Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/03/913a3a-f550-46f0-acc7-cd3ca5975712/1/967i0ZasATO7p_EHuk3BOs6r9J4.roa
File: 967i0ZasATO7p_EHuk3BOs6r9J4.roa (raw, json)
Hash identifier: jjW85a4sz9134z7d2IVbexdgqO+Omr349jRzsLeo5ww=
Subject key identifier: F7:AE:E2:D1:96:AC:01:33:BB:A7:F1:07:BA:4D:C1:3A:CE:AB:F4:9E
Certificate issuer: /CN=22c4ac3e3c43d70d05349c815baadd38ad775e9d
Certificate serial: 01860B87C52AB7BDB1023D25F8014D8A4442
Authority key identifier: 22:C4:AC:3E:3C:43:D7:0D:05:34:9C:81:5B:AA:DD:38:AD:77:5E:9D
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/IsSsPjxD1w0FNJyBW6rdOK13Xp0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/03/913a3a-f550-46f0-acc7-cd3ca5975712/1/967i0ZasATO7p_EHuk3BOs6r9J4.roa
Signing time: Wed 01 Feb 2023 05:51:32 +0000
ROA not before: Wed 01 Feb 2023 05:51:32 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 8100
IP address blocks: 87.120.192.0/23 maxlen: 24
87.121.36.0/23 maxlen: 24
87.121.38.0/24 maxlen: 24
87.121.60.0/22 maxlen: 24
87.120.219.0/24 maxlen: 24
87.120.220.0/23 maxlen: 24
94.154.160.0/23 maxlen: 24
94.154.173.0/24 maxlen: 24
93.123.39.0/24 maxlen: 24
94.156.237.0/24 maxlen: 24
194.55.226.0/24 maxlen: 24
94.156.238.0/24 maxlen: 24
93.123.68.0/22 maxlen: 24
93.123.76.0/22 maxlen: 24
93.123.85.0/24 maxlen: 24
93.123.80.0/24 maxlen: 24
93.123.86.0/23 maxlen: 24
94.156.168.0/23 maxlen: 24
94.156.176.0/22 maxlen: 24
94.156.180.0/23 maxlen: 24
93.123.24.0/24 maxlen: 24
194.48.249.0/24 maxlen: 24
93.123.30.0/23 maxlen: 24
93.123.26.0/23 maxlen: 24
87.120.64.0/23 maxlen: 24
87.120.96.0/23 maxlen: 24
93.123.112.0/22 maxlen: 24
93.123.116.0/23 maxlen: 24
93.123.119.0/24 maxlen: 24
87.120.32.0/22 maxlen: 24
193.25.219.0/24 maxlen: 24
87.120.46.0/23 maxlen: 24
94.156.2.0/24 maxlen: 24
94.156.8.0/24 maxlen: 24
91.92.16.0/24 maxlen: 24
91.92.21.0/24 maxlen: 24
91.92.26.0/23 maxlen: 24
193.58.121.0/24 maxlen: 24
193.58.123.0/24 maxlen: 24
94.156.131.0/24 maxlen: 24
94.156.152.0/24 maxlen: 24
94.156.154.0/23 maxlen: 24
91.92.67.0/24 maxlen: 24
94.156.78.0/23 maxlen: 24
37.139.130.0/23 maxlen: 24
212.87.205.0/24 maxlen: 24
87.121.146.0/23 maxlen: 24
178.215.238.0/24 maxlen: 24
87.121.163.0/24 maxlen: 24
87.121.69.0/24 maxlen: 24
185.252.177.0/24 maxlen: 24
193.47.62.0/24 maxlen: 24
87.121.103.0/24 maxlen: 24
87.121.114.0/23 maxlen: 24
31.13.252.0/22 maxlen: 24
Validation: Failed, RFC 3779 resource not subset of parent's resources
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:86:0b:87:c5:2a:b7:bd:b1:02:3d:25:f8:01:4d:8a:44:42
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=22c4ac3e3c43d70d05349c815baadd38ad775e9d
Validity
Not Before: Feb 1 05:51:32 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=f7aee2d196ac0133bba7f107ba4dc13aceabf49e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c2:a1:6b:a7:45:fa:84:6a:8c:c5:2d:e9:0a:c1:
3d:1e:16:29:44:42:c1:f6:29:bd:da:08:19:ec:97:
9c:fb:06:55:8e:ff:3e:18:16:cb:d5:f4:78:3b:3a:
50:51:c7:e3:86:3c:74:9e:05:49:f6:f7:c7:95:64:
60:68:24:e2:0f:67:ff:b2:6e:b0:36:a7:80:96:e0:
e6:3f:62:5a:3b:5b:1d:ab:de:f1:d1:6a:8d:87:21:
d0:db:56:dc:00:2c:ee:53:78:b2:af:e4:b2:53:65:
89:4d:f6:3e:66:0e:1a:69:26:0f:52:80:9d:b0:06:
d0:07:68:39:67:14:f1:65:7a:fd:77:0f:f7:04:e7:
ac:be:4f:b3:69:bc:12:5d:4a:59:2e:ee:ba:30:c3:
ef:f2:54:35:aa:25:43:90:ec:c7:1d:20:0f:1d:10:
86:47:42:9d:a1:90:ef:8a:94:10:14:6b:43:92:f5:
06:65:d8:c1:f2:84:76:fe:38:01:ed:c4:87:95:0d:
b1:7f:b6:9f:d4:7e:ba:4b:ac:92:30:ac:9b:41:6d:
93:a4:4c:ab:ab:6d:59:1a:ec:a4:67:c6:84:6f:ec:
8d:6b:d1:db:57:23:1b:43:3a:e1:10:6c:f3:fb:8c:
39:44:e1:52:db:91:8c:e8:74:ba:ed:75:2a:e9:c0:
88:3f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F7:AE:E2:D1:96:AC:01:33:BB:A7:F1:07:BA:4D:C1:3A:CE:AB:F4:9E
X509v3 Authority Key Identifier:
keyid:22:C4:AC:3E:3C:43:D7:0D:05:34:9C:81:5B:AA:DD:38:AD:77:5E:9D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/IsSsPjxD1w0FNJyBW6rdOK13Xp0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/03/913a3a-f550-46f0-acc7-cd3ca5975712/1/967i0ZasATO7p_EHuk3BOs6r9J4.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/03/913a3a-f550-46f0-acc7-cd3ca5975712/1/IsSsPjxD1w0FNJyBW6rdOK13Xp0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
31.13.252.0/22
37.139.130.0/23
87.120.32.0/22
87.120.46.0/23
87.120.64.0/23
87.120.96.0/23
87.120.192.0/23
87.120.219.0-87.120.221.255
87.121.36.0-87.121.38.255
87.121.60.0/22
87.121.69.0/24
87.121.103.0/24
87.121.114.0/23
87.121.146.0/23
87.121.163.0/24
91.92.16.0/24
91.92.21.0/24
91.92.26.0/23
91.92.67.0/24
93.123.24.0/24
93.123.26.0/23
93.123.30.0/23
93.123.39.0/24
93.123.68.0/22
93.123.76.0-93.123.80.255
93.123.85.0-93.123.87.255
93.123.112.0-93.123.117.255
93.123.119.0/24
94.154.160.0/23
94.154.173.0/24
94.156.2.0/24
94.156.8.0/24
94.156.78.0/23
94.156.131.0/24
94.156.152.0/24
94.156.154.0/23
94.156.168.0/23
94.156.176.0-94.156.181.255
94.156.237.0-94.156.238.255
178.215.238.0/24
185.252.177.0/24
193.25.219.0/24
193.47.62.0/24
193.58.121.0/24
193.58.123.0/24
194.48.249.0/24
194.55.226.0/24
212.87.205.0/24
Signature Algorithm: sha256WithRSAEncryption
46:0e:ce:85:5e:2c:11:e3:9f:a4:2d:20:64:df:df:8d:75:74:
e2:90:a1:ae:67:21:f6:23:b6:15:1b:cc:5b:fd:d8:07:41:dc:
6a:4e:b0:dc:83:5b:74:75:28:fd:9c:fd:5b:30:bb:aa:0d:99:
81:e3:ec:54:ea:66:50:e1:bf:b8:4a:00:ac:6b:05:40:e3:e1:
2d:48:a4:ab:60:82:cb:32:c6:98:da:36:7d:99:05:7e:52:e7:
d3:9c:63:7a:60:0d:56:21:59:ed:2c:f1:30:47:e1:e4:18:ee:
b9:fd:ac:e2:30:80:a9:6b:d0:fb:d8:ad:6d:9a:4a:0e:a1:53:
3d:3a:eb:4d:b6:2c:ca:47:7f:47:a0:bc:0a:c1:eb:ab:c3:04:
ed:0a:d2:cf:04:3b:9a:80:fe:ba:1d:4d:e2:18:89:88:61:10:
09:ea:57:75:28:2b:77:08:dc:2c:64:fd:96:2e:79:25:e1:57:
ee:8a:97:64:cb:0d:b5:84:32:bb:e7:46:3d:a6:ae:4b:5b:8d:
7e:53:fa:2b:d4:eb:b0:23:37:78:ff:77:a7:1b:d3:ad:11:69:
ae:26:c1:90:35:84:a4:ac:cd:00:bb:ff:94:1c:10:ef:5c:ed:
1e:98:e6:b4:8c:8c:be:02:70:92:96:4b:eb:1b:d2:23:ef:73:
68:a4:0c:a5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 19 23:46:32 2023 by rpki-client on console-ams.rpki-client.org