd:8c:a7:81:ba:52:e5:74:
81:16:64:e1:31:46:63:f9:6d:0a:78:66:d7:be:b1:ff:fe:fb:
01:6e:ce:0a:fc:41:1b:dc:81:b8:8e:5f:00:0a:d5:8f:8f:9b:
e1:f5:d4:7b:ad:f5:38:1d:8f:a7:3c:86:fd:96:25:8c:95:91:
30:a2:c0:fa:05:79:c4:e5:93:6a:ba:47:00:28:f9:b6:b0:ce:
72:17:99:a3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 18 13:45:15 2025 by rpki-client