Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/03/913a3a-f550-46f0-acc7-cd3ca5975712/1/URYHBu4Llwrwi3WUomRUY945RtE.roa
File: URYHBu4Llwrwi3WUomRUY945RtE.roa (raw, json)
Hash identifier: TgvgYr5aQbs8xHGpyHbGs0oYgxo+v9vC/dQFiZYUQYo=
Subject key identifier: 51:16:07:06:EE:0B:97:0A:F0:8B:75:94:A2:64:54:63:DE:39:46:D1
Certificate issuer: /CN=22c4ac3e3c43d70d05349c815baadd38ad775e9d
Certificate serial: 01846730D1CCE6F98961A6F4C7CB19134DFB
Authority key identifier: 22:C4:AC:3E:3C:43:D7:0D:05:34:9C:81:5B:AA:DD:38:AD:77:5E:9D
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/IsSsPjxD1w0FNJyBW6rdOK13Xp0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/03/913a3a-f550-46f0-acc7-cd3ca5975712/1/URYHBu4Llwrwi3WUomRUY945RtE.roa
Signing time: Fri 11 Nov 2022 14:56:03 +0000
ROA not before: Fri 11 Nov 2022 14:56:03 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 50225
IP address blocks: 84.21.173.0/24 maxlen: 24
194.55.224.0/24 maxlen: 24
84.54.50.0/24 maxlen: 24
194.55.225.0/24 maxlen: 24
194.55.227.0/24 maxlen: 24
194.169.173.0/24 maxlen: 24
83.219.96.0/24 maxlen: 24
193.42.34.0/24 maxlen: 24
193.37.43.0/24 maxlen: 24
94.154.162.0/24 maxlen: 24
87.121.220.0/24 maxlen: 24
Validation: Failed, RFC 3779 resource not subset of parent's resources
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:84:67:30:d1:cc:e6:f9:89:61:a6:f4:c7:cb:19:13:4d:fb
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=22c4ac3e3c43d70d05349c815baadd38ad775e9d
Validity
Not Before: Nov 11 14:56:03 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=51160706ee0b970af08b7594a2645463de3946d1
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:85:65:9f:ef:5e:b6:5e:7d:64:5b:b3:84:55:60:
8c:a1:35:15:a8:4e:2d:b3:4f:ae:69:6e:d3:dc:e4:
39:4e:78:33:53:ec:d2:dc:85:4f:89:a2:ad:20:6f:
11:45:b9:34:f4:f3:8e:d6:e3:b3:cb:5f:a1:b2:83:
87:15:de:af:5e:d4:43:b8:36:9b:91:60:08:8c:54:
4b:36:5e:b8:4e:27:b8:33:3d:bf:83:ba:ab:19:5c:
b4:11:b5:c0:53:a2:6f:7c:11:f5:9d:6f:76:3f:ae:
f0:42:d9:a5:87:8e:f8:ff:ab:75:8a:09:a3:42:fb:
4b:e1:4b:37:c9:96:e6:b8:8e:ca:cd:f4:1f:1c:1c:
48:02:9a:0d:e1:2b:8d:ba:5f:46:e1:98:fc:54:da:
0a:77:0f:c5:9b:cd:95:11:43:93:bc:38:28:d7:7e:
50:25:83:e3:b2:00:b3:2c:90:4d:d0:ab:40:22:cf:
6f:1e:bf:b9:44:ec:b0:cf:12:bd:b7:62:b9:6b:b6:
ba:65:9d:9a:52:58:86:6d:98:b3:c9:e8:fd:c3:6c:
c4:17:ab:9b:67:48:c1:de:ef:ac:8f:6f:97:7f:46:
ac:77:1a:a0:bf:f5:19:0c:f7:e3:09:61:a8:fd:50:
51:c8:7c:51:03:f7:60:82:50:a0:8b:3d:95:f5:d9:
04:ab
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
51:16:07:06:EE:0B:97:0A:F0:8B:75:94:A2:64:54:63:DE:39:46:D1
X509v3 Authority Key Identifier:
keyid:22:C4:AC:3E:3C:43:D7:0D:05:34:9C:81:5B:AA:DD:38:AD:77:5E:9D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/IsSsPjxD1w0FNJyBW6rdOK13Xp0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/03/913a3a-f550-46f0-acc7-cd3ca5975712/1/URYHBu4Llwrwi3WUomRUY945RtE.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/03/913a3a-f550-46f0-acc7-cd3ca5975712/1/IsSsPjxD1w0FNJyBW6rdOK13Xp0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
