Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/97/699e85-1027-4c7e-8ae7-df4a2e760ccb/1/MgsD5et52mb-pbh5BebD2RNDivg.roa
File: MgsD5et52mb-pbh5BebD2RNDivg.roa (raw, json)
Hash identifier: F/A5dowu/qoafE8XpG087zXVqx5BNeUuW+RHPS/0T78=
Subject key identifier: 32:0B:03:E5:EB:79:DA:66:FE:A5:B8:79:05:E6:C3:D9:13:43:8A:F8
Certificate issuer: /CN=e4a2b8e90d157ea022f8e700024a93dc356a514d
Certificate serial: 018CC501256EA327263171C40CAD7CD79F96
Authority key identifier: E4:A2:B8:E9:0D:15:7E:A0:22:F8:E7:00:02:4A:93:DC:35:6A:51:4D
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/5KK46Q0VfqAi-OcAAkqT3DVqUU0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/97/699e85-1027-4c7e-8ae7-df4a2e760ccb/1/MgsD5et52mb-pbh5BebD2RNDivg.roa
Signing time: Mon 01 Jan 2024 12:30:35 +0000
ROA not before: Mon 01 Jan 2024 12:30:35 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 60446
IP address blocks: 188.132.224.0/24 maxlen: 24
Validation: Failed, RFC 3779 resource not subset of parent's resources
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8c:c5:01:25:6e:a3:27:26:31:71:c4:0c:ad:7c:d7:9f:96
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=e4a2b8e90d157ea022f8e700024a93dc356a514d
Validity
Not Before: Jan 1 12:30:35 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=320b03e5eb79da66fea5b87905e6c3d913438af8
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d7:cc:06:bd:4a:6c:a9:c5:9c:eb:53:ab:63:3d:
17:25:16:35:31:92:18:2a:02:69:7c:64:06:8b:a9:
84:ef:45:37:a3:d9:02:03:d6:5e:e4:2b:0a:cc:fa:
b0:19:45:fc:c5:35:d9:b6:5c:74:8f:49:35:41:92:
3b:de:1a:e7:6d:70:be:39:cd:27:89:fc:e1:b7:0f:
0a:58:ef:4c:9c:28:78:66:44:1c:4f:b1:f7:49:08:
9d:6c:c7:c4:f3:2b:a9:dc:fd:83:5a:da:18:26:a9:
a5:59:a6:d4:a3:d1:ea:c8:53:46:ee:39:6c:e5:91:
4f:94:61:e4:a7:3f:5f:45:05:a8:8f:40:1a:e3:b9:
dd:be:e5:bb:29:5d:06:74:4e:1e:ba:dc:ed:11:00:
f6:a5:e5:5b:60:51:15:e6:f5:13:e0:7b:01:a5:85:
ac:1f:14:cf:e5:b0:2d:ea:cc:20:c8:90:97:1c:7e:
c2:1a:53:4c:78:e0:30:18:ba:47:ec:0e:47:37:58:
18:ca:f3:8e:95:7a:74:1a:e8:7d:e2:0f:34:9a:39:
b8:1f:25:50:a9:f9:79:96:3f:54:2c:e1:71:dd:55:
28:d0:df:02:cb:7a:f6:3b:77:23:34:0e:97:2b:34:
71:f1:1a:e4:72:b2:44:20:9f:2f:83:be:55:25:40:
eb:17
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
32:0B:03:E5:EB:79:DA:66:FE:A5:B8:79:05:E6:C3:D9:13:43:8A:F8
X509v3 Authority Key Identifier:
keyid:E4:A2:B8:E9:0D:15:7E:A0:22:F8:E7:00:02:4A:93:DC:35:6A:51:4D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/5KK46Q0VfqAi-OcAAkqT3DVqUU0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/97/699e85-1027-4c7e-8ae7-df4a2e760ccb/1/MgsD5et52mb-pbh5BebD2RNDivg.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/97/699e85-1027-4c7e-8ae7-df4a2e760ccb/1/5KK46Q0VfqAi-OcAAkqT3DVqUU0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
