Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/03/913a3a-f550-46f0-acc7-cd3ca5975712/1/Xxp2UlxSENv7R_IvdlDq-e-Q5HI.roa
File: Xxp2UlxSENv7R_IvdlDq-e-Q5HI.roa (raw, json)
Hash identifier: eBeMlCEiTjWBsi73UEu2fFffySE44TAfXmcJV+6wOLE=
Subject key identifier: 5F:1A:76:52:5C:52:10:DB:FB:47:F2:2F:76:50:EA:F9:EF:90:E4:72
Certificate issuer: /CN=22c4ac3e3c43d70d05349c815baadd38ad775e9d
Certificate serial: 01835A560811D78AA71ACDAC7C91439B546E
Authority key identifier: 22:C4:AC:3E:3C:43:D7:0D:05:34:9C:81:5B:AA:DD:38:AD:77:5E:9D
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/IsSsPjxD1w0FNJyBW6rdOK13Xp0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/03/913a3a-f550-46f0-acc7-cd3ca5975712/1/Xxp2UlxSENv7R_IvdlDq-e-Q5HI.roa
Signing time: Tue 20 Sep 2022 09:58:51 +0000
ROA not before: Tue 20 Sep 2022 09:58:51 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 8866
IP address blocks: 87.120.192.0/23 maxlen: 23
87.121.36.0/23 maxlen: 24
87.121.38.0/24 maxlen: 24
87.121.44.0/22 maxlen: 24
87.121.56.0/23 maxlen: 24
87.121.60.0/22 maxlen: 24
87.120.218.0/23 maxlen: 24
87.120.220.0/23 maxlen: 24
93.123.39.0/24 maxlen: 24
94.156.232.0/22 maxlen: 24
94.156.238.0/24 maxlen: 24
94.156.237.0/24 maxlen: 24
93.123.68.0/22 maxlen: 24
93.123.76.0/22 maxlen: 24
93.123.80.0/24 maxlen: 24
93.123.84.0/22 maxlen: 24
93.123.88.0/21 maxlen: 24
94.156.160.0/23 maxlen: 24
94.156.168.0/23 maxlen: 24
94.156.176.0/22 maxlen: 24
94.156.180.0/23 maxlen: 24
93.123.22.0/24 maxlen: 24
93.123.24.0/24 maxlen: 24
93.123.30.0/23 maxlen: 24
93.123.26.0/23 maxlen: 24
87.120.64.0/23 maxlen: 24
87.120.68.0/23 maxlen: 24
87.120.72.0/21 maxlen: 24
87.120.88.0/23 maxlen: 24
87.120.96.0/23 maxlen: 24
87.120.100.0/22 maxlen: 22
93.123.112.0/22 maxlen: 24
93.123.116.0/23 maxlen: 24
93.123.119.0/24 maxlen: 24
87.120.32.0/22 maxlen: 24
87.120.46.0/23 maxlen: 24
94.156.2.0/24 maxlen: 24
94.156.6.0/24 maxlen: 24
94.156.8.0/24 maxlen: 24
91.92.6.0/24 maxlen: 24
91.92.8.0/21 maxlen: 24
91.92.16.0/24 maxlen: 24
91.92.24.0/22 maxlen: 24
91.92.21.0/24 maxlen: 24
94.156.131.0/24 maxlen: 24
94.156.136.0/21 maxlen: 24
94.156.152.0/24 maxlen: 24
94.156.156.0/23 maxlen: 24
94.156.154.0/23 maxlen: 24
91.92.67.0/24 maxlen: 24
94.156.78.0/23 maxlen: 24
87.121.146.0/23 maxlen: 24
87.121.162.0/23 maxlen: 24
87.121.69.0/24 maxlen: 24
87.121.103.0/24 maxlen: 24
87.121.104.0/23 maxlen: 24
87.121.100.0/23 maxlen: 24
87.121.114.0/23 maxlen: 24
31.13.252.0/22 maxlen: 22
Validation: Failed, RFC 3779 resource not subset of parent's resources
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:83:5a:56:08:11:d7:8a:a7:1a:cd:ac:7c:91:43:9b:54:6e
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=22c4ac3e3c43d70d05349c815baadd38ad775e9d
Validity
Not Before: Sep 20 09:58:51 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=5f1a76525c5210dbfb47f22f7650eaf9ef90e472
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:98:45:bd:9a:a3:9c:eb:14:e7:95:b5:9f:a0:90:
e1:b5:0b:4e:db:a4:8f:00:99:05:c8:49:07:5f:09:
4e:bb:13:2a:8a:85:ce:a6:ab:aa:5c:dc:11:29:76:
