Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/3a/7b1205-3450-4e90-8b14-17e66c1fd3d1/1/mpFIWGQZodjKUj1c58ZhXtLFc2I.roa
File: mpFIWGQZodjKUj1c58ZhXtLFc2I.roa (raw, json)
Hash identifier: e72xZrvKvpOOp0qkpb2fWJPp5gRXU+mpcf+aXe8tElM=
Subject key identifier: 9A:91:48:58:64:19:A1:D8:CA:52:3D:5C:E7:C6:61:5E:D2:C5:73:62
Certificate issuer: /CN=260b2bc45477c81d774daa0c28ab44b774ba0920
Certificate serial: 01857230FFF4AE1031142CF0A6E82D0532F2
Authority key identifier: 26:0B:2B:C4:54:77:C8:1D:77:4D:AA:0C:28:AB:44:B7:74:BA:09:20
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/JgsrxFR3yB13TaoMKKtEt3S6CSA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/3a/7b1205-3450-4e90-8b14-17e66c1fd3d1/1/mpFIWGQZodjKUj1c58ZhXtLFc2I.roa
Signing time: Mon 02 Jan 2023 11:14:51 +0000
ROA not before: Mon 02 Jan 2023 11:14:51 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 209372
IP address blocks: 88.214.51.0/24 maxlen: 24
45.140.172.0/24 maxlen: 24
Validation: Failed, RFC 3779 resource not subset of parent's resources
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:85:72:30:ff:f4:ae:10:31:14:2c:f0:a6:e8:2d:05:32:f2
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=260b2bc45477c81d774daa0c28ab44b774ba0920
Validity
Not Before: Jan 2 11:14:51 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=9a9148586419a1d8ca523d5ce7c6615ed2c57362
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cc:0a:b0:53:94:3e:cb:2c:02:f6:6d:ff:87:e6:
4c:ec:3e:6a:d9:0b:6c:e6:b9:81:77:60:47:1c:d1:
c6:8a:2e:f3:fc:cc:01:1d:4e:b8:55:60:76:eb:45:
cd:80:09:13:db:94:79:04:ed:99:90:07:27:a5:a5:
34:35:e3:b4:b8:0a:3c:49:a3:d4:cd:8e:18:eb:4c:
74:87:5a:21:19:ee:8a:e2:41:97:a0:39:ef:65:6d:
00:39:45:e0:c1:e9:52:73:4e:14:b1:51:df:13:cd:
e4:d3:09:bd:dc:f0:7e:6b:2c:b3:d6:1a:7e:fe:34:
d1:43:2b:17:56:82:96:64:fa:5a:5d:0a:db:5c:89:
c2:11:0b:9d:5a:7a:06:13:15:c5:3a:ee:db:87:ee:
29:f2:a2:3c:c5:95:6c:f2:77:e8:62:f0:08:f1:8c:
74:34:70:15:16:d4:76:07:72:cd:60:23:ff:7d:c4:
e6:73:13:03:36:32:8f:d6:7d:73:3d:2e:34:73:0d:
59:b6:aa:5e:fc:fa:36:e7:22:d1:b5:bd:ba:0a:06:
22:48:fb:3b:9f:f8:8f:fd:6a:e0:7c:ee:c0:63:bc:
1e:82:d8:91:c8:af:dd:e4:09:e4:14:b5:da:eb:a5:
74:03:dc:50:27:f8:db:89:3a:e2:c4:bc:2d:b6:4e:
0b:fd
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
9A:91:48:58:64:19:A1:D8:CA:52:3D:5C:E7:C6:61:5E:D2:C5:73:62
X509v3 Authority Key Identifier:
keyid:26:0B:2B:C4:54:77:C8:1D:77:4D:AA:0C:28:AB:44:B7:74:BA:09:20
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/JgsrxFR3yB13TaoMKKtEt3S6CSA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/3a/7b1205-3450-4e90-8b14-17e66c1fd3d1/1/mpFIWGQZodjKUj1c58ZhXtLFc2I.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/3a/7b1205-3450-4e90-8b14-17e66c1fd3d1/1/JgsrxFR3yB13TaoMKKtEt3S6CSA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
45.140.172.0/24
88.214.51.0/24
Signature Algorithm: sha256WithRSAEncryption
1f:a7:b6:87:07:69:e8:f0:66:1a:95:5c:75:2b:66:9f:e4:9b:
d9:a2:61:8b:de:25:e8:18:fd:d1:a7:96:7f:c2:28:3e:84:70:
27:81:08:96:2b:41:d1:77:19:bf:13:f8:64:bf:bb:66:e8:f9:
9f:ff:ae:0d:6e:e1:6a:62:97:f3:2f:e6:5d:84:fe:32:52:51:
04:3b:20:66:52:55:99:6c:2a:3b:f8:e6:f1:2f:d3:8d:d9:3f:
cd:50:e7:8c:42:b6:24:cb:9c:3d:df:ed:bc:b0:97:73:7c:92:
7b:36:d1:59:41:ce:89:5d:5e:8f:26:0d:96:13:b4:99:0a:6b:
40:e4:c6:cb:b1:51:85:57:5d:29:d5:50:15:6e:a9:26:2c:09:
c5:a4:23:5d:c2:2c:ff:b0:f2:4e:6b:c0:0a:d1:98:8f:83:f4:
42:d4:3e:16:2c:09:05:98:5f:cc:d6:d3:68:59:ea:b6:65:4f:
95:30:98:0b:fd:85:d4:12:32:91:67:87:33:7b:c9:51:8f:de:
b7:b5:7a:9e:db:db:50:3c:a8:4e:8c:f8:69:bb:0b:86:a6:f4:
60:e3:e1:e4:3a:08:0a:33:06:0e:84:48:b2:33:69:fd:b7:51:
3a:6b:5b:10:c1:e5:4e:fd:d6:bd:e5:5e:6b:95:e6:b3:e3:c7:
d4:ae:e6:e0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:26:02 2024 by rpki-client on console-fra.rpki-client.org