Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/03/913a3a-f550-46f0-acc7-cd3ca5975712/1/QewyXEfsTS2WU5xJdtKMokpfzgQ.roa
File: QewyXEfsTS2WU5xJdtKMokpfzgQ.roa (raw, json)
Hash identifier: H6Nb7RqrCu541FHvJOuV2zXRmPpvDS2d4TQgV6jbToo=
Subject key identifier: 41:EC:32:5C:47:EC:4D:2D:96:53:9C:49:76:D2:8C:A2:4A:5F:CE:04
Certificate issuer: /CN=22c4ac3e3c43d70d05349c815baadd38ad775e9d
Certificate serial: 018BECB9802CD60C14BCE9EB2E043F927C48
Authority key identifier: 22:C4:AC:3E:3C:43:D7:0D:05:34:9C:81:5B:AA:DD:38:AD:77:5E:9D
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/IsSsPjxD1w0FNJyBW6rdOK13Xp0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/03/913a3a-f550-46f0-acc7-cd3ca5975712/1/QewyXEfsTS2WU5xJdtKMokpfzgQ.roa
Signing time: Mon 20 Nov 2023 12:34:21 +0000
ROA not before: Mon 20 Nov 2023 12:34:21 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 199605
IP address blocks: 171.22.31.0/24 maxlen: 24
81.161.230.0/24 maxlen: 24
45.9.156.0/24 maxlen: 24
45.129.84.0/24 maxlen: 24
45.129.86.0/24 maxlen: 24
193.35.19.0/24 maxlen: 24
37.139.130.0/24 maxlen: 24
Validation: Failed, RFC 3779 resource not subset of parent's resources
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8b:ec:b9:80:2c:d6:0c:14:bc:e9:eb:2e:04:3f:92:7c:48
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=22c4ac3e3c43d70d05349c815baadd38ad775e9d
Validity
Not Before: Nov 20 12:34:21 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=41ec325c47ec4d2d96539c4976d28ca24a5fce04
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:99:c7:9e:d9:5a:07:d8:5c:9c:f9:69:4d:59:bd:
7a:3b:33:d9:9d:2d:82:09:d7:e7:5f:f3:b2:7f:4a:
ae:88:a9:2c:be:2c:2c:12:38:69:a8:fb:c9:87:42:
10:33:4b:9f:49:ad:e2:82:f9:01:ff:9f:c9:b2:1a:
91:66:24:4d:f0:c1:93:14:0a:86:4a:2f:a9:74:42:
e4:15:7a:89:1c:7a:f5:ed:9c:a4:c9:0d:57:e0:d0:
3a:11:04:f2:ba:65:91:2c:aa:d7:5a:42:19:c8:d9:
46:15:fc:20:a2:b5:e4:47:75:78:17:83:89:e3:bb:
9e:f2:92:7f:ae:22:3b:12:d0:9f:1d:7a:e2:e2:dd:
92:86:46:7d:c5:71:f0:3a:3a:eb:cc:4b:9a:b1:87:
08:a3:da:a8:37:72:cb:44:a9:48:cb:da:da:54:e1:
7d:b2:34:d2:ce:fe:ab:ab:75:10:60:f7:31:79:cd:
b7:66:a8:df:82:55:2c:4e:3e:a9:6c:a2:f5:a0:f6:
49:b7:60:39:11:ed:97:b4:b6:4b:b5:be:8d:e8:ac:
cd:18:9b:b5:68:7f:73:0a:fe:89:18:9a:57:8c:e6:
5b:79:7a:fe:f7:d4:3c:76:ea:2f:2a:12:5c:a5:70:
2c:a5:22:b6:5a:83:22:27:28:84:f4:20:25:c9:f0:
33:c5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
41:EC:32:5C:47:EC:4D:2D:96:53:9C:49:76:D2:8C:A2:4A:5F:CE:04
X509v3 Authority Key Identifier:
keyid:22:C4:AC:3E:3C:43:D7:0D:05:34:9C:81:5B:AA:DD:38:AD:77:5E:9D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/IsSsPjxD1w0FNJyBW6rdOK13Xp0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/03/913a3a-f550-46f0-acc7-cd3ca5975712/1/QewyXEfsTS2WU5xJdtKMokpfzgQ.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/03/913a3a-f550-46f0-acc7-cd3ca5975712/1/IsSsPjxD1w0FNJyBW6rdOK13Xp0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
