Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c5/8e121d-73b3-438a-83c4-6fc343d77cd2/1/QZ_xjRefuTjBVtR3JvUGk-u7yks.roa
File: QZ_xjRefuTjBVtR3JvUGk-u7yks.roa (raw, json)
Hash identifier: km/7jjSL4iU0mGjWRUJjBifk7XyOOGcbVjUyPo7Teqs=
Subject key identifier: 41:9F:F1:8D:17:9F:B9:38:C1:56:D4:77:26:F5:06:93:EB:BB:CA:4B
Certificate issuer: /CN=b4f96345d3f22edb395d247f7b86d2d73e4a0091
Certificate serial: 0340143A
Authority key identifier: B4:F9:63:45:D3:F2:2E:DB:39:5D:24:7F:7B:86:D2:D7:3E:4A:00:91
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/tPljRdPyLts5XSR_e4bS1z5KAJE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c5/8e121d-73b3-438a-83c4-6fc343d77cd2/1/QZ_xjRefuTjBVtR3JvUGk-u7yks.roa
Signing time: Sat 01 Jan 2022 16:04:36 +0000
ROA not before: Sat 01 Jan 2022 16:04:36 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 208861
IP address blocks: 2a0c:65c0::/29 maxlen: 29
Validation: Failed, RFC 3779 resource not subset of parent's resources
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 54531130 (0x340143a)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=b4f96345d3f22edb395d247f7b86d2d73e4a0091
Validity
Not Before: Jan 1 16:04:36 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=419ff18d179fb938c156d47726f50693ebbbca4b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c5:a8:37:48:9e:68:b1:25:9d:f4:b5:64:3d:55:
ed:3a:64:a1:c9:47:6a:a6:d2:48:aa:ac:4b:ff:18:
2d:7f:60:70:de:18:6a:48:f9:a8:b4:f2:6f:fe:03:
53:1c:85:be:7a:c2:59:15:6d:64:be:d9:5e:94:6c:
1f:41:a8:42:7a:88:e1:33:43:fd:0a:68:da:6c:83:
af:19:0a:ef:d7:d5:ae:32:58:16:51:67:33:bb:ad:
0d:f4:97:3c:7d:77:d9:8f:fd:56:e5:b6:c1:5a:1f:
3c:fa:8b:79:4d:1c:b4:22:74:cd:95:a6:7d:f9:c1:
7e:bd:c0:fb:0b:7f:1b:82:00:2b:87:95:37:c8:fa:
ab:f5:7b:ad:c4:8a:41:bc:b9:9f:2a:4e:57:bf:4d:
08:09:8a:34:4c:80:ba:83:66:6d:74:77:6c:ee:54:
78:65:4d:01:02:92:c2:c8:ea:4d:c5:b6:de:fa:7a:
dc:cd:13:43:6d:f2:89:5c:39:26:5c:c8:10:16:e1:
63:3e:01:04:56:4c:48:ca:b5:86:fd:18:45:db:96:
80:85:05:24:3a:29:e7:30:23:21:6a:ee:88:07:1c:
e5:e9:41:db:cf:9b:fb:20:5e:9a:c3:df:9d:c0:a3:
e6:20:6e:d6:d2:fa:35:47:0d:e1:30:7d:ae:1d:21:
12:e5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
41:9F:F1:8D:17:9F:B9:38:C1:56:D4:77:26:F5:06:93:EB:BB:CA:4B
X509v3 Authority Key Identifier:
keyid:B4:F9:63:45:D3:F2:2E:DB:39:5D:24:7F:7B:86:D2:D7:3E:4A:00:91
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/tPljRdPyLts5XSR_e4bS1z5KAJE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c5/8e121d-73b3-438a-83c4-6fc343d77cd2/1/QZ_xjRefuTjBVtR3JvUGk-u7yks.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c5/8e121d-73b3-438a-83c4-6fc343d77cd2/1/tPljRdPyLts5XSR_e4bS1z5KAJE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a0c:65c0::/29
Signature Algorithm: sha256WithRSAEncryption
83:ab:43:75:c4:4e:06:0c:eb:d1:3a:71:16:d8:22:00:c7:36:
32:ca:fe:f3:64:f3:7e:55:8d:07:98:dd:2b:9a:f1:eb:36:87:
aa:7f:9f:68:a1:c6:8f:47:47:0f:bc:1e:d0:b3:a8:ea:9c:89:
91:9d:4a:2e:19:9b:c9:c6:f4:7a:af:c9:54:12:61:c0:db:ae:
cb:00:55:a3:a0:30:42:b3:83:61:a0:a8:f0:f1:13:96:51:a2:
98:78:e2:2e:b1:02:53:39:3a:b7:3f:e2:65:71:7b:ab:13:49:
fb:eb:3e:c5:fe:c9:22:df:a7:bf:73:a5:6b:7e:b0:0c:0f:45:
9e:22:6e:4e:82:17:07:e4:c7:d7:26:f0:f5:e4:a8:73:57:d8:
8e:08:bb:4f:56:65:0d:0d:c5:e3:12:41:8f:b3:68:dd:7c:8f:
36:97:52:54:3a:e1:68:59:61:5f:d3:50:dc:7f:cc:53:74:30:
5a:17:69:94:ab:07:4d:1b:5e:2c:8f:ca:3f:15:d7:1b:ce:36:
22:0f:f7:3e:bf:4b:47:48:ff:67:fc:a1:46:45:59:e5:4c:43:
4e:51:72:50:7e:58:df:f0:31:f0:65:68:8b:d5:de:a9:58:12:
ca:22:98:22:9e:d6:06:0d:c1:84:87:82:18:12:75:7b:d5:21:
2d:02:fd:96
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:53:07 2024 by rpki-client on console-fra.rpki-client.org