Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/03/913a3a-f550-46f0-acc7-cd3ca5975712/1/1palaqW-lmrCONiS4dCZorfCbCE.roa
File: 1palaqW-lmrCONiS4dCZorfCbCE.roa (raw, json)
Hash identifier: NNHDhySqGnVeYgO4gRABNqBeJXH683zNuhkj80zFZj8=
Subject key identifier: D6:96:A5:6A:A5:BE:96:6A:C2:38:D8:92:E1:D0:99:A2:B7:C2:6C:21
Certificate issuer: /CN=22c4ac3e3c43d70d05349c815baadd38ad775e9d
Certificate serial: 0185A62A412C14696FD81B070FB5A00FB2B5
Authority key identifier: 22:C4:AC:3E:3C:43:D7:0D:05:34:9C:81:5B:AA:DD:38:AD:77:5E:9D
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/IsSsPjxD1w0FNJyBW6rdOK13Xp0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/03/913a3a-f550-46f0-acc7-cd3ca5975712/1/1palaqW-lmrCONiS4dCZorfCbCE.roa
Signing time: Thu 12 Jan 2023 13:27:45 +0000
ROA not before: Thu 12 Jan 2023 13:27:45 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 8100
IP address blocks: 87.120.192.0/23 maxlen: 24
87.121.36.0/23 maxlen: 24
87.121.38.0/24 maxlen: 24
87.121.60.0/22 maxlen: 24
87.120.218.0/23 maxlen: 24
87.120.220.0/23 maxlen: 24
94.154.160.0/23 maxlen: 24
94.154.173.0/24 maxlen: 24
93.123.39.0/24 maxlen: 24
94.156.237.0/24 maxlen: 24
194.55.226.0/24 maxlen: 24
94.156.238.0/24 maxlen: 24
93.123.68.0/22 maxlen: 24
93.123.76.0/22 maxlen: 24
93.123.85.0/24 maxlen: 24
93.123.80.0/24 maxlen: 24
93.123.86.0/23 maxlen: 24
94.156.168.0/23 maxlen: 24
94.156.176.0/22 maxlen: 24
94.156.180.0/23 maxlen: 24
93.123.24.0/24 maxlen: 24
194.48.249.0/24 maxlen: 24
93.123.30.0/23 maxlen: 24
194.55.187.0/24 maxlen: 24
93.123.26.0/23 maxlen: 24
87.120.64.0/23 maxlen: 24
87.120.96.0/23 maxlen: 24
87.120.100.0/22 maxlen: 24
93.123.112.0/22 maxlen: 24
93.123.116.0/23 maxlen: 24
93.123.119.0/24 maxlen: 24
87.120.32.0/22 maxlen: 24
193.25.219.0/24 maxlen: 24
87.120.46.0/23 maxlen: 24
94.156.2.0/24 maxlen: 24
94.156.8.0/24 maxlen: 24
91.92.16.0/24 maxlen: 24
91.92.21.0/24 maxlen: 24
91.92.26.0/23 maxlen: 24
193.58.121.0/24 maxlen: 24
193.58.123.0/24 maxlen: 24
94.156.131.0/24 maxlen: 24
94.156.154.0/23 maxlen: 24
91.92.67.0/24 maxlen: 24
94.156.78.0/23 maxlen: 24
37.139.130.0/23 maxlen: 24
212.87.205.0/24 maxlen: 24
87.121.146.0/23 maxlen: 24
178.215.236.0/24 maxlen: 24
178.215.238.0/24 maxlen: 24
87.121.163.0/24 maxlen: 24
87.121.69.0/24 maxlen: 24
185.252.177.0/24 maxlen: 24
193.222.97.0/24 maxlen: 24
193.47.62.0/24 maxlen: 24
193.37.42.0/24 maxlen: 24
87.121.103.0/24 maxlen: 24
87.121.114.0/23 maxlen: 24
31.13.252.0/22 maxlen: 24
Validation: Failed, RFC 3779 resource not subset of parent's resources
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:85:a6:2a:41:2c:14:69:6f:d8:1b:07:0f:b5:a0:0f:b2:b5
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=22c4ac3e3c43d70d05349c815baadd38ad775e9d
Validity
