Route Origin Authorization
$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/04032c8f-1d57-4c3b-9043-a0e7febf167d/0/AS215923.roa
File: AS215923.roa (raw, json)
Hash identifier: 4tU/G4O1Gr6Upo0xl15NisXwRPecJvHo/Dn06bfV4aU=
Subject key identifier: 23:1C:14:BB:24:98:8B:36:40:A1:3D:25:08:42:6A:66:B6:8E:5A:14
Certificate issuer: /CN=d5c3d5e70fc9ad10ba90d45dc66454e9e3a146a8
Certificate serial: 0695DD013C9BE5CA1F22B78B0B6379450ECD272E
Authority key identifier: D5:C3:D5:E7:0F:C9:AD:10:BA:90:D4:5D:C6:64:54:E9:E3:A1:46:A8
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/1cPV5w_JrRC6kNRdxmRU6eOhRqg.cer
Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/04032c8f-1d57-4c3b-9043-a0e7febf167d/0/AS215923.roa
Signing time: Mon 08 Apr 2024 13:10:32 +0000
ROA not before: Mon 08 Apr 2024 13:05:32 +0000
ROA not after: Mon 07 Apr 2025 13:10:32 +0000
asID: 215923
IP address blocks: 2a13:df80:2430::/44 maxlen: 48
2a13:df85:e000::/38 maxlen: 48
Validation: Failed, RFC 3779 resource not subset of parent's resources
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
06:95:dd:01:3c:9b:e5:ca:1f:22:b7:8b:0b:63:79:45:0e:cd:27:2e
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=d5c3d5e70fc9ad10ba90d45dc66454e9e3a146a8
Validity
Not Before: Apr 8 13:05:32 2024 GMT
Not After : Apr 7 13:10:32 2025 GMT
Subject: CN=231C14BB24988B3640A13D2508426A66B68E5A14
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d7:f3:8a:8f:06:da:78:8b:8a:59:c6:ec:65:06:
94:ce:cd:e0:81:90:e8:82:34:11:71:79:f9:f4:32:
c2:89:34:a6:ae:1b:ef:fe:c8:e2:f1:03:35:06:85:
d0:a2:72:49:b3:f4:dd:7f:69:de:e8:49:e7:10:5e:
e2:67:40:65:e3:48:32:b3:e3:bf:89:66:b8:28:5a:
56:87:02:eb:67:85:26:9a:56:5f:99:48:f8:29:0c:
9c:97:1f:4f:1e:02:23:85:99:5e:a0:94:a9:d8:ee:
45:58:c8:02:30:a0:4b:d8:dd:1d:d4:83:70:94:18:
72:a7:51:01:3b:d6:cd:00:e4:61:20:7c:f0:7a:ed:
bb:9b:a8:a3:ef:55:68:33:1c:86:0a:c4:c3:ec:cd:
d6:73:c1:a1:9e:c7:d8:33:80:4d:86:59:ac:c6:10:
45:fd:07:70:ea:dc:85:88:d4:06:ad:62:ab:15:d1:
5c:7f:73:b2:f8:33:60:5e:30:07:07:fc:0c:27:81:
d5:a5:80:7c:4a:f5:be:75:fd:02:24:a4:d4:d8:db:
40:59:9d:e4:bb:8a:cd:66:72:fa:cf:4f:00:e6:1f:
b8:2c:7c:0e:46:40:ad:a7:49:ce:c7:dc:e3:8b:f8:
63:a0:bb:2e:8c:ab:2f:ed:fe:8e:ce:75:63:bd:93:
31:7d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
23:1C:14:BB:24:98:8B:36:40:A1:3D:25:08:42:6A:66:B6:8E:5A:14
X509v3 Authority Key Identifier:
keyid:D5:C3:D5:E7:0F:C9:AD:10:BA:90:D4:5D:C6:64:54:E9:E3:A1:46:A8
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.paas.rpki.ripe.net/repository/04032c8f-1d57-4c3b-9043-a0e7febf167d/0/D5C3D5E70FC9AD10BA90D45DC66454E9E3A146A8.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/1cPV5w_JrRC6kNRdxmRU6eOhRqg.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/04032c8f-1d57-4c3b-9043-a0e7febf167d/0/AS215923.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a13:df80:2430::/44
