Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/03/913a3a-f550-46f0-acc7-cd3ca5975712/1/Te93Sk4l8R-EM8ehuOBAGjEIsQ4.roa
File: Te93Sk4l8R-EM8ehuOBAGjEIsQ4.roa (raw, json)
Hash identifier: zA7pmTWNRd3OmZ4aHAIjc/RZMJZ4V+zAlKj/fQJoCE4=
Subject key identifier: 4D:EF:77:4A:4E:25:F1:1F:84:33:C7:A1:B8:E0:40:1A:31:08:B1:0E
Certificate issuer: /CN=22c4ac3e3c43d70d05349c815baadd38ad775e9d
Certificate serial: 01852FAEDA84430E04441CE8E734286684DC
Authority key identifier: 22:C4:AC:3E:3C:43:D7:0D:05:34:9C:81:5B:AA:DD:38:AD:77:5E:9D
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/IsSsPjxD1w0FNJyBW6rdOK13Xp0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/03/913a3a-f550-46f0-acc7-cd3ca5975712/1/Te93Sk4l8R-EM8ehuOBAGjEIsQ4.roa
Signing time: Tue 20 Dec 2022 13:17:46 +0000
ROA not before: Tue 20 Dec 2022 13:17:46 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 8100
IP address blocks: 87.120.192.0/23 maxlen: 24
87.121.36.0/23 maxlen: 24
87.121.38.0/24 maxlen: 24
87.121.44.0/22 maxlen: 24
87.121.56.0/23 maxlen: 24
87.121.60.0/22 maxlen: 24
87.120.218.0/23 maxlen: 24
87.120.220.0/23 maxlen: 24
94.154.163.0/24 maxlen: 24
94.154.160.0/23 maxlen: 24
94.154.173.0/24 maxlen: 24
93.123.39.0/24 maxlen: 24
94.156.237.0/24 maxlen: 24
194.55.226.0/24 maxlen: 24
94.156.238.0/24 maxlen: 24
93.123.68.0/22 maxlen: 24
93.123.76.0/22 maxlen: 24
93.123.85.0/24 maxlen: 24
93.123.80.0/24 maxlen: 24
93.123.86.0/23 maxlen: 24
94.156.168.0/23 maxlen: 24
94.156.176.0/22 maxlen: 24
94.156.180.0/23 maxlen: 24
93.123.24.0/24 maxlen: 24
194.48.249.0/24 maxlen: 24
93.123.30.0/23 maxlen: 24
194.55.187.0/24 maxlen: 24
93.123.26.0/23 maxlen: 24
87.120.64.0/23 maxlen: 24
87.120.68.0/23 maxlen: 24
87.120.88.0/23 maxlen: 24
87.120.96.0/23 maxlen: 24
87.120.100.0/22 maxlen: 24
93.123.112.0/22 maxlen: 24
93.123.116.0/23 maxlen: 24
93.123.119.0/24 maxlen: 24
87.120.32.0/22 maxlen: 24
193.25.219.0/24 maxlen: 24
87.120.46.0/23 maxlen: 24
94.156.2.0/24 maxlen: 24
94.156.6.0/24 maxlen: 24
94.156.8.0/24 maxlen: 24
91.92.16.0/24 maxlen: 24
91.92.21.0/24 maxlen: 24
91.92.24.0/22 maxlen: 24
193.58.121.0/24 maxlen: 24
193.58.123.0/24 maxlen: 24
194.169.172.0/24 maxlen: 24
94.156.131.0/24 maxlen: 24
94.156.152.0/24 maxlen: 24
94.156.156.0/23 maxlen: 24
94.156.154.0/23 maxlen: 24
91.92.67.0/24 maxlen: 24
94.156.78.0/23 maxlen: 24
37.139.130.0/23 maxlen: 24
212.87.205.0/24 maxlen: 24
87.121.146.0/23 maxlen: 24
178.215.236.0/24 maxlen: 24
178.215.238.0/24 maxlen: 24
87.121.162.0/23 maxlen: 24
87.121.69.0/24 maxlen: 24
185.252.177.0/24 maxlen: 24
193.222.97.0/24 maxlen: 24
193.47.62.0/24 maxlen: 24
193.37.42.0/24 maxlen: 24
87.121.100.0/23 maxlen: 24
87.121.103.0/24 maxlen: 24
87.121.114.0/23 maxlen: 24
31.13.252.0/22 maxlen: 24
Validation: Failed, RFC 3779 resource not subset of parent's resources
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:85:2f:ae:da:84:43:0e:04:44:1c:e8:e7:34:28:66:84:dc