83.219.96.0/24
84.21.173.0/24
84.54.50.0/24
87.121.220.0/24
94.154.162.0/24
193.37.43.0/24
193.42.34.0/24
194.55.224.0/23
194.55.227.0/24
194.169.173.0/24
Signature Algorithm: sha256WithRSAEncryption
ad:7e:3f:01:49:c8:71:dd:6a:9d:79:9a:cf:ca:0c:40:9d:49:
43:44:0b:b5:b9:e7:4a:be:98:b1:fb:20:6e:4d:6a:a4:cf:33:
d8:65:b6:ca:04:66:3a:5e:dc:74:53:0e:3d:9e:a1:45:99:fb:
9c:83:d6:e4:f6:d1:eb:b8:d3:31:0a:8d:55:20:a0:2d:72:f5:
cc:6c:83:62:2a:d1:87:d0:ed:26:64:f0:c6:a9:a0:ee:0d:7f:
d6:9c:ce:13:79:07:da:2b:57:84:a4:9d:14:7e:76:f8:2e:e2:
02:c9:76:d5:26:cc:8d:59:a2:a5:3c:a3:6b:a4:00:7b:29:44:
f8:1b:78:7f:9c:6e:a0:10:de:e3:c7:bf:10:93:08:ef:85:cf:
0b:6b:af:44:48:58:06:34:aa:05:d1:3c:b3:12:11:9a:8e:52:
28:f6:c7:b6:bf:48:0c:5d:0c:e0:2e:4b:5b:d4:aa:0f:05:98:
70:5b:a8:b5:ff:2e:f4:eb:99:9e:37:97:b9:b4:52:f8:0d:e4:
22:68:92:42:33:1d:36:f4:db:55:fa:69:c7:55:21:f4:e1:1a:
04:a5:72:36:97:8d:f6:b1:c7:23:0f:82:76:9b:45:79:8e:18:
30:be:04:ac:2a:60:9b:e1:c3:c6:f7:91:c1:92:27:b9:dd:60:
5e:58:fd:1f
-----BEGIN CERTIFICATE-----
MIIFMzCCBBugAwIBAgISAYRnMNHM5vmJYab0x8sZE037MA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDIyYzRhYzNlM2M0M2Q3MGQwNTM0OWM4MTViYWFkZDM4YWQ3
NzVlOWQwHhcNMjIxMTExMTQ1NjAzWhcNMjMwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
Eyg1MTE2MDcwNmVlMGI5NzBhZjA4Yjc1OTRhMjY0NTQ2M2RlMzk0NmQxMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAhWWf7162Xn1kW7OEVWCMoTUVqE4t
s0+uaW7T3OQ5TngzU+zS3IVPiaKtIG8RRbk09POO1uOzy1+hsoOHFd6vXtRDuDab
kWAIjFRLNl64Tie4Mz2/g7qrGVy0EbXAU6JvfBH1nW92P67wQtmlh474/6t1igmj
QvtL4Us3yZbmuI7KzfQfHBxIApoN4SuNul9G4Zj8VNoKdw/Fm82VEUOTvDgo135Q
JYPjsgCzLJBN0KtAIs9vHr+5ROywzxK9t2K5a7a6ZZ2aUliGbZizyej9w2zEF6ub
Z0jB3u+sj2+Xf0asdxqgv/UZDPfjCWGo/VBRyHxRA/dgglCgiz2V9dkEqwIDAQAB
o4ICPzCCAjswHQYDVR0OBBYEFFEWBwbuC5cK8It1lKJkVGPeOUbRMB8GA1UdIwQY
MBaAFCLErD48Q9cNBTScgVuq3Titd16dMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvSXNTc1BqeEQxdzBGTkp5Qlc2cmRPSzEzWHAwLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8wMy85MTNhM2EtZjU1MC00NmYwLWFjYzct
Y2QzY2E1OTc1NzEyLzEvVVJZSEJ1NExsd3J3aTNXVW9tUlVZOTQ1UnRFLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8wMy85MTNhM2EtZjU1MC00NmYwLWFjYzctY2QzY2E1OTc1NzEy
LzEvSXNTc1BqeEQxdzBGTkp5Qlc2cmRPSzEzWHAwLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMFUGCCsGAQUFBwEHAQH/BEYwRDBCBAIAATA8AwQAU9tgAwQA
VBWtAwQAVDYyAwQAV3ncAwQAXpqiAwQAwSUrAwQAwSoiAwQBwjfgAwQAwjfjAwQA
wqmtMA0GCSqGSIb3DQEBCwUAA4IBAQCtfj8BSchx3WqdeZrPygxAnUlDRAu1uedK
vpix+yBuTWqkzzPYZbbKBGY6Xtx0Uw49nqFFmfucg9bk9tHruNMxCo1VIKAtcvXM
bINiKtGH0O0mZPDGqaDuDX/WnM4TeQfaK1eEpJ0Ufnb4LuICyXbVJsyNWaKlPKNr
pAB7KUT4G3h/nG6gEN7jx78Qkwjvhc8La69ESFgGNKoF0TyzEhGajlIo9se2v0gM
XQzgLktb1KoPBZhwW6i1/y7065meN5e5tFL4DeQiaJJCMx029NtV+mnHVSH04RoE
pXI2l432sccjD4J2m0V5jhgwvgSsKmCb4cPG95HBkie53WBeWP0f
-----END CERTIFICATE-----
Generated at Wed Jul 19 23:46:37 2023 by rpki-client on console-ams.rpki-client.org