Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/2e/6d59d9-9daf-4fcb-8d05-13bcc752119a/1/u0e0PWE7HXikXgjMqwtSqGdxZSw.roa
File: u0e0PWE7HXikXgjMqwtSqGdxZSw.roa (raw, json)
Hash identifier: +CH6BUn+1l8MyJH/US8MHqxIYrGvBXAW0T1nQDv7vsU=
Subject key identifier: BB:47:B4:3D:61:3B:1D:78:A4:5E:08:CC:AB:0B:52:A8:67:71:65:2C
Certificate issuer: /CN=b07ab922565e2b3e2cc63d485a55dd4fc41d357e
Certificate serial: 018CC64B27BFD7982FA4D55919DEEF0D4766
Authority key identifier: B0:7A:B9:22:56:5E:2B:3E:2C:C6:3D:48:5A:55:DD:4F:C4:1D:35:7E
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/sHq5IlZeKz4sxj1IWlXdT8QdNX4.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/2e/6d59d9-9daf-4fcb-8d05-13bcc752119a/1/u0e0PWE7HXikXgjMqwtSqGdxZSw.roa
Signing time: Mon 01 Jan 2024 18:31:03 +0000
ROA not before: Mon 01 Jan 2024 18:31:03 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 150298
IP address blocks: 2a12:f8c1:200::/40 maxlen: 40
2a12:f8c1:8::/48 maxlen: 48
Validation: Failed, RFC 3779 resource not subset of parent's resources
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8c:c6:4b:27:bf:d7:98:2f:a4:d5:59:19:de:ef:0d:47:66
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=b07ab922565e2b3e2cc63d485a55dd4fc41d357e
Validity
Not Before: Jan 1 18:31:03 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=bb47b43d613b1d78a45e08ccab0b52a86771652c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8d:58:39:9b:22:2c:29:3a:da:21:09:77:68:2f:
4f:14:23:45:62:0e:48:a9:39:cb:93:fc:7b:4b:2e:
12:40:fb:9d:ca:dd:b2:b5:54:b7:f6:c9:2f:88:6b:
10:5b:f5:1d:c5:66:86:ba:e9:8c:69:ee:55:f5:34:
37:93:58:6a:1b:99:05:b6:41:48:09:12:e1:9a:9f:
46:41:ad:e1:3f:9b:c6:f0:15:17:fb:bf:a9:55:45:
ce:68:6e:4a:74:26:7c:7f:a8:0a:b7:14:2a:c7:a7:
95:90:d8:15:70:c8:d7:b2:a3:9d:c8:6d:ff:df:e8:
0c:7b:c0:ee:14:19:cc:f5:ef:e4:99:16:c2:76:fa:
13:8a:c0:0c:f3:5e:4e:87:85:56:19:67:06:ea:26:
24:8a:85:99:8f:6f:0f:06:86:fb:5a:31:7a:c5:7d:
2c:72:2b:69:5e:ff:9b:f5:e8:59:d9:f2:fa:6e:e9:
0a:a6:d5:7b:89:ce:e0:d9:6a:55:b3:ef:ba:39:69:
ab:9a:d0:13:81:24:18:21:a8:67:b4:21:0f:24:d7:
02:7e:ab:f4:9b:b8:70:71:48:63:a6:0e:80:d7:25:
fa:77:ea:3f:c1:98:5e:fa:11:f4:92:51:c0:ef:ad:
80:d7:25:4c:0d:81:e8:23:ea:f7:d0:9e:fa:25:ab:
ac:27
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
BB:47:B4:3D:61:3B:1D:78:A4:5E:08:CC:AB:0B:52:A8:67:71:65:2C
X509v3 Authority Key Identifier:
keyid:B0:7A:B9:22:56:5E:2B:3E:2C:C6:3D:48:5A:55:DD:4F:C4:1D:35:7E
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/sHq5IlZeKz4sxj1IWlXdT8QdNX4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/2e/6d59d9-9daf-4fcb-8d05-13bcc752119a/1/u0e0PWE7HXikXgjMqwtSqGdxZSw.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/2e/6d59d9-9daf-4fcb-8d05-13bcc752119a/1/sHq5IlZeKz4sxj1IWlXdT8QdNX4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a12:f8c1:8::/48
