Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/6b/d37915-6a39-44d1-8e21-4ba3fc3484ce/1/MCgUZ-IDG9HXpSdRxE35W4ggUyo.roa
File: MCgUZ-IDG9HXpSdRxE35W4ggUyo.roa (raw, json)
Hash identifier: s+b7uPy5lGsZMlFFoLcWtHKwBvEtqLb/0F7c0lA5Onk=
Subject key identifier: 30:28:14:67:E2:03:1B:D1:D7:A5:27:51:C4:4D:F9:5B:88:20:53:2A
Certificate issuer: /CN=064983d3a4a1c26aa295034869c584f757380b2b
Certificate serial: 01856D0AE38C746DA09F48998EB6543FD819
Authority key identifier: 06:49:83:D3:A4:A1:C2:6A:A2:95:03:48:69:C5:84:F7:57:38:0B:2B
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/BkmD06ShwmqilQNIacWE91c4Cys.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/6b/d37915-6a39-44d1-8e21-4ba3fc3484ce/1/MCgUZ-IDG9HXpSdRxE35W4ggUyo.roa
Signing time: Sun 01 Jan 2023 11:15:08 +0000
ROA not before: Sun 01 Jan 2023 11:15:08 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 31500
IP address blocks: 178.18.232.0/24 maxlen: 24
178.18.231.0/24 maxlen: 24
178.18.229.0/24 maxlen: 24
178.18.228.0/24 maxlen: 24
2a03:5f80:2:10::/64 maxlen: 64
2a03:5f80::/46 maxlen: 46
2a03:5f80:8::/46 maxlen: 46
2a03:5f80:a::/48 maxlen: 48
Validation: Failed, RFC 3779 resource not subset of parent's resources
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:85:6d:0a:e3:8c:74:6d:a0:9f:48:99:8e:b6:54:3f:d8:19
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=064983d3a4a1c26aa295034869c584f757380b2b
Validity
Not Before: Jan 1 11:15:08 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=30281467e2031bd1d7a52751c44df95b8820532a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8c:83:8c:12:c1:be:a7:35:e2:08:57:fc:fc:1a:
c3:56:67:cf:f6:ff:a4:93:16:cb:7e:93:4f:3c:c7:
07:bb:5b:8e:97:a6:d1:2a:7d:1c:9a:59:0c:b7:c9:
6b:de:48:f4:1f:52:86:03:b1:ab:5a:0d:01:dd:f7:
18:8f:3d:43:39:78:87:36:74:1c:19:05:cd:67:8d:
f2:6f:95:3a:f4:8b:ad:be:75:ab:16:ba:a1:c9:b3:
e3:e7:42:27:cc:7a:3b:29:4d:87:0f:d3:02:7b:fa:
33:d8:27:f7:3a:5c:94:dc:0d:57:fc:05:f6:5e:5d:
99:2b:96:41:c1:78:64:87:a8:8e:dc:db:2e:8e:20:
03:3c:c4:e0:12:00:1f:6c:05:3f:63:bc:38:76:8f:
5a:e2:60:f9:67:51:16:6c:87:7b:37:99:ab:4c:10:
cd:0d:c5:94:1d:00:9d:5d:00:d7:cb:09:d1:e5:d8:
ca:4c:37:5c:b0:13:fe:ad:ca:b6:31:24:11:d0:48:
14:85:79:c5:85:00:c5:c8:7c:87:f5:fe:0e:1e:3e:
a3:a6:12:14:e1:01:9e:cb:71:da:37:fc:fc:a2:b4:
29:2d:30:83:1a:8a:76:bd:8a:3f:3e:25:67:4f:99:
29:11:f3:44:1f:4a:44:0e:3f:db:d1:3a:b4:f5:d0:
72:83
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
30:28:14:67:E2:03:1B:D1:D7:A5:27:51:C4:4D:F9:5B:88:20:53:2A
X509v3 Authority Key Identifier:
keyid:06:49:83:D3:A4:A1:C2:6A:A2:95:03:48:69:C5:84:F7:57:38:0B:2B
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/BkmD06ShwmqilQNIacWE91c4Cys.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/6b/d37915-6a39-44d1-8e21-4ba3fc3484ce/1/MCgUZ-IDG9HXpSdRxE35W4ggUyo.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/6b/d37915-6a39-44d1-8e21-4ba3fc3484ce/1/BkmD06ShwmqilQNIacWE91c4Cys.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
178.18.228.0/23
178.18.231.0-178.18.232.255
IPv6:
2a03:5f80::/46
2a03:5f80:8::/46
Signature Algorithm: sha256WithRSAEncryption
5a:c0:a6:40:dd:84:38:fa:77:36:82:07:46:b6:63:f3:7c:72:
96:f9:e3:4a:6d:81:05:d1:69:7f:80:c7:8f:1e:d8:94:c0:28:
51:d1:fe:14:b5:84:ae:cd:c4:f5:95:49:8d:f6:83:b2:58:2d:
43:d0:8e:b9:7f:ae:c3:3d:f0:a8:6b:95:23:a2:aa:03:5c:f1:
0b:4d:92:c4:0a:4d:7d:fb:af:ed:5d:82:1a:22:76:5b:8f:03:
99:03:fe:bd:67:57:f6:b0:46:a5:72:6c:20:77:25:21:1e:1b:
ac:93:86:83:7f:14:13:1a:1d:f9:c9:40:2b:7c:38:2e:90:88:
7b:23:1b:a5:fd:cc:86:06:09:eb:ef:a8:ea:16:13:9a:1a:3e:
5f:a7:d7:f3:32:06:85:d1:e9:12:5b:47:4e:28:c5:46:e0:ba:
47:9b:08:c7:a8:fe:18:03:c1:65:34:b8:d1:a4:e7:83:a2:1a:
f8:c4:13:1d:05:a4:91:e1:71:bc:7d:7d:5d:22:1b:c2:b3:9d:
27:bc:38:ff:98:24:5a:fa:1d:a4:31:07:7e:cb:35:0c:a9:03:
ec:b5:6a:a6:fa:ec:e3:e4:e1:41:0a:74:71:58:8d:2b:81:7a:
34:f3:bb:bd:12:66:a6:a8:26:f9:ff:73:ae:ac:01:e6:a9:be:
ff:99:76:2e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jul 20 00:01:10 2023 by rpki-client on console-ams.rpki-client.org