37.139.130.0/24
45.9.156.0/24
45.129.84.0/24
45.129.86.0/24
81.161.230.0/24
171.22.31.0/24
193.35.19.0/24
Signature Algorithm: sha256WithRSAEncryption
10:d4:1c:61:01:60:cc:d0:ea:d2:bc:3c:94:06:24:cd:db:09:
0f:4f:6d:2b:a0:06:d9:30:b6:14:09:22:85:72:ef:f2:ec:ae:
7a:e1:ae:c9:85:15:a8:07:2b:8e:dd:00:ac:1d:a4:54:99:b2:
4d:35:d1:c8:fd:3f:1a:af:3e:06:3f:c3:7c:ac:28:f1:48:61:
33:2f:2c:4e:56:b6:e8:91:89:69:d0:e6:a4:dc:75:23:47:d3:
8f:bd:2b:7b:fe:ba:49:f7:77:fe:a0:1c:f0:cc:8b:53:85:c9:
d7:f0:38:ec:9f:23:65:37:1c:65:d7:61:67:98:41:4f:09:ad:
24:95:a3:48:e9:8d:4b:0d:04:53:98:d6:1b:b7:d1:6c:16:40:
5a:13:19:25:7e:da:69:fc:ca:b3:3d:02:88:01:46:e1:d4:35:
e6:c5:67:a1:0e:a1:97:1f:b3:f6:e3:19:8a:4d:1e:0a:d2:0e:
ea:63:81:b1:14:58:da:04:e5:a6:ac:f6:20:07:8f:f2:35:00:
99:97:d1:fe:47:5b:1b:37:59:b5:ab:91:f5:e4:87:bd:cc:91:
22:0f:b1:2d:93:1d:6d:7a:31:78:bb:44:de:b1:27:3e:1c:70:
5d:25:03:83:da:8b:c3:06:42:a8:f9:66:53:aa:2c:4b:1d:cd:
58:99:e7:da
-----BEGIN CERTIFICATE-----
MIIFITCCBAmgAwIBAgISAYvsuYAs1gwUvOnrLgQ/knxIMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDIyYzRhYzNlM2M0M2Q3MGQwNTM0OWM4MTViYWFkZDM4YWQ3
NzVlOWQwHhcNMjMxMTIwMTIzNDIxWhcNMjQwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
Eyg0MWVjMzI1YzQ3ZWM0ZDJkOTY1MzljNDk3NmQyOGNhMjRhNWZjZTA0MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAmcee2VoH2Fyc+WlNWb16OzPZnS2C
CdfnX/Oyf0quiKksviwsEjhpqPvJh0IQM0ufSa3igvkB/5/JshqRZiRN8MGTFAqG
Si+pdELkFXqJHHr17ZykyQ1X4NA6EQTyumWRLKrXWkIZyNlGFfwgorXkR3V4F4OJ
47ue8pJ/riI7EtCfHXri4t2ShkZ9xXHwOjrrzEuasYcIo9qoN3LLRKlIy9raVOF9
sjTSzv6rq3UQYPcxec23ZqjfglUsTj6pbKL1oPZJt2A5Ee2XtLZLtb6N6KzNGJu1
aH9zCv6JGJpXjOZbeXr+99Q8duovKhJcpXAspSK2WoMiJyiE9CAlyfAzxQIDAQAB
o4ICLTCCAikwHQYDVR0OBBYEFEHsMlxH7E0tllOcSXbSjKJKX84EMB8GA1UdIwQY
MBaAFCLErD48Q9cNBTScgVuq3Titd16dMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvSXNTc1BqeEQxdzBGTkp5Qlc2cmRPSzEzWHAwLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8wMy85MTNhM2EtZjU1MC00NmYwLWFjYzct
Y2QzY2E1OTc1NzEyLzEvUWV3eVhFZnNUUzJXVTV4SmR0S01va3BmemdRLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8wMy85MTNhM2EtZjU1MC00NmYwLWFjYzctY2QzY2E1OTc1NzEy
LzEvSXNTc1BqeEQxdzBGTkp5Qlc2cmRPSzEzWHAwLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMEMGCCsGAQUFBwEHAQH/BDQwMjAwBAIAATAqAwQAJYuCAwQA
LQmcAwQALYFUAwQALYFWAwQAUaHmAwQAqxYfAwQAwSMTMA0GCSqGSIb3DQEBCwUA
A4IBAQAQ1BxhAWDM0OrSvDyUBiTN2wkPT20roAbZMLYUCSKFcu/y7K564a7JhRWo
ByuO3QCsHaRUmbJNNdHI/T8arz4GP8N8rCjxSGEzLyxOVrbokYlp0Oak3HUjR9OP
vSt7/rpJ93f+oBzwzItThcnX8DjsnyNlNxxl12FnmEFPCa0klaNI6Y1LDQRTmNYb
t9FsFkBaExklftpp/MqzPQKIAUbh1DXmxWehDqGXH7P24xmKTR4K0g7qY4GxFFja
BOWmrPYgB4/yNQCZl9H+R1sbN1m1q5H15Ie9zJEiD7Etkx1tejF4u0TesSc+HHBd
JQOD2ovDBkKo+WZTqixLHc1Ymefa
-----END CERTIFICATE-----
Generated at Thu Jun 6 17:17:06 2024 by rpki-client on console-fra.rpki-client.org