Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/81/8d6943-ca75-4372-b77f-5c6502bffa1f/1/mmILk1_4XI9VgsfsOEZ4Z66H9h4.roa
File: mmILk1_4XI9VgsfsOEZ4Z66H9h4.roa (raw, json)
Hash identifier: Uanhjkk84JCYC7Oz571gQ9ESG9SzNFtErr9FPz3WdOw=
Subject key identifier: 9A:62:0B:93:5F:F8:5C:8F:55:82:C7:EC:38:46:78:67:AE:87:F6:1E
Certificate issuer: /CN=c6d18653fbfb6fd5732dc940c1d65d77ab0bbfa3
Certificate serial: 3430FAF0
Authority key identifier: C6:D1:86:53:FB:FB:6F:D5:73:2D:C9:40:C1:D6:5D:77:AB:0B:BF:A3
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/xtGGU_v7b9VzLclAwdZdd6sLv6M.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/81/8d6943-ca75-4372-b77f-5c6502bffa1f/1/mmILk1_4XI9VgsfsOEZ4Z66H9h4.roa
Signing time: Sat 01 Jan 2022 10:01:13 +0000
ROA not before: Sat 01 Jan 2022 10:01:13 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 31042
IP address blocks: 91.143.208.0/20 maxlen: 24
94.230.176.0/20 maxlen: 24
185.81.60.0/22 maxlen: 24
80.93.224.0/19 maxlen: 24
46.240.128.0/17 maxlen: 23
Validation: Failed, RFC 3779 resource not subset of parent's resources
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 875625200 (0x3430faf0)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=c6d18653fbfb6fd5732dc940c1d65d77ab0bbfa3
Validity
Not Before: Jan 1 10:01:13 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=9a620b935ff85c8f5582c7ec38467867ae87f61e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:db:ad:26:ec:bc:b5:99:71:49:cc:a0:6a:a5:ac:
79:ca:ce:52:da:4e:a5:b4:19:8a:d1:92:d9:56:5c:
d5:8a:77:9f:4c:3d:5f:17:f9:b7:ec:e5:47:75:57:
cf:74:52:09:71:c7:37:e7:54:22:f3:5d:86:f9:6d:
1d:ed:67:c5:b4:7a:04:2c:c2:a5:b9:a7:ed:e0:ba:
ec:fc:a9:3c:bd:e1:14:8d:6c:3a:88:62:a4:5b:16:
8d:26:ad:aa:d8:3d:1c:b8:d7:2a:20:0b:ad:a2:c2:
bb:7b:90:5f:0d:c1:4b:e3:47:c0:cb:b5:d8:17:8f:
b9:3d:a9:9c:21:97:2d:5e:2c:3c:f5:b5:a5:b4:74:
20:09:d7:1e:53:98:e7:e3:50:33:81:c8:0d:98:b4:
31:9d:cd:bd:2c:4e:ee:14:33:55:2e:95:07:ca:c8:
ef:ac:67:da:01:1e:40:2f:4e:36:fd:c7:93:17:be:
b9:77:f1:00:de:ce:72:fa:0c:92:46:64:b9:6a:ab:
c3:eb:00:15:82:00:4d:5f:59:58:bd:d3:ff:72:ac:
e7:07:03:a4:87:b6:cb:8f:2b:fe:dd:c4:8a:b8:1a:
94:4b:5d:7e:1c:d9:af:37:85:7f:c8:3d:03:57:f7:
d7:08:ba:1a:38:f9:6a:6e:f4:b2:e1:b3:ec:17:82:
7e:b5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
9A:62:0B:93:5F:F8:5C:8F:55:82:C7:EC:38:46:78:67:AE:87:F6:1E
X509v3 Authority Key Identifier:
keyid:C6:D1:86:53:FB:FB:6F:D5:73:2D:C9:40:C1:D6:5D:77:AB:0B:BF:A3
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/xtGGU_v7b9VzLclAwdZdd6sLv6M.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/81/8d6943-ca75-4372-b77f-5c6502bffa1f/1/mmILk1_4XI9VgsfsOEZ4Z66H9h4.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/81/8d6943-ca75-4372-b77f-5c6502bffa1f/1/xtGGU_v7b9VzLclAwdZdd6sLv6M.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
46.240.128.0/17
80.93.224.0/19
91.143.208.0/20
94.230.176.0/20
185.81.60.0/22
Signature Algorithm: sha256WithRSAEncryption
4b:22:e6:54:74:0c:70:4c:ae:46:16:a2:5f:2e:ec:39:83:fa:
c8:21:1d:3a:17:5c:ab:c6:20:2d:89:dc:17:3c:36:c2:7e:dd:
45:ae:5d:cf:82:0e:93:3a:6a:11:8e:ee:91:38:12:d6:13:9e:
6d:f1:3a:7a:04:79:cd:3d:02:37:c9:7e:12:16:9e:27:59:56:
37:c0:b4:f4:86:35:f8:32:0a:a6:f1:c3:ea:79:91:eb:25:d6:
8f:32:df:06:10:ba:0c:b5:d6:78:0f:f6:e4:20:2a:87:fd:b9:
c2:13:42:5c:97:24:df:2f:f6:fa:7d:a2:c7:3c:21:21:4d:77:
b8:da:02:bd:63:2a:6f:29:a2:4d:bd:b2:00:4a:52:7f:a2:f0:
54:ce:1b:7c:f4:b1:d8:a6:c9:49:7d:09:98:3c:41:61:e3:f0:
69:48:9a:30:ae:0d:09:29:d0:55:43:77:ff:99:55:be:58:e7:
d7:a9:8d:80:80:09:c0:55:68:23:29:f0:d1:d1:7f:a0:11:e0:
70:89:d1:00:07:24:47:69:1b:4a:c5:a0:22:5a:83:8c:2c:6a:
48:fc:2b:9c:2c:7b:b4:0c:6d:fd:af:fe:a3:58:82:ed:0a:e2:
86:16:6c:b9:4c:2f:9c:1d:9e:cd:96:38:54:77:ca:ed:f3:45:
07:69:a5:b7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 19:20:42 2024 by rpki-client on console-ams.rpki-client.org