Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/03/913a3a-f550-46f0-acc7-cd3ca5975712/1/StrTmBDa_BWWQuCUOufVQf955O0.roa
File: StrTmBDa_BWWQuCUOufVQf955O0.roa (raw, json)
Hash identifier: vDNOGbBbiZyWxzjBMUZ+65oTFu7EUg10dKpdrQOeegQ=
Subject key identifier: 4A:DA:D3:98:10:DA:FC:15:96:42:E0:94:3A:E7:D5:41:FF:79:E4:ED
Certificate issuer: /CN=22c4ac3e3c43d70d05349c815baadd38ad775e9d
Certificate serial: 1C67BE8A
Authority key identifier: 22:C4:AC:3E:3C:43:D7:0D:05:34:9C:81:5B:AA:DD:38:AD:77:5E:9D
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/IsSsPjxD1w0FNJyBW6rdOK13Xp0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/03/913a3a-f550-46f0-acc7-cd3ca5975712/1/StrTmBDa_BWWQuCUOufVQf955O0.roa
Signing time: Sat 01 Jan 2022 01:02:31 +0000
ROA not before: Sat 01 Jan 2022 01:02:31 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 43561
IP address blocks: 87.120.192.0/24 maxlen: 24
87.120.193.0/24 maxlen: 24
87.121.36.0/24 maxlen: 24
87.121.37.0/24 maxlen: 24
87.121.38.0/24 maxlen: 24
87.121.44.0/22 maxlen: 24
87.121.57.0/24 maxlen: 24
87.121.56.0/24 maxlen: 24
87.121.63.0/24 maxlen: 24
87.121.61.0/24 maxlen: 24
87.121.62.0/24 maxlen: 24
87.121.60.0/24 maxlen: 24
87.120.218.0/23 maxlen: 24
87.120.220.0/23 maxlen: 24
87.120.64.0/24 maxlen: 24
87.120.68.0/24 maxlen: 24
87.120.69.0/24 maxlen: 24
87.120.65.0/24 maxlen: 24
87.120.72.0/21 maxlen: 21
87.120.77.0/24 maxlen: 24
87.120.75.0/24 maxlen: 24
87.120.73.0/24 maxlen: 24
87.120.78.0/24 maxlen: 24
87.120.76.0/24 maxlen: 24
87.120.74.0/24 maxlen: 24
87.120.72.0/24 maxlen: 24
87.120.79.0/24 maxlen: 24
87.120.89.0/24 maxlen: 24
87.120.88.0/24 maxlen: 24
87.120.97.0/24 maxlen: 24
87.120.96.0/24 maxlen: 24
87.120.100.0/22 maxlen: 24
87.120.34.0/24 maxlen: 24
87.120.32.0/24 maxlen: 24
87.120.35.0/24 maxlen: 24
87.120.33.0/24 maxlen: 24
87.120.46.0/24 maxlen: 24
87.120.47.0/24 maxlen: 24
91.92.8.0/21 maxlen: 24
91.92.6.0/24 maxlen: 24
91.92.16.0/24 maxlen: 24
91.92.24.0/22 maxlen: 24
91.92.21.0/24 maxlen: 24
91.92.67.0/24 maxlen: 24
93.123.81.5/32 maxlen: 32
93.123.39.0/24 maxlen: 24
94.156.232.0/21 maxlen: 24
93.123.71.0/24 maxlen: 24
93.123.69.0/24 maxlen: 24
93.123.68.0/22 maxlen: 22
93.123.70.0/24 maxlen: 24
93.123.68.0/24 maxlen: 24
93.123.77.0/24 maxlen: 24
93.123.78.0/24 maxlen: 24
93.123.76.0/24 maxlen: 24
93.123.79.0/24 maxlen: 24
93.123.84.0/24 maxlen: 24
93.123.85.0/24 maxlen: 24
93.123.86.0/24 maxlen: 24