188.132.224.0/24
Signature Algorithm: sha256WithRSAEncryption
60:fd:be:1a:30:79:07:48:94:d7:0f:f8:1d:ad:63:4d:0f:20:
c2:a5:df:53:56:5d:e3:47:36:9b:3d:b7:0d:b3:c5:f4:67:70:
c2:d0:24:e9:32:a0:f2:eb:9e:ea:e4:b4:a1:5a:30:47:8f:1e:
04:2d:7b:06:24:e3:c0:02:09:7c:ee:61:2f:a9:24:01:4d:62:
00:a0:8c:a3:44:c1:57:4b:e8:3c:c0:89:91:a3:51:d1:a2:3c:
8c:48:bc:71:ee:07:2b:8e:ac:77:bd:78:b0:ea:d1:10:3d:62:
98:a1:98:0c:a0:0d:b9:24:a8:0e:51:f5:5d:c4:3a:d0:49:5a:
c3:4c:3b:6f:8b:2b:5f:21:ba:05:63:35:50:68:ef:34:be:eb:
67:e9:4f:4a:4a:43:48:f4:9c:06:84:66:10:0e:74:ee:c1:b8:
f7:bc:81:09:80:14:87:6b:82:10:0a:61:fd:30:a4:e2:39:ef:
10:3f:f1:af:17:31:c8:6b:c5:18:43:68:e0:52:f5:d3:71:d8:
74:f3:bf:de:57:bb:74:ff:dd:cd:07:0a:70:eb:fc:8d:16:bd:
32:f8:2b:96:ab:5a:7d:35:d8:de:03:10:be:95:33:4b:e0:a8:
33:8f:44:12:e2:51:e2:49:fc:61:cb:9f:bb:65:89:74:2b:e8:
6a:f0:d4:49
-----BEGIN CERTIFICATE-----
MIIE/TCCA+WgAwIBAgISAYzFASVuoycmMXHEDK1815+WMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGU0YTJiOGU5MGQxNTdlYTAyMmY4ZTcwMDAyNGE5M2RjMzU2
YTUxNGQwHhcNMjQwMTAxMTIzMDM1WhcNMjUwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EygzMjBiMDNlNWViNzlkYTY2ZmVhNWI4NzkwNWU2YzNkOTEzNDM4YWY4MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA18wGvUpsqcWc61OrYz0XJRY1MZIY
KgJpfGQGi6mE70U3o9kCA9Ze5CsKzPqwGUX8xTXZtlx0j0k1QZI73hrnbXC+Oc0n
ifzhtw8KWO9MnCh4ZkQcT7H3SQidbMfE8yup3P2DWtoYJqmlWabUo9HqyFNG7jls
5ZFPlGHkpz9fRQWoj0Aa47ndvuW7KV0GdE4eutztEQD2peVbYFEV5vUT4HsBpYWs
HxTP5bAt6swgyJCXHH7CGlNMeOAwGLpH7A5HN1gYyvOOlXp0Guh94g80mjm4HyVQ
qfl5lj9ULOFx3VUo0N8Cy3r2O3cjNA6XKzRx8RrkcrJEIJ8vg75VJUDrFwIDAQAB
o4ICCTCCAgUwHQYDVR0OBBYEFDILA+Xredpm/qW4eQXmw9kTQ4r4MB8GA1UdIwQY
MBaAFOSiuOkNFX6gIvjnAAJKk9w1alFNMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvNUtLNDZRMFZmcUFpLU9jQUFrcVQzRFZxVVUwLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC85Ny82OTllODUtMTAyNy00YzdlLThhZTct
ZGY0YTJlNzYwY2NiLzEvTWdzRDVldDUybWItcGJoNUJlYkQyUk5EaXZnLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC85Ny82OTllODUtMTAyNy00YzdlLThhZTctZGY0YTJlNzYwY2Ni
LzEvNUtLNDZRMFZmcUFpLU9jQUFrcVQzRFZxVVUwLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAvITgMA0G
CSqGSIb3DQEBCwUAA4IBAQBg/b4aMHkHSJTXD/gdrWNNDyDCpd9TVl3jRzabPbcN
s8X0Z3DC0CTpMqDy657q5LShWjBHjx4ELXsGJOPAAgl87mEvqSQBTWIAoIyjRMFX
S+g8wImRo1HRojyMSLxx7gcrjqx3vXiw6tEQPWKYoZgMoA25JKgOUfVdxDrQSVrD
TDtviytfIboFYzVQaO80vutn6U9KSkNI9JwGhGYQDnTuwbj3vIEJgBSHa4IQCmH9
MKTiOe8QP/GvFzHIa8UYQ2jgUvXTcdh087/eV7t0/93NBwpw6/yNFr0y+CuWq1p9
NdjeAxC+lTNL4Kgzj0QS4lHiSfxhy5+7ZYl0K+hq8NRJ
-----END CERTIFICATE-----
Generated at Wed Feb 14 15:12:37 2024 by rpki-client on console-fra.rpki-client.org