Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e2/278663-b135-4db1-a044-20624b3c157f/1/MLQCLCfqCbaIA7_gSgFBC3uaFZc.roa
File: MLQCLCfqCbaIA7_gSgFBC3uaFZc.roa (raw, json)
Hash identifier: Kk+6sOn1ws70wt/4MN8bXiGxKc6ICbRClaazOw3dakU=
Subject key identifier: 30:B4:02:2C:27:EA:09:B6:88:03:BF:E0:4A:01:41:0B:7B:9A:15:97
Certificate issuer: /CN=fb32e9f4aa32aba7312fab054b174dce8c515ca3
Certificate serial: 01863580F1AC2DEBDBD8ECD5FC34878831B7
Authority key identifier: FB:32:E9:F4:AA:32:AB:A7:31:2F:AB:05:4B:17:4D:CE:8C:51:5C:A3
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/1-zLp9Koyq6cxL6sFSxdNzoxRXKM.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/e2/278663-b135-4db1-a044-20624b3c157f/1/MLQCLCfqCbaIA7_gSgFBC3uaFZc.roa
Signing time: Thu 09 Feb 2023 09:28:08 +0000
ROA not before: Thu 09 Feb 2023 09:28:08 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 210546
IP address blocks: 77.91.70.0/24 maxlen: 24
Validation: Failed, RFC 3779 resource not subset of parent's resources
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:86:35:80:f1:ac:2d:eb:db:d8:ec:d5:fc:34:87:88:31:b7
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=fb32e9f4aa32aba7312fab054b174dce8c515ca3
Validity
Not Before: Feb 9 09:28:08 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=30b4022c27ea09b68803bfe04a01410b7b9a1597
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8a:7f:73:c5:fd:d5:2b:1d:a8:fb:f2:dc:2a:96:
2a:a7:d6:fc:49:37:9c:76:b9:ea:0f:e1:47:68:c9:
b5:64:5b:e0:c3:20:98:75:5d:0e:3d:52:a7:d9:9d:
ae:85:b1:01:f6:39:54:ed:c7:4e:32:3d:4a:cd:63:
bf:15:7e:43:d7:03:85:e3:77:ee:a7:d6:e6:ae:ea:
15:b5:16:0a:5c:8f:0f:12:9c:6b:5e:bc:7f:b1:74:
42:11:3c:f1:c9:15:75:7b:fc:c2:f6:d4:2c:b6:da:
ce:87:1e:c1:d4:86:03:07:fe:c0:97:1c:44:a7:46:
0e:04:d7:c4:06:86:92:6c:36:99:e0:3d:e8:ec:16:
d3:49:72:f8:12:aa:51:9e:70:ad:ae:75:df:7b:8d:
ea:b8:78:0f:33:b0:d9:bc:75:84:74:a6:50:64:3f:
e9:38:7f:c5:59:18:ba:6f:e6:77:cc:3a:a9:23:46:
95:8c:19:85:ce:f3:d6:5a:9d:35:f4:73:eb:15:d4:
d2:e8:f0:6e:1b:60:d3:01:00:57:ec:08:24:50:a1:
b1:26:f0:4f:93:b7:33:47:0a:67:90:88:c9:38:17:
49:66:05:6d:c3:9f:e9:5c:a0:fc:6e:5e:f9:f1:1b:
dc:c6:fa:72:46:74:a6:e7:f6:56:08:c3:bb:ea:86:
82:8f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
30:B4:02:2C:27:EA:09:B6:88:03:BF:E0:4A:01:41:0B:7B:9A:15:97
X509v3 Authority Key Identifier:
keyid:FB:32:E9:F4:AA:32:AB:A7:31:2F:AB:05:4B:17:4D:CE:8C:51:5C:A3
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/1-zLp9Koyq6cxL6sFSxdNzoxRXKM.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e2/278663-b135-4db1-a044-20624b3c157f/1/MLQCLCfqCbaIA7_gSgFBC3uaFZc.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/e2/278663-b135-4db1-a044-20624b3c157f/1/1-zLp9Koyq6cxL6sFSxdNzoxRXKM.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
77.91.70.0/24
Signature Algorithm: sha256WithRSAEncryption
20:3b:38:9a:8c:b5:19:c0:2e:3a:51:03:f5:8e:0f:17:7e:28:
cc:b9:d3:24:aa:a0:4f:b4:f3:96:18:8a:ee:f2:c9:c7:e2:9f:
00:b4:a4:8e:38:e2:94:65:0a:79:72:37:1f:da:7b:75:b5:81:
66:83:9b:63:3f:26:6c:aa:cc:a1:c0:3b:bd:bf:d9:20:84:12:
b4:ca:f9:ea:99:45:a9:b7:da:b7:b1:94:87:88:45:07:e6:91:
96:a8:b2:1f:22:d4:b2:62:53:67:78:89:db:39:7d:f6:d6:6c:
1e:78:8c:15:b5:92:8d:b0:7e:9a:d5:0e:a3:df:c1:6b:7d:71:
13:38:27:be:48:61:89:f2:d2:bd:f1:59:dd:ea:03:c2:c1:b6:
e1:8a:94:b0:28:2c:09:31:3c:09:f7:a6:e2:0e:9d:6a:4c:f6:
98:16:55:bf:5a:c1:6b:a7:55:7e:cd:1a:58:96:34:38:ce:a4:
9c:44:1d:2e:e5:3f:58:28:97:8e:75:7c:7c:28:af:74:f7:27:
f5:16:cc:ae:31:2a:09:fe:3b:65:61:72:1b:cd:12:c5:bf:e2:
91:ae:1d:51:94:2b:81:46:ba:67:9d:50:d9:f8:69:74:5a:a4:
fe:74:f0:bb:a5:9d:3a:5d:72:2d:bd:20:ea:a0:06:45:87:2b:
8c:e8:7d:e2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jul 20 00:09:07 2023 by rpki-client on console-ams.rpki-client.org