Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/03/913a3a-f550-46f0-acc7-cd3ca5975712/1/NcTvXE-0ICyPW-D5E7CiXOgSh_Q.roa
File: NcTvXE-0ICyPW-D5E7CiXOgSh_Q.roa (raw, json)
Hash identifier: ZO5ZBiP7K4oqpPl9vbHjobQwSjNKQII+U7ijcJD4sDg=
Subject key identifier: 35:C4:EF:5C:4F:B4:20:2C:8F:5B:E0:F9:13:B0:A2:5C:E8:12:87:F4
Certificate issuer: /CN=22c4ac3e3c43d70d05349c815baadd38ad775e9d
Certificate serial: 0181D8AB2535562A52363F9B3DB5305D6473
Authority key identifier: 22:C4:AC:3E:3C:43:D7:0D:05:34:9C:81:5B:AA:DD:38:AD:77:5E:9D
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/IsSsPjxD1w0FNJyBW6rdOK13Xp0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/03/913a3a-f550-46f0-acc7-cd3ca5975712/1/NcTvXE-0ICyPW-D5E7CiXOgSh_Q.roa
Signing time: Thu 07 Jul 2022 12:38:23 +0000
ROA not before: Thu 07 Jul 2022 12:38:23 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 209371
IP address blocks: 185.218.139.0/24 maxlen: 24
185.218.137.0/24 maxlen: 24
185.218.136.0/24 maxlen: 24
94.154.172.0/24 maxlen: 24
94.154.175.0/24 maxlen: 24
94.154.174.0/24 maxlen: 24
85.217.144.0/24 maxlen: 24
80.76.50.0/24 maxlen: 24
80.76.49.0/24 maxlen: 24
80.76.48.0/24 maxlen: 24
79.110.48.0/24 maxlen: 24
79.110.50.0/24 maxlen: 24
94.103.125.0/24 maxlen: 24
87.120.84.0/24 maxlen: 24
87.120.87.0/24 maxlen: 24
79.110.60.0/24 maxlen: 24
79.110.61.0/24 maxlen: 24
94.103.126.0/24 maxlen: 24
94.103.127.0/24 maxlen: 24
79.110.63.0/24 maxlen: 24
85.31.45.0/24 maxlen: 24
85.31.47.0/24 maxlen: 24
185.246.221.0/24 maxlen: 24
91.92.115.0/24 maxlen: 24
194.180.50.0/24 maxlen: 24
194.169.175.0/24 maxlen: 24
37.139.131.0/24 maxlen: 24
193.35.19.0/24 maxlen: 24
37.139.130.0/24 maxlen: 24
193.35.18.0/24 maxlen: 24
109.206.239.0/24 maxlen: 24
212.87.205.0/24 maxlen: 24
178.215.226.0/24 maxlen: 24
178.215.224.0/24 maxlen: 24
178.215.225.0/24 maxlen: 24
178.215.227.0/24 maxlen: 24
178.215.238.0/24 maxlen: 24
178.215.239.0/24 maxlen: 24
178.215.236.0/24 maxlen: 24
178.215.237.0/24 maxlen: 24
193.222.96.0/24 maxlen: 24
193.222.97.0/24 maxlen: 24
185.252.176.0/24 maxlen: 24
193.222.98.0/24 maxlen: 24
193.47.63.0/24 maxlen: 24
193.47.62.0/24 maxlen: 24
193.37.42.0/24 maxlen: 24
193.37.44.0/24 maxlen: 24
193.37.47.0/24 maxlen: 24
185.216.70.0/24 maxlen: 24
185.216.69.0/24 maxlen: 24
83.219.98.0/24 maxlen: 24
83.219.97.0/24 maxlen: 24
Validation: Failed, RFC 3779 resource not subset of parent's resources
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:81:d8:ab:25:35:56:2a:52:36:3f:9b:3d:b5:30:5d:64:73
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=22c4ac3e3c43d70d05349c815baadd38ad775e9d
Validity
Not Before: Jul 7 12:38:23 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=35c4ef5c4fb4202c8f5be0f913b0a25ce81287f4
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a4:1c:ea:9a:08:c4:12:01:59:7b:ac:21:5e:91:
2e:36:19:e3:0a:58:29:2f:6e:1e:cc:a9:25:a4:4a:
49:53:c2:8c:72:60:00:98:8e:37:d4:1f:40:36:6e:
cc:c4:9d:39:f4:dc:29:c7:ce:26:87:a2:b1:fd:8f:
31:41:e6:86:39:16:11:6e:2e:19:1c:f1:90:49:a0:
83:7a:dd:4c:08:dc:72:26:9e:8c:d1:ca:1a:fb:a6:
e6:76:fb:24:ea:1b:27:49:a2:dc:f3:43:cc:3a:89:
2d:2c:2c:17:8d:99:9b:35:2f:57:a3:2a:24:24:97:
b9:17:1e:7e:8c:d3:9e:79:c9:b5:69:dd:62:26:d7:
5a:7f:9d:83:3f:c2:bb:72:ae:cd:bb:c0:32:7b:ba:
eb:af:a7:44:3c:ee:4f:18:bd:b8:f9:a5:bd:b0:d7:
49:9d:32:ec:61:4a:e9:5a:0c:06:4e:59:d2:5a:7d:
63:61:28:59:c3:c4:36:0f:ef:1b:6f:66:21:66:38:
00:53:eb:44:d2:42:80:e9:ae:3c:08:22:85:4e:66:
c7:5a:b4:6b:e4:ba:75:bf:2e:fa:6a:4c:92:e8:31:
9d:d1:87:b5:3b:80:56:be:20:d2:a9:df:2a:f8:ea:
db:60:ec:13:ca:23:a2:f6:09:a0:20:3a:ae:73:2f:
9c:bb
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
35:C4:EF:5C:4F:B4:20:2C:8F:5B:E0:F9:13:B0:A2:5C:E8:12:87:F4
X509v3 Authority Key Identifier:
keyid:22:C4:AC:3E:3C:43:D7:0D:05:34:9C:81:5B:AA:DD:38:AD:77:5E:9D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/IsSsPjxD1w0FNJyBW6rdOK13Xp0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/03/913a3a-f550-46f0-acc7-cd3ca5975712/1/NcTvXE-0ICyPW-D5E7CiXOgSh_Q.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/03/913a3a-f550-46f0-acc7-cd3ca5975712/1/IsSsPjxD1w0FNJyBW6rdOK13Xp0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
37.139.130.0/23
79.110.48.0/24
79.110.50.0/24
79.110.60.0/23
79.110.63.0/24
80.76.48.0-80.76.50.255
83.219.97.0-83.219.98.255
85.31.45.0/24
85.31.47.0/24
85.217.144.0/24
87.120.84.0/24
87.120.87.0/24
91.92.115.0/24
94.103.125.0-94.103.127.255
94.154.172.0/24
94.154.174.0/23
109.206.239.0/24
178.215.224.0/22
178.215.236.0/22
185.216.69.0-185.216.70.255
185.218.136.0/23
185.218.139.0/24
185.246.221.0/24
185.252.176.0/24
193.35.18.0/23
193.37.42.0/24
193.37.44.0/24
193.37.47.0/24
193.47.62.0/23
193.222.96.0-193.222.98.255
194.169.175.0/24
194.180.50.0/24
212.87.205.0/24
Signature Algorithm: sha256WithRSAEncryption
58:1d:b2:81:50:f6:e7:85:f9:a5:9c:6d:d9:4d:6e:d8:f8:e0:
5c:dd:a4:55:07:ee:35:8f:36:bd:82:92:cb:a5:55:d3:ce:3a:
1f:a8:94:d9:5a:be:55:2e:9d:55:b9:e9:0d:ad:a5:64:14:64:
3e:c4:2b:15:a0:a4:e2:14:1f:e5:6c:b6:9c:b0:00:83:b1:1a:
e1:b0:63:f9:de:04:ac:32:ee:dd:89:d8:77:9f:d5:37:e6:df:
49:8a:29:b5:e3:fe:1c:dc:b5:d4:74:d2:53:02:e2:f0:9f:16:
48:a0:8d:52:b9:88:b8:ed:5b:9d:68:d6:2a:1f:7f:ed:86:59:
18:51:7d:d6:ed:fe:53:b5:37:15:88:cc:6c:51:ac:b3:dd:20:
47:8e:7d:6d:6a:c5:3b:3b:63:5a:4b:1e:94:01:91:05:16:d3:
f8:0f:3a:92:aa:4d:b5:f0:aa:9c:15:0b:df:77:16:5b:9f:ad:
61:50:2f:b6:a6:79:fe:e0:d8:e3:b4:49:b3:06:74:dd:cc:6e:
96:2d:0d:20:51:c1:82:bd:b7:0a:ed:3b:54:da:ba:2b:dc:0c:
e6:ff:d0:d1:5a:b5:68:67:f7:3b:c6:fc:7a:d3:30:56:d1:e3:
be:87:98:0d:75:28:00:1f:0f:85:1b:b7:fa:9c:e1:29:6c:df:
bb:c6:33:a1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 19 23:46:35 2023 by rpki-client on console-ams.rpki-client.org