Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/08/375ebc-bafb-4e0b-b549-77635a22eb96/1/msvmQe-AL_nDnhc1kiVNoXU17Sw.roa
File: msvmQe-AL_nDnhc1kiVNoXU17Sw.roa (raw, json)
Hash identifier: DKVasGZEa8ZorxFU9wLnkuzR7jG1M2Mu4KVGqQclFf8=
Subject key identifier: 9A:CB:E6:41:EF:80:2F:F9:C3:9E:17:35:92:25:4D:A1:75:35:ED:2C
Certificate issuer: /CN=b7c40a747e3ac1acc611a4c403b6007398e7d79f
Certificate serial: 01941FFA7151AC0ADCF993FE50A18C445476
Authority key identifier: B7:C4:0A:74:7E:3A:C1:AC:C6:11:A4:C4:03:B6:00:73:98:E7:D7:9F
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/t8QKdH46wazGEaTEA7YAc5jn158.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/08/375ebc-bafb-4e0b-b549-77635a22eb96/1/msvmQe-AL_nDnhc1kiVNoXU17Sw.roa
Signing time: Wed 01 Jan 2025 03:48:14 +0000
ROA not before: Wed 01 Jan 2025 03:48:14 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 209403
IP address blocks: 45.67.12.0/24 maxlen: 24
Validation: Failed, RFC 3779 resource not subset of parent's resources
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:1f:fa:71:51:ac:0a:dc:f9:93:fe:50:a1:8c:44:54:76
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=b7c40a747e3ac1acc611a4c403b6007398e7d79f
Validity
Not Before: Jan 1 03:48:14 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=9acbe641ef802ff9c39e173592254da17535ed2c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c2:14:d3:6e:5f:6d:03:10:9f:f8:a5:c4:ee:0a:
3a:46:fe:71:9b:8b:94:1d:9d:05:16:4f:49:b3:6f:
3e:25:80:c5:98:3e:13:dc:da:e6:d7:32:48:d4:4b:
ce:95:98:ee:f8:fc:2c:d8:02:d3:69:04:83:5f:3d:
33:df:0b:65:5d:c8:e3:a9:53:f4:9a:8a:c7:d4:06:
33:20:d0:f4:ec:2b:28:2f:c1:6c:50:ae:6c:e8:16:
36:17:8c:3c:8a:36:37:41:df:2d:4c:5e:70:77:8e:
08:86:c4:5f:1a:be:f4:ee:e0:36:92:8c:83:01:cd:
63:48:37:f5:89:f6:ed:75:fd:a8:31:37:a2:15:ee:
4e:78:7d:ef:bf:93:b0:db:34:f2:f4:ca:0f:f2:e0:
7c:df:66:a6:2d:25:58:88:e3:9f:7a:81:f2:9e:74:
a6:df:ca:3e:f1:ee:a1:a7:b4:90:49:5c:a3:4f:27:
68:a1:9f:ca:fc:73:0f:a6:6b:34:df:1c:cd:63:e3:
94:bc:22:39:45:1f:1d:80:9e:7f:2d:3b:f5:da:83:
b6:46:95:b5:69:f6:75:5f:7b:b6:d1:12:01:9f:54:
e0:51:a7:16:f7:93:5f:be:c0:b8:50:ad:cf:a0:87:
2c:b8:43:ee:1e:6c:c0:94:03:32:87:26:92:f5:ef:
6c:7d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
9A:CB:E6:41:EF:80:2F:F9:C3:9E:17:35:92:25:4D:A1:75:35:ED:2C
X509v3 Authority Key Identifier:
keyid:B7:C4:0A:74:7E:3A:C1:AC:C6:11:A4:C4:03:B6:00:73:98:E7:D7:9F
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/t8QKdH46wazGEaTEA7YAc5jn158.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/08/375ebc-bafb-4e0b-b549-77635a22eb96/1/msvmQe-AL_nDnhc1kiVNoXU17Sw.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/08/375ebc-bafb-4e0b-b549-77635a22eb96/1/t8QKdH46wazGEaTEA7YAc5jn158.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
