Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f4/c566c7-3cac-45a9-82a1-04b09057522f/1/2WjnQS4frm3W6aJpgG90R-9RSI0.roa
File: 2WjnQS4frm3W6aJpgG90R-9RSI0.roa (raw, json)
Hash identifier: WeJhglz+Sr4+pf9P8XQkdWt9UVf4QWcOdtVc8UHiX7U=
Subject key identifier: D9:68:E7:41:2E:1F:AE:6D:D6:E9:A2:69:80:6F:74:47:EF:51:48:8D
Certificate issuer: /CN=a0af3d8551fbdd3b62f4ffdfd59cad4161e4471e
Certificate serial: 01856D386C108A6D4368CED8BA0B28BAC9FB
Authority key identifier: A0:AF:3D:85:51:FB:DD:3B:62:F4:FF:DF:D5:9C:AD:41:61:E4:47:1E
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/oK89hVH73Tti9P_f1ZytQWHkRx4.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/f4/c566c7-3cac-45a9-82a1-04b09057522f/1/2WjnQS4frm3W6aJpgG90R-9RSI0.roa
Signing time: Sun 01 Jan 2023 12:04:52 +0000
ROA not before: Sun 01 Jan 2023 12:04:52 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 174
IP address blocks: 2a12:92c0::/29 maxlen: 29
Validation: Failed, RFC 3779 resource not subset of parent's resources
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:85:6d:38:6c:10:8a:6d:43:68:ce:d8:ba:0b:28:ba:c9:fb
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=a0af3d8551fbdd3b62f4ffdfd59cad4161e4471e
Validity
Not Before: Jan 1 12:04:52 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=d968e7412e1fae6dd6e9a269806f7447ef51488d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:aa:57:ea:07:ab:e8:cf:df:50:46:94:3f:48:8b:
7f:b1:fc:0e:d7:b1:d2:21:f8:a0:8c:3d:78:36:d9:
3f:f2:78:32:da:79:79:1a:e6:bb:be:43:00:70:dd:
db:d8:2b:ee:ff:c8:ba:9a:e1:bf:1f:f4:f5:d2:6d:
92:3b:02:97:a8:25:f7:b7:07:80:87:b6:fb:74:6c:
bd:7f:01:45:7e:36:78:19:c4:73:b0:d2:6b:32:f6:
7f:89:00:26:5a:cf:b4:36:45:8a:e5:a5:02:62:a6:
11:0e:da:6d:8c:ac:bc:2a:37:04:83:98:49:52:14:
cf:80:c3:10:29:53:0d:dc:96:10:59:26:8b:5a:67:
f7:dc:3e:eb:3b:a4:7f:44:a5:53:de:81:29:9e:0d:
32:af:8e:66:34:bf:93:bf:f5:ac:ca:b7:a9:6b:53:
a6:41:77:46:2d:3c:39:4f:3a:28:70:9f:7c:c8:93:
7c:85:b3:98:bb:da:85:95:49:ac:5f:51:0d:7a:34:
23:02:90:ff:66:56:ad:a7:2b:07:bd:96:66:54:e7:
0a:6d:7e:aa:2c:cb:ab:51:e9:2a:ce:4b:fe:15:a4:
1a:49:e3:ee:64:cd:9a:2f:95:09:94:4d:25:ea:11:
26:cc:18:ce:67:8a:56:42:e1:a1:f1:66:fe:0a:bb:
03:7f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D9:68:E7:41:2E:1F:AE:6D:D6:E9:A2:69:80:6F:74:47:EF:51:48:8D
X509v3 Authority Key Identifier:
keyid:A0:AF:3D:85:51:FB:DD:3B:62:F4:FF:DF:D5:9C:AD:41:61:E4:47:1E
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/oK89hVH73Tti9P_f1ZytQWHkRx4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f4/c566c7-3cac-45a9-82a1-04b09057522f/1/2WjnQS4frm3W6aJpgG90R-9RSI0.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/f4/c566c7-3cac-45a9-82a1-04b09057522f/1/oK89hVH73Tti9P_f1ZytQWHkRx4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a12:92c0::/29
Signature Algorithm: sha256WithRSAEncryption
0a:00:99:04:e3:7b:66:b5:66:d1:db:94:ab:9c:2c:b1:95:ec:
b0:29:1f:a9:cf:d7:45:a3:ab:fa:20:77:24:ae:aa:48:65:96:
d2:37:83:72:eb:2d:49:fc:71:e4:06:bd:21:28:44:68:53:8d:
62:b4:4d:ed:62:ff:29:53:3c:62:fb:23:e6:1b:e3:1d:c3:0b:
0b:ef:dc:e6:55:be:ca:2b:ab:fd:f8:80:d1:25:1a:70:0b:94:
75:8b:5b:f8:51:05:30:88:7e:1d:de:09:6d:54:57:b0:57:60:
cd:34:a3:6b:2c:f9:1e:47:64:1b:98:6a:02:3f:62:a1:ff:bf:
4a:11:90:5d:f7:94:ba:61:44:40:93:9e:70:62:57:34:79:3a:
ab:bf:be:b6:b4:3a:2e:b5:51:81:63:40:80:36:44:ac:09:39:
87:67:e0:e1:a7:49:87:fe:96:fd:78:a0:53:16:fc:59:31:9e:
fe:59:41:63:cf:a7:0b:8f:60:67:65:00:27:d1:90:60:d5:a0:
cd:75:59:85:d6:ac:4e:a1:20:8d:c4:3c:9d:b5:00:63:9c:3d:
59:8a:d4:0c:1f:01:4e:12:fd:51:80:02:75:54:cc:bf:dd:cb:
3e:fc:36:cb:67:93:a5:01:85:d2:4f:10:e8:8a:21:80:9d:50:
84:4f:cd:8c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Feb 17 07:39:05 2025 by rpki-client