Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/03/913a3a-f550-46f0-acc7-cd3ca5975712/1/UiYTMU_bpaWll3DWQrHgZtvfoAo.roa
File: UiYTMU_bpaWll3DWQrHgZtvfoAo.roa (raw, json)
Hash identifier: 2vgk/7WrNbamcFMUvt6KPlLJ2pmi0fTWHjABJS5TFI0=
Subject key identifier: 52:26:13:31:4F:DB:A5:A5:A5:97:70:D6:42:B1:E0:66:DB:DF:A0:0A
Certificate issuer: /CN=22c4ac3e3c43d70d05349c815baadd38ad775e9d
Certificate serial: 0187B1B7BDE3B8D98F969FB0DB78529EB430
Authority key identifier: 22:C4:AC:3E:3C:43:D7:0D:05:34:9C:81:5B:AA:DD:38:AD:77:5E:9D
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/IsSsPjxD1w0FNJyBW6rdOK13Xp0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/03/913a3a-f550-46f0-acc7-cd3ca5975712/1/UiYTMU_bpaWll3DWQrHgZtvfoAo.roa
Signing time: Mon 24 Apr 2023 05:23:41 +0000
ROA not before: Mon 24 Apr 2023 05:23:41 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 8100
IP address blocks: 87.120.192.0/23 maxlen: 24
185.147.100.0/22 maxlen: 24
87.121.36.0/23 maxlen: 24
87.121.38.0/24 maxlen: 24
87.121.60.0/22 maxlen: 24
87.120.219.0/24 maxlen: 24
94.154.160.0/23 maxlen: 24
45.9.208.0/22 maxlen: 24
94.154.173.0/24 maxlen: 24
45.143.100.0/22 maxlen: 24
94.156.237.0/24 maxlen: 24
194.55.226.0/24 maxlen: 24
94.156.238.0/24 maxlen: 24
93.123.68.0/22 maxlen: 24
93.123.76.0/22 maxlen: 24
93.123.80.0/24 maxlen: 24
93.123.86.0/23 maxlen: 24
94.156.168.0/23 maxlen: 24
94.156.176.0/22 maxlen: 24
94.156.180.0/23 maxlen: 24
194.48.249.0/24 maxlen: 24
93.123.24.0/24 maxlen: 24
93.123.30.0/23 maxlen: 24
93.123.26.0/23 maxlen: 24
87.120.96.0/23 maxlen: 24
93.123.112.0/22 maxlen: 24
93.123.116.0/23 maxlen: 24
93.123.119.0/24 maxlen: 24
193.25.219.0/24 maxlen: 24
87.120.46.0/23 maxlen: 24
94.156.2.0/24 maxlen: 24
91.92.16.0/24 maxlen: 24
91.92.26.0/23 maxlen: 24
193.58.121.0/24 maxlen: 24
193.58.123.0/24 maxlen: 24
185.207.14.0/23 maxlen: 24
94.156.152.0/24 maxlen: 24
94.156.154.0/23 maxlen: 24
91.92.67.0/24 maxlen: 24
37.139.130.0/23 maxlen: 24
212.87.205.0/24 maxlen: 24
87.121.146.0/23 maxlen: 24
178.215.238.0/24 maxlen: 24
87.121.163.0/24 maxlen: 24
185.252.177.0/24 maxlen: 24
193.47.62.0/24 maxlen: 24
87.121.104.0/24 maxlen: 24
87.121.103.0/24 maxlen: 24
87.121.114.0/23 maxlen: 24
31.13.252.0/22 maxlen: 24
5.253.58.0/23 maxlen: 24
5.253.56.0/23 maxlen: 24
Validation: Failed, RFC 3779 resource not subset of parent's resources
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:87:b1:b7:bd:e3:b8:d9:8f:96:9f:b0:db:78:52:9e:b4:30
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=22c4ac3e3c43d70d05349c815baadd38ad775e9d
Validity
Not Before: Apr 24 05:23:41 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=522613314fdba5a5a59770d642b1e066dbdfa00a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b1:ec:7c:98:c2:32:10:02:3f:07:fd:47:99:a4:
b5:33:08:4c:d9:86:96:5e:c7:85:c6:84:d2:2c:12:
69:bf:2b:05:50:f5:37:7e:bb:82:dc:12:d3:6d:1c:
39:a1:76:24:0f:e0:fc:ca:eb:b0:89:a9:99:00:7a:
84:65:a7:b6:60:cf:8e:2a:4c:b1:19:2c:bd:2a:16:
50:86:67:2c:b4:79:cc:dd:f0:9c:0f:e6:e7:b6:05:
6a:fe:30:5c:e0:9c:24:cb:94:ca:8f:1a:3f:d8:0a:
5d:cc:55:16:82:eb:d4:14:12:63:d2:cd:04:5b:f2:
52:8d:2a:fb:0e:07:b0:af:3d:13:52:0f:f4:4b:f1:
34:de:43:22:d8:c9:6a:c9:aa:54:fb:98:86:5e:00:
22:96:74:e0:02:c4:1b:e5:5a:12:e8:0b:57:24:0d:
a7:20:b6:45:de:64:a6:00:4a:48:d7:c0:08:ec:19:
1d:d7:8b:ef:46:3b:02:7d:81:1f:6e:62:0e:e6:91:
97:99:7e:73:f6:d8:67:9f:37:65:01:5a:88:3f:24:
91:f4:ef:fb:83:33:6c:a8:29:49:24:1a:8b:70:16:
74:81:31:7f:4c:c0:23:e5:64:84:d5:be:91:e2:a6:
15:93:70:03:28:bb:ff:df:b7:ff:a7:ef:68:a7:0c:
5a:57
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
52:26:13:31:4F:DB:A5:A5:A5:97:70:D6:42:B1:E0:66:DB:DF:A0:0A
X509v3 Authority Key Identifier:
keyid:22:C4:AC:3E:3C:43:D7:0D:05:34:9C:81:5B:AA:DD:38:AD:77:5E:9D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/IsSsPjxD1w0FNJyBW6rdOK13Xp0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/03/913a3a-f550-46f0-acc7-cd3ca5975712/1/UiYTMU_bpaWll3DWQrHgZtvfoAo.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/03/913a3a-f550-46f0-acc7-cd3ca5975712/1/IsSsPjxD1w0FNJyBW6rdOK13Xp0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
5.253.56.0/22
31.13.252.0/22
37.139.130.0/23
45.9.208.0/22
45.143.100.0/22
87.120.46.0/23
87.120.96.0/23
87.120.192.0/23
87.120.219.0/24
87.121.36.0-87.121.38.255
87.121.60.0/22
87.121.103.0-87.121.104.255
87.121.114.0/23
87.121.146.0/23
87.121.163.0/24
91.92.16.0/24
91.92.26.0/23
91.92.67.0/24
93.123.24.0/24
93.123.26.0/23
93.123.30.0/23
93.123.68.0/22
93.123.76.0-93.123.80.255
93.123.86.0/23
93.123.112.0-93.123.117.255
93.123.119.0/24
94.154.160.0/23
94.154.173.0/24
94.156.2.0/24
94.156.152.0/24
94.156.154.0/23
94.156.168.0/23
94.156.176.0-94.156.181.255
94.156.237.0-94.156.238.255
178.215.238.0/24
185.147.100.0/22
185.207.14.0/23
185.252.177.0/24
193.25.219.0/24
193.47.62.0/24
193.58.121.0/24
193.58.123.0/24
194.48.249.0/24
194.55.226.0/24
212.87.205.0/24
Signature Algorithm: sha256WithRSAEncryption
6e:7f:98:6f:37:cf:30:95:bd:6e:7f:c0:ff:8d:b6:9b:4c:26:
ba:e6:97:3f:20:82:78:9f:70:c4:fc:fd:b1:bd:94:32:90:64:
6f:b8:2c:c1:53:6d:e0:c3:06:0f:59:84:44:20:3b:30:20:5c:
8e:6f:6a:71:ee:97:38:44:0b:9b:28:47:98:3c:f9:79:a0:c1:
ae:5c:4d:b0:d8:f0:67:3b:97:66:7b:03:05:55:9b:52:7f:b5:
7e:4d:51:52:88:96:a9:c1:1b:36:ad:28:24:95:7d:64:92:92:
67:d9:14:1b:97:1d:87:78:4b:4d:f0:db:48:11:35:ae:9d:30:
b0:c5:4c:63:85:97:ae:e1:3d:d4:ca:7b:6f:15:37:4e:4e:d0:
2d:2b:fe:d7:66:af:98:3c:c7:b8:1f:91:c6:59:c6:74:94:fb:
42:d6:3f:ca:44:88:6e:a9:19:0e:20:7a:58:e0:13:98:b9:06:
77:63:46:d0:d6:eb:ac:a4:2a:f2:95:96:5a:e6:30:72:2f:0a:
61:35:01:52:1f:d3:96:93:e6:da:f7:e6:f9:7e:46:39:c1:7e:
4c:b8:23:4a:42:f4:28:2f:ac:23:5f:14:30:15:59:84:20:92:
ba:5d:f5:06:df:c0:89:1a:3a:f5:6e:ea:38:96:9d:6e:88:98:
cf:29:f3:42
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:17:08 2024 by rpki-client on console-fra.rpki-client.org