Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/03/913a3a-f550-46f0-acc7-cd3ca5975712/1/UiuHwH1PQypfF_NPk7pLulCuCIY.roa
File: UiuHwH1PQypfF_NPk7pLulCuCIY.roa (raw, json)
Hash identifier: 8QOwyMwT7JdHOohCzNVSelLmE8wY8vyuDCNRmX0Myco=
Subject key identifier: 52:2B:87:C0:7D:4F:43:2A:5F:17:F3:4F:93:BA:4B:BA:50:AE:08:86
Certificate issuer: /CN=22c4ac3e3c43d70d05349c815baadd38ad775e9d
Certificate serial: 0183E96FF7244C332279F4963AC7FC755F1E
Authority key identifier: 22:C4:AC:3E:3C:43:D7:0D:05:34:9C:81:5B:AA:DD:38:AD:77:5E:9D
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/IsSsPjxD1w0FNJyBW6rdOK13Xp0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/03/913a3a-f550-46f0-acc7-cd3ca5975712/1/UiuHwH1PQypfF_NPk7pLulCuCIY.roa
Signing time: Tue 18 Oct 2022 04:52:52 +0000
ROA not before: Tue 18 Oct 2022 04:52:52 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 22653
IP address blocks: 31.169.124.0/24 maxlen: 24
31.169.125.0/24 maxlen: 24
31.169.126.0/24 maxlen: 24
31.169.127.0/24 maxlen: 24
194.169.172.0/24 maxlen: 24
185.246.223.0/24 maxlen: 24
92.249.50.0/24 maxlen: 24
194.180.49.0/24 maxlen: 24
185.218.136.0/23 maxlen: 24
185.225.72.0/24 maxlen: 24
94.154.163.0/24 maxlen: 24
94.154.160.0/23 maxlen: 24
37.139.130.0/23 maxlen: 24
94.154.173.0/24 maxlen: 24
212.87.205.0/24 maxlen: 24
85.217.128.0/24 maxlen: 24
84.54.50.0/24 maxlen: 24
194.55.226.0/24 maxlen: 24
164.40.186.0/23 maxlen: 24
164.40.184.0/24 maxlen: 24
178.215.236.0/24 maxlen: 24
193.42.32.0/24 maxlen: 24
193.222.97.0/24 maxlen: 24
185.252.177.0/24 maxlen: 24
193.222.98.0/23 maxlen: 24
193.47.62.0/24 maxlen: 24
193.37.42.0/24 maxlen: 24
193.37.46.0/24 maxlen: 24
194.48.249.0/24 maxlen: 24
193.37.47.0/24 maxlen: 24
194.55.187.0/24 maxlen: 24
185.221.66.0/24 maxlen: 24
79.110.49.0/24 maxlen: 24
94.103.126.0/24 maxlen: 24
87.121.221.0/24 maxlen: 24
Validation: Failed, RFC 3779 resource not subset of parent's resources
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:83:e9:6f:f7:24:4c:33:22:79:f4:96:3a:c7:fc:75:5f:1e
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=22c4ac3e3c43d70d05349c815baadd38ad775e9d
Validity
Not Before: Oct 18 04:52:52 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=522b87c07d4f432a5f17f34f93ba4bba50ae0886
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:95:1b:7f:3c:bf:08:82:67:2c:20:a6:17:3d:2c:
c0:51:7e:d5:bd:ca:a0:25:aa:26:fb:be:fd:c1:66:
05:39:c3:ad:52:75:b5:cb:18:0b:bc:e9:ab:56:e2:
53:01:4e:c3:fa:87:80:db:22:30:66:67:73:9e:2e:
ce:0e:4f:a8:9d:57:3e:3d:fc:9e:e6:d3:b5:7d:8f:
45:24:57:ba:53:01:6d:f5:a5:b8:bd:85:d8:85:7c:
9b:db:8e:ab:b5:9f:d3:42:2a:c0:57:49:5a:6a:38:
da:8d:25:1d:3c:06:f0:6e:4f:a1:d8:df:91:4a:97:
7a:d3:e4:a3:10:4c:50:e6:86:81:df:fc:28:d9:78:
fc:1d:37:b2:51:b1:35:70:aa:2e:a7:8b:67:d2:68:
83:b7:a2:bb:08:9c:a6:e1:10:50:9b:0e:c2:aa:db:
a5:4b:25:20:4e:fd:c0:2e:09:fb:39:1d:b6:2d:1e:
cd:34:19:21:76:55:2b:41:4c:a8:86:57:fe:f4:97:
77:87:bb:7a:83:2f:d3:69:b9:7e:ce:3a:ae:ff:7c:
81:63:bc:a6:56:98:8a:80:39:cb:19:25:45:a5:66:
db:f6:4e:55:c0:0b:68:1a:14:7c:3b:8d:a9:48:e0:
1e:97:c9:e1:b6:05:d8:08:bb:0c:89:6f:9d:66:21:
79:e5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
52:2B:87:C0:7D:4F:43:2A:5F:17:F3:4F:93:BA:4B:BA:50:AE:08:86
X509v3 Authority Key Identifier:
keyid:22:C4:AC:3E:3C:43:D7:0D:05:34:9C:81:5B:AA:DD:38:AD:77:5E:9D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/IsSsPjxD1w0FNJyBW6rdOK13Xp0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/03/913a3a-f550-46f0-acc7-cd3ca5975712/1/UiuHwH1PQypfF_NPk7pLulCuCIY.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/03/913a3a-f550-46f0-acc7-cd3ca5975712/1/IsSsPjxD1w0FNJyBW6rdOK13Xp0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
31.169.124.0/22
37.139.130.0/23
79.110.49.0/24
84.54.50.0/24
85.217.128.0/24
87.121.221.0/24
92.249.50.0/24
94.103.126.0/24
94.154.160.0/23
94.154.163.0/24
94.154.173.0/24
164.40.184.0/24
164.40.186.0/23
178.215.236.0/24
185.218.136.0/23
185.221.66.0/24
185.225.72.0/24
185.246.223.0/24
185.252.177.0/24
193.37.42.0/24
193.37.46.0/23
193.42.32.0/24
193.47.62.0/24
193.222.97.0-193.222.99.255
194.48.249.0/24
194.55.187.0/24
194.55.226.0/24
194.169.172.0/24
194.180.49.0/24
212.87.205.0/24
Signature Algorithm: sha256WithRSAEncryption
09:e8:36:31:ce:56:78:1e:90:5c:4f:9f:2d:7d:96:7f:87:6b:
a4:4e:fc:a9:12:b2:43:95:39:b6:d6:2f:ff:cb:1a:7f:cf:7d:
5c:5a:b7:ae:e4:9e:74:65:25:bb:c4:21:60:85:5e:35:24:f1:
41:db:44:aa:9f:87:61:25:06:b4:4c:63:46:b3:0e:a6:1a:8b:
69:29:b0:17:e6:60:4c:00:47:3f:f6:32:9f:7c:5d:5e:94:57:
3b:84:0d:05:19:74:39:4a:64:ef:50:70:c3:2e:05:b3:05:c1:
b6:af:34:fc:1f:2e:d5:4e:0b:4d:b4:19:e0:43:d8:ba:23:93:
24:e0:58:13:5b:39:59:4c:c9:25:bc:3c:ab:4f:e5:d0:c3:c4:
38:08:5e:7a:32:fb:b2:85:4d:22:f3:e9:15:6e:96:9d:7a:82:
a8:b5:b0:db:5a:ba:13:1a:2d:41:73:5a:42:f7:c1:5d:78:d7:
d8:75:46:b9:eb:0d:3d:fd:05:5b:7a:25:69:34:a2:58:1f:2d:
9e:a6:f5:29:1f:24:6c:8c:97:2c:95:a5:1c:4d:b9:d8:5f:a3:
20:2d:ba:c6:e8:cd:ac:ec:39:e4:1b:bc:4d:dc:df:b2:e1:bb:
7e:30:d0:29:c7:fe:23:0a:2e:b2:70:c7:23:62:85:a9:53:35:
ec:e6:3d:e0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:17:08 2024 by rpki-client on console-fra.rpki-client.org