Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/7b/d70262-f87c-4126-af85-a31853e6997a/1/MgZ9kif1UnoSD_h0ACuyMHGjS1E.roa
File: MgZ9kif1UnoSD_h0ACuyMHGjS1E.roa (raw, json)
Hash identifier: Q5Cu5FOppZZoxOoWMj6eepBqbibfjXHZAFoYvmm90O8=
Subject key identifier: 32:06:7D:92:27:F5:52:7A:12:0F:F8:74:00:2B:B2:30:71:A3:4B:51
Certificate issuer: /CN=23aee94d0fff6c6c752a6942ffa962ae37c7e6b6
Certificate serial: 0A65B122
Authority key identifier: 23:AE:E9:4D:0F:FF:6C:6C:75:2A:69:42:FF:A9:62:AE:37:C7:E6:B6
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/I67pTQ__bGx1KmlC_6lirjfH5rY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/7b/d70262-f87c-4126-af85-a31853e6997a/1/MgZ9kif1UnoSD_h0ACuyMHGjS1E.roa
Signing time: Tue 07 Jun 2022 09:08:21 +0000
ROA not before: Tue 07 Jun 2022 09:08:21 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 31037
IP address blocks: 45.84.38.0/24 maxlen: 24
45.84.39.0/24 maxlen: 24
185.101.16.0/24 maxlen: 24
185.101.16.0/22 maxlen: 22
185.101.17.0/24 maxlen: 24
185.101.19.0/24 maxlen: 24
185.101.18.0/24 maxlen: 24
Validation: Failed, RFC 3779 resource not subset of parent's resources
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 174436642 (0xa65b122)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=23aee94d0fff6c6c752a6942ffa962ae37c7e6b6
Validity
Not Before: Jun 7 09:08:21 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=32067d9227f5527a120ff874002bb23071a34b51
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e4:76:dd:81:39:80:fe:9b:bd:1d:ef:bf:1b:43:
71:b1:9e:80:d7:d8:84:73:3a:9c:74:22:b7:0f:8d:
86:ea:30:07:0c:61:82:2b:77:d9:1e:eb:6a:26:26:
fd:eb:08:27:bd:2f:01:b8:fe:24:1d:d3:69:c5:84:
60:c8:d3:2b:b0:fc:e5:46:dc:ed:9b:94:3b:92:0a:
44:9d:72:a5:a6:74:32:f2:ec:7e:e9:65:d2:38:ac:
ec:5b:88:b0:51:54:ab:c2:90:0f:e9:43:6f:20:a9:
3a:b9:f9:32:40:3e:8d:23:48:fc:0b:13:2c:0c:20:
36:61:9d:a0:e7:25:fd:66:5f:20:3c:78:f0:2e:5c:
36:ba:bb:85:18:ff:3f:9d:c2:67:b6:b4:aa:ca:66:
0c:1d:4d:06:d1:70:05:6a:24:02:b8:51:a6:d7:93:
dd:9b:d2:b7:f5:30:de:46:a9:f3:99:95:3d:93:44:
a5:0a:f1:f2:62:60:78:13:a5:4a:ab:e1:ec:4b:a9:
3f:8c:99:9e:b1:88:77:b1:80:18:b2:7e:90:d3:a9:
77:1d:2f:16:34:5f:3b:aa:47:ea:56:2f:79:be:70:
d3:55:0e:b8:7c:d6:35:62:59:1c:75:7a:29:9f:81:
9b:5d:1b:df:95:98:ce:5f:e0:63:8d:4a:b3:e0:ca:
5e:6b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
32:06:7D:92:27:F5:52:7A:12:0F:F8:74:00:2B:B2:30:71:A3:4B:51
X509v3 Authority Key Identifier:
keyid:23:AE:E9:4D:0F:FF:6C:6C:75:2A:69:42:FF:A9:62:AE:37:C7:E6:B6
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/I67pTQ__bGx1KmlC_6lirjfH5rY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/7b/d70262-f87c-4126-af85-a31853e6997a/1/MgZ9kif1UnoSD_h0ACuyMHGjS1E.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/7b/d70262-f87c-4126-af85-a31853e6997a/1/I67pTQ__bGx1KmlC_6lirjfH5rY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
45.84.38.0/23
185.101.16.0/22
Signature Algorithm: sha256WithRSAEncryption
93:70:fa:1d:83:30:2b:51:a0:b4:be:98:fb:10:db:a1:06:25:
57:82:a1:52:ed:34:34:5a:4c:59:42:08:ce:ee:56:c5:90:21:
d7:0a:64:e5:4d:34:d7:d4:5c:92:a0:32:76:3d:cc:f8:85:31:
dc:00:e2:45:10:75:f7:af:73:80:2a:00:25:29:ee:5e:95:0c:
c8:5c:17:bf:04:32:35:19:7f:9b:89:55:40:01:22:53:54:37:
55:ea:bd:cc:29:89:dd:f2:76:ac:b6:a0:73:41:86:27:18:d7:
03:0b:1a:d3:e2:dd:ec:f4:cb:13:af:51:76:51:f1:b7:38:65:
d7:11:fb:6f:d6:f2:3e:48:fe:83:6f:e6:48:58:b8:8c:7f:22:
f5:38:d7:bd:40:3f:d5:6f:e3:81:5d:28:55:43:d2:38:1a:be:
50:fb:8b:c9:7f:42:24:2b:e5:fd:5a:1c:e6:99:52:63:1b:e8:
9f:c0:05:58:a7:d1:ba:a9:17:dc:1c:eb:c4:0d:ce:78:5a:44:
44:2a:a0:b7:34:1d:c2:92:10:99:1c:e5:da:4f:22:02:73:5a:
e3:a1:17:2a:e3:17:c0:7b:4d:8c:54:64:2e:10:45:e2:6c:03:
d5:31:6d:e1:45:68:0c:4c:b0:0a:54:3d:ba:62:cb:e4:b8:dc:
3c:23:8b:e0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jul 20 00:01:58 2023 by rpki-client on console-ams.rpki-client.org