Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/03/913a3a-f550-46f0-acc7-cd3ca5975712/1/UQWvK3AmjSDSSkanSUCso3VEyv4.roa
File: UQWvK3AmjSDSSkanSUCso3VEyv4.roa (raw, json)
Hash identifier: dty1KsIYyzDvYhhiYelzI4wUBxJ5E9OTuhggRj4mCOw=
Subject key identifier: 51:05:AF:2B:70:26:8D:20:D2:4A:46:A7:49:40:AC:A3:75:44:CA:FE
Certificate issuer: /CN=22c4ac3e3c43d70d05349c815baadd38ad775e9d
Certificate serial: 01879DAF38958D2DB427568E5F64C80DDE16
Authority key identifier: 22:C4:AC:3E:3C:43:D7:0D:05:34:9C:81:5B:AA:DD:38:AD:77:5E:9D
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/IsSsPjxD1w0FNJyBW6rdOK13Xp0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/03/913a3a-f550-46f0-acc7-cd3ca5975712/1/UQWvK3AmjSDSSkanSUCso3VEyv4.roa
Signing time: Thu 20 Apr 2023 08:01:58 +0000
ROA not before: Thu 20 Apr 2023 08:01:58 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 0
IP address blocks: 185.218.84.0/22 maxlen: 24
84.54.49.0/24 maxlen: 24
178.215.236.0/24 maxlen: 24
178.215.237.0/24 maxlen: 24
141.98.7.0/24 maxlen: 24
171.22.72.0/22 maxlen: 24
45.149.233.0/24 maxlen: 24
147.78.101.0/24 maxlen: 24
147.78.100.0/24 maxlen: 24
92.119.196.0/23 maxlen: 24
87.120.64.0/23 maxlen: 24
79.110.50.0/24 maxlen: 24
94.103.125.0/24 maxlen: 24
185.216.84.0/22 maxlen: 24
185.218.137.0/24 maxlen: 24
82.115.209.0/24 maxlen: 24
194.49.87.0/24 maxlen: 24
94.154.162.0/23 maxlen: 24
94.154.161.0/24 maxlen: 24
185.219.126.0/24 maxlen: 24
94.154.172.0/24 maxlen: 24
87.121.220.0/24 maxlen: 24
45.151.89.0/24 maxlen: 24
Validation: Failed, RFC 3779 resource not subset of parent's resources
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:87:9d:af:38:95:8d:2d:b4:27:56:8e:5f:64:c8:0d:de:16
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=22c4ac3e3c43d70d05349c815baadd38ad775e9d
Validity
Not Before: Apr 20 08:01:58 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=5105af2b70268d20d24a46a74940aca37544cafe
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b9:fd:96:c1:46:b8:a0:aa:c1:a9:b9:56:31:07:
a7:28:c9:8b:3b:b9:75:4b:e5:a5:81:60:d6:0a:9c:
bd:fd:1d:9d:ed:10:96:ef:8a:1b:3f:42:04:c0:5e:
8a:21:00:d3:2a:30:d2:f0:1e:f8:2c:f7:29:34:23:
15:fb:ac:4a:46:fd:6d:7e:06:7e:de:2a:c5:2a:87:
75:61:8b:2d:27:41:88:a7:c1:5c:b4:c3:ac:13:2d:
d5:e0:78:9e:57:e6:46:21:9d:16:02:a2:b3:52:42:
23:59:3d:c1:1f:0a:24:43:84:c1:cb:48:43:11:10:
06:c5:cc:79:1e:f5:41:61:ba:db:12:b7:9c:48:99:
77:57:1e:17:0e:3d:84:b4:ed:ff:a9:a7:ac:87:e0:
dd:91:f5:7d:60:c0:bc:db:e7:e7:dd:0e:bd:ba:94:
ad:c0:22:bd:76:c2:39:8d:19:0b:4e:e1:2e:0d:90:
7a:b7:d1:0d:ae:ec:c5:8e:92:4b:22:6e:20:21:3c:
fc:ec:2d:7b:de:56:4f:d0:18:53:be:f4:5d:95:88:
8e:30:b9:f7:ea:1e:25:5f:37:90:ef:72:7a:5b:76:
fe:d3:cb:04:d6:d2:e6:38:e8:83:72:78:4c:fe:21:
35:c4:b4:0d:2c:03:97:16:3a:a6:a0:3f:97:f2:3d:
96:3d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
51:05:AF:2B:70:26:8D:20:D2:4A:46:A7:49:40:AC:A3:75:44:CA:FE
X509v3 Authority Key Identifier:
keyid:22:C4:AC:3E:3C:43:D7:0D:05:34:9C:81:5B:AA:DD:38:AD:77:5E:9D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/IsSsPjxD1w0FNJyBW6rdOK13Xp0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/03/913a3a-f550-46f0-acc7-cd3ca5975712/1/UQWvK3AmjSDSSkanSUCso3VEyv4.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/03/913a3a-f550-46f0-acc7-cd3ca5975712/1/IsSsPjxD1w0FNJyBW6rdOK13Xp0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