Not Before: Jan 12 13:27:45 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=d696a56aa5be966ac238d892e1d099a2b7c26c21
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:82:d8:b6:6a:34:b6:44:3e:5e:e5:1a:83:98:61:
78:33:af:16:7a:86:89:77:6c:ae:a6:27:d7:16:5b:
c6:61:72:5d:92:a2:85:ce:65:a7:94:80:6b:bf:a2:
fa:10:85:6d:83:bb:5d:17:6f:36:77:9a:ce:7d:2f:
bb:96:2c:8a:8d:c2:fc:32:82:22:5b:f3:a4:25:26:
5b:2d:f6:0e:af:a0:41:5f:df:f5:29:84:b6:4e:ae:
b5:1b:a0:0d:c1:dc:10:61:57:92:cd:eb:dc:69:24:
e1:3a:ba:48:55:3f:d3:70:c1:19:5c:f3:13:1c:c8:
4c:54:47:da:cc:4e:66:f2:53:65:14:a2:42:9d:3f:
c2:2b:e4:95:e3:88:a9:c0:67:af:71:3f:a9:6d:30:
59:29:35:a2:52:3f:dc:3a:4c:65:5b:ca:af:0d:74:
28:5b:39:82:fd:97:56:0d:3d:fc:71:18:e5:a8:d6:
de:aa:cf:00:07:a9:7a:b3:b4:8a:84:c8:e6:4e:e0:
f8:9b:b6:4c:8d:95:50:71:7e:68:a1:c7:0a:17:42:
f6:7b:c5:8e:01:c3:c9:f8:de:a7:ce:c5:6e:e8:f6:
fb:7b:a1:df:79:35:0e:21:e2:0d:46:be:6a:bb:85:
ea:d7:e2:b5:d4:d6:1a:c7:bd:83:3c:da:f9:9d:5c:
df:9b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D6:96:A5:6A:A5:BE:96:6A:C2:38:D8:92:E1:D0:99:A2:B7:C2:6C:21
X509v3 Authority Key Identifier:
keyid:22:C4:AC:3E:3C:43:D7:0D:05:34:9C:81:5B:AA:DD:38:AD:77:5E:9D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/IsSsPjxD1w0FNJyBW6rdOK13Xp0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/03/913a3a-f550-46f0-acc7-cd3ca5975712/1/1palaqW-lmrCONiS4dCZorfCbCE.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/03/913a3a-f550-46f0-acc7-cd3ca5975712/1/IsSsPjxD1w0FNJyBW6rdOK13Xp0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
31.13.252.0/22
37.139.130.0/23
87.120.32.0/22
87.120.46.0/23
87.120.64.0/23
87.120.96.0/23
87.120.100.0/22
87.120.192.0/23
87.120.218.0-87.120.221.255
87.121.36.0-87.121.38.255
87.121.60.0/22
87.121.69.0/24
87.121.103.0/24
87.121.114.0/23
87.121.146.0/23
87.121.163.0/24
91.92.16.0/24
91.92.21.0/24
91.92.26.0/23
91.92.67.0/24
93.123.24.0/24
93.123.26.0/23
93.123.30.0/23
93.123.39.0/24
93.123.68.0/22
93.123.76.0-93.123.80.255
93.123.85.0-93.123.87.255
93.123.112.0-93.123.117.255
93.123.119.0/24
94.154.160.0/23
94.154.173.0/24
94.156.2.0/24
94.156.8.0/24
94.156.78.0/23
94.156.131.0/24
94.156.154.0/23
94.156.168.0/23
94.156.176.0-94.156.181.255
94.156.237.0-94.156.238.255
178.215.236.0/24
178.215.238.0/24
185.252.177.0/24
193.25.219.0/24
193.37.42.0/24
193.47.62.0/24
193.58.121.0/24
193.58.123.0/24
193.222.97.0/24
194.48.249.0/24
194.55.187.0/24
194.55.226.0/24
212.87.205.0/24
Signature Algorithm: sha256WithRSAEncryption
a4:03:26:33:df:6e:43:fd:39:e3:4e:ca:6f:ea:72:87:3e:e1:
2b:ab:6f:89:d5:d5:fe:50:27:0d:9b:b5:34:f1:db:92:5e:43:
19:71:02:af:a9:81:eb:37:10:69:84:c2:8a:a5:ef:e4:70:73:
5c:8c:6d:01:59:93:85:b2:fc:d6:2e:94:5c:0c:92:9f:d8:12:
68:6d:ea:49:83:01:99:1f:5e:54:df:3a:d9:fa:3e:d9:c7:25:
ae:cd:fe:4f:29:a3:1e:81:86:1a:1c:3d:0d:ed:97:55:a7:6c:
00:92:b0:6f:55:ea:fe:92:f4:b7:0a:b0:e1:77:1b:09:4a:7c:
44:74:38:c5:1d:d3:e9:9a:f7:4c:cb:d5:c8:b9:96:36:d1:91:
cc:d2:72:ff:87:52:fa:46:82:61:01:17:9e:ca:1e:20:b4:e3:
f2:04:75:6f:a5:f4:47:ff:0c:94:c3:6f:fd:24:45:42:01:b2:
81:1f:ac:62:98:93:80:10:94:8b:d2:5a:a2:c1:3c:fd:d5:d9:
3b:31:8b:95:6b:f0:dc:8f:07:d8:d8:ff:78:bc:1f:ef:a3:b2:
bb:62:e0:21:d1:5c:15:de:ac:69:17:d1:aa:c1:c8:2a:f1:b7:
9b:47:69:80:e5:b9:13:8f:e5:80:48:a2:85:d8:2d:5f:2a:f9:
99:8f:ad:6c
-----BEGIN CERTIFICATE-----
MIIGcTCCBVmgAwIBAgISAYWmKkEsFGlv2BsHD7WgD7K1MA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDIyYzRhYzNlM2M0M2Q3MGQwNTM0OWM4MTViYWFkZDM4YWQ3
NzVlOWQwHhcNMjMwMTEyMTMyNzQ1WhcNMjQwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EyhkNjk2YTU2YWE1YmU5NjZhYzIzOGQ4OTJlMWQwOTlhMmI3YzI2YzIxMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAgti2ajS2RD5e5RqDmGF4M68WeoaJ
d2yupifXFlvGYXJdkqKFzmWnlIBrv6L6EIVtg7tdF282d5rOfS+7liyKjcL8MoIi
W/OkJSZbLfYOr6BBX9/1KYS2Tq61G6ANwdwQYVeSzevcaSThOrpIVT/TcMEZXPMT
HMhMVEfazE5m8lNlFKJCnT/CK+SV44ipwGevcT+pbTBZKTWiUj/cOkxlW8qvDXQo
WzmC/ZdWDT38cRjlqNbeqs8AB6l6s7SKhMjmTuD4m7ZMjZVQcX5ooccKF0L2e8WO
AcPJ+N6nzsVu6Pb7e6HfeTUOIeINRr5qu4Xq1+K11NYax72DPNr5nVzfmwIDAQAB
o4IDfTCCA3kwHQYDVR0OBBYEFNaWpWqlvpZqwjjYkuHQmaK3wmwhMB8GA1UdIwQY
MBaAFCLErD48Q9cNBTScgVuq3Titd16dMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvSXNTc1BqeEQxdzBGTkp5Qlc2cmRPSzEzWHAwLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8wMy85MTNhM2EtZjU1MC00NmYwLWFjYzct
Y2QzY2E1OTc1NzEyLzEvMXBhbGFxVy1sbXJDT05pUzRkQ1pvcmZDYkNFLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8wMy85MTNhM2EtZjU1MC00NmYwLWFjYzctY2QzY2E1OTc1NzEy
LzEvSXNTc1BqeEQxdzBGTkp5Qlc2cmRPSzEzWHAwLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMIIBkQYIKwYBBQUHAQcBAf8EggGAMIIBfDCCAXgEAgABMIIB
cAMEAh8N/AMEASWLggMEAld4IAMEAVd4LgMEAVd4QAMEAVd4YAMEAld4ZAMEAVd4
wDAMAwQBV3jaAwQBV3jcMAwDBAJXeSQDBABXeSYDBAJXeTwDBABXeUUDBABXeWcD
BAFXeXIDBAFXeZIDBABXeaMDBABbXBADBABbXBUDBAFbXBoDBABbXEMDBABdexgD
BAFdexoDBAFdex4DBABdeycDBAJde0QwDAMEAl17TAMEAF17UDAMAwQAXXtVAwQD
XXtQMAwDBARde3ADBAFde3QDBABde3cDBAFemqADBABemq0DBABenAIDBABenAgD
BAFenE4DBABenIMDBAFenJoDBAFenKgwDAMEBF6csAMEAV6ctDAMAwQAXpztAwQA
XpzuAwQAstfsAwQAstfuAwQAufyxAwQAwRnbAwQAwSUqAwQAwS8+AwQAwTp5AwQA
wTp7AwQAwd5hAwQAwjD5AwQAwje7AwQAwjfiAwQA1FfNMA0GCSqGSIb3DQEBCwUA
A4IBAQCkAyYz325D/TnjTspv6nKHPuErq2+J1dX+UCcNm7U08duSXkMZcQKvqYHr
NxBphMKKpe/kcHNcjG0BWZOFsvzWLpRcDJKf2BJobepJgwGZH15U3zrZ+j7ZxyWu
zf5PKaMegYYaHD0N7ZdVp2wAkrBvVer+kvS3CrDhdxsJSnxEdDjFHdPpmvdMy9XI
uZY20ZHM0nL/h1L6RoJhAReeyh4gtOPyBHVvpfRH/wyUw2/9JEVCAbKBH6ximJOA
EJSL0lqiwTz91dk7MYuVa/DcjwfY2P94vB/vo7K7YuAh0VwV3qxpF9Gqwcgq8beb
R2mA5bkTj+WASKKF2C1fKvmZj61s
-----END CERTIFICATE-----
Generated at Wed Jul 19 23:46:31 2023 by rpki-client on console-ams.rpki-client.org