2a13:df85:e000::/38
Signature Algorithm: sha256WithRSAEncryption
8b:eb:dc:18:a7:a7:16:d9:7d:85:33:5e:af:ed:c0:d5:92:3e:
55:2d:08:76:14:ef:7d:b3:75:d5:cf:3f:cc:8e:55:1d:1b:c7:
e3:5f:e2:4d:89:6a:47:44:b0:e0:39:a1:95:e0:a0:ba:f0:cf:
aa:04:5e:d6:d1:9e:56:00:6c:26:1d:ee:2b:d5:e9:f8:df:7e:
9e:cc:60:6b:b4:9e:81:6c:68:f2:53:41:c8:fe:9c:c4:ed:cd:
ff:12:10:f0:5c:49:50:a1:a2:5d:41:16:71:0e:8d:43:1b:e8:
6f:7c:43:7a:eb:fe:a7:1e:6a:c9:ce:1f:66:fe:3d:30:ce:d4:
70:98:ab:96:4c:5d:24:c8:80:16:69:5a:46:c5:9d:38:0a:59:
73:43:19:37:09:10:7b:b2:44:cf:71:4e:95:ae:c2:b9:90:aa:
ba:b4:c2:b5:2a:7b:11:a1:ec:46:3d:30:a5:b7:7e:bd:ae:52:
df:e7:72:d9:57:ce:dc:84:8f:92:b7:3e:7d:41:6a:88:e5:57:
57:e5:16:20:84:21:5f:a7:56:68:fb:cf:69:34:93:8c:e9:5b:
3d:c0:39:f4:7f:18:2d:69:c6:1a:dc:50:34:77:7d:7b:f4:41:
60:b6:cc:3e:94:d7:8e:bb:7b:80:33:81:f8:30:92:7a:ba:f0:
e5:e2:f7:67
-----BEGIN CERTIFICATE-----
MIIFCzCCA/OgAwIBAgIUBpXdATyb5cofIreLC2N5RQ7NJy4wDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoZDVjM2Q1ZTcwZmM5YWQxMGJhOTBkNDVkYzY2NDU0ZTll
M2ExNDZhODAeFw0yNDA0MDgxMzA1MzJaFw0yNTA0MDcxMzEwMzJaMDMxMTAvBgNV
BAMTKDIzMUMxNEJCMjQ5ODhCMzY0MEExM0QyNTA4NDI2QTY2QjY4RTVBMTQwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDX84qPBtp4i4pZxuxlBpTOzeCB
kOiCNBFxefn0MsKJNKauG+/+yOLxAzUGhdCickmz9N1/ad7oSecQXuJnQGXjSDKz
47+JZrgoWlaHAutnhSaaVl+ZSPgpDJyXH08eAiOFmV6glKnY7kVYyAIwoEvY3R3U
g3CUGHKnUQE71s0A5GEgfPB67bubqKPvVWgzHIYKxMPszdZzwaGex9gzgE2GWazG
EEX9B3Dq3IWI1AatYqsV0Vx/c7L4M2BeMAcH/AwngdWlgHxK9b51/QIkpNTY20BZ
neS7is1mcvrPTwDmH7gsfA5GQK2nSc7H3OOL+GOguy6Mqy/t/o7OdWO9kzF9AgMB
AAGjggIVMIICETAdBgNVHQ4EFgQUIxwUuySYizZAoT0lCEJqZraOWhQwHwYDVR0j
BBgwFoAU1cPV5w/JrRC6kNRdxmRU6eOhRqgwDgYDVR0PAQH/BAQDAgeAMIGVBgNV
HR8EgY0wgYowgYeggYSggYGGf3JzeW5jOi8vcnN5bmMucGFhcy5ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvMDQwMzJjOGYtMWQ1Ny00YzNiLTkwNDMtYTBlN2ZlYmYx
NjdkLzAvRDVDM0Q1RTcwRkM5QUQxMEJBOTBENDVEQzY2NDU0RTlFM0ExNDZBOC5j
cmwwZAYIKwYBBQUHAQEEWDBWMFQGCCsGAQUFBzAChkhyc3luYzovL3Jwa2kucmlw
ZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxULzFjUFY1d19KclJDNmtOUmR4bVJVNmVP
aFJxZy5jZXIwewYIKwYBBQUHAQsEbzBtMGsGCCsGAQUFBzALhl9yc3luYzovL3Jz
eW5jLnBhYXMucnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5LzA0MDMyYzhmLTFkNTct
NGMzYi05MDQzLWEwZTdmZWJmMTY3ZC8wL0FTMjE1OTIzLnJvYTAYBgNVHSABAf8E
DjAMMAoGCCsGAQUFBw4CMCoGCCsGAQUFBwEHAQH/BBswGTAXBAIAAjARAwcEKhPf
gCQwAwYCKhPfheAwDQYJKoZIhvcNAQELBQADggEBAIvr3BinpxbZfYUzXq/twNWS
PlUtCHYU732zddXPP8yOVR0bx+Nf4k2JakdEsOA5oZXgoLrwz6oEXtbRnlYAbCYd
7ivV6fjffp7MYGu0noFsaPJTQcj+nMTtzf8SEPBcSVChol1BFnEOjUMb6G98Q3rr
/qceasnOH2b+PTDO1HCYq5ZMXSTIgBZpWkbFnTgKWXNDGTcJEHuyRM9xTpWuwrmQ
qrq0wrUqexGh7EY9MKW3fr2uUt/nctlXztyEj5K3Pn1BaojlV1flFiCEIV+nVmj7
z2k0k4zpWz3AOfR/GC1pxhrcUDR3fXv0QWC2zD6U1467e4Azgfgwknq68OXi92c=
-----END CERTIFICATE-----
Generated at Tue May 21 15:21:40 2024 by rpki-client on console-ams.rpki-client.org