Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/03/913a3a-f550-46f0-acc7-cd3ca5975712/1/MSMZ_JobVmgXLFl8lf400mbbYc4.roa
File: MSMZ_JobVmgXLFl8lf400mbbYc4.roa (raw, json)
Hash identifier: Em9a3LKgHl/zoalTvFWBlQejA66w7S4uxiv9i+201Qg=
Subject key identifier: 31:23:19:FC:9A:1B:56:68:17:2C:59:7C:95:FE:34:D2:66:DB:61:CE
Certificate issuer: /CN=22c4ac3e3c43d70d05349c815baadd38ad775e9d
Certificate serial: 018B4BEC67076C239799842B73CC7DE2C4DC
Authority key identifier: 22:C4:AC:3E:3C:43:D7:0D:05:34:9C:81:5B:AA:DD:38:AD:77:5E:9D
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/IsSsPjxD1w0FNJyBW6rdOK13Xp0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/03/913a3a-f550-46f0-acc7-cd3ca5975712/1/MSMZ_JobVmgXLFl8lf400mbbYc4.roa
Signing time: Fri 20 Oct 2023 07:11:05 +0000
ROA not before: Fri 20 Oct 2023 07:11:05 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 0
IP address blocks: 185.218.84.0/22 maxlen: 24
178.215.224.0/24 maxlen: 24
91.92.24.0/23 maxlen: 24
94.156.239.0/24 maxlen: 24
178.215.236.0/24 maxlen: 24
171.22.72.0/22 maxlen: 24
185.252.176.0/24 maxlen: 24
147.78.101.0/24 maxlen: 24
147.78.100.0/24 maxlen: 24
147.78.102.0/24 maxlen: 24
185.226.175.0/24 maxlen: 24
92.119.196.0/23 maxlen: 24
195.178.110.0/24 maxlen: 24
185.216.84.0/22 maxlen: 24
87.121.45.0/24 maxlen: 24
87.121.59.0/24 maxlen: 24
194.180.50.0/24 maxlen: 24
194.169.174.0/24 maxlen: 24
94.156.78.0/24 maxlen: 24
93.123.116.0/24 maxlen: 24
94.154.162.0/23 maxlen: 24
94.154.161.0/24 maxlen: 24
45.151.91.0/24 maxlen: 24
45.151.89.0/24 maxlen: 24
Validation: Failed, RFC 3779 resource not subset of parent's resources
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8b:4b:ec:67:07:6c:23:97:99:84:2b:73:cc:7d:e2:c4:dc
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=22c4ac3e3c43d70d05349c815baadd38ad775e9d
Validity
Not Before: Oct 20 07:11:05 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=312319fc9a1b5668172c597c95fe34d266db61ce
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:95:7b:a8:77:7d:36:d4:2d:d7:d1:52:51:8a:e3:
43:84:f7:6a:fe:b9:9b:c0:bb:c3:13:17:74:68:ae:
e3:c7:2e:12:7b:7e:d5:45:ad:a7:17:7f:51:55:ce:
94:fa:29:93:86:c6:f0:ed:0b:80:d4:93:25:89:04:
2d:23:ac:36:58:7d:18:39:bc:71:4e:28:5f:c7:99:
29:06:0a:1e:a9:7b:e2:e0:d0:6c:e8:16:5a:df:88:
e9:39:91:99:0b:ce:ba:a5:44:0f:50:cd:a4:e6:ad:
af:4c:72:3d:9a:43:95:83:a7:20:fa:41:c2:29:8a:
6c:02:96:8b:b4:9d:50:0a:75:7f:3e:ad:56:28:ba:
c2:8d:8a:03:42:eb:98:e0:91:e5:f9:eb:bd:e8:37:
57:ff:f9:3e:99:f0:32:a0:38:2e:69:84:b9:45:20:
ba:c8:7e:7f:2e:73:84:0f:37:76:4e:f1:58:ab:6f:
4c:4e:50:09:f8:f9:8c:c0:e3:aa:a8:18:08:95:e6:
b7:76:17:7e:00:5a:84:ff:eb:de:b6:3f:85:d2:5a:
87:31:56:57:63:c6:84:c0:47:ed:cf:0f:58:01:40:
b3:f3:fd:66:f6:37:3e:e8:3b:ef:2b:ec:1f:e5:6f:
67:52:b4:77:66:52:78:0d:35:65:84:f9:db:8a:11:
03:b3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
31:23:19:FC:9A:1B:56:68:17:2C:59:7C:95:FE:34:D2:66:DB:61:CE
X509v3 Authority Key Identifier:
keyid:22:C4:AC:3E:3C:43:D7:0D:05:34:9C:81:5B:AA:DD:38:AD:77:5E:9D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/IsSsPjxD1w0FNJyBW6rdOK13Xp0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/03/913a3a-f550-46f0-acc7-cd3ca5975712/1/MSMZ_JobVmgXLFl8lf400mbbYc4.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/03/913a3a-f550-46f0-acc7-cd3ca5975712/1/IsSsPjxD1w0FNJyBW6rdOK13Xp0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
45.151.89.0/24
45.151.91.0/24
87.121.45.0/24
87.121.59.0/24
91.92.24.0/23
92.119.196.0/23
93.123.116.0/24
94.154.161.0-94.154.163.255
94.156.78.0/24
94.156.239.0/24
147.78.100.0-147.78.102.255
171.22.72.0/22
178.215.224.0/24
178.215.236.0/24
185.216.84.0/22
185.218.84.0/22
185.226.175.0/24
185.252.176.0/24
194.169.174.0/24
194.180.50.0/24
195.178.110.0/24
Signature Algorithm: sha256WithRSAEncryption
87:5b:e0:2e:cd:8d:05:1b:f2:8d:ca:01:fd:3b:c0:17:24:6c:
96:57:3d:61:81:6b:7f:74:8e:ab:48:de:20:46:fa:cc:d6:56:
d6:b0:e4:18:f7:b0:c1:0c:d6:d9:85:6c:1d:b2:12:74:9d:46:
47:06:3f:c7:ef:5c:ba:8a:4f:f5:44:73:46:c0:7e:8e:d4:21:
6d:17:0c:d7:07:94:3a:87:8e:6f:da:e5:74:49:6d:ac:20:6f:
8d:0b:04:a1:da:84:aa:fc:71:96:72:64:9d:36:3c:3f:4b:a3:
9a:6a:79:ee:3a:e5:b7:90:d0:ec:6f:60:5c:ee:4e:08:af:58:
55:75:f6:98:41:66:4b:7d:a9:9a:68:09:8c:c2:79:9d:28:10:
29:1c:f1:4b:49:af:e6:6f:54:ab:87:b6:e9:e9:34:1d:1a:c4:
ca:9b:af:a9:fe:e2:0f:2e:99:7e:3e:9a:ee:41:5c:1c:af:f5:
c4:0d:75:a3:0e:09:a9:9e:1c:47:fd:6e:73:06:00:a2:18:22:
b9:21:2e:a9:c7:9f:52:ff:d5:b4:e4:87:b1:75:09:4f:1c:ed:
04:c8:1e:a8:f1:e6:c7:2c:84:cf:bf:d6:37:c3:3b:35:c0:e2:
44:d8:05:ba:f6:53:e7:e2:ed:d9:1d:5b:76:2a:b6:57:db:a3:
6f:0a:6e:78
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:17:05 2024 by rpki-client on console-fra.rpki-client.org