Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/2e/6d59d9-9daf-4fcb-8d05-13bcc752119a/1/Vg86xBfIOJJqYyTGo13QxDaAVXk.roa
File: Vg86xBfIOJJqYyTGo13QxDaAVXk.roa (raw, json)
Hash identifier: pLUae8Gs5IdQiWJq6cTl0H6UgCfCf+G9IuVMKohUhqA=
Subject key identifier: 56:0F:3A:C4:17:C8:38:92:6A:63:24:C6:A3:5D:D0:C4:36:80:55:79
Certificate issuer: /CN=b07ab922565e2b3e2cc63d485a55dd4fc41d357e
Certificate serial: 018DB8A1675234C5B6637BD5B4EADAE176B6
Authority key identifier: B0:7A:B9:22:56:5E:2B:3E:2C:C6:3D:48:5A:55:DD:4F:C4:1D:35:7E
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/sHq5IlZeKz4sxj1IWlXdT8QdNX4.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/2e/6d59d9-9daf-4fcb-8d05-13bcc752119a/1/Vg86xBfIOJJqYyTGo13QxDaAVXk.roa
Signing time: Sat 17 Feb 2024 19:53:21 +0000
ROA not before: Sat 17 Feb 2024 19:53:21 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 203363
IP address blocks: 2a12:f8c2:2000::/40 maxlen: 48
Validation: Failed, RFC 3779 resource not subset of parent's resources
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8d:b8:a1:67:52:34:c5:b6:63:7b:d5:b4:ea:da:e1:76:b6
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=b07ab922565e2b3e2cc63d485a55dd4fc41d357e
Validity
Not Before: Feb 17 19:53:21 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=560f3ac417c838926a6324c6a35dd0c436805579
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:83:c7:eb:da:cb:5c:ac:64:a4:58:94:85:1d:c6:
be:a9:29:24:0a:d0:db:2b:ed:7b:2b:6e:c1:47:f8:
3c:0b:b5:c6:17:8a:b0:a2:e8:88:0b:90:51:7d:f6:
13:bd:4b:b6:24:1f:2a:c1:a6:68:c7:4c:e5:53:9e:
aa:cb:f3:6e:78:63:f5:7b:0d:5b:35:83:c8:3e:7f:
7d:75:e2:f5:d4:4d:5d:4a:3b:41:e4:64:90:27:f5:
a7:5b:12:3b:8f:00:6a:1f:20:9a:b3:40:fe:f2:b3:
b4:9c:d0:9b:8b:ca:ab:80:c1:30:e6:de:02:aa:1b:
4e:3b:21:9d:02:d8:19:a1:0e:56:58:37:41:e2:00:
dd:59:d1:73:b5:b0:5c:e1:8f:f3:e8:83:f7:b0:e0:
cf:7b:83:82:5c:3c:f1:33:b6:cb:a7:20:9e:fb:f7:
cf:60:58:fd:78:45:05:2c:50:95:71:a3:85:3d:e2:
93:b5:31:88:4c:c2:ff:2d:e4:c9:85:ed:78:25:ca:
5f:73:b3:d4:0b:0a:b8:bf:55:19:25:15:d3:98:c2:
25:44:27:74:e9:ae:ad:32:7b:04:e8:db:ca:13:9c:
38:cc:56:64:99:60:a6:17:6a:35:41:99:45:26:e1:
34:74:d8:2c:86:00:27:59:6c:41:7d:de:f7:16:ff:
ad:3d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
56:0F:3A:C4:17:C8:38:92:6A:63:24:C6:A3:5D:D0:C4:36:80:55:79
X509v3 Authority Key Identifier:
keyid:B0:7A:B9:22:56:5E:2B:3E:2C:C6:3D:48:5A:55:DD:4F:C4:1D:35:7E
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/sHq5IlZeKz4sxj1IWlXdT8QdNX4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/2e/6d59d9-9daf-4fcb-8d05-13bcc752119a/1/Vg86xBfIOJJqYyTGo13QxDaAVXk.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/2e/6d59d9-9daf-4fcb-8d05-13bcc752119a/1/sHq5IlZeKz4sxj1IWlXdT8QdNX4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a12:f8c2:2000::/40
Signature Algorithm: sha256WithRSAEncryption
20:a4:6d:7e:46:bd:a4:d2:c5:0f:fc:8e:09:eb:32:e2:5c:6f:
13:74:76:c9:66:e6:dc:10:d8:04:91:0c:61:3d:80:d9:e9:e3:
bb:1e:61:b5:85:14:d2:8d:13:01:e9:0a:3e:ba:2d:35:f8:06:
00:8e:de:6f:62:ea:45:d8:05:87:f2:50:0c:1b:86:dc:05:95:
7b:26:6f:00:98:1e:87:be:34:db:9d:28:52:b8:b3:b4:cd:76:
c3:85:78:cc:45:31:49:f4:e2:50:85:0f:e5:c0:f1:82:b3:61:
bb:dc:8f:a6:72:d7:e6:ce:e8:01:36:16:d0:21:b7:5e:46:88:
e4:f2:06:10:9c:91:f6:b2:c2:c2:a9:3f:c6:56:b6:09:d6:f8:
a8:00:da:fd:f7:a3:60:6a:ab:f0:e2:db:da:db:92:5b:93:10:
84:13:31:0d:89:e3:83:2d:ac:ec:29:91:b1:bd:44:32:6d:10:
de:03:c9:01:82:b6:a7:dc:5e:43:0d:a7:aa:a8:be:b4:f0:45:
1f:eb:9c:71:7c:5d:79:52:11:00:e3:1e:89:bd:15:c6:78:0b:
51:7b:f1:01:22:07:46:ea:e9:91:3e:da:c8:0b:59:90:be:27:
20:a6:af:67:5b:b8:e4:1d:62:7e:dd:39:c8:57:55:4e:28:f6:
c1:0e:fd:19
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jun 4 19:12:57 2024 by rpki-client on console.sobornost.net