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=22c4ac3e3c43d70d05349c815baadd38ad775e9d
Validity
Not Before: Dec 20 13:17:46 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=4def774a4e25f11f8433c7a1b8e0401a3108b10e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a8:a6:1c:c7:3f:d5:ab:83:3a:42:72:e2:fd:1f:
1a:37:af:93:c3:1b:68:f8:f6:96:b7:e1:d5:01:c4:
f7:3b:7c:33:fe:ec:bf:f8:43:bd:e6:c5:2e:66:f6:
83:0f:36:b9:e4:c2:fa:ff:5f:de:57:31:6e:7e:17:
aa:79:06:04:83:56:55:52:f4:bf:4b:44:c5:aa:a6:
88:b0:f2:05:83:82:e1:ae:65:97:68:93:4c:43:87:
88:a1:b8:3d:42:7c:58:b8:41:d4:99:f7:30:d8:20:
39:cf:a3:86:47:cb:f5:1c:5d:70:7d:6d:09:1e:9d:
b8:86:c9:ab:6f:c4:da:8a:76:0d:f0:f0:c7:fe:d5:
58:6e:e5:61:1f:f0:be:83:ac:68:9e:71:58:ad:ff:
31:96:cc:4d:b4:82:b1:ba:8f:a6:b4:be:fb:73:38:
e7:8a:f2:03:e5:fe:0b:ee:1d:d1:74:72:46:4d:89:
9e:05:4e:76:4e:f6:93:2d:52:94:af:45:4b:8a:47:
00:d3:5b:21:db:7d:fa:3e:4e:1b:7c:08:3f:e4:13:
6b:cd:0d:f3:81:42:b8:7a:0a:46:05:04:66:32:64:
0e:27:64:86:e4:2b:6e:83:87:3d:61:1d:ea:9c:01:
99:8f:97:89:4c:42:fb:87:a8:28:b5:bb:5a:da:0e:
95:47
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
4D:EF:77:4A:4E:25:F1:1F:84:33:C7:A1:B8:E0:40:1A:31:08:B1:0E
X509v3 Authority Key Identifier:
keyid:22:C4:AC:3E:3C:43:D7:0D:05:34:9C:81:5B:AA:DD:38:AD:77:5E:9D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/IsSsPjxD1w0FNJyBW6rdOK13Xp0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/03/913a3a-f550-46f0-acc7-cd3ca5975712/1/Te93Sk4l8R-EM8ehuOBAGjEIsQ4.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/03/913a3a-f550-46f0-acc7-cd3ca5975712/1/IsSsPjxD1w0FNJyBW6rdOK13Xp0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
31.13.252.0/22
37.139.130.0/23
87.120.32.0/22
87.120.46.0/23
87.120.64.0/23
87.120.68.0/23
87.120.88.0/23
87.120.96.0/23
87.120.100.0/22
87.120.192.0/23
87.120.218.0-87.120.221.255
87.121.36.0-87.121.38.255
87.121.44.0/22
87.121.56.0/23
87.121.60.0/22
87.121.69.0/24
87.121.100.0/23
87.121.103.0/24
87.121.114.0/23
87.121.146.0/23
87.121.162.0/23
91.92.16.0/24
91.92.21.0/24
91.92.24.0/22
91.92.67.0/24
93.123.24.0/24
93.123.26.0/23
93.123.30.0/23
93.123.39.0/24
93.123.68.0/22
93.123.76.0-93.123.80.255
93.123.85.0-93.123.87.255
93.123.112.0-93.123.117.255
93.123.119.0/24
94.154.160.0/23
94.154.163.0/24
94.154.173.0/24
94.156.2.0/24
94.156.6.0/24
94.156.8.0/24
94.156.78.0/23
94.156.131.0/24
94.156.152.0/24
94.156.154.0-94.156.157.255
94.156.168.0/23
94.156.176.0-94.156.181.255
94.156.237.0-94.156.238.255
178.215.236.0/24
178.215.238.0/24
185.252.177.0/24
193.25.219.0/24
193.37.42.0/24
193.47.62.0/24
193.58.121.0/24
193.58.123.0/24
193.222.97.0/24
194.48.249.0/24
194.55.187.0/24
194.55.226.0/24
194.169.172.0/24
212.87.205.0/24
Signature Algorithm: sha256WithRSAEncryption
1b:82:02:77:d3:27:8d:3e:bc:8b:c8:52:32:93:43:14:cb:25:
87:c3:96:21:36:92:43:f3:dc:33:68:ff:98:d3:b9:33:c3:00:
bf:59:6c:f2:63:61:80:77:ab:d4:e1:ad:dc:c6:63:d6:99:24:
bb:74:d3:69:76:10:9e:c2:e0:3f:94:fd:22:bc:6c:04:fa:fc:
