Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/03/913a3a-f550-46f0-acc7-cd3ca5975712/1/Itqn-szEv2BaEvcZfMCvWjbP2vA.roa
File: Itqn-szEv2BaEvcZfMCvWjbP2vA.roa (raw, json)
Hash identifier: voeCXGvIAmuIZADz6H1/f4Jl3xwvnpyPaPbrR6bWJbA=
Subject key identifier: 22:DA:A7:FA:CC:C4:BF:60:5A:12:F7:19:7C:C0:AF:5A:36:CF:DA:F0
Certificate issuer: /CN=22c4ac3e3c43d70d05349c815baadd38ad775e9d
Certificate serial: 01822501FCEC74D9E5037151820A7174467C
Authority key identifier: 22:C4:AC:3E:3C:43:D7:0D:05:34:9C:81:5B:AA:DD:38:AD:77:5E:9D
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/IsSsPjxD1w0FNJyBW6rdOK13Xp0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/03/913a3a-f550-46f0-acc7-cd3ca5975712/1/Itqn-szEv2BaEvcZfMCvWjbP2vA.roa
Signing time: Fri 22 Jul 2022 08:24:23 +0000
ROA not before: Fri 22 Jul 2022 08:24:23 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 22653
IP address blocks: 31.169.124.0/24 maxlen: 24
31.169.125.0/24 maxlen: 24
31.169.127.0/24 maxlen: 24
31.169.126.0/24 maxlen: 24
194.180.49.0/24 maxlen: 24
194.169.174.0/24 maxlen: 24
194.169.173.0/24 maxlen: 24
185.225.72.0/24 maxlen: 24
94.154.161.0/24 maxlen: 24
94.154.162.0/23 maxlen: 24
84.21.172.0/23 maxlen: 24
109.206.238.0/24 maxlen: 24
85.217.128.0/24 maxlen: 24
194.55.226.0/24 maxlen: 24
164.40.186.0/23 maxlen: 24
194.55.225.0/24 maxlen: 24
194.55.224.0/24 maxlen: 24
164.40.184.0/24 maxlen: 24
84.54.50.0/23 maxlen: 24
194.55.227.0/24 maxlen: 24
193.37.43.0/24 maxlen: 24
194.48.249.0/24 maxlen: 24
194.55.184.0/23 maxlen: 24
194.55.187.0/24 maxlen: 24
185.221.66.0/24 maxlen: 24
79.110.49.0/24 maxlen: 24
Validation: Failed, RFC 3779 resource not subset of parent's resources
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:82:25:01:fc:ec:74:d9:e5:03:71:51:82:0a:71:74:46:7c
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=22c4ac3e3c43d70d05349c815baadd38ad775e9d
Validity
Not Before: Jul 22 08:24:23 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=22daa7faccc4bf605a12f7197cc0af5a36cfdaf0
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b9:16:18:2c:93:09:32:1f:cd:22:30:75:7e:b5:
cc:f1:97:b4:59:e6:5a:ce:9b:6e:73:94:d4:be:34:
e2:2b:24:aa:96:d9:3b:b9:7a:2c:85:7d:a0:1d:38:
38:a0:46:e5:14:61:9c:a2:1e:29:d6:17:f3:2a:29:
87:1c:fe:f4:b5:de:e7:5b:17:6a:0e:13:fa:d4:03:
d6:a6:3f:05:90:87:15:2c:da:7c:b3:54:5e:8f:5b:
63:2e:ea:6f:b5:e9:84:f3:d1:df:a2:82:bf:2c:f7:
61:85:5d:ee:64:b1:eb:10:08:4f:34:ce:49:37:c4:
e3:98:72:b3:06:a1:40:7a:03:15:a8:91:e3:de:fd:
a6:be:8c:72:6f:df:76:61:7c:93:65:21:81:a2:21:
0d:53:32:d0:72:3f:0b:7d:3b:fb:69:8d:f7:c5:c7:
0f:4e:1c:b0:de:b2:2e:8d:e4:9d:3d:dd:96:86:12:
cf:fe:43:f5:82:02:a0:18:95:70:4b:b9:81:85:4f:
3a:68:b7:17:e9:39:4a:14:99:9e:ca:86:33:cc:c5:
69:55:10:4c:8e:48:fa:29:1d:9e:6c:bf:77:30:26:
51:0e:e7:06:55:20:32:76:81:12:66:df:b1:d9:ac:
2f:97:b9:58:36:ab:b6:d5:48:93:aa:a9:cc:ac:b5:
05:ab
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
22:DA:A7:FA:CC:C4:BF:60:5A:12:F7:19:7C:C0:AF:5A:36:CF:DA:F0
X509v3 Authority Key Identifier:
keyid:22:C4:AC:3E:3C:43:D7:0D:05:34:9C:81:5B:AA:DD:38:AD:77:5E:9D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/IsSsPjxD1w0FNJyBW6rdOK13Xp0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/03/913a3a-f550-46f0-acc7-cd3ca5975712/1/Itqn-szEv2BaEvcZfMCvWjbP2vA.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/03/913a3a-f550-46f0-acc7-cd3ca5975712/1/IsSsPjxD1w0FNJyBW6rdOK13Xp0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
31.169.124.0/22
79.110.49.0/24
84.21.172.0/23
84.54.50.0/23
85.217.128.0/24
94.154.161.0-94.154.163.255
109.206.238.0/24
164.40.184.0/24
164.40.186.0/23
185.221.66.0/24
185.225.72.0/24
193.37.43.0/24
194.48.249.0/24
194.55.184.0/23
194.55.187.0/24
194.55.224.0/22
194.169.173.0-194.169.174.255
194.180.49.0/24
Signature Algorithm: sha256WithRSAEncryption
05:a9:83:a4:8c:a8:03:34:89:f8:da:cc:95:8e:96:bb:5f:86:
9f:6c:3d:4a:71:ea:05:67:60:fe:d6:a9:05:85:a6:e1:f1:90:
d9:07:de:47:ac:5e:70:fa:f3:69:c1:72:9a:75:f5:c8:0e:e9:
2f:eb:08:8e:30:ec:3d:de:0a:95:7d:7c:67:fe:26:04:35:85:
81:7d:01:48:bb:40:e4:f7:dc:ce:73:8f:64:23:18:2b:19:99:
a7:3d:5e:4a:ba:f3:b3:22:9d:ce:28:dd:75:e2:83:b5:4f:ac:
13:fb:84:71:93:09:ba:37:00:6a:fa:d7:43:ec:3e:13:e9:5a:
a4:03:fd:df:5f:87:c5:34:cd:e3:26:96:0e:a4:38:e2:14:7b:
9d:c7:12:a5:be:2b:ec:b2:1e:87:41:0c:86:78:7e:b2:9a:a8:
64:a0:19:24:70:35:6c:e1:27:5d:c5:02:54:36:5e:6a:69:58:
43:e4:48:2b:0d:e7:40:e5:ab:17:15:54:56:82:15:b6:d8:71:
56:3e:be:1b:7e:93:91:14:4f:82:d1:bc:12:f8:04:c7:24:0f:
fa:ae:f0:01:2b:60:4b:42:b8:c7:a1:02:1d:ab:05:85:c0:43:
31:0a:14:80:84:d4:1b:60:4c:6d:2b:33:f8:57:a2:d3:46:7e:
a6:f0:fd:8a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 19 23:46:34 2023 by rpki-client on console-ams.rpki-client.org