Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/03/913a3a-f550-46f0-acc7-cd3ca5975712/1/SP-vTi-35mNMDK78oKN9Z_bb1fg.roa
File: SP-vTi-35mNMDK78oKN9Z_bb1fg.roa (raw, json)
Hash identifier: +bQRnlNmn7S2B6OL3Yn1Mtkb3h+TLykj0Y0qXt5Tuc0=
Subject key identifier: 48:FF:AF:4E:2F:B7:E6:63:4C:0C:AE:FC:A0:A3:7D:67:F6:DB:D5:F8
Certificate issuer: /CN=22c4ac3e3c43d70d05349c815baadd38ad775e9d
Certificate serial: 01856D8216F645375C28D0750E0AB7861016
Authority key identifier: 22:C4:AC:3E:3C:43:D7:0D:05:34:9C:81:5B:AA:DD:38:AD:77:5E:9D
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/IsSsPjxD1w0FNJyBW6rdOK13Xp0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/03/913a3a-f550-46f0-acc7-cd3ca5975712/1/SP-vTi-35mNMDK78oKN9Z_bb1fg.roa
Signing time: Sun 01 Jan 2023 13:25:20 +0000
ROA not before: Sun 01 Jan 2023 13:25:20 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 397423
IP address blocks: 178.215.224.0/24 maxlen: 24
85.217.144.0/24 maxlen: 24
79.110.61.0/24 maxlen: 24
92.249.51.0/24 maxlen: 24
94.103.127.0/24 maxlen: 24
92.249.48.0/24 maxlen: 24
83.219.97.0/24 maxlen: 24
185.252.179.0/24 maxlen: 24
193.37.44.0/24 maxlen: 24
193.25.216.0/24 maxlen: 24
109.206.238.0/24 maxlen: 24
Validation: Failed, RFC 3779 resource not subset of parent's resources
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:85:6d:82:16:f6:45:37:5c:28:d0:75:0e:0a:b7:86:10:16
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=22c4ac3e3c43d70d05349c815baadd38ad775e9d
Validity
Not Before: Jan 1 13:25:20 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=48ffaf4e2fb7e6634c0caefca0a37d67f6dbd5f8
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:db:b3:9d:80:6a:78:a0:ac:f5:23:0f:90:0c:49:
df:a6:3f:ab:fe:41:c9:a7:a3:39:95:08:f7:09:7a:
60:e6:49:69:61:c4:21:58:c2:91:4a:03:f3:f9:5d:
56:cc:c0:36:3f:f3:b5:95:ae:d8:92:b8:5f:76:bd:
03:ea:44:b2:ca:57:a0:67:d0:c9:6e:64:16:3d:1a:
ea:a0:a3:08:4e:06:3c:3a:0a:a3:4b:72:c4:95:a7:
a8:c3:3b:8a:97:25:0d:4a:be:8b:58:a4:1d:db:6d:
e3:54:cb:82:42:07:9d:81:10:18:99:d0:39:44:c9:
23:6b:49:a6:f9:1b:fc:98:f0:4a:eb:90:72:ac:e8:
b1:40:b2:97:ca:a7:ed:04:9c:47:b9:1d:a2:09:55:
0d:82:e2:26:9a:57:be:07:b3:c8:b6:04:c1:61:9d:
56:dc:85:0c:ea:11:5b:15:65:44:45:7b:94:80:f6:
2a:43:5a:c6:13:ef:bf:4f:92:ff:d7:b4:98:89:b9:
33:90:a4:88:b0:4b:84:98:ae:7e:4f:d3:cf:f5:6b:
c6:30:3e:15:95:e4:ac:f2:52:83:9b:6b:69:a7:ee:
6d:9f:40:17:ac:9b:aa:68:7f:36:0f:fc:b6:74:45:
5a:1c:87:a6:b8:c7:eb:0b:d4:5b:d6:9a:bc:90:04:
f7:c9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
48:FF:AF:4E:2F:B7:E6:63:4C:0C:AE:FC:A0:A3:7D:67:F6:DB:D5:F8
X509v3 Authority Key Identifier:
keyid:22:C4:AC:3E:3C:43:D7:0D:05:34:9C:81:5B:AA:DD:38:AD:77:5E:9D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/IsSsPjxD1w0FNJyBW6rdOK13Xp0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/03/913a3a-f550-46f0-acc7-cd3ca5975712/1/SP-vTi-35mNMDK78oKN9Z_bb1fg.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/03/913a3a-f550-46f0-acc7-cd3ca5975712/1/IsSsPjxD1w0FNJyBW6rdOK13Xp0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
