Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/03/913a3a-f550-46f0-acc7-cd3ca5975712/1/JPahlb_YqMmAdPHdJcv18Y_rAME.roa
File: JPahlb_YqMmAdPHdJcv18Y_rAME.roa (raw, json)
Hash identifier: S4ltJCAHA23swWitzXyjFF3Mobxmo44w9P0mTpSAuJg=
Subject key identifier: 24:F6:A1:95:BF:D8:A8:C9:80:74:F1:DD:25:CB:F5:F1:8F:EB:00:C1
Certificate issuer: /CN=22c4ac3e3c43d70d05349c815baadd38ad775e9d
Certificate serial: 0188B53B52526470641E9B444C2402DC16DF
Authority key identifier: 22:C4:AC:3E:3C:43:D7:0D:05:34:9C:81:5B:AA:DD:38:AD:77:5E:9D
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/IsSsPjxD1w0FNJyBW6rdOK13Xp0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/03/913a3a-f550-46f0-acc7-cd3ca5975712/1/JPahlb_YqMmAdPHdJcv18Y_rAME.roa
Signing time: Tue 13 Jun 2023 14:49:03 +0000
ROA not before: Tue 13 Jun 2023 14:49:03 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 50225
IP address blocks: 85.209.132.0/24 maxlen: 24
83.143.112.0/24 maxlen: 24
83.143.113.0/24 maxlen: 24
185.222.163.0/24 maxlen: 24
87.121.69.0/24 maxlen: 24
193.42.34.0/24 maxlen: 24
193.47.63.0/24 maxlen: 24
176.125.252.0/24 maxlen: 24
193.47.60.0/24 maxlen: 24
Validation: Failed, RFC 3779 resource not subset of parent's resources
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:88:b5:3b:52:52:64:70:64:1e:9b:44:4c:24:02:dc:16:df
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=22c4ac3e3c43d70d05349c815baadd38ad775e9d
Validity
Not Before: Jun 13 14:49:03 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=24f6a195bfd8a8c98074f1dd25cbf5f18feb00c1
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:93:50:45:05:1d:5a:64:94:d5:ef:cc:80:e4:f9:
83:d3:65:9f:78:ab:c0:7d:4e:56:1c:e8:92:67:11:
56:57:5f:e3:52:26:1f:46:02:9e:df:0e:45:7a:00:
d3:56:c0:a5:e6:6e:e9:db:1d:a1:89:06:9b:de:9e:
21:f5:af:2c:a4:16:20:b9:bc:50:0e:73:fd:b1:3a:
79:2d:df:5f:48:1e:dc:9a:bf:24:1e:42:e7:c9:8a:
f7:32:83:0d:93:20:dd:34:dc:65:1e:55:11:96:81:
db:03:75:d2:c7:49:bd:8f:a8:d4:d7:ce:20:ec:65:
10:b7:b0:98:13:a5:da:17:d7:56:a5:ee:9c:91:af:
cd:c8:16:1c:e1:4c:24:98:71:8a:4b:fa:64:7a:62:
ff:02:96:da:72:e4:8d:a7:6b:47:7e:78:20:39:f0:
ab:66:b4:96:c0:a5:6e:59:a2:76:53:6b:66:5c:6f:
61:ec:23:88:d3:4c:79:14:ee:ca:00:bb:b1:e0:e0:
32:e5:48:df:a0:54:ad:a2:9f:56:83:4e:63:dc:48:
6a:c1:46:d9:21:1f:39:8a:a4:69:34:8c:85:2e:ff:
93:ad:f3:73:1f:b6:2f:86:39:6e:49:01:40:1c:7d:
7b:47:68:06:d8:db:20:48:3d:1d:27:1e:62:be:88:
7e:65
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
24:F6:A1:95:BF:D8:A8:C9:80:74:F1:DD:25:CB:F5:F1:8F:EB:00:C1
X509v3 Authority Key Identifier:
keyid:22:C4:AC:3E:3C:43:D7:0D:05:34:9C:81:5B:AA:DD:38:AD:77:5E:9D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/IsSsPjxD1w0FNJyBW6rdOK13Xp0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/03/913a3a-f550-46f0-acc7-cd3ca5975712/1/JPahlb_YqMmAdPHdJcv18Y_rAME.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/03/913a3a-f550-46f0-acc7-cd3ca5975712/1/IsSsPjxD1w0FNJyBW6rdOK13Xp0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
