Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/4d/8fad67-bb6b-4773-b81e-c900a89f20f1/1/MisiTlaSx9WBHcAIiwFXjAZLOkc.roa
File: MisiTlaSx9WBHcAIiwFXjAZLOkc.roa (raw, json)
Hash identifier: gErRZ/WQDbSo4GQnkGtxxpsZIwrG2mIWgTpDtL8z6RM=
Subject key identifier: 32:2B:22:4E:56:92:C7:D5:81:1D:C0:08:8B:01:57:8C:06:4B:3A:47
Certificate issuer: /CN=541fdc7a2f11a5766d3ad7bdf625ce5e119a8fdf
Certificate serial: 0184D11BA5C3C0DEC65F27C75DAB2EDFB174
Authority key identifier: 54:1F:DC:7A:2F:11:A5:76:6D:3A:D7:BD:F6:25:CE:5E:11:9A:8F:DF
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/VB_cei8RpXZtOte99iXOXhGaj98.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/4d/8fad67-bb6b-4773-b81e-c900a89f20f1/1/MisiTlaSx9WBHcAIiwFXjAZLOkc.roa
Signing time: Fri 02 Dec 2022 04:32:40 +0000
ROA not before: Fri 02 Dec 2022 04:32:40 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 210439
IP address blocks: 185.104.42.0/24 maxlen: 24
185.101.170.0/24 maxlen: 24
Validation: Failed, RFC 3779 resource not subset of parent's resources
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:84:d1:1b:a5:c3:c0:de:c6:5f:27:c7:5d:ab:2e:df:b1:74
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=541fdc7a2f11a5766d3ad7bdf625ce5e119a8fdf
Validity
Not Before: Dec 2 04:32:40 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=322b224e5692c7d5811dc0088b01578c064b3a47
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:88:33:80:ba:f5:92:f1:49:fa:db:da:50:ef:f4:
e6:1e:71:2b:22:9d:96:71:49:1e:1b:e9:b4:80:69:
13:8c:0d:63:d3:8c:aa:9b:fd:13:b7:8e:1c:27:d4:
a3:67:05:ad:d6:eb:24:40:dd:6f:c8:e9:23:74:96:
32:6c:e5:77:71:75:c5:88:f8:36:3f:3d:48:c8:52:
73:67:6a:bf:e7:ce:8c:d9:f3:51:90:f6:69:82:d7:
ee:ce:cf:29:f2:23:75:8a:1c:36:06:4f:10:99:e1:
c6:3c:b8:2b:51:59:90:52:15:c0:a6:56:5f:05:de:
44:bf:24:e5:85:85:b9:9d:ac:c7:59:55:46:d5:22:
68:a7:94:31:b1:5c:e9:53:59:89:29:72:00:77:68:
a9:28:24:13:f4:44:ae:09:bb:27:44:ad:d9:a5:ca:
2b:3c:8c:43:7f:98:eb:eb:34:ae:3e:44:94:f8:c2:
0c:31:b0:55:31:b4:c9:3c:38:6d:6e:eb:33:a3:27:
3f:7c:ac:f1:18:f5:73:77:34:b6:95:77:94:bb:7c:
36:cd:46:37:41:5d:56:2b:08:f4:3d:cf:d1:8b:93:
1f:98:fa:d3:77:c0:3e:65:c2:11:3b:48:97:13:44:
c5:01:48:8c:62:61:be:7f:58:f9:2a:88:62:c8:3f:
e6:99
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
32:2B:22:4E:56:92:C7:D5:81:1D:C0:08:8B:01:57:8C:06:4B:3A:47
X509v3 Authority Key Identifier:
keyid:54:1F:DC:7A:2F:11:A5:76:6D:3A:D7:BD:F6:25:CE:5E:11:9A:8F:DF
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/VB_cei8RpXZtOte99iXOXhGaj98.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/4d/8fad67-bb6b-4773-b81e-c900a89f20f1/1/MisiTlaSx9WBHcAIiwFXjAZLOkc.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/4d/8fad67-bb6b-4773-b81e-c900a89f20f1/1/VB_cei8RpXZtOte99iXOXhGaj98.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.101.170.0/24
185.104.42.0/24
Signature Algorithm: sha256WithRSAEncryption
61:be:ff:9e:8b:93:57:e6:53:83:36:4f:b8:67:d0:65:93:bd:
ac:29:11:da:9d:ac:41:a8:c2:b0:2e:b8:1a:04:24:97:45:8b:
33:1b:64:75:6c:8d:a1:13:b5:90:2c:8d:c7:c7:96:68:28:96:
de:ff:db:65:22:c0:e7:1c:dc:4a:9b:a7:c5:84:c4:18:b8:66:
38:a6:5d:2c:63:a9:4b:9e:64:66:18:f5:ea:29:31:3b:f4:17:
09:88:c3:db:41:81:52:5c:68:82:ee:55:69:b3:b6:b9:fe:c7:
2b:ac:9b:8e:90:ee:46:5b:9c:db:1e:09:b9:42:aa:4d:55:2a:
fe:5e:ad:35:40:3b:cb:c2:82:f0:52:25:b2:b0:88:27:9e:8b:
34:f3:fa:e5:a3:2b:4d:52:2b:14:c9:17:45:dc:48:d8:48:15:
2e:4c:88:9c:28:4e:4a:3c:98:ef:2b:68:2a:c8:8a:c9:cc:a6:
4b:c9:0a:1d:29:30:23:b7:90:dc:b5:ba:87:20:bf:32:ae:2e:
16:2e:bb:17:1f:ba:60:24:04:75:09:46:c5:17:27:a8:5e:d4:
3c:a9:b9:10:c1:45:af:e2:10:14:76:66:63:dc:e0:48:ba:91:
f7:9c:e5:6c:0d:71:4e:28:ed:46:ce:d7:4c:60:68:b7:a2:9c:
32:f5:36:0e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 19 23:51:39 2023 by rpki-client on console-ams.rpki-client.org