Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/03/913a3a-f550-46f0-acc7-cd3ca5975712/1/4ATliKx8tK5nvr7QbNh1S7nOTyM.roa
File: 4ATliKx8tK5nvr7QbNh1S7nOTyM.roa (raw, json)
Hash identifier: bGLoMUzmcT9aYhMjNUmhTJ6kop53wbDyuV8mdetvEac=
Subject key identifier: E0:04:E5:88:AC:7C:B4:AE:67:BE:BE:D0:6C:D8:75:4B:B9:CE:4F:23
Certificate issuer: /CN=22c4ac3e3c43d70d05349c815baadd38ad775e9d
Certificate serial: 0183A316895002E2A4178374A22DB8F5C1AE
Authority key identifier: 22:C4:AC:3E:3C:43:D7:0D:05:34:9C:81:5B:AA:DD:38:AD:77:5E:9D
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/IsSsPjxD1w0FNJyBW6rdOK13Xp0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/03/913a3a-f550-46f0-acc7-cd3ca5975712/1/4ATliKx8tK5nvr7QbNh1S7nOTyM.roa
Signing time: Tue 04 Oct 2022 13:01:46 +0000
ROA not before: Tue 04 Oct 2022 13:01:46 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 0
IP address blocks: 87.121.124.0/23 maxlen: 24
164.40.185.0/24 maxlen: 24
185.218.137.0/24 maxlen: 24
185.218.139.0/24 maxlen: 24
176.125.252.0/22 maxlen: 24
94.154.162.0/23 maxlen: 24
94.154.161.0/24 maxlen: 24
194.48.248.0/24 maxlen: 24
Validation: Failed, RFC 3779 resource not subset of parent's resources
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:83:a3:16:89:50:02:e2:a4:17:83:74:a2:2d:b8:f5:c1:ae
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=22c4ac3e3c43d70d05349c815baadd38ad775e9d
Validity
Not Before: Oct 4 13:01:46 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=e004e588ac7cb4ae67bebed06cd8754bb9ce4f23
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:80:79:74:c6:70:15:d1:7b:e5:6a:a8:f9:44:82:
fd:8e:92:36:36:55:4a:9b:e9:a5:96:25:5c:b2:04:
c6:40:a7:c5:b4:a8:95:81:56:e9:3f:fc:4b:74:d9:
4a:39:96:b7:df:8c:64:84:9c:af:bf:a1:ca:a4:22:
a0:27:a0:c5:bf:62:f6:55:d2:86:a3:74:02:f0:b1:
03:41:29:87:d0:c8:90:5d:f3:19:e2:50:fe:1c:63:
1c:4f:49:ac:d8:7e:0f:c9:54:ca:7c:bc:b3:97:cd:
0e:73:62:3a:9e:60:65:bc:fe:ab:14:46:5b:73:5d:
d1:f5:d1:c5:7f:cf:e5:1f:36:ae:ec:2e:83:d5:6e:
92:cf:36:59:1c:42:36:30:73:d8:33:55:e7:8a:fb:
c8:bf:bf:0a:e4:9b:51:c1:14:40:94:d6:74:98:54:
8b:f3:23:4a:8d:83:ef:b4:c3:16:c0:82:66:90:6a:
78:cc:75:48:56:53:1d:ea:b4:e1:5e:66:63:e0:1f:
07:7e:b5:c8:3a:c9:7e:9a:20:f8:18:e3:46:9a:b2:
a6:b8:92:b2:f2:99:70:51:62:dd:eb:a7:55:3d:3e:
91:16:6a:8e:1c:33:94:ad:5e:2b:4f:79:49:01:e4:
9a:b3:0b:e1:58:37:9c:89:41:65:95:9a:a7:51:f1:
bf:99
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E0:04:E5:88:AC:7C:B4:AE:67:BE:BE:D0:6C:D8:75:4B:B9:CE:4F:23
X509v3 Authority Key Identifier:
keyid:22:C4:AC:3E:3C:43:D7:0D:05:34:9C:81:5B:AA:DD:38:AD:77:5E:9D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/IsSsPjxD1w0FNJyBW6rdOK13Xp0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/03/913a3a-f550-46f0-acc7-cd3ca5975712/1/4ATliKx8tK5nvr7QbNh1S7nOTyM.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/03/913a3a-f550-46f0-acc7-cd3ca5975712/1/IsSsPjxD1w0FNJyBW6rdOK13Xp0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
