Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/92/c12a7b-5caf-4e7c-970d-5c476e3325f5/1/MpCDG1HrD0BxFJ8Yo_n8SFYPNXM.roa
File: MpCDG1HrD0BxFJ8Yo_n8SFYPNXM.roa (raw, json)
Hash identifier: WR90NsFW3sHWZX01D/k5CbOE7KaWzbNJiKvfLPEuth0=
Subject key identifier: 32:90:83:1B:51:EB:0F:40:71:14:9F:18:A3:F9:FC:48:56:0F:35:73
Certificate issuer: /CN=465eba5c1a80f86a4589278edd9304b3f5169f83
Certificate serial: 018CCA2A3D58F82E6E3A95EFB55123035EF1
Authority key identifier: 46:5E:BA:5C:1A:80:F8:6A:45:89:27:8E:DD:93:04:B3:F5:16:9F:83
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Rl66XBqA-GpFiSeO3ZMEs_UWn4M.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/92/c12a7b-5caf-4e7c-970d-5c476e3325f5/1/MpCDG1HrD0BxFJ8Yo_n8SFYPNXM.roa
Signing time: Tue 02 Jan 2024 12:33:34 +0000
ROA not before: Tue 02 Jan 2024 12:33:34 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 202423
IP address blocks: 185.239.50.0/24 maxlen: 24
185.239.51.0/24 maxlen: 24
185.142.97.0/24 maxlen: 24
185.142.96.0/24 maxlen: 24
185.142.98.0/24 maxlen: 24
194.187.123.0/24 maxlen: 24
Validation: Failed, RFC 3779 resource not subset of parent's resources
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8c:ca:2a:3d:58:f8:2e:6e:3a:95:ef:b5:51:23:03:5e:f1
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=465eba5c1a80f86a4589278edd9304b3f5169f83
Validity
Not Before: Jan 2 12:33:34 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=3290831b51eb0f4071149f18a3f9fc48560f3573
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9a:c5:bd:27:89:f6:40:a5:9f:a8:b8:f2:5c:ce:
9a:62:10:94:15:c5:ac:63:ed:b9:45:e0:b1:a8:c9:
d7:b4:77:67:4a:c7:74:61:26:e7:88:8b:2c:12:73:
8a:cb:19:78:a2:14:7d:3d:e1:11:9f:93:6b:df:26:
cf:4d:f5:37:04:86:54:b8:06:e2:15:be:5b:71:2a:
3c:3f:ea:c6:91:2e:1a:8f:d4:eb:d0:4d:50:ac:1c:
17:67:33:43:9d:cf:50:10:ae:85:e6:e9:d8:51:92:
e5:32:81:73:a3:83:e7:9e:ed:39:72:07:2c:6b:37:
0c:2f:b7:3e:b3:b3:81:2b:c3:df:2a:ca:85:d6:78:
a8:11:f2:44:2d:eb:46:54:cd:ac:bc:3a:f2:77:ba:
c6:47:c4:d8:cc:80:d2:f2:d3:d0:e4:94:da:be:13:
6f:89:63:b2:c2:1e:26:d5:15:c3:8e:48:39:af:2b:
06:24:5a:4b:a3:13:cb:49:c3:1c:8c:87:4b:6a:45:
4a:7a:5c:18:f4:a1:b5:b3:85:a9:33:75:d1:ae:a6:
9d:61:d2:d5:4b:8c:bb:0d:d7:51:ca:89:f0:92:72:
0c:4f:4b:8c:08:f9:cf:24:6c:b4:da:fd:2f:44:ff:
a8:67:76:42:90:0c:3a:8c:07:75:e8:b4:31:e5:7b:
cd:15
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
32:90:83:1B:51:EB:0F:40:71:14:9F:18:A3:F9:FC:48:56:0F:35:73
X509v3 Authority Key Identifier:
keyid:46:5E:BA:5C:1A:80:F8:6A:45:89:27:8E:DD:93:04:B3:F5:16:9F:83
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Rl66XBqA-GpFiSeO3ZMEs_UWn4M.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/92/c12a7b-5caf-4e7c-970d-5c476e3325f5/1/MpCDG1HrD0BxFJ8Yo_n8SFYPNXM.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/92/c12a7b-5caf-4e7c-970d-5c476e3325f5/1/Rl66XBqA-GpFiSeO3ZMEs_UWn4M.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.142.96.0-185.142.98.255