45.67.12.0/24
Signature Algorithm: sha256WithRSAEncryption
40:a4:7e:e3:5f:0b:6a:e1:16:75:59:e0:fe:6a:84:ab:98:8e:
ba:e2:c3:c7:b6:a6:b2:f3:4f:9c:71:4c:9b:03:1e:f4:dd:8b:
61:43:3a:ee:6e:07:6c:5f:46:27:6f:6e:bd:cf:12:8c:a4:99:
f9:01:79:b5:0b:f9:24:a5:62:1d:82:37:da:d5:36:5f:d4:69:
70:82:d5:4a:ba:f9:15:a2:ba:34:62:08:f6:3b:0f:3b:8a:17:
2c:b7:a6:f7:52:73:0d:59:f3:97:bf:0f:da:77:2b:40:b5:22:
09:c0:4b:3e:19:b8:d2:81:7b:b0:54:4b:49:81:44:d5:36:8d:
5f:dd:4a:7b:d0:57:45:7a:32:9b:98:cb:00:a4:d4:0e:2b:3f:
5e:7c:42:61:f5:c2:22:a2:e8:93:dc:cb:9c:1c:2e:94:5c:77:
21:25:a0:a9:38:83:5f:d9:53:6e:a9:3b:74:73:a8:c4:11:5f:
36:25:95:fc:d8:6c:14:cc:8d:46:70:c3:1b:85:40:a1:08:16:
79:d0:15:fc:34:b9:6c:65:5d:b5:dd:cf:eb:5c:d0:c0:a8:4b:
89:e9:4c:96:e1:0d:66:1c:f2:6a:31:fc:b4:79:11:ed:28:e7:
80:df:cc:af:e7:75:79:35:b6:90:3c:6b:08:a6:a2:ce:c7:72:
b2:98:03:73
-----BEGIN CERTIFICATE-----
MIIE/TCCA+WgAwIBAgISAZQf+nFRrArc+ZP+UKGMRFR2MA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGI3YzQwYTc0N2UzYWMxYWNjNjExYTRjNDAzYjYwMDczOThl
N2Q3OWYwHhcNMjUwMTAxMDM0ODE0WhcNMjYwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
Eyg5YWNiZTY0MWVmODAyZmY5YzM5ZTE3MzU5MjI1NGRhMTc1MzVlZDJjMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAwhTTbl9tAxCf+KXE7go6Rv5xm4uU
HZ0FFk9Js28+JYDFmD4T3Nrm1zJI1EvOlZju+Pws2ALTaQSDXz0z3wtlXcjjqVP0
morH1AYzIND07CsoL8FsUK5s6BY2F4w8ijY3Qd8tTF5wd44IhsRfGr707uA2koyD
Ac1jSDf1ifbtdf2oMTeiFe5OeH3vv5Ow2zTy9MoP8uB832amLSVYiOOfeoHynnSm
38o+8e6hp7SQSVyjTydooZ/K/HMPpms03xzNY+OUvCI5RR8dgJ5/LTv12oO2RpW1
afZ1X3u20RIBn1TgUacW95NfvsC4UK3PoIcsuEPuHmzAlAMyhyaS9e9sfQIDAQAB
o4ICCTCCAgUwHQYDVR0OBBYEFJrL5kHvgC/5w54XNZIlTaF1Ne0sMB8GA1UdIwQY
MBaAFLfECnR+OsGsxhGkxAO2AHOY59efMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvdDhRS2RINDZ3YXpHRWFURUE3WUFjNWpuMTU4LmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8wOC8zNzVlYmMtYmFmYi00ZTBiLWI1NDkt
Nzc2MzVhMjJlYjk2LzEvbXN2bVFlLUFMX25EbmhjMWtpVk5vWFUxN1N3LnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8wOC8zNzVlYmMtYmFmYi00ZTBiLWI1NDktNzc2MzVhMjJlYjk2
LzEvdDhRS2RINDZ3YXpHRWFURUE3WUFjNWpuMTU4LmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQALUMMMA0G
CSqGSIb3DQEBCwUAA4IBAQBApH7jXwtq4RZ1WeD+aoSrmI664sPHtqay80+ccUyb
Ax703YthQzrubgdsX0Ynb269zxKMpJn5AXm1C/kkpWIdgjfa1TZf1GlwgtVKuvkV
oro0Ygj2Ow87ihcst6b3UnMNWfOXvw/adytAtSIJwEs+GbjSgXuwVEtJgUTVNo1f
3Up70FdFejKbmMsApNQOKz9efEJh9cIiouiT3MucHC6UXHchJaCpOINf2VNuqTt0
c6jEEV82JZX82GwUzI1GcMMbhUChCBZ50BX8NLlsZV213c/rXNDAqEuJ6UyW4Q1m
HPJqMfy0eRHtKOeA38yv53V5NbaQPGsIpqLOx3KymANz
-----END CERTIFICATE-----
Generated at Thu Apr 17 06:17:32 2025 by rpki-client