Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c5/8e121d-73b3-438a-83c4-6fc343d77cd2/1/G2Cu6XV2WmUr88pV-2G35qHgMXE.roa
File: G2Cu6XV2WmUr88pV-2G35qHgMXE.roa (raw, json)
Hash identifier: f9uxlQ8RZlIBTLHVJGDWLs6AzigwFU4pEPZGJk7ZmLM=
Subject key identifier: 1B:60:AE:E9:75:76:5A:65:2B:F3:CA:55:FB:61:B7:E6:A1:E0:31:71
Certificate issuer: /CN=b4f96345d3f22edb395d247f7b86d2d73e4a0091
Certificate serial: 0182A1755C502D6D1FB14521FCA13BF239F0
Authority key identifier: B4:F9:63:45:D3:F2:2E:DB:39:5D:24:7F:7B:86:D2:D7:3E:4A:00:91
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/tPljRdPyLts5XSR_e4bS1z5KAJE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c5/8e121d-73b3-438a-83c4-6fc343d77cd2/1/G2Cu6XV2WmUr88pV-2G35qHgMXE.roa
Signing time: Mon 15 Aug 2022 12:23:19 +0000
ROA not before: Mon 15 Aug 2022 12:23:19 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 12608
IP address blocks: 2a0f:3380::/29 maxlen: 29
2a0f:2380::/29 maxlen: 29
2a0f:a700::/29 maxlen: 29
2a0d:88c0::/29 maxlen: 29
2a0f:7300::/29 maxlen: 29
2a09:5300::/29 maxlen: 29
2a0d:8340::/29 maxlen: 29
2a0b:a300::/32 maxlen: 32
2a0f:4580::/29 maxlen: 29
2a0c:7440::/29 maxlen: 29
2a0c:74c0::/29 maxlen: 29
2a0f:5580::/29 maxlen: 29
2a0f:1180::/29 maxlen: 29
2a0f:4680::/29 maxlen: 29
2a0c:7540::/29 maxlen: 29
2a0f:a500::/29 maxlen: 29
2a0f:7b80::/29 maxlen: 29
2a0f:7100::/29 maxlen: 29
Validation: Failed, RFC 3779 resource not subset of parent's resources
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:82:a1:75:5c:50:2d:6d:1f:b1:45:21:fc:a1:3b:f2:39:f0
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=b4f96345d3f22edb395d247f7b86d2d73e4a0091
Validity
Not Before: Aug 15 12:23:19 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=1b60aee975765a652bf3ca55fb61b7e6a1e03171
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b1:de:88:4d:5f:f3:f3:5e:a2:85:51:77:f1:8e:
9b:ca:6a:3d:39:49:52:c0:3e:dc:e9:e1:92:ee:6b:
62:ef:57:06:76:5b:51:06:ee:d9:28:7c:00:e3:f9:
02:51:a6:4d:16:fa:53:0b:11:f9:49:99:31:87:47:
6a:06:ff:c6:f4:e5:f8:b8:f9:dc:79:05:e9:46:64:
20:45:b8:03:a6:1a:28:af:0a:ab:63:fb:62:46:58:
b7:0f:22:28:2e:7d:e2:a4:c3:6a:ce:8a:fb:cb:6d:
4c:50:f2:98:10:fb:84:05:17:33:09:0d:96:f9:c6:
09:48:e5:5b:15:7b:5d:b9:12:65:df:15:2d:dd:93:
95:f9:fc:86:4f:e1:2e:39:89:6d:ee:3e:b4:29:2e:
f3:b7:62:5e:3e:9a:e1:b1:69:1b:8f:6c:6d:4c:08:
ff:96:3b:80:02:1e:ee:2f:df:b7:f5:b0:15:96:79:
c8:e2:0e:9a:3a:52:75:4f:ad:c1:dc:c7:d4:c9:20:
18:69:f5:29:04:08:df:5c:d0:ea:58:df:32:cc:c8:
0a:14:5e:83:5e:93:25:60:61:b0:c5:63:da:c5:35:
ee:32:26:7d:d4:c7:31:bb:53:ee:4f:11:68:07:0a:
2b:49:55:0b:8a:b5:cb:77:cb:84:ca:29:48:e8:67:
7d:c5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
1B:60:AE:E9:75:76:5A:65:2B:F3:CA:55:FB:61:B7:E6:A1:E0:31:71
X509v3 Authority Key Identifier:
keyid:B4:F9:63:45:D3:F2:2E:DB:39:5D:24:7F:7B:86:D2:D7:3E:4A:00:91
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/tPljRdPyLts5XSR_e4bS1z5KAJE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c5/8e121d-73b3-438a-83c4-6fc343d77cd2/1/G2Cu6XV2WmUr88pV-2G35qHgMXE.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c5/8e121d-73b3-438a-83c4-6fc343d77cd2/1/tPljRdPyLts5XSR_e4bS1z5KAJE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a09:5300::/29
2a0b:a300::/32
2a0c:7440::/29
2a0c:74c0::/29
2a0c:7540::/29
2a0d:8340::/29
2a0d:88c0::/29
2a0f:1180::/29
2a0f:2380::/29
2a0f:3380::/29
2a0f:4580::/29
2a0f:4680::/29
2a0f:5580::/29
2a0f:7100::/29
2a0f:7300::/29
2a0f:7b80::/29
2a0f:a500::/29
2a0f:a700::/29
Signature Algorithm: sha256WithRSAEncryption
4e:70:08:4e:0b:a1:b6:83:3a:05:8b:6b:9f:5c:83:ca:d9:7f:
28:7c:e4:1a:ff:f5:98:88:27:99:eb:6f:63:11:25:84:34:c1:
b4:1b:24:91:a5:bc:ab:9e:a5:5c:b6:d3:aa:83:26:30:67:28:
6a:72:a7:31:68:47:7f:c7:78:eb:3c:1b:f6:9d:c3:a9:a8:22:
dd:32:3b:63:cf:91:16:c0:87:8c:51:48:0f:38:eb:ce:ae:43:
52:39:61:e1:59:67:2e:16:a2:66:65:85:2f:26:c1:59:10:37:
70:04:7a:d8:dc:4e:bf:1f:17:20:d9:f2:88:a6:c3:c7:89:52:
dc:db:0a:c3:57:8c:12:db:1a:9f:2c:59:83:17:33:06:40:8a:
a7:93:16:ae:ac:da:4e:2e:31:1d:09:21:84:f5:64:62:7a:22:
3b:5d:21:b8:69:2d:98:18:06:10:b8:cb:b7:52:74:83:f7:ab:
d0:84:cf:ca:b9:d4:63:4b:1e:63:92:f2:fd:4d:ed:61:1f:c0:
76:54:6f:98:00:10:ef:3e:96:5d:db:58:78:1c:0a:34:2e:79:
c0:e9:af:5c:46:10:ca:d6:4b:b9:eb:78:bf:3b:18:89:d9:c1:
3d:88:12:34:1e:f2:7e:83:77:e0:db:51:a3:57:09:89:9b:3f:
fb:06:0f:3d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 19:43:08 2024 by rpki-client on console-ams.rpki-client.org