Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/33/47f445-5ea9-437d-a59a-5900a5947b8d/1/MRKDkKTyUXT5dtdlPg244ejZQYQ.roa
File: MRKDkKTyUXT5dtdlPg244ejZQYQ.roa (raw, json)
Hash identifier: ukcSnrcfpd1qYKxL1VaMi9LXmQX4hFwFaNrUQSEBXOI=
Subject key identifier: 31:12:83:90:A4:F2:51:74:F9:76:D7:65:3E:0D:B8:E1:E8:D9:41:84
Certificate issuer: /CN=2864bb34fb5d16ca9d1fa3f9794cb48d4bed8473
Certificate serial: 018CC4922A156887F532E1E6FF41BD3A7B87
Authority key identifier: 28:64:BB:34:FB:5D:16:CA:9D:1F:A3:F9:79:4C:B4:8D:4B:ED:84:73
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/KGS7NPtdFsqdH6P5eUy0jUvthHM.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/33/47f445-5ea9-437d-a59a-5900a5947b8d/1/MRKDkKTyUXT5dtdlPg244ejZQYQ.roa
Signing time: Mon 01 Jan 2024 10:29:22 +0000
ROA not before: Mon 01 Jan 2024 10:29:22 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 0
IP address blocks: 45.11.68.0/22 maxlen: 22
2.58.144.0/22 maxlen: 22
Validation: Failed, RFC 3779 resource not subset of parent's resources
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8c:c4:92:2a:15:68:87:f5:32:e1:e6:ff:41:bd:3a:7b:87
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2864bb34fb5d16ca9d1fa3f9794cb48d4bed8473
Validity
Not Before: Jan 1 10:29:22 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=31128390a4f25174f976d7653e0db8e1e8d94184
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b0:e4:d7:08:ef:a8:93:76:72:25:55:7a:d9:d4:
91:68:08:66:16:61:7f:32:64:82:f2:f7:37:38:ed:
35:c7:5a:d9:7b:f7:99:c0:a0:12:60:84:26:86:e3:
da:61:5e:4c:04:2d:e0:7a:11:8f:0c:58:20:54:4b:
48:80:3c:4c:f0:74:cc:57:e6:ae:c4:b9:fe:38:ff:
e7:f4:e0:2a:d0:e4:47:0c:0b:8f:e0:70:35:61:43:
1d:20:47:35:27:25:2e:cf:75:4a:2e:ef:22:d7:6b:
fc:e6:19:fc:09:3d:d8:60:c3:f4:1b:63:d3:d2:07:
b9:e3:f2:c3:b3:83:0d:43:ac:2c:32:f0:c4:86:06:
c1:44:9a:0d:ed:31:1e:30:1f:51:c1:65:be:b8:f5:
93:64:64:ec:b3:aa:2d:5e:5d:4a:7f:65:c3:de:21:
78:17:9f:97:ee:d8:70:20:b6:96:cf:c2:19:82:3b:
03:4a:56:be:69:8e:a4:89:98:b8:1a:73:bb:eb:55:
76:a6:6a:3b:6b:01:78:b3:af:07:4c:64:8c:9a:d8:
d4:51:bd:9d:bf:e5:df:f9:da:d1:50:e1:9a:18:bd:
10:30:e5:a2:a1:d5:d5:bb:2e:40:4d:c5:4c:54:1f:
28:9c:ee:17:66:8d:cb:f0:d8:77:9e:7d:09:94:fb:
2c:17
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
31:12:83:90:A4:F2:51:74:F9:76:D7:65:3E:0D:B8:E1:E8:D9:41:84
X509v3 Authority Key Identifier:
keyid:28:64:BB:34:FB:5D:16:CA:9D:1F:A3:F9:79:4C:B4:8D:4B:ED:84:73
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/KGS7NPtdFsqdH6P5eUy0jUvthHM.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/33/47f445-5ea9-437d-a59a-5900a5947b8d/1/MRKDkKTyUXT5dtdlPg244ejZQYQ.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/33/47f445-5ea9-437d-a59a-5900a5947b8d/1/KGS7NPtdFsqdH6P5eUy0jUvthHM.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
2.58.144.0/22
45.11.68.0/22
Signature Algorithm: sha256WithRSAEncryption
45:79:fd:71:51:c2:74:14:5e:16:ac:9b:b4:88:cb:7a:64:cb:
61:5f:41:19:72:d2:b0:9a:f7:7b:a7:9a:96:41:d5:0a:20:37:
da:98:81:c9:3c:5a:57:f0:e5:01:0c:d0:36:b4:94:09:6f:b6:
0d:7c:21:d5:c2:d1:f8:30:1d:a2:54:b0:c6:78:7f:03:8e:58:
6b:04:3e:6c:f1:a8:ca:01:e0:cd:2a:7a:bd:f5:9b:05:1f:72:
03:bc:23:ab:08:db:be:7a:d2:6c:25:5a:63:fc:64:1f:8e:c8:
2f:51:af:5f:7c:df:1c:53:03:67:98:1b:ab:ca:08:81:57:d5:
5b:7a:ea:3e:c1:81:14:2a:24:76:44:91:a2:61:fd:57:d4:16:
0a:68:b1:f6:c7:7d:7d:de:b3:56:0f:82:8f:e5:49:91:53:83:
ff:2c:31:1a:2b:c3:ca:09:e9:f7:75:c0:3a:bb:70:2f:6e:6d:
4e:cc:a6:28:6c:8b:ea:62:27:22:f8:30:09:91:94:d5:bf:14:
12:44:ef:7f:48:6d:1a:3f:0f:3e:ae:78:a4:52:52:da:ed:95:
f9:df:7d:9f:89:83:d8:39:e1:f6:87:a3:58:fe:da:b8:25:a9:
b7:8d:15:5b:83:0b:e1:7b:c3:bc:ac:6c:8c:16:5d:26:62:bd:
2f:c0:11:81
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 19:02:06 2024 by rpki-client on console-ams.rpki-client.org