Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/03/913a3a-f550-46f0-acc7-cd3ca5975712/1/_uWSylx1u6gtI7CxEwYcNsRDpvg.roa
File: _uWSylx1u6gtI7CxEwYcNsRDpvg.roa (raw, json)
Hash identifier: YvDXlwd5krDPKQt9JO20zjGicG+0+cSkxLU6haL88rg=
Subject key identifier: FE:E5:92:CA:5C:75:BB:A8:2D:23:B0:B1:13:06:1C:36:C4:43:A6:F8
Certificate issuer: /CN=22c4ac3e3c43d70d05349c815baadd38ad775e9d
Certificate serial: 018456AC9FFE547F96327B10CA4A11EB6A98
Authority key identifier: 22:C4:AC:3E:3C:43:D7:0D:05:34:9C:81:5B:AA:DD:38:AD:77:5E:9D
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/IsSsPjxD1w0FNJyBW6rdOK13Xp0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/03/913a3a-f550-46f0-acc7-cd3ca5975712/1/_uWSylx1u6gtI7CxEwYcNsRDpvg.roa
Signing time: Tue 08 Nov 2022 09:57:44 +0000
ROA not before: Tue 08 Nov 2022 09:57:44 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 8100
IP address blocks: 87.120.192.0/23 maxlen: 24
87.121.36.0/23 maxlen: 24
87.121.38.0/24 maxlen: 24
87.121.44.0/22 maxlen: 24
87.121.56.0/23 maxlen: 24
87.121.60.0/22 maxlen: 24
87.120.218.0/23 maxlen: 24
87.120.220.0/23 maxlen: 24
94.154.163.0/24 maxlen: 24
94.154.160.0/23 maxlen: 24
94.154.173.0/24 maxlen: 24
93.123.39.0/24 maxlen: 24
94.156.237.0/24 maxlen: 24
194.55.226.0/24 maxlen: 24
94.156.238.0/24 maxlen: 24
93.123.68.0/22 maxlen: 24
93.123.76.0/22 maxlen: 24
93.123.85.0/24 maxlen: 24
93.123.80.0/24 maxlen: 24
93.123.86.0/23 maxlen: 24
193.42.32.0/24 maxlen: 24
94.156.168.0/23 maxlen: 24
94.156.176.0/22 maxlen: 24
94.156.180.0/23 maxlen: 24
93.123.24.0/24 maxlen: 24
194.48.249.0/24 maxlen: 24
93.123.30.0/23 maxlen: 24
194.55.187.0/24 maxlen: 24
93.123.26.0/23 maxlen: 24
87.120.64.0/23 maxlen: 24
87.120.68.0/23 maxlen: 24
94.103.126.0/24 maxlen: 24
87.120.88.0/23 maxlen: 24
87.120.96.0/23 maxlen: 24
87.120.100.0/22 maxlen: 24
93.123.112.0/22 maxlen: 24
93.123.116.0/23 maxlen: 24
93.123.119.0/24 maxlen: 24
87.120.32.0/22 maxlen: 24
193.25.219.0/24 maxlen: 24
87.120.46.0/23 maxlen: 24
94.156.2.0/24 maxlen: 24
91.92.6.0/24 maxlen: 24
94.156.6.0/24 maxlen: 24
94.156.8.0/24 maxlen: 24
91.92.16.0/24 maxlen: 24
91.92.21.0/24 maxlen: 24
91.92.24.0/22 maxlen: 24
193.58.121.0/24 maxlen: 24
193.58.123.0/24 maxlen: 24
194.169.172.0/24 maxlen: 24
185.246.223.0/24 maxlen: 24
94.156.131.0/24 maxlen: 24
194.180.38.0/24 maxlen: 24
94.156.152.0/24 maxlen: 24
194.180.39.0/24 maxlen: 24
94.156.156.0/23 maxlen: 24
94.156.154.0/23 maxlen: 24
91.92.67.0/24 maxlen: 24
94.156.78.0/23 maxlen: 24
37.139.130.0/23 maxlen: 24
212.87.205.0/24 maxlen: 24
87.121.146.0/23 maxlen: 24
178.215.236.0/24 maxlen: 24
178.215.238.0/24 maxlen: 24
87.121.162.0/23 maxlen: 24
87.121.69.0/24 maxlen: 24
185.252.177.0/24 maxlen: 24
193.222.97.0/24 maxlen: 24
193.47.62.0/24 maxlen: 24
193.37.42.0/24 maxlen: 24
87.121.100.0/23 maxlen: 24
87.121.103.0/24 maxlen: 24
193.37.47.0/24 maxlen: 24
87.121.114.0/23 maxlen: 24
31.13.252.0/22 maxlen: 24
87.121.221.0/24 maxlen: 24
Validation: Failed, RFC 3779 resource not subset of parent's resources
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:84:56:ac:9f:fe:54:7f:96:32:7b:10:ca:4a:11:eb:6a:98
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=22c4ac3e3c43d70d05349c815baadd38ad775e9d
Validity
Not Before: Nov 8 09:57:44 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=fee592ca5c75bba82d23b0b113061c36c443a6f8
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a7:27:37:c5:1f:1f:f5:09:a4:ea:96:c9:6d:fd:
04:42:bc:4d:2f:0d:1b:33:07:d8:86:97:cc:47:4f:
4c:2b:bb:ca:7f:b9:37:5f:3c:2b:22:ae:77:dd:7f:
e1:2c:b8:79:d5:2d:00:f6:30:9c:79:eb:ec:c5:a4:
52:fd:4c:f1:fd:46:46:a8:55:0a:38:27:17:bf:cf:
cb:2f:08:c1:df:b8:e5:c9:e2:45:61:7a:2e:71:1d:
70:ed:b2:57:9e:23:14:dd:8a:b4:53:97:42:67:05:
0d:e0:ac:45:4f:ec:b4:3a:9a:b9:a4:19:a9:3c:5c:
d5:67:b1:10:ae:1f:ed:3c:e3:6c:e1:2b:d5:fa:70:
82:1c:65:95:ed:48:fe:f4:26:a3:84:d7:41:5b:dc:
ff:f5:15:0b:4a:bb:ad:11:46:6f:78:30:bd:12:ce:
57:ec:7f:21:92:5f:ba:9b:61:1f:ab:f4:76:3f:f4:
20:f6:af:0e:2e:0a:ec:6f:b2:a1:66:40:54:e4:ca:
ae:5d:27:34:b4:50:a5:1a:24:be:cd:2c:ea:09:ae:
7b:89:c4:2c:33:cd:d4:1c:29:50:91:dc:8f:5f:9e:
79:7d:df:06:73:72:f3:bf:e9:e9:9a:60:11:17:88:
08:4d:86:f3:5a:57:7a:74:d3:59:3e:24:e7:19:ae:
6e:57
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
FE:E5:92:CA:5C:75:BB:A8:2D:23:B0:B1:13:06:1C:36:C4:43:A6:F8
X509v3 Authority Key Identifier:
keyid:22:C4:AC:3E:3C:43:D7:0D:05:34:9C:81:5B:AA:DD:38:AD:77:5E:9D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/IsSsPjxD1w0FNJyBW6rdOK13Xp0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/03/913a3a-f550-46f0-acc7-cd3ca5975712/1/_uWSylx1u6gtI7CxEwYcNsRDpvg.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/03/913a3a-f550-46f0-acc7-cd3ca5975712/1/IsSsPjxD1w0FNJyBW6rdOK13Xp0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
31.13.252.0/22
37.139.130.0/23
87.120.32.0/22
87.120.46.0/23
87.120.64.0/23
87.120.68.0/23
87.120.88.0/23
87.120.96.0/23
87.120.100.0/22
87.120.192.0/23
87.120.218.0-87.120.221.255
87.121.36.0-87.121.38.255
87.121.44.0/22
87.121.56.0/23
87.121.60.0/22
87.121.69.0/24
87.121.100.0/23
87.121.103.0/24
87.121.114.0/23
87.121.146.0/23
87.121.162.0/23
87.121.221.0/24
91.92.6.0/24
91.92.16.0/24
91.92.21.0/24
91.92.24.0/22
91.92.67.0/24
93.123.24.0/24
93.123.26.0/23
93.123.30.0/23
93.123.39.0/24
93.123.68.0/22
93.123.76.0-93.123.80.255
93.123.85.0-93.123.87.255
93.123.112.0-93.123.117.255
93.123.119.0/24
94.103.126.0/24
94.154.160.0/23
94.154.163.0/24
94.154.173.0/24
94.156.2.0/24
94.156.6.0/24
94.156.8.0/24
94.156.78.0/23
94.156.131.0/24
94.156.152.0/24
94.156.154.0-94.156.157.255
94.156.168.0/23
94.156.176.0-94.156.181.255
94.156.237.0-94.156.238.255
178.215.236.0/24
178.215.238.0/24
185.246.223.0/24
185.252.177.0/24
193.25.219.0/24
193.37.42.0/24
193.37.47.0/24
193.42.32.0/24
193.47.62.0/24
193.58.121.0/24
193.58.123.0/24
193.222.97.0/24
194.48.249.0/24
194.55.187.0/24
194.55.226.0/24
194.169.172.0/24
194.180.38.0/23
212.87.205.0/24
Signature Algorithm: sha256WithRSAEncryption
51:2c:d1:0a:b3:ab:24:30:81:04:b6:56:e3:49:e7:5c:30:ab:
98:c5:65:a0:80:af:0d:03:35:6e:66:ab:76:50:5b:4b:25:c4:
a1:42:94:99:45:c9:49:fd:b8:42:e5:1b:1e:b0:04:5d:31:35:
df:4b:e1:9d:fc:e2:48:5b:af:ef:e0:22:d0:38:42:07:65:34:
b3:ca:cf:5c:a3:c2:af:7f:0f:2f:82:7b:88:bc:f1:f2:f9:95:
3e:c3:73:ac:47:4a:67:e2:8d:c9:12:c4:61:0f:0a:d5:01:71:
00:c2:01:41:17:ea:bd:83:fe:05:21:5a:16:56:40:a4:b3:e5:
56:88:1d:8a:2c:a4:d5:af:a9:c8:de:ea:90:fa:6d:d6:1a:73:
c1:00:52:42:af:72:10:26:41:2e:42:48:51:58:ab:04:c1:10:
06:f5:f1:55:74:28:ab:a5:c0:74:df:ea:44:7a:4b:77:d1:92:
c4:84:db:11:79:b2:9c:e9:07:60:42:65:72:3f:b3:29:b5:52:
03:c4:a6:03:2d:6f:ab:69:75:7a:6f:2c:3c:5a:b7:18:6a:02:
2a:22:37:1d:c1:96:26:50:d7:6a:8f:35:e8:90:04:52:93:42:
92:30:40:98:8b:a4:0b:a3:9c:f7:eb:77:9f:6d:68:ba:88:65:
6d:4b:f3:58
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 19 23:46:39 2023 by rpki-client on console-ams.rpki-client.org