Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/03/913a3a-f550-46f0-acc7-cd3ca5975712/1/I__AAGcri10TbXiTKjSeLbpIhy0.roa
File: I__AAGcri10TbXiTKjSeLbpIhy0.roa (raw, json)
Hash identifier: EuDFIAFu7//6OfgSr8+rPgQouvtxQwfeevlcsNSHVUU=
Subject key identifier: 23:FF:C0:00:67:2B:8B:5D:13:6D:78:93:2A:34:9E:2D:BA:48:87:2D
Certificate issuer: /CN=22c4ac3e3c43d70d05349c815baadd38ad775e9d
Certificate serial: 01856D81DF7195FE80696405F3BD8C336D79
Authority key identifier: 22:C4:AC:3E:3C:43:D7:0D:05:34:9C:81:5B:AA:DD:38:AD:77:5E:9D
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/IsSsPjxD1w0FNJyBW6rdOK13Xp0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/03/913a3a-f550-46f0-acc7-cd3ca5975712/1/I__AAGcri10TbXiTKjSeLbpIhy0.roa
Signing time: Sun 01 Jan 2023 13:25:05 +0000
ROA not before: Sun 01 Jan 2023 13:25:05 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 31420
IP address blocks: 94.156.48.0/24 maxlen: 24
94.156.50.0/24 maxlen: 24
94.156.51.0/24 maxlen: 24
94.156.49.0/24 maxlen: 24
94.156.52.0/24 maxlen: 24
94.156.64.0/24 maxlen: 24
94.156.68.0/24 maxlen: 24
94.156.66.0/24 maxlen: 24
94.156.70.0/24 maxlen: 24
94.156.65.0/24 maxlen: 24
94.156.69.0/24 maxlen: 24
94.156.67.0/24 maxlen: 24
94.156.71.0/24 maxlen: 24
94.156.74.0/24 maxlen: 24
94.156.72.0/24 maxlen: 24
94.156.75.0/24 maxlen: 24
94.156.73.0/24 maxlen: 24
87.121.169.0/24 maxlen: 24
87.121.171.0/24 maxlen: 24
87.121.168.0/22 maxlen: 22
87.121.172.0/22 maxlen: 22
87.121.172.0/24 maxlen: 24
87.121.170.0/24 maxlen: 24
87.121.175.0/24 maxlen: 24
87.121.173.0/24 maxlen: 24
87.121.174.0/24 maxlen: 24
Validation: Failed, RFC 3779 resource not subset of parent's resources
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:85:6d:81:df:71:95:fe:80:69:64:05:f3:bd:8c:33:6d:79
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=22c4ac3e3c43d70d05349c815baadd38ad775e9d
Validity
Not Before: Jan 1 13:25:05 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=23ffc000672b8b5d136d78932a349e2dba48872d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a9:4c:d7:d5:33:a4:28:b7:e8:a4:37:64:64:fc:
9e:43:f0:39:31:ce:68:dd:41:d4:eb:7e:90:01:a5:
8f:07:89:55:e1:8e:13:26:21:7b:8e:d3:56:1f:27:
f0:5d:9c:a3:4f:ff:74:f2:82:61:38:36:47:19:99:
f2:47:cb:1b:cc:08:3a:71:97:ca:e1:66:8f:f5:28:
3b:9b:fb:ab:23:2e:2b:52:a6:7c:c1:e4:ad:b0:7f:
33:75:06:5c:76:4c:01:6c:e4:7a:89:3e:ee:da:ff:
74:ba:83:a1:aa:1a:10:ab:2c:14:d2:ba:92:0a:e3:
3a:f5:a1:61:bb:30:56:9e:95:0c:5a:01:5e:a9:62:
b2:ff:e3:56:c2:2a:11:46:11:a5:df:f6:ff:87:90:
9f:89:aa:5c:7c:6d:80:26:08:64:78:0a:2e:98:36:
a7:b8:f6:78:1f:c9:c0:94:39:de:e0:dc:19:26:4c:
2d:ee:10:47:96:a9:4f:5c:e7:5a:94:e1:1d:a4:ff:
d5:20:c2:78:5e:61:ab:ab:49:99:23:0e:8e:fd:90:
52:98:43:58:07:14:91:f7:2b:6d:ec:d2:8d:50:69:
a6:5c:81:e3:e2:c1:15:c2:45:ab:f8:30:75:ea:c8:
55:21:fe:03:c6:13:8f:31:db:fd:fd:0e:2d:8c:36:
44:63
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
23:FF:C0:00:67:2B:8B:5D:13:6D:78:93:2A:34:9E:2D:BA:48:87:2D
X509v3 Authority Key Identifier:
keyid:22:C4:AC:3E:3C:43:D7:0D:05:34:9C:81:5B:AA:DD:38:AD:77:5E:9D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/IsSsPjxD1w0FNJyBW6rdOK13Xp0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/03/913a3a-f550-46f0-acc7-cd3ca5975712/1/I__AAGcri10TbXiTKjSeLbpIhy0.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/03/913a3a-f550-46f0-acc7-cd3ca5975712/1/IsSsPjxD1w0FNJyBW6rdOK13Xp0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
87.121.168.0/21
94.156.48.0-94.156.52.255
94.156.64.0-94.156.75.255
Signature Algorithm: sha256WithRSAEncryption
9f:a9:1f:51:c0:7c:d4:0d:aa:79:26:04:ce:27:ea:8e:fa:38:
a5:43:f2:47:2a:ef:20:b3:e1:6e:7c:1c:ab:10:6f:ae:a9:8b:
ec:2a:5e:da:d0:9d:07:a5:4b:1b:e1:10:1e:cb:4c:d8:02:cb:
a0:8d:01:f1:b3:b4:cf:ae:3d:e3:bf:72:f5:85:15:d8:56:c1:
30:07:7a:48:4f:e8:7e:1f:60:33:ed:3d:3b:a7:d2:cd:a4:65:
88:59:9c:94:21:2e:5e:15:c1:76:12:3e:bd:26:1c:94:ce:42:
c7:0b:80:15:05:3e:74:b5:2f:15:52:50:47:21:64:c0:0e:90:
29:09:ef:1b:84:0c:a1:a5:f7:58:e2:db:6f:a5:b6:ab:1c:3e:
55:76:69:0a:77:9f:14:d7:5a:37:0a:52:45:14:2a:c5:52:f3:
32:61:43:43:ee:cc:2b:02:4f:6c:fc:6e:9e:ba:df:3b:7d:be:
fe:3f:6d:4a:ad:3b:37:31:2b:ab:39:c3:85:fa:6b:0c:8f:2c:
9e:6e:47:39:ce:8a:b4:cf:8b:d2:54:4b:a7:69:a5:08:ae:fc:
cd:bd:21:aa:c7:02:3a:7d:e7:23:b0:e7:cc:ee:ac:56:de:a7:
92:c4:79:d2:a8:64:36:54:b8:8c:ba:f4:7f:dd:cf:f7:8a:9d:
c3:f8:4b:94
-----BEGIN CERTIFICATE-----
MIIFGTCCBAGgAwIBAgISAYVtgd9xlf6AaWQF872MM215MA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDIyYzRhYzNlM2M0M2Q3MGQwNTM0OWM4MTViYWFkZDM4YWQ3
NzVlOWQwHhcNMjMwMTAxMTMyNTA1WhcNMjQwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EygyM2ZmYzAwMDY3MmI4YjVkMTM2ZDc4OTMyYTM0OWUyZGJhNDg4NzJkMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAqUzX1TOkKLfopDdkZPyeQ/A5Mc5o
3UHU636QAaWPB4lV4Y4TJiF7jtNWHyfwXZyjT/908oJhODZHGZnyR8sbzAg6cZfK
4WaP9Sg7m/urIy4rUqZ8weStsH8zdQZcdkwBbOR6iT7u2v90uoOhqhoQqywU0rqS
CuM69aFhuzBWnpUMWgFeqWKy/+NWwioRRhGl3/b/h5CfiapcfG2AJghkeAoumDan
uPZ4H8nAlDne4NwZJkwt7hBHlqlPXOdalOEdpP/VIMJ4XmGrq0mZIw6O/ZBSmENY
BxSR9ytt7NKNUGmmXIHj4sEVwkWr+DB16shVIf4DxhOPMdv9/Q4tjDZEYwIDAQAB
o4ICJTCCAiEwHQYDVR0OBBYEFCP/wABnK4tdE214kyo0ni26SIctMB8GA1UdIwQY
MBaAFCLErD48Q9cNBTScgVuq3Titd16dMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvSXNTc1BqeEQxdzBGTkp5Qlc2cmRPSzEzWHAwLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8wMy85MTNhM2EtZjU1MC00NmYwLWFjYzct
Y2QzY2E1OTc1NzEyLzEvSV9fQUFHY3JpMTBUYlhpVEtqU2VMYnBJaHkwLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8wMy85MTNhM2EtZjU1MC00NmYwLWFjYzctY2QzY2E1OTc1NzEy
LzEvSXNTc1BqeEQxdzBGTkp5Qlc2cmRPSzEzWHAwLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMDsGCCsGAQUFBwEHAQH/BCwwKjAoBAIAATAiAwQDV3moMAwD
BARenDADBABenDQwDAMEBl6cQAMEAl6cSDANBgkqhkiG9w0BAQsFAAOCAQEAn6kf
UcB81A2qeSYEzifqjvo4pUPyRyrvILPhbnwcqxBvrqmL7Cpe2tCdB6VLG+EQHstM
2ALLoI0B8bO0z649479y9YUV2FbBMAd6SE/ofh9gM+09O6fSzaRliFmclCEuXhXB
dhI+vSYclM5CxwuAFQU+dLUvFVJQRyFkwA6QKQnvG4QMoaX3WOLbb6W2qxw+VXZp
CnefFNdaNwpSRRQqxVLzMmFDQ+7MKwJPbPxunrrfO32+/j9tSq07NzErqznDhfpr
DI8snm5HOc6KtM+L0lRLp2mlCK78zb0hqscCOn3nI7DnzO6sVt6nksR50qhkNlS4
jLr0f93P94qdw/hLlA==
-----END CERTIFICATE-----
Generated at Wed Jul 19 23:42:41 2023 by rpki-client on console-fra.rpki-client.org