Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/3c/9d414e-0009-4c76-aaa8-0cf4cb136e16/1/MCzguOzGe3OTJXcp21rzvySLfq4.roa
File: MCzguOzGe3OTJXcp21rzvySLfq4.roa (raw, json)
Hash identifier: ghqh4Rpu/6DswToT9pTdag6B8WC/1CJ0wJCkxyYJAP8=
Subject key identifier: 30:2C:E0:B8:EC:C6:7B:73:93:25:77:29:DB:5A:F3:BF:24:8B:7E:AE
Certificate issuer: /CN=e55b664c92b3e7210c2b0ed453c64ea7f5e876f7
Certificate serial: 0B7F690A
Authority key identifier: E5:5B:66:4C:92:B3:E7:21:0C:2B:0E:D4:53:C6:4E:A7:F5:E8:76:F7
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/5VtmTJKz5yEMKw7UU8ZOp_Xodvc.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/3c/9d414e-0009-4c76-aaa8-0cf4cb136e16/1/MCzguOzGe3OTJXcp21rzvySLfq4.roa
Signing time: Sat 01 Jan 2022 12:03:35 +0000
ROA not before: Sat 01 Jan 2022 12:03:35 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 57335
IP address blocks: 185.203.204.0/22 maxlen: 24
2a0c:d2c4::/32 maxlen: 48
2a0c:d2c0::/32 maxlen: 48
2a0c:d2c2::/32 maxlen: 48
2a0c:d2c1::/32 maxlen: 48
Validation: Failed, RFC 3779 resource not subset of parent's resources
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 192899338 (0xb7f690a)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=e55b664c92b3e7210c2b0ed453c64ea7f5e876f7
Validity
Not Before: Jan 1 12:03:35 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=302ce0b8ecc67b7393257729db5af3bf248b7eae
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b8:d1:5f:ec:39:db:9b:71:02:a4:55:79:a2:47:
f3:d8:df:df:be:db:61:e7:5d:af:70:44:b7:9b:01:
b0:e4:93:d0:10:9f:a3:19:fc:ad:b7:98:af:71:3b:
5d:ce:d5:81:6e:29:33:c5:39:3e:d5:14:57:8b:15:
ec:b1:df:92:b6:45:bb:af:88:21:33:55:06:07:58:
3c:33:3c:81:c5:bc:09:b2:f6:3b:8d:a0:6c:66:5d:
c1:21:3e:d0:0d:b8:b9:f2:21:0a:57:81:b8:b7:a5:
2c:8f:18:53:72:fe:2b:9e:5c:38:15:be:74:5a:ab:
e1:eb:79:9a:6d:3d:46:fa:81:29:07:c8:69:67:81:
b4:5b:2d:96:72:d2:ae:8f:42:42:e8:f8:a4:02:0e:
f0:1b:f9:df:15:a2:51:75:cf:b6:72:62:dc:9b:ff:
b7:1a:2c:29:5f:5e:55:0f:1a:4d:94:8c:ef:24:7b:
1f:ba:f4:d6:28:38:ae:fe:12:ff:0f:f4:c0:28:7e:
5c:62:40:a3:b9:51:8b:03:a8:97:58:38:38:79:cf:
37:b4:08:88:b9:79:75:d0:a9:37:14:e5:7e:02:15:
dd:ea:60:b3:bd:9c:ac:b4:b1:dd:16:1b:72:6e:57:
28:fe:83:c1:00:2f:5d:51:3e:a5:43:b2:1f:16:4b:
3a:f3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
30:2C:E0:B8:EC:C6:7B:73:93:25:77:29:DB:5A:F3:BF:24:8B:7E:AE
X509v3 Authority Key Identifier:
keyid:E5:5B:66:4C:92:B3:E7:21:0C:2B:0E:D4:53:C6:4E:A7:F5:E8:76:F7
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/5VtmTJKz5yEMKw7UU8ZOp_Xodvc.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/3c/9d414e-0009-4c76-aaa8-0cf4cb136e16/1/MCzguOzGe3OTJXcp21rzvySLfq4.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/3c/9d414e-0009-4c76-aaa8-0cf4cb136e16/1/5VtmTJKz5yEMKw7UU8ZOp_Xodvc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.203.204.0/22
IPv6:
2a0c:d2c0::-2a0c:d2c2:ffff:ffff:ffff:ffff:ffff:ffff
2a0c:d2c4::/32
Signature Algorithm: sha256WithRSAEncryption
8f:24:43:69:42:e8:f8:a5:36:10:51:f4:c9:6c:1a:77:4f:26:
fb:99:bd:b4:54:c3:d6:44:b3:e9:16:ef:85:98:56:b4:e9:81:
b5:1c:5b:c5:8a:42:64:ac:6c:61:91:43:a3:48:1b:d3:2e:97:
0a:e2:e5:69:63:be:39:b0:cb:4d:36:21:2d:9c:3a:fd:4a:4c:
83:c9:33:1a:b9:4e:67:e9:c2:41:3b:a8:1d:96:12:12:3b:79:
8b:ef:73:a3:1a:9c:c9:c9:c8:68:db:f0:82:ff:c9:29:e1:50:
2b:a0:af:b6:df:eb:e1:ff:0d:48:36:0d:b2:05:ca:4c:36:81:
ec:39:c9:cf:41:29:eb:0a:47:6b:e4:ce:b2:5d:fd:a3:f9:d0:
ec:31:b2:1e:5b:59:25:96:44:8e:33:a2:02:70:dc:00:76:b0:
e2:55:7b:90:5a:c6:0f:54:f2:9f:ed:74:4c:b4:96:b4:b6:fd:
8e:9f:f6:27:5b:8f:07:f9:4e:7b:45:11:ac:77:f3:87:cc:70:
ef:12:71:f8:66:d1:e4:b4:2c:f4:6a:50:46:e7:6c:10:d6:9a:
14:61:a9:13:3c:21:63:7f:d5:2f:40:57:13:43:2f:06:66:14:
eb:57:d5:54:53:8a:1b:9b:19:f5:68:cc:cf:34:b6:04:43:c9:
2b:51:01:42
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 28 00:46:32 2025 by rpki-client