Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/03/913a3a-f550-46f0-acc7-cd3ca5975712/1/1-uuC5a1WpbtZfv2RyVAWo_cB6L4.roa
File: 1-uuC5a1WpbtZfv2RyVAWo_cB6L4.roa (raw, json)
Hash identifier: IgIVTOqn0OgAj1oRHhJmTTVbrm4PF5LaCvqoHdM27B0=
Subject key identifier: FA:EB:82:E5:AD:56:A5:BB:59:7E:FD:91:C9:50:16:A3:F7:01:E8:BE
Certificate issuer: /CN=22c4ac3e3c43d70d05349c815baadd38ad775e9d
Certificate serial: 01835A62D8C32E4AE62329C83A39485AC5F3
Authority key identifier: 22:C4:AC:3E:3C:43:D7:0D:05:34:9C:81:5B:AA:DD:38:AD:77:5E:9D
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/IsSsPjxD1w0FNJyBW6rdOK13Xp0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/03/913a3a-f550-46f0-acc7-cd3ca5975712/1/1-uuC5a1WpbtZfv2RyVAWo_cB6L4.roa
Signing time: Tue 20 Sep 2022 10:12:50 +0000
ROA not before: Tue 20 Sep 2022 10:12:50 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 8866
IP address blocks: 87.120.192.0/23 maxlen: 23
87.121.36.0/23 maxlen: 24
87.121.38.0/24 maxlen: 24
87.121.44.0/22 maxlen: 24
87.121.56.0/23 maxlen: 24
87.121.60.0/22 maxlen: 24
87.120.218.0/23 maxlen: 24
87.120.220.0/23 maxlen: 24
93.123.39.0/24 maxlen: 24
94.156.232.0/22 maxlen: 24
94.156.238.0/24 maxlen: 24
94.156.237.0/24 maxlen: 24
93.123.68.0/22 maxlen: 24
93.123.76.0/22 maxlen: 24
93.123.85.0/24 maxlen: 24
93.123.80.0/24 maxlen: 24
93.123.86.0/23 maxlen: 24
93.123.88.0/21 maxlen: 24
94.156.160.0/23 maxlen: 24
94.156.168.0/23 maxlen: 24
94.156.176.0/22 maxlen: 24
94.156.180.0/23 maxlen: 24
93.123.22.0/24 maxlen: 24
93.123.24.0/24 maxlen: 24
93.123.30.0/23 maxlen: 24
93.123.26.0/23 maxlen: 24
87.120.64.0/23 maxlen: 24
87.120.68.0/23 maxlen: 24
87.120.72.0/21 maxlen: 24
87.120.88.0/23 maxlen: 24
87.120.96.0/23 maxlen: 24
87.120.100.0/22 maxlen: 22
93.123.112.0/22 maxlen: 24
93.123.116.0/23 maxlen: 24
93.123.119.0/24 maxlen: 24
87.120.32.0/22 maxlen: 24
87.120.46.0/23 maxlen: 24
94.156.2.0/24 maxlen: 24
94.156.6.0/24 maxlen: 24
91.92.8.0/24 maxlen: 24
91.92.10.0/23 maxlen: 24
94.156.8.0/24 maxlen: 24
91.92.6.0/24 maxlen: 24
91.92.16.0/24 maxlen: 24
91.92.14.0/23 maxlen: 24
91.92.13.0/24 maxlen: 24
91.92.24.0/22 maxlen: 24
91.92.21.0/24 maxlen: 24
94.156.131.0/24 maxlen: 24
94.156.136.0/21 maxlen: 24
94.156.152.0/24 maxlen: 24
94.156.156.0/23 maxlen: 24
94.156.154.0/23 maxlen: 24
91.92.67.0/24 maxlen: 24
94.156.78.0/23 maxlen: 24
87.121.146.0/23 maxlen: 24
87.121.162.0/23 maxlen: 24
87.121.69.0/24 maxlen: 24
87.121.103.0/24 maxlen: 24
87.121.104.0/23 maxlen: 24
87.121.100.0/23 maxlen: 24
87.121.114.0/23 maxlen: 24
31.13.252.0/22 maxlen: 22
Validation: Failed, RFC 3779 resource not subset of parent's resources
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:83:5a:62:d8:c3:2e:4a:e6:23:29:c8:3a:39:48:5a:c5:f3
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=22c4ac3e3c43d70d05349c815baadd38ad775e9d
Validity
Not Before: Sep 20 10:12:50 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=faeb82e5ad56a5bb597efd91c95016a3f701e8be
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b4:5a:c7:6a:27:a1:6c:7f:04:ce:b6:c7:9a:f8:
53:af:cc:68:d0:57:5c:22:3f:98:be:9e:9e:c9:e4:
c1:0b:04:23:28:0e:e4:e6:2d:8d:1d:ee:74:eb:3b:
d4:75:68:85:16:92:b7:f5:f5:d5:69:dd:d0:67:bd:
f6:80:7a:5b:21:90:38:2e:e9:c4:e6:29:89:a4:d7:
ec:22:70:e1:1e:60:5d:ee:36:b7:6c:a0:6d:c9:2b:
c9:fa:fe:ce:a9:8d:b8:53:a5:fc:f5:9c:16:dd:6c:
4f:b1:91:d4:8c:94:e6:87:19:92:1e:63:10:a9:a6:
79:bb:2f:17:d9:cc:0a:a1:0a:18:be:8b:04:03:70:
a5:0a:38:56:76:d9:91:23:6f:5e:1a:c3:80:8a:54:
60:9b:70:1f:4c:98:7f:bf:49:48:8c:f4:5b:4e:4b:
0d:16:91:97:68:9f:b3:88:bf:81:e1:5d:1c:0a:10:
a0:a0:48:ec:24:e5:3c:4e:86:90:c4:ff:45:f5:c2:
30:11:1e:18:a5:65:76:3f:21:78:09:66:e8:d9:f6:
94:1b:68:8e:c9:8e:e7:65:f2:49:96:a5:24:bf:68:
d9:04:df:67:32:07:1f:a4:67:9a:86:42:bd:06:f8:
62:bf:24:8c:ba:97:57:76:6b:ae:19:65:4b:b7:5b:
f4:65
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
FA:EB:82:E5:AD:56:A5:BB:59:7E:FD:91:C9:50:16:A3:F7:01:E8:BE
X509v3 Authority Key Identifier:
keyid:22:C4:AC:3E:3C:43:D7:0D:05:34:9C:81:5B:AA:DD:38:AD:77:5E:9D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/IsSsPjxD1w0FNJyBW6rdOK13Xp0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/03/913a3a-f550-46f0-acc7-cd3ca5975712/1/1-uuC5a1WpbtZfv2RyVAWo_cB6L4.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/03/913a3a-f550-46f0-acc7-cd3ca5975712/1/IsSsPjxD1w0FNJyBW6rdOK13Xp0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
31.13.252.0/22
87.120.32.0/22
87.120.46.0/23
87.120.64.0/23
87.120.68.0/23
87.120.72.0/21
87.120.88.0/23
87.120.96.0/23
87.120.100.0/22
87.120.192.0/23
87.120.218.0-87.120.221.255
87.121.36.0-87.121.38.255
87.121.44.0/22
87.121.56.0/23
87.121.60.0/22
87.121.69.0/24
87.121.100.0/23
87.121.103.0-87.121.105.255
87.121.114.0/23
87.121.146.0/23
87.121.162.0/23
91.92.6.0/24
91.92.8.0/24
91.92.10.0/23
91.92.13.0-91.92.16.255
91.92.21.0/24
91.92.24.0/22
91.92.67.0/24
93.123.22.0/24
93.123.24.0/24
93.123.26.0/23
93.123.30.0/23
93.123.39.0/24
93.123.68.0/22
93.123.76.0-93.123.80.255
93.123.85.0-93.123.95.255
93.123.112.0-93.123.117.255
93.123.119.0/24
94.156.2.0/24
94.156.6.0/24
94.156.8.0/24
94.156.78.0/23
94.156.131.0/24
94.156.136.0/21
94.156.152.0/24
94.156.154.0-94.156.157.255
94.156.160.0/23
94.156.168.0/23
94.156.176.0-94.156.181.255
94.156.232.0/22
94.156.237.0-94.156.238.255
Signature Algorithm: sha256WithRSAEncryption
27:cf:59:2a:bf:e6:bd:6b:dc:c8:93:5b:67:1c:d3:2f:9f:18:
2a:62:2a:28:bd:79:53:1b:96:34:d3:bb:29:1e:60:d3:e5:aa:
d2:b4:cf:89:a6:0c:70:e5:96:18:ce:86:25:9b:26:40:c8:11:
1f:b7:f5:dc:38:df:bd:6f:4c:64:fd:5d:ed:02:3a:86:47:60:
68:e6:1c:23:49:e2:ed:7a:f4:01:1d:89:57:f9:5a:9e:73:01:
94:58:32:b1:a9:81:d5:45:6e:dd:09:a0:16:aa:3a:a4:99:73:
5a:f6:a7:d6:8b:9d:f6:6d:1b:31:ba:69:ef:64:eb:39:6e:ce:
11:aa:05:c8:9e:ae:d7:4b:d1:8b:7e:9a:c9:49:41:58:02:45:
ce:f3:66:93:3c:44:46:56:88:2f:a1:34:d1:e5:f3:a1:a6:1c:
54:4f:af:99:b5:2e:4d:dc:13:19:51:52:1c:6a:a0:54:8f:e6:
92:16:84:10:b2:1e:68:e4:6a:48:eb:0b:7f:ea:cb:a6:8c:64:
c3:07:be:93:fc:fb:65:ab:77:c9:38:95:fd:ae:7b:81:88:15:
e6:8d:21:27:95:f4:a5:b1:49:8d:53:be:6e:b1:12:8e:51:45:
cc:e1:26:d3:f0:a9:24:08:3c:4d:5b:ef:50:32:28:31:ea:35:
31:95:37:1e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 19 23:46:30 2023 by rpki-client on console-ams.rpki-client.org