ff:fc:5c:91:5b:4a:ad:df:fc:f3:a3:6d:03:45:4f:
a9:b9:81:d3:ba:2e:d1:26:d9:82:02:92:b7:41:d9:
bc:4c:73:14:4a:bf:9a:7a:97:2a:10:10:05:16:fd:
36:d9:db:2f:96:fc:a3:96:02:18:f3:13:b1:7b:3f:
85:1c:8d:9d:3a:26:73:93:1a:93:bb:76:35:bc:9c:
ce:c8:83:14:5a:c8:cc:68:6d:b7:d3:9f:0d:ac:3f:
92:87:d8:63:0f:b8:4b:30:a3:96:ba:fc:3b:78:94:
24:bb:af:8f:db:a7:dc:f7:b6:1b:c0:48:ea:e9:8d:
4e:74:e7:2d:f9:7c:e7:c9:33:47:23:f5:f2:e5:2a:
3a:13:fc:cd:3b:1b:1f:bf:ae:ca:25:7f:e2:d3:7f:
db:5f:f9:30:59:61:19:9a:0c:89:f8:d4:4d:e5:6e:
b5:7c:5e:5d:42:9f:35:9b:1b:d6:2d:7d:d6:55:c6:
2d:99:0e:d4:1e:e2:56:2e:37:62:47:9e:6c:da:ca:
b4:60:18:81:ea:02:fe:a1:1a:52:4b:83:6a:31:31:
7f:57
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
5F:1A:76:52:5C:52:10:DB:FB:47:F2:2F:76:50:EA:F9:EF:90:E4:72
X509v3 Authority Key Identifier:
keyid:22:C4:AC:3E:3C:43:D7:0D:05:34:9C:81:5B:AA:DD:38:AD:77:5E:9D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/IsSsPjxD1w0FNJyBW6rdOK13Xp0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/03/913a3a-f550-46f0-acc7-cd3ca5975712/1/Xxp2UlxSENv7R_IvdlDq-e-Q5HI.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/03/913a3a-f550-46f0-acc7-cd3ca5975712/1/IsSsPjxD1w0FNJyBW6rdOK13Xp0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
31.13.252.0/22
87.120.32.0/22
87.120.46.0/23
87.120.64.0/23
87.120.68.0/23
87.120.72.0/21
87.120.88.0/23
87.120.96.0/23
87.120.100.0/22
87.120.192.0/23
87.120.218.0-87.120.221.255
87.121.36.0-87.121.38.255
87.121.44.0/22
87.121.56.0/23
87.121.60.0/22
87.121.69.0/24
87.121.100.0/23
87.121.103.0-87.121.105.255
87.121.114.0/23
87.121.146.0/23
87.121.162.0/23
91.92.6.0/24
91.92.8.0-91.92.16.255
91.92.21.0/24
91.92.24.0/22
91.92.67.0/24
93.123.22.0/24
93.123.24.0/24
93.123.26.0/23
93.123.30.0/23
93.123.39.0/24
93.123.68.0/22
93.123.76.0-93.123.80.255
93.123.84.0-93.123.95.255
93.123.112.0-93.123.117.255
93.123.119.0/24
94.156.2.0/24
94.156.6.0/24
94.156.8.0/24
94.156.78.0/23
94.156.131.0/24
94.156.136.0/21
94.156.152.0/24
94.156.154.0-94.156.157.255
94.156.160.0/23
94.156.168.0/23
94.156.176.0-94.156.181.255
94.156.232.0/22
94.156.237.0-94.156.238.255
Signature Algorithm: sha256WithRSAEncryption
66:d4:2a:4e:cb:d5:fd:3e:c7:c6:50:2f:fd:e6:87:62:95:21:
38:31:cf:12:c8:b0:c6:50:d0:36:6a:c5:00:38:0c:dc:17:c5:
c5:5d:b5:6f:96:ce:22:c6:3b:10:b0:36:f0:1a:7a:a6:16:46:
b1:4b:7b:6c:55:dc:74:15:32:36:e7:c4:ac:80:98:e5:53:b5:
ca:bc:96:07:d7:d9:de:d6:95:bc:9d:52:00:ff:22:89:bb:4b:
04:c1:16:25:48:ea:20:db:d8:b2:a8:68:1e:d9:92:01:69:f4:
23:36:64:ba:a4:8e:89:01:2e:33:00:75:fe:fa:78:06:06:72:
a1:a8:1f:7b:4d:b6:92:85:06:97:b9:d8:49:34:64:f6:7d:f7:
63:b3:a7:f2:38:56:9f:be:2f:43:c2:c9:aa:1b:a4:d3:9b:27:
ec:a1:31:4b:85:9f:97:fe:c7:51:16:72:d1:bd:12:86:c3:1b:
0b:50:04:0f:af:49:96:f1:43:48:c3:53:69:1f:eb:a8:7a:22:
c2:a6:2d:61:3c:1a:df:ca:b0:3a:75:ac:e8:ed:b8:cf:ae:d3:
ec:2d:54:23:b3:e3:8e:48:13:5a:e3:7a:ce:c1:cd:5a:f9:84:
0c:62:e6:0c:ad:87:0f:95:98:12:22:ca:49:1f:46:01:d4:2b:
a5:df:ab:be
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 19 23:46:38 2023 by rpki-client on console-ams.rpki-client.org