Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/03/913a3a-f550-46f0-acc7-cd3ca5975712/1/Izx74uDjcKIDP8tlBXboY9nESGk.roa
File: Izx74uDjcKIDP8tlBXboY9nESGk.roa (raw, json)
Hash identifier: xVy1GAQktMz9lhuhL57S0MRnitCo6P56eC+U0XIagOs=
Subject key identifier: 23:3C:7B:E2:E0:E3:70:A2:03:3F:CB:65:05:76:E8:63:D9:C4:48:69
Certificate issuer: /CN=22c4ac3e3c43d70d05349c815baadd38ad775e9d
Certificate serial: 0182F92284409F97F2BDAE6D0B6515F0E4B7
Authority key identifier: 22:C4:AC:3E:3C:43:D7:0D:05:34:9C:81:5B:AA:DD:38:AD:77:5E:9D
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/IsSsPjxD1w0FNJyBW6rdOK13Xp0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/03/913a3a-f550-46f0-acc7-cd3ca5975712/1/Izx74uDjcKIDP8tlBXboY9nESGk.roa
Signing time: Thu 01 Sep 2022 12:59:25 +0000
ROA not before: Thu 01 Sep 2022 12:59:25 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 209371
IP address blocks: 85.31.45.0/24 maxlen: 24
85.31.47.0/24 maxlen: 24
185.246.221.0/24 maxlen: 24
194.180.36.0/24 maxlen: 24
92.249.48.0/24 maxlen: 24
92.249.50.0/24 maxlen: 24
185.218.136.0/24 maxlen: 24
82.115.208.0/24 maxlen: 24
82.115.209.0/24 maxlen: 24
82.115.210.0/24 maxlen: 24
82.115.211.0/24 maxlen: 24
94.154.172.0/24 maxlen: 24
193.35.19.0/24 maxlen: 24
84.21.172.0/24 maxlen: 24
212.87.206.0/24 maxlen: 24
178.215.226.0/24 maxlen: 24
84.54.49.0/24 maxlen: 24
178.215.225.0/24 maxlen: 24
178.215.227.0/24 maxlen: 24
178.215.239.0/24 maxlen: 24
178.215.236.0/24 maxlen: 24
80.76.50.0/24 maxlen: 24
80.76.48.0/24 maxlen: 24
193.42.32.0/24 maxlen: 24
193.222.97.0/24 maxlen: 24
185.252.177.0/24 maxlen: 24
193.47.63.0/24 maxlen: 24
193.47.62.0/24 maxlen: 24
193.222.99.0/24 maxlen: 24
193.37.42.0/24 maxlen: 24
193.37.47.0/24 maxlen: 24
185.216.70.0/24 maxlen: 24
185.216.69.0/24 maxlen: 24
94.103.125.0/24 maxlen: 24
87.120.84.0/24 maxlen: 24
87.120.87.0/24 maxlen: 24
94.103.126.0/24 maxlen: 24
193.25.216.0/24 maxlen: 24
193.25.217.0/24 maxlen: 24
193.25.218.0/24 maxlen: 24
87.121.221.0/24 maxlen: 24
Validation: Failed, RFC 3779 resource not subset of parent's resources
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:82:f9:22:84:40:9f:97:f2:bd:ae:6d:0b:65:15:f0:e4:b7
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=22c4ac3e3c43d70d05349c815baadd38ad775e9d
Validity
Not Before: Sep 1 12:59:25 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=233c7be2e0e370a2033fcb650576e863d9c44869