185.239.50.0/23
194.187.123.0/24
Signature Algorithm: sha256WithRSAEncryption
62:51:0c:2d:fa:13:a8:52:d5:e7:38:75:f8:be:66:c5:28:17:
db:86:59:0a:2e:fd:09:be:95:6b:b1:c2:ac:8a:b3:b6:0c:e2:
a7:14:35:f6:48:f6:0b:00:72:62:2b:ca:dc:46:43:e7:68:4d:
80:aa:1e:3e:99:9f:80:57:1a:33:37:7c:17:02:0e:e9:69:80:
6a:6f:d1:e6:85:4f:51:78:1b:6b:bd:3d:0e:00:3c:ce:46:90:
2a:aa:83:77:de:e7:18:1a:f9:22:10:68:71:2e:68:4d:74:82:
fe:00:2e:10:21:14:f5:69:1c:23:a2:83:14:4e:88:08:94:92:
44:a1:0e:d7:93:13:c2:0b:06:d9:44:ab:f6:b4:3c:03:cc:e2:
b6:73:b0:b8:75:88:8d:44:3d:eb:41:31:16:67:02:44:e5:74:
51:18:14:fc:65:21:15:8a:27:3a:00:9a:95:d4:24:e9:5e:8d:
a5:d0:d6:6f:61:7d:f1:7a:49:c9:56:fc:6b:b4:d0:3a:71:9b:
dc:29:77:80:8b:35:06:a3:67:98:7e:3d:1c:2c:37:72:7e:d5:
68:67:9a:9c:3a:c8:4d:f4:f3:76:1e:f6:8d:03:20:be:1d:d6:
da:f4:f2:c0:6c:b1:c6:40:2c:ba:d3:21:74:d9:d3:d7:cb:eb:
a9:07:0b:dd
-----BEGIN CERTIFICATE-----
MIIFETCCA/mgAwIBAgISAYzKKj1Y+C5uOpXvtVEjA17xMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDQ2NWViYTVjMWE4MGY4NmE0NTg5Mjc4ZWRkOTMwNGIzZjUx
NjlmODMwHhcNMjQwMTAyMTIzMzM0WhcNMjUwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EygzMjkwODMxYjUxZWIwZjQwNzExNDlmMThhM2Y5ZmM0ODU2MGYzNTczMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAmsW9J4n2QKWfqLjyXM6aYhCUFcWs
Y+25ReCxqMnXtHdnSsd0YSbniIssEnOKyxl4ohR9PeERn5Nr3ybPTfU3BIZUuAbi
Fb5bcSo8P+rGkS4aj9Tr0E1QrBwXZzNDnc9QEK6F5unYUZLlMoFzo4Pnnu05cgcs
azcML7c+s7OBK8PfKsqF1nioEfJELetGVM2svDryd7rGR8TYzIDS8tPQ5JTavhNv
iWOywh4m1RXDjkg5rysGJFpLoxPLScMcjIdLakVKelwY9KG1s4WpM3XRrqadYdLV
S4y7DddRyonwknIMT0uMCPnPJGy02v0vRP+oZ3ZCkAw6jAd16LQx5XvNFQIDAQAB
o4ICHTCCAhkwHQYDVR0OBBYEFDKQgxtR6w9AcRSfGKP5/EhWDzVzMB8GA1UdIwQY
MBaAFEZeulwagPhqRYknjt2TBLP1Fp+DMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvUmw2NlhCcUEtR3BGaVNlTzNaTUVzX1VXbjRNLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC85Mi9jMTJhN2ItNWNhZi00ZTdjLTk3MGQt
NWM0NzZlMzMyNWY1LzEvTXBDREcxSHJEMEJ4Rko4WW9fbjhTRllQTlhNLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC85Mi9jMTJhN2ItNWNhZi00ZTdjLTk3MGQtNWM0NzZlMzMyNWY1
LzEvUmw2NlhCcUEtR3BGaVNlTzNaTUVzX1VXbjRNLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMDMGCCsGAQUFBwEHAQH/BCQwIjAgBAIAATAaMAwDBAW5jmAD
BAC5jmIDBAG57zIDBADCu3swDQYJKoZIhvcNAQELBQADggEBAGJRDC36E6hS1ec4
dfi+ZsUoF9uGWQou/Qm+lWuxwqyKs7YM4qcUNfZI9gsAcmIrytxGQ+doTYCqHj6Z
n4BXGjM3fBcCDulpgGpv0eaFT1F4G2u9PQ4APM5GkCqqg3fe5xga+SIQaHEuaE10
gv4ALhAhFPVpHCOigxROiAiUkkShDteTE8ILBtlEq/a0PAPM4rZzsLh1iI1EPetB
MRZnAkTldFEYFPxlIRWKJzoAmpXUJOlejaXQ1m9hffF6SclW/Gu00Dpxm9wpd4CL
NQajZ5h+PRwsN3J+1Whnmpw6yE3083Ye9o0DIL4d1tr08sBsscZALLrTIXTZ09fL
66kHC90=
-----END CERTIFICATE-----
Generated at Mon Feb 5 11:36:20 2024 by rpki-client on console-ams.rpki-client.org