Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c9/01f736-af83-456c-8b45-5146ab7ea015/1/MkFXIcZYcK1TY_jAtFFjmAJ0xH4.roa
File: MkFXIcZYcK1TY_jAtFFjmAJ0xH4.roa (raw, json)
Hash identifier: fQh6n/vXeeOoAv5sax2UEche6FUTBgVZ/qUNl/9yNZI=
Subject key identifier: 32:41:57:21:C6:58:70:AD:53:63:F8:C0:B4:51:63:98:02:74:C4:7E
Certificate issuer: /CN=535825ce8bf544170282f720a2484141568b0e7d
Certificate serial: 018698304A68CBC37AE2D3BACB551F3258BD
Authority key identifier: 53:58:25:CE:8B:F5:44:17:02:82:F7:20:A2:48:41:41:56:8B:0E:7D
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/U1glzov1RBcCgvcgokhBQVaLDn0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c9/01f736-af83-456c-8b45-5146ab7ea015/1/MkFXIcZYcK1TY_jAtFFjmAJ0xH4.roa
Signing time: Tue 28 Feb 2023 13:22:26 +0000
ROA not before: Tue 28 Feb 2023 13:22:26 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 43545
IP address blocks: 185.113.217.0/24 maxlen: 24
185.113.218.0/24 maxlen: 24
185.113.216.0/24 maxlen: 24
185.113.219.0/24 maxlen: 24
77.74.104.0/21 maxlen: 21
77.74.110.0/24 maxlen: 24
212.84.64.0/21 maxlen: 24
80.84.64.0/21 maxlen: 21
80.84.64.0/19 maxlen: 19
212.84.68.0/24 maxlen: 24
212.84.72.0/21 maxlen: 24
80.84.72.0/21 maxlen: 21
80.84.80.0/21 maxlen: 21
212.84.80.0/21 maxlen: 24
80.84.88.0/21 maxlen: 21
80.84.89.0/24 maxlen: 24
80.84.87.0/24 maxlen: 24
212.84.88.0/21 maxlen: 24
78.40.144.0/21 maxlen: 21
78.40.144.0/24 maxlen: 24
80.84.90.0/24 maxlen: 24
80.84.91.0/24 maxlen: 24
80.84.86.0/24 maxlen: 24
78.40.150.0/24 maxlen: 24
212.84.95.0/24 maxlen: 24
78.40.146.0/24 maxlen: 24
2a02:24d0::/32 maxlen: 32
2a02:24d0::/48 maxlen: 48
Validation: Failed, RFC 3779 resource not subset of parent's resources
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:86:98:30:4a:68:cb:c3:7a:e2:d3:ba:cb:55:1f:32:58:bd
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=535825ce8bf544170282f720a2484141568b0e7d
Validity
Not Before: Feb 28 13:22:26 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=32415721c65870ad5363f8c0b45163980274c47e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ab:3b:59:fc:5f:ac:96:62:0f:73:12:f3:67:e2:
ae:f0:04:74:33:c6:4c:cf:94:03:a8:ad:77:5a:87:
8b:da:ca:fc:a3:d6:2d:51:66:d8:6e:5f:6f:90:a9:
47:c2:e5:ff:92:31:26:1d:fe:95:96:d4:dc:61:b7:
18:da:35:c9:2e:77:db:aa:97:bf:7c:41:71:5d:b0:
9c:3e:e6:73:ca:e9:5f:60:8a:82:6b:37:75:f0:7e:
e8:b2:78:51:bd:1f:9b:54:83:9f:06:85:52:15:6f:
fd:35:a2:07:1d:68:36:38:47:24:6e:2c:b8:1e:52:
96:b0:0f:59:52:2a:74:33:33:bb:05:e2:3a:9a:67:
a2:37:df:ea:a4:1a:3e:c2:95:68:67:bf:e6:5a:67:
07:9c:29:fd:8a:9d:13:d7:b8:e5:f4:43:01:e0:8f:
d1:53:df:04:7a:cd:e9:62:ba:7e:e1:68:74:99:44:
7d:0c:32:c0:72:5b:4e:55:1b:5a:c2:58:45:56:43:
1e:04:55:01:0f:cd:e5:52:9c:c6:ba:91:8a:c0:5b:
29:06:5d:ee:95:ad:fd:a5:61:ee:e5:65:38:98:4b:
9a:92:b6:b3:ec:e7:02:cc:34:61:3d:bd:ad:46:3e:
88:24:00:e5:a3:0c:3b:76:92:42:5a:e6:7b:aa:83:
75:b9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
32:41:57:21:C6:58:70:AD:53:63:F8:C0:B4:51:63:98:02:74:C4:7E
X509v3 Authority Key Identifier:
keyid:53:58:25:CE:8B:F5:44:17:02:82:F7:20:A2:48:41:41:56:8B:0E:7D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/U1glzov1RBcCgvcgokhBQVaLDn0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c9/01f736-af83-456c-8b45-5146ab7ea015/1/MkFXIcZYcK1TY_jAtFFjmAJ0xH4.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c9/01f736-af83-456c-8b45-5146ab7ea015/1/U1glzov1RBcCgvcgokhBQVaLDn0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
77.74.104.0/21
78.40.144.0/21
80.84.64.0/19
185.113.216.0/22
212.84.64.0/19
IPv6:
2a02:24d0::/32
Signature Algorithm: sha256WithRSAEncryption
2f:c0:72:d0:fc:78:0f:3c:7f:c8:da:00:24:3e:36:6c:5b:a9:
76:2d:21:4a:30:aa:a1:a2:b7:a3:d2:49:1b:dd:0c:3a:51:cc:
a9:0b:cf:8b:36:16:3f:a6:0d:a9:0b:d3:a9:df:7a:e7:13:45:
5f:cd:41:f5:c0:9e:5b:ca:fc:e9:4f:5b:07:53:f5:96:ee:73:
2c:44:45:69:e6:ef:6f:19:0e:4f:b1:ed:a7:89:db:4e:17:13:
f4:ac:6f:31:af:bc:bd:37:1b:35:3e:b7:86:8f:df:d2:57:f3:
57:30:33:ba:38:95:5f:19:27:c4:68:d2:b2:bb:31:64:0c:01:
03:78:95:39:20:35:14:36:25:51:22:fb:4d:e7:6c:e9:8a:ed:
79:f7:8f:7a:e6:7c:f1:e9:c9:ae:c9:fa:f0:ef:bc:7d:6c:b6:
ed:94:3d:ff:9a:c1:bb:89:99:cd:e3:f5:0b:d2:a7:d5:be:b7:
46:c0:f2:bc:05:30:75:23:04:ba:b6:19:f3:ee:aa:9d:28:d9:
e3:7d:77:ea:4f:a9:61:13:ed:1d:ff:23:1a:c7:52:56:b1:e5:
b9:bd:2b:6a:56:7d:a4:67:91:be:71:c0:67:40:3d:d4:d0:2c:
c2:ac:ca:0c:7f:58:c9:b4:c4:c3:ec:b8:90:6c:80:c6:26:57:
5b:d5:c5:13
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Feb 17 07:55:14 2025 by rpki-client