Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/03/913a3a-f550-46f0-acc7-cd3ca5975712/1/MfpS5njriz4a49jqLlBl19hMuFQ.roa
File: MfpS5njriz4a49jqLlBl19hMuFQ.roa (raw, json)
Hash identifier: 8tO7y1GpH6ZoyWGDQQAQFx32tKfivotL993Tn7qFb90=
Subject key identifier: 31:FA:52:E6:78:EB:8B:3E:1A:E3:D8:EA:2E:50:65:D7:D8:4C:B8:54
Certificate issuer: /CN=22c4ac3e3c43d70d05349c815baadd38ad775e9d
Certificate serial: 0183A7C5FE7D17A1A1AC40727E0ECCFE360C
Authority key identifier: 22:C4:AC:3E:3C:43:D7:0D:05:34:9C:81:5B:AA:DD:38:AD:77:5E:9D
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/IsSsPjxD1w0FNJyBW6rdOK13Xp0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/03/913a3a-f550-46f0-acc7-cd3ca5975712/1/MfpS5njriz4a49jqLlBl19hMuFQ.roa
Signing time: Wed 05 Oct 2022 10:51:54 +0000
ROA not before: Wed 05 Oct 2022 10:51:54 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 50225
IP address blocks: 84.21.173.0/24 maxlen: 24
194.55.224.0/24 maxlen: 24
194.55.225.0/24 maxlen: 24
194.55.226.0/24 maxlen: 24
84.54.48.0/24 maxlen: 24
194.55.227.0/24 maxlen: 24
194.169.173.0/24 maxlen: 24
194.169.174.0/24 maxlen: 24
193.37.43.0/24 maxlen: 24
Validation: Failed, RFC 3779 resource not subset of parent's resources
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:83:a7:c5:fe:7d:17:a1:a1:ac:40:72:7e:0e:cc:fe:36:0c
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=22c4ac3e3c43d70d05349c815baadd38ad775e9d
Validity
Not Before: Oct 5 10:51:54 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=31fa52e678eb8b3e1ae3d8ea2e5065d7d84cb854
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:db:39:64:bb:de:36:45:e8:64:e6:5e:3a:29:3a:
15:7e:e5:c1:5c:ba:10:0c:ea:8b:d7:9d:14:f1:0f:
9e:4b:0e:79:a9:cc:b9:64:50:bf:f2:21:84:9f:60:
11:14:03:68:dd:b8:29:ad:1c:84:6e:dc:d0:c5:8a:
96:d0:e2:6a:aa:3d:18:b4:8c:82:f3:97:b9:3b:33:
e5:e2:9f:88:73:d5:46:dd:7c:73:71:6c:01:e6:6d:
81:4d:ba:fb:a7:af:97:09:36:1b:d7:64:2e:c2:54:
07:d7:f3:72:99:3d:ba:65:4c:24:c6:90:73:4e:2a:
32:e1:cb:71:04:2a:5d:90:20:57:d7:aa:78:ad:b9:
9d:02:55:f0:50:4f:ed:61:44:63:84:5b:44:2b:02:
b3:61:ff:0b:eb:ca:81:47:46:f3:78:6f:d5:07:7c:
11:e9:6a:f7:ea:9a:90:dc:d0:c1:d9:9e:f3:26:de:
c5:cc:14:33:9e:ff:66:c9:34:69:1e:82:ef:2a:cc:
00:e4:df:35:cc:41:b6:41:9b:47:ae:f1:16:ca:80:
b0:f6:41:11:34:7b:18:7a:4d:1c:7a:fa:8b:8f:86:
0a:a3:37:8b:a5:50:39:f9:c0:5d:77:eb:94:34:8d:
76:4a:f5:2c:19:08:7a:b9:ee:74:0b:f7:bd:eb:0e:
6d:c7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
31:FA:52:E6:78:EB:8B:3E:1A:E3:D8:EA:2E:50:65:D7:D8:4C:B8:54
X509v3 Authority Key Identifier:
keyid:22:C4:AC:3E:3C:43:D7:0D:05:34:9C:81:5B:AA:DD:38:AD:77:5E:9D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/IsSsPjxD1w0FNJyBW6rdOK13Xp0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/03/913a3a-f550-46f0-acc7-cd3ca5975712/1/MfpS5njriz4a49jqLlBl19hMuFQ.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/03/913a3a-f550-46f0-acc7-cd3ca5975712/1/IsSsPjxD1w0FNJyBW6rdOK13Xp0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
84.21.173.0/24
84.54.48.0/24
193.37.43.0/24
194.55.224.0/22
194.169.173.0-194.169.174.255
Signature Algorithm: sha256WithRSAEncryption
3d:f1:92:48:7e:34:e7:b5:b1:e5:90:87:ee:ea:08:5e:74:05:
d5:0e:10:10:2f:ae:0e:08:a4:91:0b:eb:63:e1:f4:e1:26:4e:
9d:da:14:42:bc:53:98:73:86:de:4a:6e:20:6d:28:d4:97:3c:
f8:e2:a3:a6:40:c4:04:e4:99:ed:91:19:2e:da:4a:97:10:df:
37:35:f5:ae:a7:13:04:1f:18:35:38:3d:69:e8:e3:2d:dc:b8:
92:17:25:55:81:25:70:44:bd:eb:50:fc:12:5a:2c:6a:2c:c1:
0a:a7:bc:53:fa:fd:cd:03:e8:82:a2:e7:b0:0e:a0:61:df:1c:
e6:fb:12:c8:47:43:c0:0d:6a:48:e1:72:1b:e0:fb:cc:8d:f9:
97:b0:33:2a:2b:14:f2:1c:17:b8:60:d3:b2:5e:77:4c:5a:84:
8e:0e:fb:1e:8a:b8:e0:3c:ae:91:c5:c4:57:ea:3a:e7:39:cb:
ad:55:fa:9b:25:41:0f:31:13:cc:83:a0:2e:5f:1b:fa:99:28:
57:34:31:46:a4:9f:00:35:56:71:b6:0d:27:7a:01:cc:9d:08:
43:8b:c5:28:03:8e:8d:3e:0d:7b:e6:ac:d6:76:ce:f1:a6:bb:
99:61:bd:97:58:43:b1:46:96:d9:2e:8d:76:b5:df:9a:d9:11:
2c:4a:a1:bd
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 19 23:46:35 2023 by rpki-client on console-ams.rpki-client.org