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:91:38:9e:86:1f:4f:39:9d:f6:b6:6f:8b:61:6c:
d6:22:6b:8a:41:83:57:92:e7:14:e7:e3:9e:4f:a2:
30:cd:d5:8d:d5:e5:37:99:6d:5f:20:75:fb:6d:dc:
21:dd:7f:05:0a:24:d9:c5:b6:17:48:06:cc:6c:0f:
4f:e9:dc:b2:3a:51:82:2b:ec:00:1f:df:67:22:8e:
43:d4:9a:9f:60:fb:1e:e4:63:da:8d:29:0c:68:ce:
da:af:cd:4d:47:5c:f1:b2:70:7a:df:09:78:ff:d1:
4a:c2:fa:70:76:13:71:e6:d4:79:b1:ba:18:cd:8a:
eb:69:f4:5f:c8:8a:17:e5:81:6a:d0:e4:83:a9:c9:
26:61:e1:7a:af:a1:fb:4b:87:35:5f:e4:da:f2:8d:
e8:34:8c:06:e6:d0:17:f0:cd:a5:32:1f:05:da:d9:
88:e5:05:68:58:f4:76:2c:68:76:f2:e1:7d:02:b1:
9e:ff:c3:54:e2:0d:47:a3:a9:03:60:09:d2:34:12:
05:37:33:57:f6:81:7a:46:b5:db:25:86:8b:78:42:
9d:64:0f:b7:be:0d:6e:f3:75:e9:ec:2c:e7:fc:a1:
92:21:5d:1c:bb:88:da:15:1f:62:bb:2d:fa:9d:72:
1d:97:fb:9f:39:9a:26:65:41:d8:a9:9a:77:df:a6:
28:73
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
23:3C:7B:E2:E0:E3:70:A2:03:3F:CB:65:05:76:E8:63:D9:C4:48:69
X509v3 Authority Key Identifier:
keyid:22:C4:AC:3E:3C:43:D7:0D:05:34:9C:81:5B:AA:DD:38:AD:77:5E:9D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/IsSsPjxD1w0FNJyBW6rdOK13Xp0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/03/913a3a-f550-46f0-acc7-cd3ca5975712/1/Izx74uDjcKIDP8tlBXboY9nESGk.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/03/913a3a-f550-46f0-acc7-cd3ca5975712/1/IsSsPjxD1w0FNJyBW6rdOK13Xp0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
80.76.48.0/24
80.76.50.0/24
82.115.208.0/22
84.21.172.0/24
84.54.49.0/24
85.31.45.0/24
85.31.47.0/24
87.120.84.0/24
87.120.87.0/24
87.121.221.0/24
92.249.48.0/24
92.249.50.0/24
94.103.125.0-94.103.126.255
94.154.172.0/24
178.215.225.0-178.215.227.255
178.215.236.0/24
178.215.239.0/24
185.216.69.0-185.216.70.255
185.218.136.0/24
185.246.221.0/24
185.252.177.0/24
193.25.216.0-193.25.218.255
193.35.19.0/24
193.37.42.0/24
193.37.47.0/24
193.42.32.0/24
193.47.62.0/23
193.222.97.0/24
193.222.99.0/24
194.180.36.0/24
212.87.206.0/24
Signature Algorithm: sha256WithRSAEncryption
0b:75:ec:e6:5f:61:d3:63:27:b3:77:ed:bb:2f:aa:03:2b:94:
13:c5:e2:cd:56:10:68:e9:f4:ef:16:5a:f5:b8:52:f2:23:50:
7e:3c:43:03:74:a4:dc:6f:46:ec:72:94:f5:4a:27:e0:70:40:
41:13:ed:98:01:4d:88:6f:d1:3a:76:4a:f5:cc:88:8d:22:dc:
c4:7d:d9:b7:0c:13:c6:4a:4c:3e:73:ea:d4:5e:76:33:0b:13:
7b:ec:ee:2f:4e:01:00:22:72:75:bb:22:a6:b9:61:56:36:af:
82:a3:10:50:6a:34:51:ef:da:67:ef:08:62:c7:6c:a4:24:10:
d1:27:30:fd:97:95:90:67:b5:7d:85:b9:7f:25:a5:75:d0:97:
18:29:48:7b:ce:b9:c0:8d:f2:12:d5:e3:b2:86:ad:af:89:e1:
a1:91:d7:49:ac:17:7d:ee:63:ed:5b:d0:f5:ca:93:53:39:06:
66:42:dc:f5:83:b1:de:1b:f5:aa:e4:10:ec:11:d5:00:91:45:
13:6b:37:63:cc:6b:4a:ff:b9:8f:34:2e:20:9b:ee:c2:81:b9:
fc:e1:3d:68:5b:2e:1d:04:0b:dc:3c:16:7c:b4:cf:cd:dd:39:
5c:5f:a0:92:fa:a9:f8:b8:21:39:a8:73:8b:a1:f6:b3:fc:9f:
bc:63:59:01
-----BEGIN CERTIFICATE-----
MIIF1jCCBL6gAwIBAgISAYL5IoRAn5fyva5tC2UV8OS3MA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDIyYzRhYzNlM2M0M2Q3MGQwNTM0OWM4MTViYWFkZDM4YWQ3
NzVlOWQwHhcNMjIwOTAxMTI1OTI1WhcNMjMwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EygyMzNjN2JlMmUwZTM3MGEyMDMzZmNiNjUwNTc2ZTg2M2Q5YzQ0ODY5MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAkTiehh9POZ32tm+LYWzWImuKQYNX
kucU5+OeT6IwzdWN1eU3mW1fIHX7bdwh3X8FCiTZxbYXSAbMbA9P6dyyOlGCK+wA
H99nIo5D1JqfYPse5GPajSkMaM7ar81NR1zxsnB63wl4/9FKwvpwdhNx5tR5sboY
zYrrafRfyIoX5YFq0OSDqckmYeF6r6H7S4c1X+Ta8o3oNIwG5tAX8M2lMh8F2tmI
5QVoWPR2LGh28uF9ArGe/8NU4g1Ho6kDYAnSNBIFNzNX9oF6RrXbJYaLeEKdZA+3
vg1u83Xp7Czn/KGSIV0cu4jaFR9iuy36nXIdl/ufOZomZUHYqZp336YocwIDAQAB
o4IC4jCCAt4wHQYDVR0OBBYEFCM8e+Lg43CiAz/LZQV26GPZxEhpMB8GA1UdIwQY
MBaAFCLErD48Q9cNBTScgVuq3Titd16dMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvSXNTc1BqeEQxdzBGTkp5Qlc2cmRPSzEzWHAwLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8wMy85MTNhM2EtZjU1MC00NmYwLWFjYzct
Y2QzY2E1OTc1NzEyLzEvSXp4NzR1RGpjS0lEUDh0bEJYYm9ZOW5FU0drLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8wMy85MTNhM2EtZjU1MC00NmYwLWFjYzctY2QzY2E1OTc1NzEy
LzEvSXNTc1BqeEQxdzBGTkp5Qlc2cmRPSzEzWHAwLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMIH3BggrBgEFBQcBBwEB/wSB5zCB5DCB4QQCAAEwgdoDBABQ
TDADBABQTDIDBAJSc9ADBABUFawDBABUNjEDBABVHy0DBABVHy8DBABXeFQDBABX
eFcDBABXed0DBABc+TADBABc+TIwDAMEAF5nfQMEAF5nfgMEAF6arDAMAwQAstfh
AwQCstfgAwQAstfsAwQAstfvMAwDBAC52EUDBAC52EYDBAC52ogDBAC59t0DBAC5
/LEwDAMEA8EZ2AMEAMEZ2gMEAMEjEwMEAMElKgMEAMElLwMEAMEqIAMEAcEvPgME
AMHeYQMEAMHeYwMEAMK0JAMEANRXzjANBgkqhkiG9w0BAQsFAAOCAQEAC3Xs5l9h
02Mns3ftuy+qAyuUE8XizVYQaOn07xZa9bhS8iNQfjxDA3Sk3G9G7HKU9Uon4HBA
QRPtmAFNiG/ROnZK9cyIjSLcxH3ZtwwTxkpMPnPq1F52MwsTe+zuL04BACJydbsi
prlhVjavgqMQUGo0Ue/aZ+8IYsdspCQQ0Scw/ZeVkGe1fYW5fyWlddCXGClIe865
wI3yEtXjsoatr4nhoZHXSawXfe5j7VvQ9cqTUzkGZkLc9YOx3hv1quQQ7BHVAJFF
E2s3Y8xrSv+5jzQuIJvuwoG5/OE9aFsuHQQL3DwWfLTPzd05XF+gkvqp+LghOahz
i6H2s/yfvGNZAQ==
-----END CERTIFICATE-----
Generated at Thu Jun 6 18:50:29 2024 by rpki-client on console-ams.rpki-client.org