Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/78/da3398-6698-45f2-baae-92e25fe16331/1/a12oChI_uE4fUgAVYeDdGfE-RSA.roa
File: a12oChI_uE4fUgAVYeDdGfE-RSA.roa (raw, json)
Hash identifier: kgYQXzcYzouac+M9sbjdzqvK9l9Y9r9aYeNNwp0iZp0=
Subject key identifier: 6B:5D:A8:0A:12:3F:B8:4E:1F:52:00:15:61:E0:DD:19:F1:3E:45:20
Certificate issuer: /CN=f8e62634e1bd5133a9de4512ae98cad1b2219b59
Certificate serial: 01856FD526012A85478EF343AA67878499D3
Authority key identifier: F8:E6:26:34:E1:BD:51:33:A9:DE:45:12:AE:98:CA:D1:B2:21:9B:59
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/1-OYmNOG9UTOp3kUSrpjK0bIhm1k.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/78/da3398-6698-45f2-baae-92e25fe16331/1/a12oChI_uE4fUgAVYeDdGfE-RSA.roa
Signing time: Mon 02 Jan 2023 00:15:17 +0000
ROA not before: Mon 02 Jan 2023 00:15:17 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 48571
IP address blocks: 128.0.55.0/24 maxlen: 24
Validation: Failed, RFC 3779 resource not subset of parent's resources
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:85:6f:d5:26:01:2a:85:47:8e:f3:43:aa:67:87:84:99:d3
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=f8e62634e1bd5133a9de4512ae98cad1b2219b59
Validity
Not Before: Jan 2 00:15:17 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=6b5da80a123fb84e1f52001561e0dd19f13e4520
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:84:a0:ce:e7:9b:53:2b:1b:db:db:7d:22:fd:5f:
60:78:3a:f8:30:97:b9:76:79:44:49:c0:c2:b6:95:
c9:9a:3f:59:e2:5d:5c:3a:fb:4e:8c:32:8c:67:1d:
a6:b7:d7:02:a0:ce:93:91:99:5a:31:49:42:36:54:
b9:61:fb:5a:0e:be:40:8e:bb:64:15:32:73:ef:82:
d0:05:ed:7a:23:5c:a5:f6:56:57:0a:5d:bc:4f:99:
37:07:7c:bc:4c:41:7e:6d:3f:99:77:03:5d:1f:20:
20:e3:c9:3e:94:1f:7f:fd:9d:ce:83:0e:9e:83:1c:
be:1c:d5:0d:2e:a6:41:7b:80:e2:66:33:a9:49:16:
c7:bd:55:e2:79:5d:9a:63:b0:28:8d:7c:21:10:3e:
ea:73:43:11:5a:f6:e5:e9:54:73:62:1c:72:c6:57:
40:ab:a7:23:f0:cb:68:f6:ed:5f:10:9f:a6:17:2d:
af:99:f6:70:27:57:0b:92:28:65:d1:2b:36:bc:fa:
fb:a5:1a:1b:38:4d:fa:79:19:de:7a:ae:57:3f:1b:
dc:ca:f2:1b:27:31:92:54:73:e9:8c:27:d7:08:12:
45:10:12:6e:08:4e:85:94:c3:b8:ec:35:76:d6:40:
0e:d3:76:3c:e0:fa:3e:95:54:3d:9a:73:e2:a7:60:
e4:c7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
6B:5D:A8:0A:12:3F:B8:4E:1F:52:00:15:61:E0:DD:19:F1:3E:45:20
X509v3 Authority Key Identifier:
keyid:F8:E6:26:34:E1:BD:51:33:A9:DE:45:12:AE:98:CA:D1:B2:21:9B:59
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/1-OYmNOG9UTOp3kUSrpjK0bIhm1k.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/78/da3398-6698-45f2-baae-92e25fe16331/1/a12oChI_uE4fUgAVYeDdGfE-RSA.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/78/da3398-6698-45f2-baae-92e25fe16331/1/1-OYmNOG9UTOp3kUSrpjK0bIhm1k.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
128.0.55.0/24
