Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/81/810d24-acbe-4cb2-9ac5-9d5875d86373/1/hEtx8UzmZT2RYYRnRl8hgA1KAcU.roa
File: hEtx8UzmZT2RYYRnRl8hgA1KAcU.roa (raw, json)
Hash identifier: hzaGR4OVs+vW9biTWQBnh4Xwr4/ofIBgooI22oE0U+g=
Subject key identifier: 84:4B:71:F1:4C:E6:65:3D:91:61:84:67:46:5F:21:80:0D:4A:01:C5
Certificate issuer: /CN=ada25aafe3a9870e9524afa0265987ed5a5a4da3
Certificate serial: 01867EB923CCD41796F700091AD35B79DE0C
Authority key identifier: AD:A2:5A:AF:E3:A9:87:0E:95:24:AF:A0:26:59:87:ED:5A:5A:4D:A3
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/raJar-Ophw6VJK-gJlmH7VpaTaM.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/81/810d24-acbe-4cb2-9ac5-9d5875d86373/1/hEtx8UzmZT2RYYRnRl8hgA1KAcU.roa
Signing time: Thu 23 Feb 2023 14:41:47 +0000
ROA not before: Thu 23 Feb 2023 14:41:47 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 208861
IP address blocks: 2a10:4b00::/29 maxlen: 29
2a09:da00::/29 maxlen: 29
Validation: Failed, RFC 3779 resource not subset of parent's resources
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:86:7e:b9:23:cc:d4:17:96:f7:00:09:1a:d3:5b:79:de:0c
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=ada25aafe3a9870e9524afa0265987ed5a5a4da3
Validity
Not Before: Feb 23 14:41:47 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=844b71f14ce6653d91618467465f21800d4a01c5
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a6:d4:57:81:a8:79:17:c0:f0:e1:6a:51:85:8e:
17:a3:02:af:d6:c6:0c:52:b5:dc:c3:be:21:7b:f9:
d2:ef:03:9c:b6:b7:3e:14:0d:75:ef:2e:3d:da:3d:
34:ee:22:43:b0:e1:cf:7e:ac:40:b2:7d:c8:e7:f6:
46:83:ba:53:6f:7d:7f:01:f1:a3:9e:74:65:ae:3e:
20:62:f4:df:98:dd:19:c4:28:40:08:e3:f7:c6:b5:
6e:bc:23:c5:cc:95:d7:62:d7:54:24:c7:84:af:76:
7b:eb:8d:79:29:3a:1c:a9:a2:d1:01:68:80:ae:eb:
3e:39:15:ae:b7:0e:38:d4:23:0d:99:eb:45:56:3f:
6c:0a:5b:b0:e1:ce:21:5f:c0:b3:28:99:cc:ed:71:
ca:a4:5d:7c:b0:15:37:63:d2:59:98:76:de:b5:af:
a2:3f:13:ba:ef:fa:f3:62:fc:bd:f0:1c:c8:d4:6c:
4c:34:e7:a6:1a:39:cd:b5:68:a7:7d:f8:e2:fd:7c:
64:f3:c0:3d:65:bf:3e:9f:5c:3e:ac:57:22:38:71:
c4:83:18:29:30:25:5b:c5:c1:a7:13:47:9e:c4:62:
7f:1a:6f:a4:c3:37:28:fe:77:e8:56:53:93:1e:f7:
3e:c9:a5:1e:77:6a:5b:61:4b:5b:a3:af:0a:ab:98:
29:6f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
84:4B:71:F1:4C:E6:65:3D:91:61:84:67:46:5F:21:80:0D:4A:01:C5
X509v3 Authority Key Identifier:
keyid:AD:A2:5A:AF:E3:A9:87:0E:95:24:AF:A0:26:59:87:ED:5A:5A:4D:A3
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/raJar-Ophw6VJK-gJlmH7VpaTaM.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/81/810d24-acbe-4cb2-9ac5-9d5875d86373/1/hEtx8UzmZT2RYYRnRl8hgA1KAcU.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/81/810d24-acbe-4cb2-9ac5-9d5875d86373/1/raJar-Ophw6VJK-gJlmH7VpaTaM.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a09:da00::/29
2a10:4b00::/29
Signature Algorithm: sha256WithRSAEncryption
73:f4:ab:8e:f8:a0:7f:08:ec:05:74:71:b7:ad:74:d9:5d:e5:
42:04:5f:ee:d7:e7:77:6c:84:86:af:d9:0c:93:c4:72:2d:95:
63:0f:36:02:ab:cc:f5:bc:dc:4c:96:dd:9d:46:14:56:31:71:
81:7d:61:2f:1a:16:0a:d3:30:7f:57:5a:56:6d:3f:21:5f:f9:
44:97:1e:1e:81:63:0a:59:05:d7:1e:53:f7:9a:d1:24:bc:75:
bf:9e:a1:a4:da:4c:c0:f1:14:c9:b3:6d:40:ec:a6:de:5e:b3:
13:e5:0a:aa:2f:bc:04:1a:7d:b8:73:1a:db:e5:24:bf:68:f8:
1d:36:15:9f:19:14:47:8d:15:8c:43:76:4e:15:72:cb:57:8c:
22:73:08:ea:54:ed:8b:af:74:12:d0:9a:e8:f2:ac:87:59:57:
ef:23:32:fe:69:cb:72:c9:1b:96:19:b2:47:63:55:c6:13:c4:
fc:3d:72:e4:15:38:9c:9a:b6:81:5e:2c:4d:e9:80:9b:a8:e1:
3d:0f:18:0f:ed:c0:f9:7b:f0:c5:b1:a4:a4:49:8f:ee:bb:06:
20:a4:63:7e:2a:c3:f7:8b:b6:7b:bc:a6:ce:fc:b3:92:61:f9:
dd:8a:16:72:90:29:e9:d5:f3:4d:c4:04:26:28:59:4a:d0:7b:
dd:cd:f5:75
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:37:01 2024 by rpki-client on console-fra.rpki-client.org