Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c5/8e121d-73b3-438a-83c4-6fc343d77cd2/1/cD69ej4qHSpSAI6ywSNMcRKKi0s.roa
File: cD69ej4qHSpSAI6ywSNMcRKKi0s.roa (raw, json)
Hash identifier: dyZDFftGycgMz0Orl1C+xP7SyV/YFCxuw7vdjswD2+g=
Subject key identifier: 70:3E:BD:7A:3E:2A:1D:2A:52:00:8E:B2:C1:23:4C:71:12:8A:8B:4B
Certificate issuer: /CN=b4f96345d3f22edb395d247f7b86d2d73e4a0091
Certificate serial: 01892B22BC09C4685B7C3AD0CEAECE4D6AEC
Authority key identifier: B4:F9:63:45:D3:F2:2E:DB:39:5D:24:7F:7B:86:D2:D7:3E:4A:00:91
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/tPljRdPyLts5XSR_e4bS1z5KAJE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c5/8e121d-73b3-438a-83c4-6fc343d77cd2/1/cD69ej4qHSpSAI6ywSNMcRKKi0s.roa
Signing time: Thu 06 Jul 2023 12:17:23 +0000
ROA not before: Thu 06 Jul 2023 12:17:23 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 204084
IP address blocks: 2a0f:7c80::/29 maxlen: 29
2a0b:9800::/29 maxlen: 29
2a0f:3380::/29 maxlen: 29
2a0f:2380::/29 maxlen: 29
2a0b:a300::/29 maxlen: 29
2a0f:a700::/29 maxlen: 29
2a0d:88c0::/29 maxlen: 29
2a0f:7300::/29 maxlen: 29
2a0f:c780::/29 maxlen: 29
2a0f:4580::/29 maxlen: 29
2a0c:7440::/29 maxlen: 29
2a0f:5580::/29 maxlen: 29
2a0c:74c0::/29 maxlen: 29
2a0f:1180::/29 maxlen: 29
2a0c:7540::/29 maxlen: 29
2a0d:2cc0::/29 maxlen: 29
2a0f:a500::/29 maxlen: 29
2a0f:7100::/29 maxlen: 29
2a07:4a00::/29 maxlen: 29
Validation: Failed, RFC 3779 resource not subset of parent's resources
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:89:2b:22:bc:09:c4:68:5b:7c:3a:d0:ce:ae:ce:4d:6a:ec
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=b4f96345d3f22edb395d247f7b86d2d73e4a0091
Validity
Not Before: Jul 6 12:17:23 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=703ebd7a3e2a1d2a52008eb2c1234c71128a8b4b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b0:b9:0a:28:ad:b2:9c:5e:9f:97:25:99:f3:8a:
89:ee:3e:c8:28:ce:55:49:33:c0:14:8f:c9:31:00:
27:f1:aa:e6:5a:ee:de:9e:89:5b:81:92:2c:f5:09:
24:e4:7f:da:c1:bb:c0:8e:a9:f5:ed:39:24:5d:88:
ac:df:aa:e3:72:39:1f:09:54:cd:0b:02:93:56:01:
72:f8:c6:eb:cf:93:c6:70:fe:8c:c5:bd:66:3e:3f:
e3:a0:10:e0:29:e7:32:ea:ae:0b:86:80:0f:32:28:
7c:f7:f9:c1:15:da:13:cd:32:2b:29:c4:82:94:7a:
a4:fa:72:8c:c2:49:9d:5e:10:e7:08:bf:3e:a8:73:
14:66:fa:72:51:15:34:81:c9:49:40:d5:64:2a:70:
dc:cf:dc:09:06:34:4f:d4:9e:c7:67:a9:ee:6e:00:
f6:9a:74:d6:e2:27:3b:a4:23:be:59:ff:ef:ec:88:
d5:ba:83:cb:9f:f5:50:60:ff:d8:e3:81:39:94:95:
ca:cb:7f:0a:fa:f0:7a:82:96:cb:ce:a0:ee:6f:d6:
fc:b5:99:c4:ce:5b:c0:f4:8a:c2:e6:cb:26:28:7d:
43:fa:66:fa:71:ce:04:44:7a:93:13:c4:ab:34:88:
6b:a6:1f:37:a4:ff:37:9e:8a:6f:f2:2a:54:f8:ee:
07:21
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
70:3E:BD:7A:3E:2A:1D:2A:52:00:8E:B2:C1:23:4C:71:12:8A:8B:4B
X509v3 Authority Key Identifier:
keyid:B4:F9:63:45:D3:F2:2E:DB:39:5D:24:7F:7B:86:D2:D7:3E:4A:00:91
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/tPljRdPyLts5XSR_e4bS1z5KAJE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c5/8e121d-73b3-438a-83c4-6fc343d77cd2/1/cD69ej4qHSpSAI6ywSNMcRKKi0s.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c5/8e121d-73b3-438a-83c4-6fc343d77cd2/1/tPljRdPyLts5XSR_e4bS1z5KAJE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a07:4a00::/29
2a0b:9800::/29
2a0b:a300::/29
2a0c:7440::/29
2a0c:74c0::/29
2a0c:7540::/29
2a0d:2cc0::/29
2a0d:88c0::/29
2a0f:1180::/29
2a0f:2380::/29
2a0f:3380::/29
2a0f:4580::/29
2a0f:5580::/29
2a0f:7100::/29
2a0f:7300::/29
2a0f:7c80::/29
2a0f:a500::/29
2a0f:a700::/29
2a0f:c780::/29
Signature Algorithm: sha256WithRSAEncryption
39:b0:51:29:8b:84:91:3a:0f:15:8d:06:d8:6b:72:16:0f:d6:
51:a2:d7:3f:11:47:90:8f:bd:60:97:ec:74:d9:89:9c:a0:9e:
39:82:76:19:ae:6e:b3:24:38:b2:3f:3e:ad:1f:0d:b0:74:ee:
68:70:a4:99:f4:75:3d:4a:c3:20:e0:f7:79:fa:39:ab:9a:54:
8d:ee:56:59:17:7d:f6:e6:77:f0:15:54:c9:04:08:75:85:04:
c3:2c:1a:48:6b:1a:0b:ad:5f:be:69:21:99:e6:d9:c3:de:03:
b4:ec:7b:5f:80:43:41:be:d4:5c:83:93:27:06:61:13:31:89:
ef:e3:1d:58:d0:60:0e:02:b8:1b:79:be:a1:b0:3f:59:01:3a:
6c:2d:0f:f3:4a:0e:af:30:36:67:38:a5:56:c8:5a:4a:d0:4a:
31:e0:2d:a0:ec:df:4e:c8:c5:4a:61:c0:bc:33:24:39:bf:00:
fe:13:ca:6d:fd:90:85:e9:2f:b0:35:45:33:ba:9b:df:94:49:
2a:25:52:3c:47:a8:73:1c:3f:57:f8:11:55:b5:eb:85:20:fc:
1f:fe:0d:29:20:db:e8:77:43:a3:87:90:06:3b:51:c0:a8:64:
98:ff:18:b9:7d:6f:0d:b7:fc:a3:e2:4a:f4:83:7a:9f:23:44:
75:a4:f0:fc
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 19:43:10 2024 by rpki-client on console-ams.rpki-client.org