83.143.112.0/23
85.209.132.0/24
87.121.69.0/24
176.125.252.0/24
185.222.163.0/24
193.42.34.0/24
193.47.60.0/24
193.47.63.0/24
Signature Algorithm: sha256WithRSAEncryption
60:40:9b:ca:e8:3c:51:77:fb:24:f7:b2:fa:79:0f:b9:76:42:
0d:11:e1:d8:99:c7:77:4a:71:bc:20:b6:17:66:26:f7:e8:10:
de:b1:39:8f:10:a6:ff:81:08:97:42:35:e3:2d:24:3f:54:cf:
e9:5b:b1:86:de:b0:a0:d8:c4:ae:71:f0:1b:b7:16:58:27:14:
09:22:42:8a:7e:41:34:56:e5:01:3e:13:ba:0a:9d:bd:44:5b:
9a:9e:81:b2:6f:7f:21:ae:8b:13:dd:79:25:f7:6f:5e:77:40:
c1:78:74:76:49:6d:f1:e5:06:07:d6:ba:e8:ce:00:3a:64:1a:
ba:61:a8:56:a4:6b:a7:8d:6b:60:b6:47:0b:a5:04:e8:77:da:
fa:60:e8:07:6a:af:bb:65:1d:20:e3:dd:c9:97:ac:11:ea:22:
67:aa:f4:20:88:f7:26:71:7f:59:ac:3e:6e:42:9d:2e:6c:c0:
27:a8:95:06:51:18:ab:26:ab:08:56:e5:59:8d:9f:04:0c:f8:
a0:74:99:09:fb:c0:53:a4:68:0f:15:59:c6:50:3a:93:fb:bb:
18:98:f4:4c:86:47:94:6d:f5:38:9c:d8:13:fb:7d:0c:31:54:
96:a3:86:57:a0:32:35:c1:19:a7:1a:e4:0b:78:28:5b:17:6b:
01:41:59:ac
-----BEGIN CERTIFICATE-----
MIIFJzCCBA+gAwIBAgISAYi1O1JSZHBkHptETCQC3BbfMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDIyYzRhYzNlM2M0M2Q3MGQwNTM0OWM4MTViYWFkZDM4YWQ3
NzVlOWQwHhcNMjMwNjEzMTQ0OTAzWhcNMjQwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EygyNGY2YTE5NWJmZDhhOGM5ODA3NGYxZGQyNWNiZjVmMThmZWIwMGMxMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAk1BFBR1aZJTV78yA5PmD02WfeKvA
fU5WHOiSZxFWV1/jUiYfRgKe3w5FegDTVsCl5m7p2x2hiQab3p4h9a8spBYgubxQ
DnP9sTp5Ld9fSB7cmr8kHkLnyYr3MoMNkyDdNNxlHlURloHbA3XSx0m9j6jU184g
7GUQt7CYE6XaF9dWpe6cka/NyBYc4UwkmHGKS/pkemL/ApbacuSNp2tHfnggOfCr
ZrSWwKVuWaJ2U2tmXG9h7COI00x5FO7KALux4OAy5UjfoFStop9Wg05j3EhqwUbZ
IR85iqRpNIyFLv+TrfNzH7YvhjluSQFAHH17R2gG2NsgSD0dJx5ivoh+ZQIDAQAB
o4ICMzCCAi8wHQYDVR0OBBYEFCT2oZW/2KjJgHTx3SXL9fGP6wDBMB8GA1UdIwQY
MBaAFCLErD48Q9cNBTScgVuq3Titd16dMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvSXNTc1BqeEQxdzBGTkp5Qlc2cmRPSzEzWHAwLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8wMy85MTNhM2EtZjU1MC00NmYwLWFjYzct
Y2QzY2E1OTc1NzEyLzEvSlBhaGxiX1lxTW1BZFBIZEpjdjE4WV9yQU1FLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8wMy85MTNhM2EtZjU1MC00NmYwLWFjYzctY2QzY2E1OTc1NzEy
LzEvSXNTc1BqeEQxdzBGTkp5Qlc2cmRPSzEzWHAwLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMEkGCCsGAQUFBwEHAQH/BDowODA2BAIAATAwAwQBU49wAwQA
VdGEAwQAV3lFAwQAsH38AwQAud6jAwQAwSoiAwQAwS88AwQAwS8/MA0GCSqGSIb3
DQEBCwUAA4IBAQBgQJvK6DxRd/sk97L6eQ+5dkINEeHYmcd3SnG8ILYXZib36BDe
sTmPEKb/gQiXQjXjLSQ/VM/pW7GG3rCg2MSucfAbtxZYJxQJIkKKfkE0VuUBPhO6
Cp29RFuanoGyb38hrosT3Xkl929ed0DBeHR2SW3x5QYH1rrozgA6ZBq6YahWpGun
jWtgtkcLpQTod9r6YOgHaq+7ZR0g493Jl6wR6iJnqvQgiPcmcX9ZrD5uQp0ubMAn
qJUGURirJqsIVuVZjZ8EDPigdJkJ+8BTpGgPFVnGUDqT+7sYmPRMhkeUbfU4nNgT
+30MMVSWo4ZXoDI1wRmnGuQLeChbF2sBQVms
-----END CERTIFICATE-----
Generated at Thu Jun 6 17:17:04 2024 by rpki-client on console-fra.rpki-client.org