Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/98/207934-9edc-4a89-820e-d8488b3ab42f/1/zemSDdF2rF9a3tLszIVrzu8gVE4.roa
File: zemSDdF2rF9a3tLszIVrzu8gVE4.roa (raw, json)
Hash identifier: IZ1YAHnYI/W53OipGnAY/hMAKe2BWbhEuFyN7xjBtpI=
Subject key identifier: CD:E9:92:0D:D1:76:AC:5F:5A:DE:D2:EC:CC:85:6B:CE:EF:20:54:4E
Certificate issuer: /CN=81c8b73ab7bdeb76ff48b2ca099616edbe71c426
Certificate serial: 058683A5
Authority key identifier: 81:C8:B7:3A:B7:BD:EB:76:FF:48:B2:CA:09:96:16:ED:BE:71:C4:26
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/gci3Ore963b_SLLKCZYW7b5xxCY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/98/207934-9edc-4a89-820e-d8488b3ab42f/1/zemSDdF2rF9a3tLszIVrzu8gVE4.roa
Signing time: Sat 01 Jan 2022 06:04:28 +0000
ROA not before: Sat 01 Jan 2022 06:04:28 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 61272
IP address blocks: 2a0a:1f40::/32 maxlen: 32
Validation: Failed, RFC 3779 resource not subset of parent's resources
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 92701605 (0x58683a5)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=81c8b73ab7bdeb76ff48b2ca099616edbe71c426
Validity
Not Before: Jan 1 06:04:28 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=cde9920dd176ac5f5aded2eccc856bceef20544e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:dd:14:12:7f:95:2a:31:03:17:54:aa:47:23:d1:
28:41:60:dc:9c:86:06:ac:1e:1f:a8:67:8f:21:ff:
e8:14:91:f6:19:f1:d5:71:6a:35:58:ae:54:16:62:
18:9c:9f:ca:09:7e:27:da:8a:02:39:24:8f:08:1d:
12:b8:62:4e:01:0f:e8:f7:61:70:4c:2c:79:32:26:
2f:e6:39:e5:56:9e:da:8c:13:11:4e:cb:31:b6:f3:
76:c1:f9:b4:8e:76:b2:5e:a2:b9:45:0c:fd:92:e8:
61:d6:ef:00:3c:a8:5d:bf:5f:be:ef:1d:b0:ae:8d:
d9:08:83:ef:5d:0c:d9:44:a1:3c:ca:94:45:6d:6e:
bf:81:86:55:92:0c:ba:6d:c8:4e:9b:db:18:8c:7e:
c1:75:a9:01:ec:ed:b6:f4:94:c6:bc:ad:4d:a7:7f:
bb:cd:bb:c5:99:53:16:51:b3:2c:fd:d3:45:f3:1d:
27:a9:5d:4a:27:ce:05:99:8d:e1:91:37:ec:48:ef:
1d:0f:37:dc:c4:a6:9b:dc:33:ac:16:59:b8:e2:53:
48:d6:fd:ef:ed:88:f5:70:98:6e:8b:b7:40:fa:e6:
eb:d3:64:81:85:ff:59:be:4c:37:d8:dd:96:4e:54:
a5:16:f1:2c:73:d8:24:a0:da:65:ae:18:c1:00:31:
59:1b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
CD:E9:92:0D:D1:76:AC:5F:5A:DE:D2:EC:CC:85:6B:CE:EF:20:54:4E
X509v3 Authority Key Identifier:
keyid:81:C8:B7:3A:B7:BD:EB:76:FF:48:B2:CA:09:96:16:ED:BE:71:C4:26
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/gci3Ore963b_SLLKCZYW7b5xxCY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/98/207934-9edc-4a89-820e-d8488b3ab42f/1/zemSDdF2rF9a3tLszIVrzu8gVE4.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/98/207934-9edc-4a89-820e-d8488b3ab42f/1/gci3Ore963b_SLLKCZYW7b5xxCY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a0a:1f40::/32
Signature Algorithm: sha256WithRSAEncryption
46:3a:08:e1:c3:93:ee:67:9f:cd:e5:33:50:87:50:17:14:07:
ec:3a:3f:14:3c:04:a9:ca:1c:79:10:a2:39:6a:31:a4:da:0d:
67:9a:b7:10:ba:7b:27:f2:07:79:87:d8:cc:8a:17:3f:d0:9e:
cc:7e:a9:98:8c:65:23:27:c2:4f:a9:71:c2:0a:99:da:66:6f:
bf:9e:0e:81:00:56:70:a3:94:29:c9:0a:a4:e0:1d:66:6c:b5:
56:95:3b:ce:39:09:c5:58:46:32:3b:5b:69:b2:d5:25:c1:99:
54:35:b5:5f:97:85:d8:2f:35:07:3c:73:33:a9:7e:6d:3d:7e:
65:9c:e2:17:2c:e1:d9:1a:1c:29:c4:1c:01:5a:03:d5:10:ac:
c5:70:16:58:7b:3e:ba:f0:cc:0e:2a:db:ce:94:83:e2:c2:9a:
e4:43:7d:65:25:7c:23:91:3e:0c:aa:09:3a:28:4a:37:bb:1b:
74:6e:83:15:dd:99:c3:f6:dc:9b:a2:a1:a3:c5:51:60:d1:9b:
6f:e0:91:ff:48:c1:b5:6f:19:4e:52:4d:fa:31:5c:48:9f:14:
78:c1:05:57:38:ff:f4:34:99:06:47:d1:25:4e:8c:84:f5:ae:
47:3d:0d:8c:c7:1f:ec:d7:20:6c:c2:9e:eb:2c:c1:39:23:b6:
c6:ef:18:08
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:40:08 2024 by rpki-client on console-fra.rpki-client.org