Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/03/913a3a-f550-46f0-acc7-cd3ca5975712/1/cx13cJSP8ypGZ2xsQPhhPAy3JtE.roa
File: cx13cJSP8ypGZ2xsQPhhPAy3JtE.roa (raw, json)
Hash identifier: syWNdNsANkUkctXYdzNYzJ7qsGazD00lnhurQOGfrDI=
Subject key identifier: 73:1D:77:70:94:8F:F3:2A:46:67:6C:6C:40:F8:61:3C:0C:B7:26:D1
Certificate issuer: /CN=22c4ac3e3c43d70d05349c815baadd38ad775e9d
Certificate serial: 0187B1BC51BC6309565B128C69291C0C8EFB
Authority key identifier: 22:C4:AC:3E:3C:43:D7:0D:05:34:9C:81:5B:AA:DD:38:AD:77:5E:9D
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/IsSsPjxD1w0FNJyBW6rdOK13Xp0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/03/913a3a-f550-46f0-acc7-cd3ca5975712/1/cx13cJSP8ypGZ2xsQPhhPAy3JtE.roa
Signing time: Mon 24 Apr 2023 05:28:41 +0000
ROA not before: Mon 24 Apr 2023 05:28:41 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 8100
IP address blocks: 87.120.192.0/23 maxlen: 24
185.147.100.0/22 maxlen: 24
87.121.36.0/23 maxlen: 24
87.121.38.0/24 maxlen: 24
87.121.60.0/22 maxlen: 24
87.120.219.0/24 maxlen: 24
94.154.160.0/23 maxlen: 24
45.9.208.0/22 maxlen: 24
94.154.173.0/24 maxlen: 24
45.143.100.0/22 maxlen: 24
94.156.237.0/24 maxlen: 24
193.8.184.0/23 maxlen: 24
193.8.186.0/23 maxlen: 24
194.55.226.0/24 maxlen: 24
94.156.238.0/24 maxlen: 24
93.123.68.0/22 maxlen: 24
93.123.76.0/22 maxlen: 24
93.123.80.0/24 maxlen: 24
93.123.86.0/23 maxlen: 24
94.156.168.0/23 maxlen: 24
94.156.176.0/22 maxlen: 24
94.156.180.0/23 maxlen: 24
194.48.249.0/24 maxlen: 24
93.123.24.0/24 maxlen: 24
93.123.30.0/23 maxlen: 24
93.123.26.0/23 maxlen: 24
87.120.96.0/23 maxlen: 24
93.123.112.0/22 maxlen: 24
93.123.116.0/23 maxlen: 24
93.123.119.0/24 maxlen: 24
193.25.219.0/24 maxlen: 24
87.120.46.0/23 maxlen: 24
94.156.2.0/24 maxlen: 24
91.92.16.0/24 maxlen: 24
91.92.26.0/23 maxlen: 24
193.58.121.0/24 maxlen: 24
193.58.123.0/24 maxlen: 24
185.207.14.0/23 maxlen: 24
94.156.152.0/24 maxlen: 24
45.8.92.0/24 maxlen: 24
94.156.154.0/23 maxlen: 24
91.92.67.0/24 maxlen: 24
45.139.123.0/24 maxlen: 24
37.139.130.0/23 maxlen: 24
212.87.205.0/24 maxlen: 24
87.121.146.0/23 maxlen: 24
178.215.238.0/24 maxlen: 24
87.121.163.0/24 maxlen: 24
185.252.177.0/24 maxlen: 24
193.47.62.0/24 maxlen: 24
87.121.104.0/24 maxlen: 24
87.121.103.0/24 maxlen: 24
87.121.114.0/23 maxlen: 24
45.95.2.0/23 maxlen: 24
45.95.0.0/23 maxlen: 24
31.13.252.0/22 maxlen: 24
5.253.58.0/23 maxlen: 24
5.253.56.0/23 maxlen: 24
Validation: Failed, RFC 3779 resource not subset of parent's resources
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:87:b1:bc:51:bc:63:09:56:5b:12:8c:69:29:1c:0c:8e:fb
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=22c4ac3e3c43d70d05349c815baadd38ad775e9d
Validity
Not Before: Apr 24 05:28:41 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=731d7770948ff32a46676c6c40f8613c0cb726d1
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8d:a0:22:21:98:3b:f9:06:55:6c:40:ef:60:1c:
b2:45:01:97:13:ce:01:8b:c9:76:c0:0a:b5:ac:54:
af:42:c3:1c:fd:e0:19:3d:f0:a4:71:b2:a1:73:53:
2b:da:e4:1f:38:62:1f:b5:f6:05:52:49:74:9f:89:
87:6a:85:3d:7e:c4:7f:e3:41:75:f4:7e:04:71:62:
2c:b0:e2:29:9a:31:e3:ff:a0:d2:bd:d4:a7:0c:cd:
07:74:c6:dd:ac:b7:a0:8f:bf:79:30:ea:6b:6b:19:
8d:72:f8:83:cf:b3:37:b2:58:23:4d:0f:88:ef:eb:
3b:4b:c2:94:02:eb:d2:b8:9c:d5:a9:b7:4d:16:0d:
7d:43:75:5a:c8:8e:4f:f5:33:54:a7:10:37:3d:d4:
29:02:85:21:e2:d8:29:93:ab:9b:70:26:9b:8d:02:
4f:96:1b:47:07:cd:c1:63:8f:b9:e1:51:8c:5c:8a:
42:5b:50:71:73:f2:5f:82:2c:48:ed:a8:2c:fb:69:
a8:21:06:d5:a9:2a:f1:f1:7f:ec:c2:f0:91:e8:27:
f6:9e:df:a0:61:4e:70:70:78:7d:9e:fe:e8:4e:de:
61:31:74:f8:bb:75:e7:04:4c:3d:e1:dd:2a:49:23:
fa:f4:3a:0b:cf:05:65:b8:63:d3:8b:7c:a9:66:d5:
f0:07
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
73:1D:77:70:94:8F:F3:2A:46:67:6C:6C:40:F8:61:3C:0C:B7:26:D1
X509v3 Authority Key Identifier:
keyid:22:C4:AC:3E:3C:43:D7:0D:05:34:9C:81:5B:AA:DD:38:AD:77:5E:9D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/IsSsPjxD1w0FNJyBW6rdOK13Xp0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/03/913a3a-f550-46f0-acc7-cd3ca5975712/1/cx13cJSP8ypGZ2xsQPhhPAy3JtE.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/03/913a3a-f550-46f0-acc7-cd3ca5975712/1/IsSsPjxD1w0FNJyBW6rdOK13Xp0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
5.253.56.0/22
31.13.252.0/22
37.139.130.0/23
45.8.92.0/24
45.9.208.0/22
45.95.0.0/22
45.139.123.0/24
45.143.100.0/22
87.120.46.0/23
87.120.96.0/23
87.120.192.0/23
87.120.219.0/24
87.121.36.0-87.121.38.255
87.121.60.0/22
87.121.103.0-87.121.104.255
87.121.114.0/23
87.121.146.0/23
87.121.163.0/24
91.92.16.0/24
91.92.26.0/23
91.92.67.0/24
93.123.24.0/24
93.123.26.0/23
93.123.30.0/23
93.123.68.0/22
93.123.76.0-93.123.80.255
93.123.86.0/23
93.123.112.0-93.123.117.255
93.123.119.0/24
94.154.160.0/23
94.154.173.0/24
94.156.2.0/24
94.156.152.0/24
94.156.154.0/23
94.156.168.0/23
94.156.176.0-94.156.181.255
94.156.237.0-94.156.238.255
178.215.238.0/24
185.147.100.0/22
185.207.14.0/23
185.252.177.0/24
193.8.184.0/22
193.25.219.0/24
193.47.62.0/24
193.58.121.0/24
193.58.123.0/24
194.48.249.0/24
194.55.226.0/24
212.87.205.0/24
Signature Algorithm: sha256WithRSAEncryption
8d:b7:35:3e:9e:a0:19:9e:7c:46:76:15:27:79:e9:be:fb:0d:
b6:fa:41:58:c8:2f:e3:ea:8d:90:51:e9:c0:92:95:2e:e1:c9:
18:2e:7a:81:11:78:3b:e0:5c:1d:fb:15:9e:69:0e:22:f6:f1:
0d:17:c6:48:fc:5a:03:c2:aa:1b:fa:e7:1e:b9:8d:14:68:15:
7c:12:3e:02:c4:e3:6c:ac:f9:b3:ae:7e:82:24:b6:f6:36:92:
4e:3c:8e:f3:14:de:c5:28:e5:09:28:11:b8:98:b1:c7:f2:dc:
5d:69:3a:d4:3c:13:23:fe:50:25:d8:52:11:0e:c2:8a:33:d9:
66:23:57:d9:6d:71:b9:33:00:7b:98:de:10:aa:89:5a:b3:74:
c1:05:3e:53:05:da:b0:b5:44:87:ab:e1:d7:58:dc:96:00:77:
56:b1:11:fb:3a:63:6b:91:15:1b:73:6b:b7:12:d5:ff:2d:45:
4c:42:c7:7c:6c:d2:8b:88:e3:df:3f:a6:1a:a4:2c:a5:5f:b2:
98:a8:c2:22:49:3e:e8:18:d2:e4:89:b0:81:9e:ee:52:10:c9:
37:64:57:ae:98:86:3e:4c:d7:64:8d:c8:f3:5e:92:4f:61:d8:
04:95:3b:47:06:c4:14:5f:62:4c:2e:6e:9e:2d:9a:2b:13:9a:
bb:00:ef:9a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 19 23:46:39 2023 by rpki-client on console-ams.rpki-client.org