87.121.124.0/23
94.154.161.0-94.154.163.255
164.40.185.0/24
176.125.252.0/22
185.218.137.0/24
185.218.139.0/24
194.48.248.0/24
Signature Algorithm: sha256WithRSAEncryption
37:a1:e6:fc:19:58:de:a4:05:f5:a6:11:0c:7c:b3:38:c8:d8:
cb:82:33:6b:5e:2f:73:9f:b2:9b:51:61:6a:aa:cc:3d:b8:50:
14:e2:14:66:d0:e1:a3:d7:34:91:db:e6:47:11:45:69:63:1b:
a2:82:44:57:de:0c:3c:36:55:29:6f:99:45:55:d4:fe:51:c5:
1d:26:2b:a7:e4:a2:c2:c5:89:f8:1c:b0:f6:2f:82:e0:f6:20:
31:ca:3d:4a:e7:b2:a2:ac:e5:78:08:5a:67:f0:22:b2:a3:c1:
f1:2f:00:86:d6:21:ec:66:95:04:77:4d:8c:a4:5b:8d:4e:a9:
43:e9:a5:3a:a4:fa:b4:d5:8d:6e:5f:d3:05:ac:22:ec:98:18:
98:4b:c9:57:23:80:ab:31:6a:49:3d:7e:cd:e4:7c:ba:ca:f8:
80:83:ed:33:6d:f0:6c:dc:13:6d:a0:1e:2d:f5:f7:0c:c5:5c:
6f:b1:a0:35:8e:da:c4:e5:5d:ad:4e:cb:55:fb:d3:1c:38:96:
cc:53:1c:94:cd:43:4d:0f:88:e1:32:69:88:b9:df:fa:95:a1:
95:dd:90:d4:98:af:9d:ea:51:da:a7:ac:1a:e0:f2:8f:ec:0d:
85:96:ec:e0:4d:84:b6:ae:30:cd:3a:b5:97:40:7c:f1:53:0f:
0f:e8:58:52
-----BEGIN CERTIFICATE-----
MIIFKTCCBBGgAwIBAgISAYOjFolQAuKkF4N0oi249cGuMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDIyYzRhYzNlM2M0M2Q3MGQwNTM0OWM4MTViYWFkZDM4YWQ3
NzVlOWQwHhcNMjIxMDA0MTMwMTQ2WhcNMjMwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EyhlMDA0ZTU4OGFjN2NiNGFlNjdiZWJlZDA2Y2Q4NzU0YmI5Y2U0ZjIzMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAgHl0xnAV0Xvlaqj5RIL9jpI2NlVK
m+mlliVcsgTGQKfFtKiVgVbpP/xLdNlKOZa334xkhJyvv6HKpCKgJ6DFv2L2VdKG
o3QC8LEDQSmH0MiQXfMZ4lD+HGMcT0ms2H4PyVTKfLyzl80Oc2I6nmBlvP6rFEZb
c13R9dHFf8/lHzau7C6D1W6SzzZZHEI2MHPYM1XnivvIv78K5JtRwRRAlNZ0mFSL
8yNKjYPvtMMWwIJmkGp4zHVIVlMd6rThXmZj4B8HfrXIOsl+miD4GONGmrKmuJKy
8plwUWLd66dVPT6RFmqOHDOUrV4rT3lJAeSaswvhWDeciUFllZqnUfG/mQIDAQAB
o4ICNTCCAjEwHQYDVR0OBBYEFOAE5YisfLSuZ76+0GzYdUu5zk8jMB8GA1UdIwQY
MBaAFCLErD48Q9cNBTScgVuq3Titd16dMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvSXNTc1BqeEQxdzBGTkp5Qlc2cmRPSzEzWHAwLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8wMy85MTNhM2EtZjU1MC00NmYwLWFjYzct
Y2QzY2E1OTc1NzEyLzEvNEFUbGlLeDh0SzVudnI3UWJOaDFTN25PVHlNLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8wMy85MTNhM2EtZjU1MC00NmYwLWFjYzctY2QzY2E1OTc1NzEy
LzEvSXNTc1BqeEQxdzBGTkp5Qlc2cmRPSzEzWHAwLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMEsGCCsGAQUFBwEHAQH/BDwwOjA4BAIAATAyAwQBV3l8MAwD
BABemqEDBAJemqADBACkKLkDBAKwffwDBAC52okDBAC52osDBADCMPgwDQYJKoZI
hvcNAQELBQADggEBADeh5vwZWN6kBfWmEQx8szjI2MuCM2teL3OfsptRYWqqzD24
UBTiFGbQ4aPXNJHb5kcRRWljG6KCRFfeDDw2VSlvmUVV1P5RxR0mK6fkosLFifgc
sPYvguD2IDHKPUrnsqKs5XgIWmfwIrKjwfEvAIbWIexmlQR3TYykW41OqUPppTqk
+rTVjW5f0wWsIuyYGJhLyVcjgKsxakk9fs3kfLrK+ICD7TNt8GzcE22gHi319wzF
XG+xoDWO2sTlXa1Oy1X70xw4lsxTHJTNQ00PiOEyaYi53/qVoZXdkNSYr53qUdqn
rBrg8o/sDYWW7OBNhLauMM06tZdAfPFTDw/oWFI=
-----END CERTIFICATE-----
Generated at Wed Jul 19 23:42:37 2023 by rpki-client on console-fra.rpki-client.org