2a12:f8c1:200::/40
Signature Algorithm: sha256WithRSAEncryption
ae:a9:79:91:c3:e5:b2:ea:0c:f8:8b:e9:80:1e:8b:51:ca:45:
b5:4e:f7:a8:cd:ee:bf:46:7b:85:45:ac:d8:bb:9d:ae:08:59:
fb:66:8e:ef:ab:cc:a8:56:d6:4e:e5:0b:22:6f:86:f7:e6:b7:
d4:da:d2:cb:26:27:8e:b1:b8:4c:2f:53:2b:0d:58:1c:bd:42:
a4:a0:af:7c:b3:4e:9e:be:af:f0:6d:02:77:a3:72:7d:69:81:
29:dc:61:d0:e4:58:e8:f2:af:03:4b:a0:a6:b4:02:54:f6:0a:
95:81:52:60:2f:15:c5:50:70:b1:00:88:e1:6a:35:dd:65:53:
2d:98:4e:49:01:4e:e2:85:6e:ee:17:a7:5f:bd:b7:9b:d9:5d:
df:fa:9e:d5:54:5c:f3:9e:a0:81:e4:79:f8:5a:ee:05:6c:f6:
d2:18:df:1c:4c:dd:1d:7f:12:fe:fd:96:1b:5e:9a:f1:c6:14:
50:18:94:8b:95:44:c4:47:7b:28:a4:13:9f:89:54:77:40:84:
65:22:4f:e7:17:fb:75:10:b9:9e:4a:95:61:f5:cd:14:04:e3:
b8:06:f5:ed:a4:b6:c0:86:fe:60:dd:64:c8:c3:2b:71:df:27:
94:e9:76:f5:eb:72:d6:c7:fa:f4:3c:ea:12:a9:07:68:0f:be:
85:ab:98:aa
-----BEGIN CERTIFICATE-----
MIIFCDCCA/CgAwIBAgISAYzGSye/15gvpNVZGd7vDUdmMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGIwN2FiOTIyNTY1ZTJiM2UyY2M2M2Q0ODVhNTVkZDRmYzQx
ZDM1N2UwHhcNMjQwMTAxMTgzMTAzWhcNMjUwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EyhiYjQ3YjQzZDYxM2IxZDc4YTQ1ZTA4Y2NhYjBiNTJhODY3NzE2NTJjMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAjVg5myIsKTraIQl3aC9PFCNFYg5I
qTnLk/x7Sy4SQPudyt2ytVS39skviGsQW/UdxWaGuumMae5V9TQ3k1hqG5kFtkFI
CRLhmp9GQa3hP5vG8BUX+7+pVUXOaG5KdCZ8f6gKtxQqx6eVkNgVcMjXsqOdyG3/
3+gMe8DuFBnM9e/kmRbCdvoTisAM815Oh4VWGWcG6iYkioWZj28PBob7WjF6xX0s
citpXv+b9ehZ2fL6bukKptV7ic7g2WpVs++6OWmrmtATgSQYIahntCEPJNcCfqv0
m7hwcUhjpg6A1yX6d+o/wZhe+hH0klHA762A1yVMDYHoI+r30J76JausJwIDAQAB
o4ICFDCCAhAwHQYDVR0OBBYEFLtHtD1hOx14pF4IzKsLUqhncWUsMB8GA1UdIwQY
MBaAFLB6uSJWXis+LMY9SFpV3U/EHTV+MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvc0hxNUlsWmVLejRzeGoxSVdsWGRUOFFkTlg0LmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8yZS82ZDU5ZDktOWRhZi00ZmNiLThkMDUt
MTNiY2M3NTIxMTlhLzEvdTBlMFBXRTdIWGlrWGdqTXF3dFNxR2R4WlN3LnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8yZS82ZDU5ZDktOWRhZi00ZmNiLThkMDUtMTNiY2M3NTIxMTlh
LzEvc0hxNUlsWmVLejRzeGoxSVdsWGRUOFFkTlg0LmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCoGCCsGAQUFBwEHAQH/BBswGTAXBAIAAjARAwcAKhL4wQAI
AwYAKhL4wQIwDQYJKoZIhvcNAQELBQADggEBAK6peZHD5bLqDPiL6YAei1HKRbVO
96jN7r9Ge4VFrNi7na4IWftmju+rzKhW1k7lCyJvhvfmt9Ta0ssmJ46xuEwvUysN
WBy9QqSgr3yzTp6+r/BtAnejcn1pgSncYdDkWOjyrwNLoKa0AlT2CpWBUmAvFcVQ
cLEAiOFqNd1lUy2YTkkBTuKFbu4Xp1+9t5vZXd/6ntVUXPOeoIHkefha7gVs9tIY
3xxM3R1/Ev79lhtemvHGFFAYlIuVRMRHeyikE5+JVHdAhGUiT+cX+3UQuZ5KlWH1
zRQE47gG9e2ktsCG/mDdZMjDK3HfJ5TpdvXrctbH+vQ86hKpB2gPvoWrmKo=
-----END CERTIFICATE-----
Generated at Tue Jun 4 19:12:57 2024 by rpki-client on console.sobornost.net