45.149.233.0/24
45.151.89.0/24
79.110.50.0/24
82.115.209.0/24
84.54.49.0/24
87.120.64.0/23
87.121.220.0/24
92.119.196.0/23
94.103.125.0/24
94.154.161.0-94.154.163.255
94.154.172.0/24
141.98.7.0/24
147.78.100.0/23
171.22.72.0/22
178.215.236.0/23
185.216.84.0/22
185.218.84.0/22
185.218.137.0/24
185.219.126.0/24
194.49.87.0/24
Signature Algorithm: sha256WithRSAEncryption
92:13:d7:c3:19:21:cf:73:a2:c3:3d:c0:63:35:48:1e:82:f7:
04:a0:b6:68:d1:76:13:a3:b3:8d:36:f6:88:72:56:e3:23:c8:
7b:e1:fa:e3:48:8b:58:85:58:02:b2:38:e4:34:9c:2b:d9:65:
cb:65:a6:00:c0:dc:5a:a5:49:91:e2:af:d8:71:c7:84:e7:6e:
51:82:ff:7e:53:6c:d4:23:a9:07:17:64:af:15:32:d0:2a:63:
3b:0b:ba:c5:a3:92:08:92:30:c4:f9:04:ed:8b:ba:51:ca:75:
2f:76:c2:ae:46:19:47:4f:6f:b0:64:dd:bc:05:98:25:ad:e5:
31:75:a4:1e:1c:1a:a5:2e:45:8d:11:36:55:11:42:c7:be:b2:
75:2f:7d:84:04:aa:e0:9a:42:79:f7:24:dc:1e:97:f8:9a:04:
11:67:98:85:62:b1:93:cf:8d:5e:1c:69:84:c4:bf:93:f8:8f:
81:24:c5:2a:e7:ad:54:3e:26:24:7f:56:b3:e1:fa:69:80:18:
f7:50:3d:53:a8:c3:a4:8a:2c:2c:7e:1a:35:05:2a:8b:bf:45:
2c:53:1c:a2:29:09:5d:e4:fa:09:5d:51:9b:e3:aa:3e:37:15:
9f:15:3a:e5:ab:7d:91:34:4e:49:6d:1b:d5:1c:fd:58:a4:e6:
e8:9d:70:9f
-----BEGIN CERTIFICATE-----
MIIFfDCCBGSgAwIBAgISAYedrziVjS20J1aOX2TIDd4WMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDIyYzRhYzNlM2M0M2Q3MGQwNTM0OWM4MTViYWFkZDM4YWQ3
NzVlOWQwHhcNMjMwNDIwMDgwMTU4WhcNMjQwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
Eyg1MTA1YWYyYjcwMjY4ZDIwZDI0YTQ2YTc0OTQwYWNhMzc1NDRjYWZlMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAuf2WwUa4oKrBqblWMQenKMmLO7l1
S+WlgWDWCpy9/R2d7RCW74obP0IEwF6KIQDTKjDS8B74LPcpNCMV+6xKRv1tfgZ+
3irFKod1YYstJ0GIp8FctMOsEy3V4HieV+ZGIZ0WAqKzUkIjWT3BHwokQ4TBy0hD
ERAGxcx5HvVBYbrbErecSJl3Vx4XDj2EtO3/qaesh+DdkfV9YMC82+fn3Q69upSt
wCK9dsI5jRkLTuEuDZB6t9ENruzFjpJLIm4gITz87C173lZP0BhTvvRdlYiOMLn3
6h4lXzeQ73J6W3b+08sE1tLmOOiDcnhM/iE1xLQNLAOXFjqmoD+X8j2WPQIDAQAB
o4ICiDCCAoQwHQYDVR0OBBYEFFEFrytwJo0g0kpGp0lArKN1RMr+MB8GA1UdIwQY
MBaAFCLErD48Q9cNBTScgVuq3Titd16dMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvSXNTc1BqeEQxdzBGTkp5Qlc2cmRPSzEzWHAwLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8wMy85MTNhM2EtZjU1MC00NmYwLWFjYzct
Y2QzY2E1OTc1NzEyLzEvVVFXdkszQW1qU0RTU2thblNVQ3NvM1ZFeXY0LnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8wMy85MTNhM2EtZjU1MC00NmYwLWFjYzctY2QzY2E1OTc1NzEy
LzEvSXNTc1BqeEQxdzBGTkp5Qlc2cmRPSzEzWHAwLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMIGdBggrBgEFBQcBBwEB/wSBjTCBijCBhwQCAAEwgYADBAAt
lekDBAAtl1kDBABPbjIDBABSc9EDBABUNjEDBAFXeEADBABXedwDBAFcd8QDBABe
Z30wDAMEAF6aoQMEAl6aoAMEAF6arAMEAI1iBwMEAZNOZAMEAqsWSAMEAbLX7AME
ArnYVAMEArnaVAMEALnaiQMEALnbfgMEAMIxVzANBgkqhkiG9w0BAQsFAAOCAQEA
khPXwxkhz3Oiwz3AYzVIHoL3BKC2aNF2E6OzjTb2iHJW4yPIe+H640iLWIVYArI4
5DScK9lly2WmAMDcWqVJkeKv2HHHhOduUYL/flNs1COpBxdkrxUy0CpjOwu6xaOS
CJIwxPkE7Yu6Ucp1L3bCrkYZR09vsGTdvAWYJa3lMXWkHhwapS5FjRE2VRFCx76y
dS99hASq4JpCefck3B6X+JoEEWeYhWKxk8+NXhxphMS/k/iPgSTFKuetVD4mJH9W
s+H6aYAY91A9U6jDpIosLH4aNQUqi79FLFMcoikJXeT6CV1Rm+OqPjcVnxU65at9
kTROSW0b1Rz9WKTm6J1wnw==
-----END CERTIFICATE-----
Generated at Thu Jun 6 18:50:34 2024 by rpki-client on console-ams.rpki-client.org