Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/03/913a3a-f550-46f0-acc7-cd3ca5975712/1/5Idv2xrcbSDkM4ocJ20I7f-cDpI.roa
File: 5Idv2xrcbSDkM4ocJ20I7f-cDpI.roa (raw, json)
Hash identifier: Bvb7ewkseUV/Z7+569eIO/hELG5MO9986tc4nfaKNhQ=
Subject key identifier: E4:87:6F:DB:1A:DC:6D:20:E4:33:8A:1C:27:6D:08:ED:FF:9C:0E:92
Certificate issuer: /CN=22c4ac3e3c43d70d05349c815baadd38ad775e9d
Certificate serial: 0186502EDA911454E9E80E0B58A8F822A3C5
Authority key identifier: 22:C4:AC:3E:3C:43:D7:0D:05:34:9C:81:5B:AA:DD:38:AD:77:5E:9D
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/IsSsPjxD1w0FNJyBW6rdOK13Xp0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/03/913a3a-f550-46f0-acc7-cd3ca5975712/1/5Idv2xrcbSDkM4ocJ20I7f-cDpI.roa
Signing time: Tue 14 Feb 2023 13:48:13 +0000
ROA not before: Tue 14 Feb 2023 13:48:13 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 8100
IP address blocks: 87.120.192.0/23 maxlen: 24
87.121.36.0/23 maxlen: 24
87.121.38.0/24 maxlen: 24
87.121.60.0/22 maxlen: 24
87.120.219.0/24 maxlen: 24
94.154.160.0/23 maxlen: 24
94.154.173.0/24 maxlen: 24
93.123.39.0/24 maxlen: 24
94.156.237.0/24 maxlen: 24
194.55.226.0/24 maxlen: 24
94.156.238.0/24 maxlen: 24
93.123.68.0/22 maxlen: 24
93.123.76.0/22 maxlen: 24
93.123.80.0/24 maxlen: 24
93.123.86.0/23 maxlen: 24
94.156.168.0/23 maxlen: 24
94.156.176.0/22 maxlen: 24
94.156.180.0/23 maxlen: 24
93.123.24.0/24 maxlen: 24
194.48.249.0/24 maxlen: 24
93.123.30.0/23 maxlen: 24
93.123.26.0/23 maxlen: 24
87.120.64.0/23 maxlen: 24
87.120.96.0/23 maxlen: 24
93.123.112.0/22 maxlen: 24
93.123.116.0/23 maxlen: 24
93.123.119.0/24 maxlen: 24
87.120.32.0/22 maxlen: 24
193.25.219.0/24 maxlen: 24
87.120.46.0/23 maxlen: 24
94.156.2.0/24 maxlen: 24
94.156.8.0/24 maxlen: 24
91.92.16.0/24 maxlen: 24
91.92.21.0/24 maxlen: 24
91.92.26.0/23 maxlen: 24
193.58.121.0/24 maxlen: 24
193.58.123.0/24 maxlen: 24
94.156.131.0/24 maxlen: 24
94.156.152.0/24 maxlen: 24
94.156.154.0/23 maxlen: 24
91.92.67.0/24 maxlen: 24
94.156.78.0/23 maxlen: 24
37.139.130.0/23 maxlen: 24
212.87.205.0/24 maxlen: 24
87.121.146.0/23 maxlen: 24
178.215.238.0/24 maxlen: 24
87.121.163.0/24 maxlen: 24
185.252.177.0/24 maxlen: 24
193.47.62.0/24 maxlen: 24
87.121.103.0/24 maxlen: 24
87.121.114.0/23 maxlen: 24
31.13.252.0/22 maxlen: 24
Validation: Failed, RFC 3779 resource not subset of parent's resources
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:86:50:2e:da:91:14:54:e9:e8:0e:0b:58:a8:f8:22:a3:c5
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=22c4ac3e3c43d70d05349c815baadd38ad775e9d
Validity
Not Before: Feb 14 13:48:13 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=e4876fdb1adc6d20e4338a1c276d08edff9c0e92
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a4:ce:df:c5:05:63:d4:02:81:83:de:1c:2a:ea:
7b:1f:08:4d:f5:62:e9:f1:7f:df:e2:f4:c6:6e:77:
48:f7:f4:aa:b7:83:60:53:d7:83:0e:8b:fe:0b:2a:
d5:23:53:5f:a1:7d:3c:78:7d:38:0f:3a:21:0f:df:
fe:a7:9f:ae:91:7b:d0:0b:fb:bd:c3:fa:62:47:53:
5d:bf:43:6d:ef:ee:73:96:98:b2:b2:36:81:ed:f6:
b1:83:9b:c9:d5:80:d6:c9:ce:a3:a1:50:32:f7:65:
d6:8f:ce:39:e5:50:7b:71:6d:73:1d:9f:53:6d:75:
72:38:17:27:c5:61:06:ff:9a:f9:25:82:5b:1a:2f:
3a:7d:60:5d:6f:27:07:ef:e0:79:d0:16:11:9a:45:
77:9a:aa:a3:a8:c2:0a:fe:e6:ac:96:72:9d:8d:07:
42:27:af:c3:68:a3:ff:1c:63:ab:c6:e4:7c:22:e3:
f6:cc:3b:eb:d0:e9:4c:7b:4c:d7:05:55:10:c9:fd:
86:aa:f3:19:21:16:de:8f:08:f0:24:e5:d5:8d:9c:
16:a4:5d:cd:15:d1:35:58:8e:ed:38:9c:af:e7:08:
cf:fc:92:0d:a2:28:0d:74:94:9a:80:4e:57:aa:0f:
d4:4e:be:af:78:32:65:aa:8f:2e:01:93:27:fe:3d:
6b:03
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E4:87:6F:DB:1A:DC:6D:20:E4:33:8A:1C:27:6D:08:ED:FF:9C:0E:92
X509v3 Authority Key Identifier:
keyid:22:C4:AC:3E:3C:43:D7:0D:05:34:9C:81:5B:AA:DD:38:AD:77:5E:9D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/IsSsPjxD1w0FNJyBW6rdOK13Xp0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/03/913a3a-f550-46f0-acc7-cd3ca5975712/1/5Idv2xrcbSDkM4ocJ20I7f-cDpI.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/03/913a3a-f550-46f0-acc7-cd3ca5975712/1/IsSsPjxD1w0FNJyBW6rdOK13Xp0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
31.13.252.0/22
37.139.130.0/23
87.120.32.0/22
87.120.46.0/23
87.120.64.0/23
87.120.96.0/23
87.120.192.0/23
87.120.219.0/24
87.121.36.0-87.121.38.255
87.121.60.0/22
87.121.103.0/24
87.121.114.0/23
87.121.146.0/23
87.121.163.0/24
91.92.16.0/24
91.92.21.0/24
91.92.26.0/23
91.92.67.0/24
93.123.24.0/24
93.123.26.0/23
93.123.30.0/23
93.123.39.0/24
93.123.68.0/22
93.123.76.0-93.123.80.255
93.123.86.0/23
93.123.112.0-93.123.117.255
93.123.119.0/24
94.154.160.0/23
94.154.173.0/24
94.156.2.0/24
94.156.8.0/24
94.156.78.0/23
94.156.131.0/24
94.156.152.0/24
94.156.154.0/23
94.156.168.0/23
94.156.176.0-94.156.181.255
94.156.237.0-94.156.238.255
178.215.238.0/24
185.252.177.0/24
193.25.219.0/24
193.47.62.0/24
193.58.121.0/24
193.58.123.0/24
194.48.249.0/24
194.55.226.0/24
212.87.205.0/24
Signature Algorithm: sha256WithRSAEncryption
2f:c1:9b:9a:4d:5c:2d:0f:c4:08:20:bb:64:8a:ec:93:ef:9c:
e1:ca:74:7e:a7:15:54:fc:a4:38:d4:90:5d:e4:3f:57:79:6d:
2e:d5:9b:c2:6d:70:b7:d2:fa:e9:50:4f:40:0a:34:e8:9c:27:
33:65:52:8b:b4:79:bc:8c:8f:45:34:6e:9f:18:1c:5a:ff:bc:
e5:99:f7:9f:8d:7a:0c:0e:7a:c4:c6:b3:d0:70:a1:58:5b:cc:
81:69:d4:7f:c6:0a:2a:05:b3:7c:29:fa:8f:a7:77:ce:f6:a1:
6c:29:ad:7b:9f:3b:ae:36:a6:78:44:21:d4:cd:6d:17:25:8c:
e5:d8:f7:53:ff:3e:fa:a0:cf:cd:89:69:ec:f6:20:d4:e7:66:
f7:28:1d:e3:b7:32:69:dd:54:0f:b6:68:2e:56:07:61:f6:5b:
47:31:ff:d3:7b:c5:26:80:5c:3a:38:c1:93:fe:6b:fe:1f:4b:
6a:70:3f:16:15:33:fe:55:6a:f7:57:98:38:c2:22:41:96:a3:
ba:47:48:22:f0:0a:f0:da:cb:f2:2e:96:85:21:83:2b:94:2f:
ed:e2:3b:7e:6b:d8:7d:7f:ff:76:fe:2c:fb:08:89:dc:20:1d:
53:08:98:32:99:d4:ee:3a:22:3d:0c:e9:20:03:9c:65:3b:2d:
05:35:e3:75
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 19 23:46:31 2023 by rpki-client on console-ams.rpki-client.org