Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/98/207934-9edc-4a89-820e-d8488b3ab42f/1/0m8wEsmm63vnma9jabSXlHRRO3Q.roa
File: 0m8wEsmm63vnma9jabSXlHRRO3Q.roa (raw, json)
Hash identifier: UJiIVtHsFjEmOswdLzlhoLqvejrcE//h6ZqvVdo08Gs=
Subject key identifier: D2:6F:30:12:C9:A6:EB:7B:E7:99:AF:63:69:B4:97:94:74:51:3B:74
Certificate issuer: /CN=81c8b73ab7bdeb76ff48b2ca099616edbe71c426
Certificate serial: 01856FCB966C4EAD7E05345291F443E7AF5A
Authority key identifier: 81:C8:B7:3A:B7:BD:EB:76:FF:48:B2:CA:09:96:16:ED:BE:71:C4:26
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/gci3Ore963b_SLLKCZYW7b5xxCY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/98/207934-9edc-4a89-820e-d8488b3ab42f/1/0m8wEsmm63vnma9jabSXlHRRO3Q.roa
Signing time: Mon 02 Jan 2023 00:04:51 +0000
ROA not before: Mon 02 Jan 2023 00:04:51 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 202044
IP address blocks: 2a0a:1f47::/32 maxlen: 32
2a0a:1f40::/32 maxlen: 32
2a0a:1f46::/32 maxlen: 32
Validation: Failed, RFC 3779 resource not subset of parent's resources
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:85:6f:cb:96:6c:4e:ad:7e:05:34:52:91:f4:43:e7:af:5a
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=81c8b73ab7bdeb76ff48b2ca099616edbe71c426
Validity
Not Before: Jan 2 00:04:51 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=d26f3012c9a6eb7be799af6369b4979474513b74
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9b:97:84:11:e5:7c:74:e1:8b:bf:f2:40:1d:34:
99:af:9e:0a:37:fb:07:d8:50:4b:8f:01:8a:0d:49:
db:17:e3:66:d1:24:d6:3e:0d:10:0c:7e:d7:9c:77:
a8:f6:39:12:fc:6a:dd:7c:0b:1f:42:14:90:1e:22:
cb:55:5b:27:4e:5b:54:07:d0:b9:84:28:e7:33:86:
3b:b3:16:09:c0:57:56:5c:c1:42:99:0d:59:9f:a7:
3c:ac:31:8a:05:cf:8c:9b:c1:47:25:74:18:74:92:
d9:ce:f9:30:c5:21:aa:82:af:cf:f0:98:78:9d:7f:
5d:e0:08:61:d7:0a:29:d3:80:73:08:7e:d1:86:48:
9b:a7:ee:56:f3:af:64:2b:c4:28:d2:ba:cb:83:bd:
df:dc:a0:34:19:f8:aa:b1:7d:82:80:f0:51:ef:c9:
b0:6b:28:ac:10:d2:cd:73:94:68:0d:6c:80:8e:8e:
dd:1d:94:ef:72:a3:82:47:15:ca:88:a2:fe:7c:89:
62:d8:72:c4:88:f5:eb:98:b8:d4:02:7b:52:db:7a:
c1:55:40:07:16:8b:3c:74:7e:6e:57:66:73:e7:04:
7a:8c:d5:4d:b1:ae:de:ba:40:55:94:63:73:a1:5e:
b0:fa:a5:fd:e8:8e:ea:d6:76:56:51:87:98:56:34:
6e:bb
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D2:6F:30:12:C9:A6:EB:7B:E7:99:AF:63:69:B4:97:94:74:51:3B:74
X509v3 Authority Key Identifier:
keyid:81:C8:B7:3A:B7:BD:EB:76:FF:48:B2:CA:09:96:16:ED:BE:71:C4:26
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/gci3Ore963b_SLLKCZYW7b5xxCY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/98/207934-9edc-4a89-820e-d8488b3ab42f/1/0m8wEsmm63vnma9jabSXlHRRO3Q.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/98/207934-9edc-4a89-820e-d8488b3ab42f/1/gci3Ore963b_SLLKCZYW7b5xxCY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a0a:1f40::/32
2a0a:1f46::/31
Signature Algorithm: sha256WithRSAEncryption
75:11:56:f7:7b:93:a9:1e:53:fb:36:a7:5d:a1:1b:9c:4a:15:
dd:b0:46:90:c6:15:34:2f:45:57:26:cb:cf:73:13:cf:1b:ab:
4c:ea:f2:4b:a9:09:18:cc:bb:ff:51:2d:13:bd:b3:04:11:51:
20:7c:a1:88:a5:24:0c:ef:ec:16:d4:a8:0a:d4:c5:14:1d:bb:
ca:07:f7:4e:b8:bd:69:da:49:c8:8e:74:3c:66:52:8c:06:b7:
65:1b:d5:91:e2:c9:96:30:46:09:d2:0a:ef:52:74:85:08:66:
ba:0b:de:bf:9a:44:88:5e:ce:24:4b:cc:54:8e:cc:6d:73:ba:
32:71:78:55:ae:20:23:c3:e6:4a:60:63:ed:dd:0f:22:5e:ad:
56:6d:8d:f4:28:82:64:88:45:a4:5c:60:51:c4:5b:98:f8:57:
98:60:25:1e:d7:c3:73:f5:70:ab:3c:26:c2:db:2a:e8:16:29:
87:51:e1:d7:6c:ee:70:91:71:19:f0:16:7d:40:de:9a:93:55:
2a:36:f0:5e:c3:37:71:47:01:e9:6e:75:82:7e:cd:c3:85:31:
e4:8c:cf:8e:b1:32:3a:1b:a8:a3:9d:51:7a:97:8c:dd:bd:98:
7d:ad:62:18:7a:3a:61:40:c2:4c:68:31:42:b3:e5:6e:90:a9:
0c:de:b4:a5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 19:25:02 2024 by rpki-client on console-ams.rpki-client.org