Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/00/e1b1df-750a-4732-b783-e8619aa75680/1/jq_hyIIxKtu4tRcayt0c_sJi7qU.roa
File: jq_hyIIxKtu4tRcayt0c_sJi7qU.roa (raw, json)
Hash identifier: Bf5/is+/4KE31rEMTBPARf7UD6hUMIKeh3/jnfd+ZtU=
Subject key identifier: 8E:AF:E1:C8:82:31:2A:DB:B8:B5:17:1A:CA:DD:1C:FE:C2:62:EE:A5
Certificate issuer: /CN=0ff8f94454f6ca6a7d70be455b2d6405f98fbcce
Certificate serial: 0822140E
Authority key identifier: 0F:F8:F9:44:54:F6:CA:6A:7D:70:BE:45:5B:2D:64:05:F9:8F:BC:CE
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/D_j5RFT2ymp9cL5FWy1kBfmPvM4.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/00/e1b1df-750a-4732-b783-e8619aa75680/1/jq_hyIIxKtu4tRcayt0c_sJi7qU.roa
Signing time: Sat 01 Jan 2022 06:57:35 +0000
ROA not before: Sat 01 Jan 2022 06:57:35 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 42807
IP address blocks: 94.199.200.0/23 maxlen: 23
94.199.200.0/22 maxlen: 22
94.199.205.0/24 maxlen: 24
94.199.204.0/24 maxlen: 24
94.199.206.0/24 maxlen: 24
94.199.207.0/24 maxlen: 24
141.98.204.0/22 maxlen: 22
139.28.17.0/24 maxlen: 24
139.28.16.0/24 maxlen: 24
88.218.129.0/24 maxlen: 24
88.218.128.0/24 maxlen: 24
37.230.104.0/21 maxlen: 21
37.230.106.0/23 maxlen: 23
37.230.110.0/23 maxlen: 23
178.157.8.0/21 maxlen: 21
185.99.196.0/22 maxlen: 22
185.15.40.0/22 maxlen: 22
31.207.84.0/24 maxlen: 24
31.207.83.0/24 maxlen: 24
31.207.85.0/24 maxlen: 24
31.207.80.0/24 maxlen: 24
31.207.82.0/24 maxlen: 24
31.207.81.0/24 maxlen: 24
31.207.87.0/24 maxlen: 24
31.207.86.0/24 maxlen: 24
213.159.0.0/21 maxlen: 21
213.159.28.0/22 maxlen: 22
213.159.31.0/24 maxlen: 24
109.232.216.0/21 maxlen: 21
109.232.216.0/23 maxlen: 23
109.232.219.0/24 maxlen: 24
109.232.218.0/24 maxlen: 24
109.232.222.0/24 maxlen: 24
109.232.221.0/24 maxlen: 24
109.232.223.0/24 maxlen: 24
2a03:adc0:1::/48 maxlen: 48
2a03:adc1::/32 maxlen: 32
2a03:adc0:2::/48 maxlen: 48
2a03:adc0::/48 maxlen: 48
2a03:adc2::/32 maxlen: 32
Validation: Failed, RFC 3779 resource not subset of parent's resources
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 136451086 (0x822140e)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=0ff8f94454f6ca6a7d70be455b2d6405f98fbcce
Validity
Not Before: Jan 1 06:57:35 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=8eafe1c882312adbb8b5171acadd1cfec262eea5
