Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/0b/190843-1803-4462-a795-6bc75578b4c3/1/MJYbSjUSq45U_Jj7FXcsRD8uf2A.roa
File: MJYbSjUSq45U_Jj7FXcsRD8uf2A.roa (raw, json)
Hash identifier: rYjD/urpquWXTdWGk7jqTipXivRTICtGB5pFblflDns=
Subject key identifier: 30:96:1B:4A:35:12:AB:8E:54:FC:98:FB:15:77:2C:44:3F:2E:7F:60
Certificate issuer: /CN=b557ccd43afe816e4953228bf14a75dc29014b8d
Certificate serial: 018506AD38003193185A7F09C48A7A3DE2E9
Authority key identifier: B5:57:CC:D4:3A:FE:81:6E:49:53:22:8B:F1:4A:75:DC:29:01:4B:8D
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/tVfM1Dr-gW5JUyKL8Up13CkBS40.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/0b/190843-1803-4462-a795-6bc75578b4c3/1/MJYbSjUSq45U_Jj7FXcsRD8uf2A.roa
Signing time: Mon 12 Dec 2022 14:11:33 +0000
ROA not before: Mon 12 Dec 2022 14:11:33 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 6079
IP address blocks: 45.138.0.0/23 maxlen: 23
45.134.176.0/23 maxlen: 23
46.161.218.0/23 maxlen: 23
2a0c:9e05::/32 maxlen: 32
Validation: Failed, RFC 3779 resource not subset of parent's resources
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:85:06:ad:38:00:31:93:18:5a:7f:09:c4:8a:7a:3d:e2:e9
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=b557ccd43afe816e4953228bf14a75dc29014b8d
Validity
Not Before: Dec 12 14:11:33 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=30961b4a3512ab8e54fc98fb15772c443f2e7f60
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e3:05:ba:93:bb:a8:f9:04:9c:87:e8:03:90:7e:
c1:16:f0:19:fa:ac:86:32:e3:4c:17:9a:a0:fd:6b:
4c:3e:84:df:11:75:77:07:74:87:23:ee:1f:82:b9:
3d:35:da:1e:86:9c:29:20:93:0d:ca:01:6c:f2:aa:
3c:2b:b8:73:25:02:d6:89:f9:b9:16:43:bf:11:53:
fc:03:72:f2:3d:32:82:39:1a:b3:45:4a:68:71:c2:
a0:be:25:5c:b5:e8:b1:0f:cf:5b:d2:cf:c6:7c:22:
8b:fb:f9:22:7e:26:f0:3c:c3:47:ed:cb:11:3b:31:
8f:bc:e8:33:07:11:0e:2b:23:cb:6a:73:1b:37:8f:
b1:62:19:87:ec:d8:bd:8e:76:3f:1a:d1:3e:5a:e2:
e7:63:52:da:bf:bb:ca:84:43:db:5f:75:95:0f:b8:
9e:e7:49:7b:69:7a:24:62:e3:a5:f2:fd:68:80:96:
da:5a:01:de:90:97:8f:19:b6:af:7c:b8:95:b7:99:
f5:0c:7d:fb:d0:2a:bc:dc:27:da:79:53:d9:d8:3a:
90:53:a1:89:86:fe:76:09:31:f2:e5:b8:25:e4:a8:
e7:a6:3b:a0:84:50:ba:a9:d9:d6:fe:c1:14:b0:1d:
20:4a:53:36:68:35:7b:b5:25:7a:31:4b:33:88:f7:
d0:49
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
30:96:1B:4A:35:12:AB:8E:54:FC:98:FB:15:77:2C:44:3F:2E:7F:60
X509v3 Authority Key Identifier:
keyid:B5:57:CC:D4:3A:FE:81:6E:49:53:22:8B:F1:4A:75:DC:29:01:4B:8D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/tVfM1Dr-gW5JUyKL8Up13CkBS40.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/0b/190843-1803-4462-a795-6bc75578b4c3/1/MJYbSjUSq45U_Jj7FXcsRD8uf2A.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/0b/190843-1803-4462-a795-6bc75578b4c3/1/tVfM1Dr-gW5JUyKL8Up13CkBS40.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
45.134.176.0/23
45.138.0.0/23
46.161.218.0/23
IPv6:
2a0c:9e05::/32
Signature Algorithm: sha256WithRSAEncryption
8f:67:8e:b9:15:8c:57:ac:3e:4f:dd:46:47:25:c9:78:ff:ea:
43:79:82:4e:2b:05:95:59:98:18:cc:95:18:c9:e0:af:8e:ee:
bf:c9:28:61:75:d9:1b:c1:85:4d:6c:34:6b:2d:67:66:cd:f3:
4c:01:2e:f5:6c:d9:fc:d2:1b:e6:6c:3c:09:bf:de:65:2d:32:
72:23:60:12:5e:12:cf:85:29:42:08:1c:de:3f:a3:6e:d7:86:
b0:3e:f0:1d:65:46:31:b2:7e:fe:7e:96:43:72:0a:6f:b9:a6:
76:db:6f:48:99:7b:52:8b:d4:6b:3d:46:7a:65:9c:ff:9d:a9:
b8:8a:24:c7:cc:b4:28:16:0a:c1:8d:bd:f1:8b:3d:a6:4e:e6:
7a:92:b7:48:11:f5:17:92:a7:e1:18:26:76:54:6c:c1:dd:ee:
63:15:a4:19:3d:84:a3:d9:6c:33:3e:e4:12:1d:d3:10:7f:e6:
4c:69:79:9a:35:76:57:3e:05:a6:3e:ed:cd:39:22:22:da:9f:
24:b1:00:1e:4a:36:b3:51:84:b3:20:bb:77:ab:0d:30:a4:82:
81:92:6f:d4:88:98:ba:83:e9:7d:7a:d8:5e:36:2d:f6:31:0b:
e8:7b:32:d0:7a:c2:71:fc:5d:73:c4:0d:74:e5:ed:fd:a7:04:
31:89:b5:6e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:18:25 2024 by rpki-client on console-fra.rpki-client.org