Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/aa/0e651e-90c7-4acd-97b9-a54f8e4813e7/1/MCRvTxgxrOzZZ0XQpXtNzhVp3Pk.roa
File: MCRvTxgxrOzZZ0XQpXtNzhVp3Pk.roa (raw, json)
Hash identifier: 9DGRB1+GNizt/E7xhH0gE/57BS9IvVgAVdC8feUnvAA=
Subject key identifier: 30:24:6F:4F:18:31:AC:EC:D9:67:45:D0:A5:7B:4D:CE:15:69:DC:F9
Certificate issuer: /CN=9cd0758825dd89cfee5fdecc7dcb651f0a5d1018
Certificate serial: 07023C55
Authority key identifier: 9C:D0:75:88:25:DD:89:CF:EE:5F:DE:CC:7D:CB:65:1F:0A:5D:10:18
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/nNB1iCXdic_uX97MfctlHwpdEBg.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/aa/0e651e-90c7-4acd-97b9-a54f8e4813e7/1/MCRvTxgxrOzZZ0XQpXtNzhVp3Pk.roa
Signing time: Tue 28 Jun 2022 20:45:03 +0000
ROA not before: Tue 28 Jun 2022 20:45:03 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 204843
IP address blocks: 45.11.96.0/24 maxlen: 24
Validation: Failed, RFC 3779 resource not subset of parent's resources
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 117587029 (0x7023c55)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=9cd0758825dd89cfee5fdecc7dcb651f0a5d1018
Validity
Not Before: Jun 28 20:45:03 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=30246f4f1831acecd96745d0a57b4dce1569dcf9
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a9:86:1d:e7:89:43:66:93:e0:ac:d3:0d:92:ae:
36:f8:f2:4d:e8:22:93:b3:b4:6e:52:7e:75:27:5f:
44:84:ba:38:79:64:b9:46:69:69:6d:08:01:f3:37:
66:16:17:c8:17:08:9a:4c:c6:45:e3:27:16:06:1b:
fd:62:27:2f:15:83:95:11:a0:d9:2c:c0:88:0d:f4:
05:a1:be:78:c7:71:37:e0:e3:b3:f1:d9:cf:ea:64:
4c:5a:c8:8e:3d:ee:4e:5e:49:47:8a:c3:40:d2:7d:
a2:89:b8:f8:10:1e:1c:55:07:3d:c4:44:3d:ae:6f:
e9:35:85:b0:97:56:91:9f:64:42:bf:ce:20:5b:ae:
7f:cd:be:77:5a:2e:5b:ba:13:83:1b:65:33:8c:f9:
da:7b:70:5a:c8:ce:d3:39:d7:4e:ef:64:c3:4a:84:
18:51:40:97:07:4c:34:db:a7:84:fa:c3:1b:92:ca:
61:a4:dd:b6:e5:0b:02:7b:24:e9:34:10:56:34:53:
29:02:d0:05:5c:7a:b0:c9:31:de:9c:7d:70:9b:05:
78:60:6a:59:f4:5e:b5:33:2c:1a:e5:0f:38:d7:02:
12:eb:7d:51:06:15:dd:ea:f7:e6:c5:d1:f7:b7:69:
78:58:66:9a:1f:68:dc:6b:45:d3:74:6f:28:89:e1:
b0:c9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
30:24:6F:4F:18:31:AC:EC:D9:67:45:D0:A5:7B:4D:CE:15:69:DC:F9
X509v3 Authority Key Identifier:
keyid:9C:D0:75:88:25:DD:89:CF:EE:5F:DE:CC:7D:CB:65:1F:0A:5D:10:18
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/nNB1iCXdic_uX97MfctlHwpdEBg.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/aa/0e651e-90c7-4acd-97b9-a54f8e4813e7/1/MCRvTxgxrOzZZ0XQpXtNzhVp3Pk.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/aa/0e651e-90c7-4acd-97b9-a54f8e4813e7/1/nNB1iCXdic_uX97MfctlHwpdEBg.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
45.11.96.0/24
Signature Algorithm: sha256WithRSAEncryption
0e:14:f4:8f:bf:4d:7c:27:91:d0:5c:11:2a:04:a2:75:02:94:
81:51:34:7d:1e:5f:ea:97:0e:c1:93:fd:1a:58:d6:97:33:93:
15:e3:88:08:85:b2:af:e0:d8:f4:d9:a0:75:46:5d:37:05:07:
fa:ef:69:68:51:7c:60:b2:5b:ab:e6:dd:53:be:39:94:5b:83:
d6:23:85:5b:f5:f2:bf:4b:90:51:e1:7f:33:7a:40:76:e1:08:
d8:f7:58:ed:00:0c:a5:d4:a8:83:c5:e4:a8:2c:0b:91:fa:e1:
70:58:07:8c:ee:a1:4d:d9:ef:2b:70:f9:7b:f5:c3:1f:61:c4:
51:fc:9c:10:b4:58:3c:42:3c:4e:85:c1:95:e9:ec:20:fa:12:
48:76:51:bd:f4:b6:3f:65:49:f9:ac:1f:c0:13:bf:20:44:ea:
37:62:38:fe:d9:ab:93:f2:1e:75:8f:86:0e:28:32:3a:3e:5c:
3e:ad:94:b7:be:ae:75:a9:6a:dd:27:7f:0a:75:35:43:f5:8c:
89:3c:f6:5b:fb:95:9c:e5:0e:1b:38:f9:14:04:b1:54:66:f7:
f6:9b:b5:8e:09:36:f2:2c:29:91:19:04:41:b8:56:3c:41:09:
a2:70:6e:b8:f5:c5:ef:ce:bc:5d:c5:94:25:0b:32:cd:ee:7c:
41:a8:44:5d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jul 20 00:01:59 2023 by rpki-client on console-fra.rpki-client.org