Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/fd/8a2085-a6c3-4fde-8dba-6639bca7a1b0/1/SPrHu-MB7DuKVibwBcBZoOA9wGk.roa
File: SPrHu-MB7DuKVibwBcBZoOA9wGk.roa (raw, json)
Hash identifier: buHfk0myNtTegzJ0DRyZUYeXUqQ5PaPP2ij+HGYDkVo=
Subject key identifier: 48:FA:C7:BB:E3:01:EC:3B:8A:56:26:F0:05:C0:59:A0:E0:3D:C0:69
Certificate issuer: /CN=50cad4e5775ba31ecae226d1046f3dc1a104814d
Certificate serial: 018F62311C05F63C7F1F097F4836386EDF07
Authority key identifier: 50:CA:D4:E5:77:5B:A3:1E:CA:E2:26:D1:04:6F:3D:C1:A1:04:81:4D
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/UMrU5Xdbox7K4ibRBG89waEEgU0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/fd/8a2085-a6c3-4fde-8dba-6639bca7a1b0/1/SPrHu-MB7DuKVibwBcBZoOA9wGk.roa
Signing time: Fri 10 May 2024 11:08:56 +0000
ROA not before: Fri 10 May 2024 11:08:56 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 214976
IP address blocks: 2001:678:d2c::/48 maxlen: 128
Validation: Failed, RFC 3779 resource not subset of parent's resources
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8f:62:31:1c:05:f6:3c:7f:1f:09:7f:48:36:38:6e:df:07
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=50cad4e5775ba31ecae226d1046f3dc1a104814d
Validity
Not Before: May 10 11:08:56 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=48fac7bbe301ec3b8a5626f005c059a0e03dc069
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d2:7f:ea:61:95:c7:96:28:fd:d6:ba:3f:20:03:
67:05:28:d4:cf:83:71:17:b5:fe:97:46:de:02:dc:
8e:39:1e:0d:26:cb:f6:63:b1:91:c8:12:ba:43:17:
8a:9b:47:a4:81:3a:fd:50:13:4b:1a:9b:01:c1:be:
9a:c3:40:07:64:bc:c1:22:50:ad:94:c6:82:9b:c3:
e0:79:4b:3b:3f:b0:df:e2:00:cf:98:8c:e4:f9:63:
4f:3d:47:3b:95:0f:5b:bb:90:e7:85:18:5f:25:dc:
51:c6:1c:bb:65:3d:3b:f9:0b:76:bf:72:a9:95:33:
b4:68:31:24:3d:c3:ba:50:01:37:2d:4d:2b:08:72:
90:43:15:2f:a9:99:37:7f:48:d0:38:1d:f5:09:de:
c0:87:94:1e:92:96:c6:71:2e:be:a0:c6:10:53:39:
63:6c:0a:a0:a8:12:d5:03:98:42:68:52:2a:f8:de:
0d:b6:9c:e8:a6:0e:b8:a9:db:76:13:30:0a:a2:90:
f9:c2:6c:ed:1d:a4:e9:19:77:38:60:7b:bd:3b:e7:
10:a8:a2:cd:52:b3:22:c8:dc:8d:86:5f:34:ea:02:
01:c5:8d:7d:d6:5f:12:11:32:5d:50:fd:b1:f5:36:
af:7b:d7:19:c7:10:26:36:03:6e:c7:3d:19:71:0a:
e3:55
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
48:FA:C7:BB:E3:01:EC:3B:8A:56:26:F0:05:C0:59:A0:E0:3D:C0:69
X509v3 Authority Key Identifier:
keyid:50:CA:D4:E5:77:5B:A3:1E:CA:E2:26:D1:04:6F:3D:C1:A1:04:81:4D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/UMrU5Xdbox7K4ibRBG89waEEgU0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/fd/8a2085-a6c3-4fde-8dba-6639bca7a1b0/1/SPrHu-MB7DuKVibwBcBZoOA9wGk.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/fd/8a2085-a6c3-4fde-8dba-6639bca7a1b0/1/UMrU5Xdbox7K4ibRBG89waEEgU0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2001:678:d2c::/48
Signature Algorithm: sha256WithRSAEncryption
a0:14:16:1d:98:25:d0:1a:23:77:bc:7d:1d:f8:02:85:c1:f1:
a0:ee:2d:03:d1:de:88:18:a1:8d:76:e1:21:99:53:3e:b9:96:
0d:0e:8f:0f:62:1b:23:0b:dc:2e:35:68:4f:da:ff:06:ac:a5:
78:3b:3c:44:99:30:2e:c8:cc:d2:43:21:5c:7c:79:e9:7a:bd:
11:07:7f:df:4e:1d:7f:a8:62:51:0d:44:a5:b7:08:22:ea:7b:
a7:7f:7b:40:48:28:76:bf:d6:bc:25:82:50:99:0b:bf:bb:d4:
50:8a:08:a2:87:41:3c:ed:50:17:f3:a2:cc:e8:50:1a:52:bc:
f5:42:31:d0:8d:88:69:2d:31:6e:a0:77:e5:dc:61:ce:da:0f:
41:24:5c:d5:df:e7:66:59:f3:be:aa:90:ef:8e:22:52:74:46:
ff:86:39:7b:a3:55:f3:ff:b8:3f:22:37:e6:96:af:ad:22:9d:
b7:db:b0:8b:3b:8a:40:a7:a6:0e:65:a5:37:bc:69:82:03:ba:
e9:cd:78:40:8c:2d:25:01:26:c4:3b:94:e6:a7:4e:06:56:25:
19:4f:15:72:67:3c:5c:12:e9:14:be:8c:37:e4:e0:6e:c9:10:
72:a5:84:db:f8:ca:be:27:7e:6c:43:08:1f:f2:d4:50:45:1c:
c5:4b:27:a3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Apr 17 13:30:19 2025 by rpki-client