33:d0:b6:1a:ba:4d:ad:ed:a4:6f:05:5b:02:6a:ea:24:6c:93:
84:da:f3:60:1c:38:d9:b3:bd:f1:43:d6:cd:ca:94:49:80:32:
d8:44:41:56:ef:c0:a7:71:39:c9:e8:2f:07:56:fd:92:83:b5:
ca:76:a2:1e:63:1c:4e:bc:fa:56:3a:ec:11:58:70:c5:2d:9a:
b9:f0:dc:33:b4:26:07:b1:12:b4:2f:d8:d1:b2:c8:7a:de:dc:
e8:f3:36:92:c2:f0:19:ee:af:34:fb:58:9b:6b:fd:3e:40:68:
ce:27:72:cf:99:92:a3:05:e0:95:c3:87:02:8c:25:db:74:40:
b0:1d:80:99:92:b6:e8:7a:85:04:14:5b:c3:67:8e:a3:d3:d2:
dd:10:ae:e2:5a:2f:fe:82:71:7b:1b:13:07:76:e8:ff:f8:51:
92:60:56:24:97:47:8d:bb:df:75:7b:37:5b:43:16:9e:68:57:
fe:64:17:51
-----BEGIN CERTIFICATE-----
MIIGrzCCBZegAwIBAgISAYUvrtqEQw4ERBzo5zQoZoTcMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDIyYzRhYzNlM2M0M2Q3MGQwNTM0OWM4MTViYWFkZDM4YWQ3
NzVlOWQwHhcNMjIxMjIwMTMxNzQ2WhcNMjMwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
Eyg0ZGVmNzc0YTRlMjVmMTFmODQzM2M3YTFiOGUwNDAxYTMxMDhiMTBlMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAqKYcxz/Vq4M6QnLi/R8aN6+Twxto
+PaWt+HVAcT3O3wz/uy/+EO95sUuZvaDDza55ML6/1/eVzFufheqeQYEg1ZVUvS/
S0TFqqaIsPIFg4LhrmWXaJNMQ4eIobg9QnxYuEHUmfcw2CA5z6OGR8v1HF1wfW0J
Hp24hsmrb8TainYN8PDH/tVYbuVhH/C+g6xonnFYrf8xlsxNtIKxuo+mtL77czjn
ivID5f4L7h3RdHJGTYmeBU52TvaTLVKUr0VLikcA01sh2336Pk4bfAg/5BNrzQ3z
gUK4egpGBQRmMmQOJ2SG5Ctug4c9YR3qnAGZj5eJTEL7h6gotbta2g6VRwIDAQAB
o4IDuzCCA7cwHQYDVR0OBBYEFE3vd0pOJfEfhDPHobjgQBoxCLEOMB8GA1UdIwQY
MBaAFCLErD48Q9cNBTScgVuq3Titd16dMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvSXNTc1BqeEQxdzBGTkp5Qlc2cmRPSzEzWHAwLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8wMy85MTNhM2EtZjU1MC00NmYwLWFjYzct
Y2QzY2E1OTc1NzEyLzEvVGU5M1NrNGw4Ui1FTThlaHVPQkFHakVJc1E0LnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8wMy85MTNhM2EtZjU1MC00NmYwLWFjYzctY2QzY2E1OTc1NzEy
LzEvSXNTc1BqeEQxdzBGTkp5Qlc2cmRPSzEzWHAwLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMIIBzwYIKwYBBQUHAQcBAf8EggG+MIIBujCCAbYEAgABMIIB
rgMEAh8N/AMEASWLggMEAld4IAMEAVd4LgMEAVd4QAMEAVd4RAMEAVd4WAMEAVd4
YAMEAld4ZAMEAVd4wDAMAwQBV3jaAwQBV3jcMAwDBAJXeSQDBABXeSYDBAJXeSwD
BAFXeTgDBAJXeTwDBABXeUUDBAFXeWQDBABXeWcDBAFXeXIDBAFXeZIDBAFXeaID
BABbXBADBABbXBUDBAJbXBgDBABbXEMDBABdexgDBAFdexoDBAFdex4DBABdeycD
BAJde0QwDAMEAl17TAMEAF17UDAMAwQAXXtVAwQDXXtQMAwDBARde3ADBAFde3QD
BABde3cDBAFemqADBABemqMDBABemq0DBABenAIDBABenAYDBABenAgDBAFenE4D
BABenIMDBABenJgwDAMEAV6cmgMEAV6cnAMEAV6cqDAMAwQEXpywAwQBXpy0MAwD
BABenO0DBABenO4DBACy1+wDBACy1+4DBAC5/LEDBADBGdsDBADBJSoDBADBLz4D
BADBOnkDBADBOnsDBADB3mEDBADCMPkDBADCN7sDBADCN+IDBADCqawDBADUV80w
DQYJKoZIhvcNAQELBQADggEBABuCAnfTJ40+vIvIUjKTQxTLJYfDliE2kkPz3DNo
/5jTuTPDAL9ZbPJjYYB3q9ThrdzGY9aZJLt002l2EJ7C4D+U/SK8bAT6/DPQthq6
Ta3tpG8FWwJq6iRsk4Ta82AcONmzvfFD1s3KlEmAMthEQVbvwKdxOcnoLwdW/ZKD
tcp2oh5jHE68+lY67BFYcMUtmrnw3DO0JgexErQv2NGyyHre3OjzNpLC8BnurzT7
WJtr/T5AaM4ncs+ZkqMF4JXDhwKMJdt0QLAdgJmStuh6hQQUW8NnjqPT0t0QruJa
L/6CcXsbEwd26P/4UZJgViSXR42733V7N1tDFp5oV/5kF1E=
-----END CERTIFICATE-----
Generated at Wed Jul 19 23:46:37 2023 by rpki-client on console-ams.rpki-client.org