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c9:d8:7f:b3:98:a3:91:ba:91:2b:89:da:a4:a9:
b8:4d:d3:a9:8e:fe:03:81:ad:b8:7f:e7:eb:42:1e:
14:65:aa:1e:f5:75:cf:a5:5b:24:a6:70:3c:40:b1:
98:75:74:35:c6:c4:f0:6a:d6:84:3f:a9:5a:c2:f6:
0c:dc:44:09:f9:5c:a0:2e:bd:08:aa:4d:1b:8e:ff:
00:4b:92:d7:9b:7a:c9:ff:49:a3:bd:14:81:75:dd:
5d:74:50:37:57:a7:9f:c3:22:41:6e:f0:ae:3e:c7:
38:70:fe:e5:a7:14:6d:d4:68:18:42:0e:78:04:b3:
03:96:b5:ee:77:a8:ba:7a:b1:9e:49:46:50:57:ad:
c7:53:79:5e:f5:cd:0b:d2:de:4e:2b:ba:c3:24:d6:
7d:bc:69:4e:ed:1b:7a:7f:cf:5e:be:8a:09:bc:8d:
6c:d8:41:63:7d:56:d5:aa:7e:7b:9a:44:7c:f9:31:
43:9b:60:77:7d:8f:14:14:47:25:8d:b1:9d:db:a3:
f7:82:d2:3e:83:0c:87:23:5d:ef:c9:11:97:03:ef:
5c:c5:e1:bb:b7:d8:6e:06:c5:c3:c7:b9:9a:c2:53:
dc:7f:48:c8:2a:a9:6b:99:9e:7a:b8:5b:9d:b6:83:
4e:80:a4:ef:16:3d:f5:b6:dc:f9:67:84:12:f3:10:
8b:8d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
8E:AF:E1:C8:82:31:2A:DB:B8:B5:17:1A:CA:DD:1C:FE:C2:62:EE:A5
X509v3 Authority Key Identifier:
keyid:0F:F8:F9:44:54:F6:CA:6A:7D:70:BE:45:5B:2D:64:05:F9:8F:BC:CE
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/D_j5RFT2ymp9cL5FWy1kBfmPvM4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/00/e1b1df-750a-4732-b783-e8619aa75680/1/jq_hyIIxKtu4tRcayt0c_sJi7qU.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/00/e1b1df-750a-4732-b783-e8619aa75680/1/D_j5RFT2ymp9cL5FWy1kBfmPvM4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
31.207.80.0/21
37.230.104.0/21
88.218.128.0/23
94.199.200.0/21
109.232.216.0/21
139.28.16.0/23
141.98.204.0/22
178.157.8.0/21
185.15.40.0/22
185.99.196.0/22
213.159.0.0/21
213.159.28.0/22
IPv6:
2a03:adc0::-2a03:adc0:2:ffff:ffff:ffff:ffff:ffff
2a03:adc1::-2a03:adc2:ffff:ffff:ffff:ffff:ffff:ffff
Signature Algorithm: sha256WithRSAEncryption
56:d2:1d:27:41:89:06:44:09:f2:15:39:bf:bc:fc:87:03:1e:
31:01:e1:d7:a6:96:44:3e:bd:45:0a:5e:53:41:2d:e9:8c:02:
7d:2c:83:2c:de:58:e1:bb:da:59:88:64:9c:0c:df:4b:20:e8:
10:dc:27:36:a0:b8:f1:4b:58:dd:db:e4:6a:46:e5:34:d4:45:
0d:bc:1b:70:36:40:fe:f8:11:71:4c:78:38:38:4f:e6:1e:62:
58:07:a0:53:bc:c6:f1:8f:02:58:27:a0:fc:a6:f7:8b:50:72:
a2:4d:26:20:35:e7:d0:32:c7:77:ef:e9:ed:1b:a4:a2:63:78:
ac:56:51:d3:b6:9b:9c:59:0e:da:d9:1c:ef:4e:1a:3e:28:7c:
da:42:10:9d:30:67:3f:60:b4:d0:c4:af:31:e9:80:40:8c:3f:
53:d6:f7:6f:ed:9b:14:3f:89:2a:e2:b8:3e:44:c6:48:42:c6:
af:e6:52:4d:44:d5:f4:a7:71:cb:a7:4c:73:30:e8:5b:3e:ae:
48:e4:3f:90:39:8e:99:b2:48:04:ab:e3:62:d2:d9:ae:bb:4e:
55:61:a6:f4:da:0e:3c:33:88:97:10:82:0a:72:7a:4a:18:28:
05:73:39:86:9a:d3:fa:2f:63:d6:f0:d6:c4:03:89:c9:9a:b1:
1e:3c:03:3d
-----BEGIN CERTIFICATE-----
MIIFXDCCBESgAwIBAgIECCIUDjANBgkqhkiG9w0BAQsFADAzMTEwLwYDVQQDEygw
ZmY4Zjk0NDU0ZjZjYTZhN2Q3MGJlNDU1YjJkNjQwNWY5OGZiY2NlMB4XDTIyMDEw
MTA2NTczNVoXDTIzMDcwMTAwMDAwMFowMzExMC8GA1UEAxMoOGVhZmUxYzg4MjMx
MmFkYmI4YjUxNzFhY2FkZDFjZmVjMjYyZWVhNTCCASIwDQYJKoZIhvcNAQEBBQAD
ggEPADCCAQoCggEBAMnYf7OYo5G6kSuJ2qSpuE3TqY7+A4GtuH/n60IeFGWqHvV1
z6VbJKZwPECxmHV0NcbE8GrWhD+pWsL2DNxECflcoC69CKpNG47/AEuS15t6yf9J
o70UgXXdXXRQN1enn8MiQW7wrj7HOHD+5acUbdRoGEIOeASzA5a17neounqxnklG
UFetx1N5XvXNC9LeTiu6wyTWfbxpTu0ben/PXr6KCbyNbNhBY31W1ap+e5pEfPkx
Q5tgd32PFBRHJY2xnduj94LSPoMMhyNd78kRlwPvXMXhu7fYbgbFw8e5msJT3H9I
yCqpa5meerhbnbaDToCk7xY99bbc+WeEEvMQi40CAwEAAaOCAnYwggJyMB0GA1Ud
DgQWBBSOr+HIgjEq27i1FxrK3Rz+wmLupTAfBgNVHSMEGDAWgBQP+PlEVPbKan1w
vkVbLWQF+Y+8zjAOBgNVHQ8BAf8EBAMCB4AwZAYIKwYBBQUHAQEEWDBWMFQGCCsG
AQUFBzAChkhyc3luYzovL3Jwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxU
L0RfajVSRlQyeW1wOWNMNUZXeTFrQmZtUHZNNC5jZXIwgY0GCCsGAQUFBwELBIGA
MH4wfAYIKwYBBQUHMAuGcHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5
L0RFRkFVTFQvMDAvZTFiMWRmLTc1MGEtNDczMi1iNzgzLWU4NjE5YWE3NTY4MC8x
L2pxX2h5SUl4S3R1NHRSY2F5dDBjX3NKaTdxVS5yb2EwgYEGA1UdHwR6MHgwdqB0
oHKGcHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvMDAv
ZTFiMWRmLTc1MGEtNDczMi1iNzgzLWU4NjE5YWE3NTY4MC8xL0RfajVSRlQyeW1w
OWNMNUZXeTFrQmZtUHZNNC5jcmwwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjCB
iwYIKwYBBQUHAQcBAf8EfDB6ME4EAgABMEgDBAMfz1ADBAMl5mgDBAFY2oADBANe
x8gDBANt6NgDBAGLHBADBAKNYswDBAOynQgDBAK5DygDBAK5Y8QDBAPVnwADBALV
nxwwKAQCAAIwIjAQAwUGKgOtwAMHACoDrcAAAjAOAwUAKgOtwQMFACoDrcIwDQYJ
KoZIhvcNAQELBQADggEBAFbSHSdBiQZECfIVOb+8/IcDHjEB4demlkQ+vUUKXlNB
LemMAn0sgyzeWOG72lmIZJwM30sg6BDcJzaguPFLWN3b5GpG5TTURQ28G3A2QP74
EXFMeDg4T+YeYlgHoFO8xvGPAlgnoPym94tQcqJNJiA159Ayx3fv6e0bpKJjeKxW
UdO2m5xZDtrZHO9OGj4ofNpCEJ0wZz9gtNDErzHpgECMP1PW92/tmxQ/iSriuD5E
xkhCxq/mUk1E1fSnccunTHMw6Fs+rkjkP5A5jpmySASr42LS2a67TlVhpvTaDjwz
iJcQggpyekoYKAVzOYaa0/ovY9bw1sQDicmasR48Az0=
-----END CERTIFICATE-----
Generated at Wed Jul 19 23:42:15 2023 by rpki-client on console-fra.rpki-client.org