93.123.88.0/21 maxlen: 24
93.123.87.0/24 maxlen: 24
94.156.160.0/23 maxlen: 24
94.156.169.0/24 maxlen: 24
94.156.168.0/24 maxlen: 24
94.156.176.0/21 maxlen: 24
93.123.24.0/24 maxlen: 24
93.123.22.0/24 maxlen: 24
93.123.31.0/24 maxlen: 24
93.123.27.0/24 maxlen: 24
93.123.30.0/24 maxlen: 24
93.123.26.0/24 maxlen: 24
93.123.112.0/24 maxlen: 24
93.123.118.0/24 maxlen: 24
93.123.116.0/24 maxlen: 24
93.123.114.0/24 maxlen: 24
93.123.117.0/24 maxlen: 24
93.123.115.0/24 maxlen: 24
93.123.113.0/24 maxlen: 24
93.123.119.0/24 maxlen: 24
94.156.2.0/24 maxlen: 24
94.156.6.0/24 maxlen: 24
94.156.8.0/24 maxlen: 24
94.156.131.0/24 maxlen: 24
94.156.136.0/21 maxlen: 24
94.156.152.0/24 maxlen: 24
94.156.157.0/24 maxlen: 24
94.156.156.0/24 maxlen: 24
94.156.154.0/23 maxlen: 24
94.156.78.0/24 maxlen: 24
94.156.79.0/24 maxlen: 24
87.121.147.0/24 maxlen: 24
87.121.146.0/24 maxlen: 24
87.121.162.0/23 maxlen: 24
87.121.69.0/24 maxlen: 24
87.121.105.0/24 maxlen: 24
87.121.103.0/24 maxlen: 24
87.121.101.0/24 maxlen: 24
87.121.104.0/24 maxlen: 24
87.121.100.0/24 maxlen: 24
87.121.115.0/24 maxlen: 24
87.121.114.0/24 maxlen: 24
31.13.252.0/24 maxlen: 24
31.13.252.0/22 maxlen: 22
31.13.253.0/24 maxlen: 24
31.13.254.0/24 maxlen: 24
31.13.255.0/24 maxlen: 24
Validation: Failed, RFC 3779 resource not subset of parent's resources
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 476561034 (0x1c67be8a)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=22c4ac3e3c43d70d05349c815baadd38ad775e9d
Validity
Not Before: Jan 1 01:02:31 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=4adad39810dafc159642e0943ae7d541ff79e4ed
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:88:c5:6b:e5:71:5a:29:a2:45:c9:a4:b1:6c:b0:
f2:6a:81:de:39:43:f7:ab:ec:80:c6:ef:b9:31:12:
17:8b:68:cd:8d:69:e8:59:0e:b5:c5:67:3d:8c:dc:
b8:3c:95:3e:25:16:09:0e:76:05:4e:85:d6:04:ca:
8a:99:ea:dd:5d:ce:24:5a:08:c5:f5:06:ba:f1:97:
5e:fe:00:2b:04:c1:50:4c:da:7e:83:09:18:e3:9d:
f9:21:20:ef:cb:60:ac:a3:f4:59:29:2f:b2:0b:8d:
18:80:5f:57:e8:3a:65:84:1a:26:83:6c:b9:b8:fb:
da:74:ec:e5:dd:04:8c:48:35:ba:c8:c6:49:8e:11:
56:bd:ac:52:49:f7:cc:cc:a9:9c:98:ea:5a:32:c7:
fb:82:c1:73:3a:61:bb:b3:dc:d0:34:36:29:ba:34:
62:7f:0b:17:e8:db:c9:67:5a:6a:c3:ec:6e:08:d3:
b2:f0:91:01:87:f4:b1:c5:6b:92:11:c5:ca:30:7e:
2a:f9:7c:ce:6b:3d:4f:3b:ee:fe:8d:c5:8f:f6:82:
4b:39:5e:7f:05:5f:e9:fa:6d:fe:d3:a9:eb:46:c2:
47:5c:48:ff:67:f8:7c:f8:10:da:55:9e:6f:89:4a:
fa:0c:6c:7e:9e:12:45:72:c4:e0:6c:83:41:66:6d:
7a:79
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
4A:DA:D3:98:10:DA:FC:15:96:42:E0:94:3A:E7:D5:41:FF:79:E4:ED
X509v3 Authority Key Identifier:
keyid:22:C4:AC:3E:3C:43:D7:0D:05:34:9C:81:5B:AA:DD:38:AD:77:5E:9D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/IsSsPjxD1w0FNJyBW6rdOK13Xp0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/03/913a3a-f550-46f0-acc7-cd3ca5975712/1/StrTmBDa_BWWQuCUOufVQf955O0.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/03/913a3a-f550-46f0-acc7-cd3ca5975712/1/IsSsPjxD1w0FNJyBW6rdOK13Xp0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
31.13.252.0/22
87.120.32.0/22
87.120.46.0/23
87.120.64.0/23
87.120.68.0/23
87.120.72.0/21
87.120.88.0/23
87.120.96.0/23
87.120.100.0/22
87.120.192.0/23
87.120.218.0-87.120.221.255
87.121.36.0-87.121.38.255
87.121.44.0/22
87.121.56.0/23
87.121.60.0/22
87.121.69.0/24
87.121.100.0/23
87.121.103.0-87.121.105.255
87.121.114.0/23
87.121.146.0/23
87.121.162.0/23
91.92.6.0/24
91.92.8.0-91.92.16.255
91.92.21.0/24
91.92.24.0/22
91.92.67.0/24
93.123.22.0/24
93.123.24.0/24
93.123.26.0/23
93.123.30.0/23
93.123.39.0/24
93.123.68.0/22
93.123.76.0/22
93.123.81.5/32
93.123.84.0-93.123.95.255
93.123.112.0/21
94.156.2.0/24
94.156.6.0/24
94.156.8.0/24
94.156.78.0/23
94.156.131.0/24
94.156.136.0/21
94.156.152.0/24
94.156.154.0-94.156.157.255
94.156.160.0/23
94.156.168.0/23
94.156.176.0/21
94.156.232.0/21
Signature Algorithm: sha256WithRSAEncryption
50:57:fa:a0:f4:f0:ea:07:4e:25:2b:9c:4b:0a:68:77:57:9b:
30:86:f0:f8:f9:ed:59:04:43:71:38:ca:da:9c:28:8e:3c:5c:
91:2c:42:45:f2:4e:a1:f7:61:59:01:20:e9:18:2a:a4:76:e5:
2c:0a:08:5b:ec:ed:e2:f0:2b:21:70:24:f6:c4:87:71:4c:71:
32:4e:7a:02:42:a0:46:4b:d4:0d:db:79:af:13:54:c7:76:5c:
75:85:95:1f:bd:fa:4a:d3:06:80:71:2c:88:fd:e3:15:e2:dc:
d6:1e:66:67:c5:f1:af:ee:2f:f5:65:e5:7f:0a:67:25:a1:b6:
0c:ac:d6:be:37:ee:30:ac:2d:0f:93:d1:5e:19:c7:46:6c:83:
aa:35:34:84:b8:da:db:e3:74:bf:e5:e8:9b:43:28:88:1a:b2:
a0:29:e6:0d:a6:36:f1:06:7d:8c:93:db:b8:9f:2f:fc:7a:c7:
0b:43:8c:f5:b7:53:09:27:d1:96:63:6d:81:af:e8:e7:87:f7:
13:30:01:15:b8:50:b2:55:57:ee:4c:98:82:0d:4a:3f:a9:53:
80:91:55:5e:71:14:54:c5:d8:da:f5:36:7c:47:42:9a:04:ad:
d6:db:7b:d4:5e:db:1f:ff:c4:4f:f3:1d:a6:bc:de:d8:29:2b:
80:74:b7:67
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 19 23:46:37 2023 by rpki-client on console-ams.rpki-client.org