79.110.61.0/24
83.219.97.0/24
85.217.144.0/24
92.249.48.0/24
92.249.51.0/24
94.103.127.0/24
109.206.238.0/24
178.215.224.0/24
185.252.179.0/24
193.25.216.0/24
193.37.44.0/24
Signature Algorithm: sha256WithRSAEncryption
a0:1b:29:07:c3:72:ef:02:d4:aa:7d:cb:94:97:b6:e3:17:a0:
db:14:96:cc:d3:5c:2d:c5:1c:0d:de:c6:da:93:bc:2d:2a:8f:
cd:b9:e8:97:5d:3c:c4:79:5e:50:43:70:df:e5:92:2e:99:e0:
32:d2:8e:ca:76:45:ab:7d:f6:98:23:d0:0f:c4:d9:f9:bd:55:
bb:5a:61:15:4b:f9:7a:39:94:f9:94:0e:a4:13:15:1c:26:99:
43:a5:36:b4:f8:61:36:e3:f6:71:d4:d1:59:e9:c0:18:dd:29:
e3:cc:f2:d1:4c:cf:3d:a1:6b:71:1b:cb:bc:0f:63:51:36:9e:
a8:4a:ba:15:72:c8:e7:e4:54:11:13:59:26:fd:47:7d:72:43:
1c:fa:ab:ab:e5:fa:99:a3:95:f4:42:94:4c:f5:fa:db:89:66:
eb:a4:f5:df:94:58:99:a4:ea:c1:c1:fb:78:1c:28:3d:b6:c3:
ec:97:56:31:80:68:96:50:df:03:2b:ad:87:23:5a:f3:59:76:
11:e1:53:4f:62:80:b9:0b:51:65:3c:1c:34:08:bc:70:e6:37:
e5:63:13:b9:0d:54:06:e0:f5:11:31:bf:46:60:e1:59:94:ae:
2c:7b:2d:26:b7:e2:86:e3:ea:87:e9:9e:14:a7:a3:39:15:f6:
26:58:a9:8c
-----BEGIN CERTIFICATE-----
MIIFOTCCBCGgAwIBAgISAYVtghb2RTdcKNB1Dgq3hhAWMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDIyYzRhYzNlM2M0M2Q3MGQwNTM0OWM4MTViYWFkZDM4YWQ3
NzVlOWQwHhcNMjMwMTAxMTMyNTIwWhcNMjQwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
Eyg0OGZmYWY0ZTJmYjdlNjYzNGMwY2FlZmNhMGEzN2Q2N2Y2ZGJkNWY4MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA27OdgGp4oKz1Iw+QDEnfpj+r/kHJ
p6M5lQj3CXpg5klpYcQhWMKRSgPz+V1WzMA2P/O1la7Ykrhfdr0D6kSyylegZ9DJ
bmQWPRrqoKMITgY8OgqjS3LElaeowzuKlyUNSr6LWKQd223jVMuCQgedgRAYmdA5
RMkja0mm+Rv8mPBK65ByrOixQLKXyqftBJxHuR2iCVUNguImmle+B7PItgTBYZ1W
3IUM6hFbFWVERXuUgPYqQ1rGE++/T5L/17SYibkzkKSIsEuEmK5+T9PP9WvGMD4V
leSs8lKDm2tpp+5tn0AXrJuqaH82D/y2dEVaHIemuMfrC9Rb1pq8kAT3yQIDAQAB
o4ICRTCCAkEwHQYDVR0OBBYEFEj/r04vt+ZjTAyu/KCjfWf229X4MB8GA1UdIwQY
MBaAFCLErD48Q9cNBTScgVuq3Titd16dMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvSXNTc1BqeEQxdzBGTkp5Qlc2cmRPSzEzWHAwLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8wMy85MTNhM2EtZjU1MC00NmYwLWFjYzct
Y2QzY2E1OTc1NzEyLzEvU1AtdlRpLTM1bU5NREs3OG9LTjlaX2JiMWZnLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8wMy85MTNhM2EtZjU1MC00NmYwLWFjYzctY2QzY2E1OTc1NzEy
LzEvSXNTc1BqeEQxdzBGTkp5Qlc2cmRPSzEzWHAwLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMFsGCCsGAQUFBwEHAQH/BEwwSjBIBAIAATBCAwQAT249AwQA
U9thAwQAVdmQAwQAXPkwAwQAXPkzAwQAXmd/AwQAbc7uAwQAstfgAwQAufyzAwQA
wRnYAwQAwSUsMA0GCSqGSIb3DQEBCwUAA4IBAQCgGykHw3LvAtSqfcuUl7bjF6Db
FJbM01wtxRwN3sbak7wtKo/NueiXXTzEeV5QQ3Df5ZIumeAy0o7KdkWrffaYI9AP
xNn5vVW7WmEVS/l6OZT5lA6kExUcJplDpTa0+GE24/Zx1NFZ6cAY3SnjzPLRTM89
oWtxG8u8D2NRNp6oSroVcsjn5FQRE1km/Ud9ckMc+qur5fqZo5X0QpRM9frbiWbr
pPXflFiZpOrBwft4HCg9tsPsl1YxgGiWUN8DK62HI1rzWXYR4VNPYoC5C1FlPBw0
CLxw5jflYxO5DVQG4PURMb9GYOFZlK4sey0mt+KG4+qH6Z4Up6M5FfYmWKmM
-----END CERTIFICATE-----
Generated at Wed Jul 19 23:46:37 2023 by rpki-client on console-ams.rpki-client.org