Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c5/8e121d-73b3-438a-83c4-6fc343d77cd2/1/KNeA-OcoLEsPGGGrh_J_j2iUxqE.roa
File: KNeA-OcoLEsPGGGrh_J_j2iUxqE.roa (raw, json)
Hash identifier: szC1Uirtbcy52T1jMmUhOUAPoK24fXyxIwrhKd+YRIs=
Subject key identifier: 28:D7:80:F8:E7:28:2C:4B:0F:18:61:AB:87:F2:7F:8F:68:94:C6:A1
Certificate issuer: /CN=b4f96345d3f22edb395d247f7b86d2d73e4a0091
Certificate serial: 0568FDBE
Authority key identifier: B4:F9:63:45:D3:F2:2E:DB:39:5D:24:7F:7B:86:D2:D7:3E:4A:00:91
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/tPljRdPyLts5XSR_e4bS1z5KAJE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c5/8e121d-73b3-438a-83c4-6fc343d77cd2/1/KNeA-OcoLEsPGGGrh_J_j2iUxqE.roa
Signing time: Wed 29 Jun 2022 08:13:03 +0000
ROA not before: Wed 29 Jun 2022 08:13:03 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 12608
IP address blocks: 2a0b:8040::/29 maxlen: 29
2a0f:3380::/29 maxlen: 29
2a0b:e9c0::/29 maxlen: 29
2a0f:2380::/29 maxlen: 29
2a0f:a700::/29 maxlen: 29
2a0d:88c0::/29 maxlen: 29
2a0f:7300::/29 maxlen: 29
2a03:f7c0::/29 maxlen: 29
2a0b:a300::/32 maxlen: 32
2a0b:d900::/29 maxlen: 29
2a0c:5c0::/29 maxlen: 29
2a0f:4580::/29 maxlen: 29
2a0c:7440::/29 maxlen: 29
2a0c:74c0::/29 maxlen: 29
2a0f:5580::/29 maxlen: 29
2a0c:5d00::/29 maxlen: 29
2a0f:1180::/29 maxlen: 29
2a0f:4680::/29 maxlen: 29
2a0c:7540::/29 maxlen: 29
2a0f:a500::/29 maxlen: 29
2a06:ddc0::/29 maxlen: 29
2a0f:7100::/29 maxlen: 29
2a0c:6980::/29 maxlen: 29
Validation: Failed, RFC 3779 resource not subset of parent's resources
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 90766782 (0x568fdbe)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=b4f96345d3f22edb395d247f7b86d2d73e4a0091
Validity
Not Before: Jun 29 08:13:03 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=28d780f8e7282c4b0f1861ab87f27f8f6894c6a1
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ab:bd:a8:14:94:12:d4:3c:af:47:e5:90:90:30:
49:1b:f1:3e:77:2b:17:8f:4d:1b:66:7e:39:60:09:
7d:6a:89:f5:c4:01:5e:0e:67:74:00:b4:48:b2:9e:
55:a3:93:08:7e:72:c0:75:19:b6:27:5e:7e:b4:5d:
55:3c:c2:7d:72:ea:28:65:3b:37:2e:43:4d:b3:ac:
54:3b:c2:e2:d4:08:4f:64:fc:df:f5:ac:6f:ca:a9:
41:7d:1e:43:47:73:50:a1:0f:57:b5:aa:dd:d2:2f:
3d:08:d1:36:a9:1c:29:64:25:fb:a7:19:af:79:44:
a9:a9:2c:c8:c9:77:33:94:63:ff:9e:8e:61:26:62:
e1:1b:b5:b0:0d:bd:d0:ed:fc:78:72:7e:f6:ff:4b:
86:d4:60:31:cd:52:b1:d6:38:12:bb:79:e1:62:14:
c5:cb:64:2e:36:29:98:87:05:71:68:e8:72:06:d6:
5d:49:bc:9f:08:9e:74:79:f3:8e:1b:5d:20:a5:77:
b8:20:fa:94:1a:2e:bc:d7:3c:0b:f1:31:10:00:cc:
97:2f:7f:4d:68:f8:cf:1b:7e:31:39:05:e2:1f:ac:
bd:f8:02:53:8f:38:e1:2f:42:09:8b:b6:32:c6:7b:
1c:98:1a:4d:1d:ca:cb:1a:ed:a9:4d:e2:ef:44:56:
08:33
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
28:D7:80:F8:E7:28:2C:4B:0F:18:61:AB:87:F2:7F:8F:68:94:C6:A1
X509v3 Authority Key Identifier:
keyid:B4:F9:63:45:D3:F2:2E:DB:39:5D:24:7F:7B:86:D2:D7:3E:4A:00:91
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/tPljRdPyLts5XSR_e4bS1z5KAJE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c5/8e121d-73b3-438a-83c4-6fc343d77cd2/1/KNeA-OcoLEsPGGGrh_J_j2iUxqE.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c5/8e121d-73b3-438a-83c4-6fc343d77cd2/1/tPljRdPyLts5XSR_e4bS1z5KAJE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a03:f7c0::/29
2a06:ddc0::/29
2a0b:8040::/29
2a0b:a300::/32
2a0b:d900::/29
2a0b:e9c0::/29
2a0c:5c0::/29
2a0c:5d00::/29
2a0c:6980::/29
2a0c:7440::/29
2a0c:74c0::/29
2a0c:7540::/29
2a0d:88c0::/29
2a0f:1180::/29
2a0f:2380::/29
2a0f:3380::/29
2a0f:4580::/29
2a0f:4680::/29
2a0f:5580::/29
2a0f:7100::/29
2a0f:7300::/29
2a0f:a500::/29
2a0f:a700::/29
Signature Algorithm: sha256WithRSAEncryption
91:31:7a:4b:3b:0b:b7:df:a6:2c:ca:dd:7b:24:6d:2d:5c:a7:
a6:c1:32:af:06:37:d9:dd:d8:85:43:f0:aa:22:c4:45:c5:66:
7d:75:dc:53:70:d6:95:87:76:c9:9b:16:7e:ea:2f:7e:21:45:
8f:b4:32:8a:b1:57:d0:1c:6d:96:df:93:d9:ab:2b:be:8c:f8:
f6:d9:82:08:63:27:81:7c:65:dc:42:e8:92:d9:e7:75:0e:51:
17:79:83:80:9f:ab:56:37:e5:fd:70:b5:cf:cf:f9:10:c9:8e:
fc:98:bc:f2:5a:94:9b:15:27:8c:19:3c:88:f1:27:c1:69:51:
c2:59:6c:d6:59:c6:2f:d3:50:9c:91:ee:d6:1c:db:4f:bd:c5:
8b:f4:d9:d4:7f:f7:a3:2a:57:c3:8a:72:b0:38:db:80:e7:cf:
f5:bf:d3:fe:73:8c:40:0e:69:ec:7e:23:43:6e:0e:e5:b9:ae:
b4:21:34:22:8f:5c:77:bf:25:ab:95:1a:7f:23:54:2f:6d:64:
50:bf:d5:d9:eb:01:b8:5b:0a:04:bc:6e:a7:ad:31:fe:5d:46:
1e:ad:8d:35:70:b9:d0:03:9a:1c:73:43:7c:2d:4d:68:ae:3f:
63:d6:e8:38:1b:1d:f5:4b:a0:2e:2a:ee:ec:d7:53:c9:82:77:
42:02:2b:49
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:53:07 2024 by rpki-client on console-fra.rpki-client.org