Signature Algorithm: sha256WithRSAEncryption
27:57:81:63:36:7b:29:a2:dd:d5:04:25:98:21:26:6f:2c:9c:
f5:47:0b:a1:6b:f1:be:6d:5b:7d:9d:47:ef:2d:79:1c:30:96:
20:0c:d0:40:75:ae:34:5b:14:a4:5a:70:1e:c1:67:98:93:c0:
f6:65:54:39:71:66:be:a7:51:44:7c:1d:b3:65:65:8d:5d:b0:
b0:35:6e:73:11:d1:1a:1d:60:9f:8e:47:22:a2:fb:b0:5f:7c:
0e:66:d1:fc:3b:33:49:13:bd:03:cc:5f:cc:21:10:08:64:3c:
28:37:b5:96:6c:0d:1e:15:7e:88:8b:ca:96:4f:5a:be:e6:eb:
54:94:83:95:fa:08:59:34:dc:e8:7d:ba:8f:30:b4:a4:49:6f:
db:fe:e8:cf:64:b1:d5:4c:b4:b3:56:52:c8:df:e5:1a:ed:c4:
3a:9a:56:cc:3b:97:04:2b:12:47:3d:2c:9e:10:98:61:79:c3:
8f:25:cb:26:3f:6f:ce:d7:36:78:0a:76:ff:6e:82:3a:03:e8:
89:b0:f4:c0:29:70:7e:95:74:7b:db:69:0a:e6:7b:51:eb:76:
2f:b0:65:65:9c:e0:92:cf:22:4e:c8:46:04:d0:14:fb:28:ba:
0e:e7:d8:00:11:a0:9e:81:e9:54:b0:79:43:75:ef:61:b5:10:
4e:41:3b:ec
-----BEGIN CERTIFICATE-----
MIIE/zCCA+egAwIBAgISAYVv1SYBKoVHjvNDqmeHhJnTMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGY4ZTYyNjM0ZTFiZDUxMzNhOWRlNDUxMmFlOThjYWQxYjIy
MTliNTkwHhcNMjMwMTAyMDAxNTE3WhcNMjQwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
Eyg2YjVkYTgwYTEyM2ZiODRlMWY1MjAwMTU2MWUwZGQxOWYxM2U0NTIwMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAhKDO55tTKxvb230i/V9geDr4MJe5
dnlEScDCtpXJmj9Z4l1cOvtOjDKMZx2mt9cCoM6TkZlaMUlCNlS5YftaDr5Ajrtk
FTJz74LQBe16I1yl9lZXCl28T5k3B3y8TEF+bT+ZdwNdHyAg48k+lB9//Z3Ogw6e
gxy+HNUNLqZBe4DiZjOpSRbHvVXieV2aY7AojXwhED7qc0MRWvbl6VRzYhxyxldA
q6cj8Mto9u1fEJ+mFy2vmfZwJ1cLkihl0Ss2vPr7pRobOE36eRneeq5XPxvcyvIb
JzGSVHPpjCfXCBJFEBJuCE6FlMO47DV21kAO03Y84Po+lVQ9mnPip2DkxwIDAQAB
o4ICCzCCAgcwHQYDVR0OBBYEFGtdqAoSP7hOH1IAFWHg3RnxPkUgMB8GA1UdIwQY
MBaAFPjmJjThvVEzqd5FEq6YytGyIZtZMA4GA1UdDwEB/wQEAwIHgDBlBggrBgEF
BQcBAQRZMFcwVQYIKwYBBQUHMAKGSXJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvMS1PWW1OT0c5VVRPcDNrVVNycGpLMGJJaG0xay5jZXIw
gY0GCCsGAQUFBwELBIGAMH4wfAYIKwYBBQUHMAuGcHJzeW5jOi8vcnBraS5yaXBl
Lm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvNzgvZGEzMzk4LTY2OTgtNDVmMi1iYWFl
LTkyZTI1ZmUxNjMzMS8xL2ExMm9DaElfdUU0ZlVnQVZZZURkR2ZFLVJTQS5yb2Ew
gYIGA1UdHwR7MHkwd6B1oHOGcXJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBvc2l0
b3J5L0RFRkFVTFQvNzgvZGEzMzk4LTY2OTgtNDVmMi1iYWFlLTkyZTI1ZmUxNjMz
MS8xLzEtT1ltTk9HOVVUT3Aza1VTcnBqSzBiSWhtMWsuY3JsMBgGA1UdIAEB/wQO
MAwwCgYIKwYBBQUHDgIwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgABMAYDBACAADcw
DQYJKoZIhvcNAQELBQADggEBACdXgWM2eymi3dUEJZghJm8snPVHC6Fr8b5tW32d
R+8teRwwliAM0EB1rjRbFKRacB7BZ5iTwPZlVDlxZr6nUUR8HbNlZY1dsLA1bnMR
0RodYJ+ORyKi+7BffA5m0fw7M0kTvQPMX8whEAhkPCg3tZZsDR4VfoiLypZPWr7m
61SUg5X6CFk03Oh9uo8wtKRJb9v+6M9ksdVMtLNWUsjf5RrtxDqaVsw7lwQrEkc9
LJ4QmGF5w48lyyY/b87XNngKdv9ugjoD6Imw9MApcH6VdHvbaQrme1Hrdi+wZWWc
4JLPIk7IRgTQFPsoug7n2AARoJ6B6VSweUN172G1EE5BO+w=
-----END CERTIFICATE-----
Generated at Wed Feb 19 22:30:28 2025 by rpki-client