Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a0/de902c-3d13-47d1-a5e6-73856af49f3e/1/zK54dDFEssNlqDWDCE-TM2KeFI0.roa
File: zK54dDFEssNlqDWDCE-TM2KeFI0.roa (raw, json)
Hash identifier: npoaq7Axf7al0072HLnY7NtqH97A+8jYQIQSQuAw1wE=
Subject key identifier: CC:AE:78:74:31:44:B2:C3:65:A8:35:83:08:4F:93:33:62:9E:14:8D
Certificate issuer: /CN=b155009c3de421cc4e67b9a9ae423bb35de0b926
Certificate serial: 0186363DED2E1E9D1C69D45854376E292874
Authority key identifier: B1:55:00:9C:3D:E4:21:CC:4E:67:B9:A9:AE:42:3B:B3:5D:E0:B9:26
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/sVUAnD3kIcxOZ7mprkI7s13guSY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/a0/de902c-3d13-47d1-a5e6-73856af49f3e/1/zK54dDFEssNlqDWDCE-TM2KeFI0.roa
Signing time: Thu 09 Feb 2023 12:54:33 +0000
ROA not before: Thu 09 Feb 2023 12:54:33 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 60262
IP address blocks: 2a0f:2b40::/29 maxlen: 29
2a0f:1640::/29 maxlen: 29
2a0f:2140::/29 maxlen: 29
2a0f:3640::/29 maxlen: 29
2a0f:2c40::/29 maxlen: 29
2a0f:1740::/29 maxlen: 29
2a0f:3740::/29 maxlen: 29
2a0f:2240::/29 maxlen: 29
2a0f:1840::/29 maxlen: 29
2a0f:2d40::/29 maxlen: 29
2a0f:27c0::/29 maxlen: 29
2a0f:1940::/29 maxlen: 29
2a0f:2e40::/29 maxlen: 29
2a0f:28c0::/29 maxlen: 29
2a0f:f40::/29 maxlen: 29
2a0f:2f40::/29 maxlen: 29
2a0f:1a40::/29 maxlen: 29
2a0f:14c0::/29 maxlen: 29
2a0f:1fc0::/29 maxlen: 29
2a0f:2ac0::/29 maxlen: 29
2a0f:15c0::/29 maxlen: 29
2a0f:35c0::/29 maxlen: 29
2a0f:20c0::/29 maxlen: 29
2a0f:16c0::/29 maxlen: 29
2a0f:2bc0::/29 maxlen: 29
2a0f:36c0::/29 maxlen: 29
2a0f:21c0::/29 maxlen: 29
2a0f:2cc0::/29 maxlen: 29
2a0f:17c0::/29 maxlen: 29
2a0f:2840::/29 maxlen: 29
2a0f:2dc0::/29 maxlen: 29
2a0f:18c0::/29 maxlen: 29
2a0f:2940::/29 maxlen: 29
2a0f:2ec0::/29 maxlen: 29
2a0f:19c0::/29 maxlen: 29
2a0f:fc0::/29 maxlen: 29
2a0f:a40::/29 maxlen: 29
2a0f:1540::/29 maxlen: 29
2a0f:2a40::/29 maxlen: 29
2a0f:1ac0::/29 maxlen: 29
2a0f:2040::/29 maxlen: 29
2a0f:3540::/29 maxlen: 29
Validation: Failed, RFC 3779 resource not subset of parent's resources
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:86:36:3d:ed:2e:1e:9d:1c:69:d4:58:54:37:6e:29:28:74
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=b155009c3de421cc4e67b9a9ae423bb35de0b926
Validity
Not Before: Feb 9 12:54:33 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=ccae78743144b2c365a83583084f9333629e148d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:83:22:3d:31:68:bb:ae:1a:40:c4:fc:ba:32:ae:
b7:85:0d:b6:fb:bf:0e:75:f0:82:ca:39:ce:ce:ad:
60:44:58:d5:76:a3:22:a6:be:a8:fe:9c:a5:a1:89:
b0:56:0c:3d:45:23:4b:71:bf:90:6b:d5:3f:74:14:
5b:80:e5:03:a5:be:c2:27:f3:f5:77:93:c8:e2:4c:
69:5f:af:c7:9c:c3:70:f7:8d:ff:7e:34:45:fd:ec:
10:39:4a:87:cc:37:eb:f6:6e:6d:50:6e:8c:ec:53:
e1:e9:74:3a:bd:ef:e1:94:8f:0f:26:d3:b2:ed:68:
67:8d:24:da:82:f8:50:c7:29:d9:fe:9e:66:a8:8d:
b0:b2:62:ad:e3:7a:50:df:21:b4:6f:ce:b8:83:78:
c6:f3:36:b1:c3:1b:df:b1:db:fc:bb:ee:12:7c:32:
7b:28:c3:4f:e0:db:09:1f:55:ef:c5:5b:7f:c5:d2:
d0:d4:79:90:22:2e:56:42:88:33:42:2c:a0:ae:8f:
d4:91:64:8d:99:93:d2:57:b5:ad:4a:e8:b0:3a:94:
12:32:d9:50:96:53:1d:33:eb:f3:e4:12:57:da:a0:
f2:65:6a:54:c5:95:1b:50:e5:06:ef:d2:da:c2:c0:
4d:32:e6:3b:7e:86:3d:11:ce:40:de:3a:5e:b6:f9:
4d:2b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
CC:AE:78:74:31:44:B2:C3:65:A8:35:83:08:4F:93:33:62:9E:14:8D
X509v3 Authority Key Identifier:
keyid:B1:55:00:9C:3D:E4:21:CC:4E:67:B9:A9:AE:42:3B:B3:5D:E0:B9:26
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/sVUAnD3kIcxOZ7mprkI7s13guSY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a0/de902c-3d13-47d1-a5e6-73856af49f3e/1/zK54dDFEssNlqDWDCE-TM2KeFI0.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/a0/de902c-3d13-47d1-a5e6-73856af49f3e/1/sVUAnD3kIcxOZ7mprkI7s13guSY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a0f:a40::/29
2a0f:f40::/29
2a0f:fc0::/29
2a0f:14c0::/29
2a0f:1540::/29
2a0f:15c0::/29
2a0f:1640::/29
2a0f:16c0::/29
2a0f:1740::/29
2a0f:17c0::/29
2a0f:1840::/29
2a0f:18c0::/29
2a0f:1940::/29
2a0f:19c0::/29
2a0f:1a40::/29
2a0f:1ac0::/29
2a0f:1fc0::/29
2a0f:2040::/29
2a0f:20c0::/29
2a0f:2140::/29
2a0f:21c0::/29
2a0f:2240::/29
2a0f:27c0::/29
2a0f:2840::/29
2a0f:28c0::/29
2a0f:2940::/29
2a0f:2a40::/29
2a0f:2ac0::/29
2a0f:2b40::/29
2a0f:2bc0::/29
2a0f:2c40::/29
2a0f:2cc0::/29
2a0f:2d40::/29
2a0f:2dc0::/29
2a0f:2e40::/29
2a0f:2ec0::/29
2a0f:2f40::/29
2a0f:3540::/29
2a0f:35c0::/29
2a0f:3640::/29
2a0f:36c0::/29
2a0f:3740::/29
Signature Algorithm: sha256WithRSAEncryption
13:00:60:09:79:9a:fa:78:3a:dd:c3:cb:b5:bc:6e:61:b4:0b:
07:b1:8d:8c:8d:ac:a2:8f:27:d5:6e:99:60:63:df:46:3d:f5:
55:9a:f6:c1:5e:e2:f3:85:fa:e9:0d:c0:c7:c4:73:8e:76:c8:
a6:99:6d:bc:9c:4f:4f:fc:98:af:18:29:5a:5a:ed:03:67:c4:
a0:fe:97:0d:3a:cb:fc:d9:05:dd:2f:28:7d:22:66:15:bb:b5:
33:ff:d5:35:19:09:ee:f4:d5:7b:07:79:fd:40:27:e8:91:e5:
8f:b9:5e:19:8a:e2:9d:65:c3:3e:67:0a:7e:72:db:08:1c:ea:
e2:ee:cf:ac:3a:19:32:48:a3:95:e5:bf:ba:87:ef:9b:df:3e:
10:85:4a:12:14:64:68:5b:3a:9d:4d:56:59:06:70:a8:f6:92:
e0:7c:58:55:cc:e0:2a:4f:ed:b1:e9:0a:df:0d:f9:a0:7c:2f:
c1:fb:3b:f3:5a:9f:24:41:65:9b:a5:d0:31:35:ab:eb:f9:f1:
e5:32:05:d0:5f:cc:ae:e5:eb:81:72:ab:d1:3f:b3:ec:80:cb:
d1:1e:23:35:99:e5:8d:10:b7:fb:b9:f0:7a:fa:44:2d:79:1f:
ea:74:d4:82:fd:17:e8:8f:e5:1c:bc:39:bb:7e:be:b7:57:20:
65:5a:a9:36
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jul 20 00:01:33 2023 by rpki-client on console-fra.rpki-client.org