Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/03/913a3a-f550-46f0-acc7-cd3ca5975712/1/dIY2us0fGyjbwYjXdq0H59H6ctA.roa
File: dIY2us0fGyjbwYjXdq0H59H6ctA.roa (raw, json)
Hash identifier: /kYnqU9dESF1Yx8CqclIv3yUp/zExAK8y5IeEa+TJHM=
Subject key identifier: 74:86:36:BA:CD:1F:1B:28:DB:C1:88:D7:76:AD:07:E7:D1:FA:72:D0
Certificate issuer: /CN=22c4ac3e3c43d70d05349c815baadd38ad775e9d
Certificate serial: 0188344EE1F56438D5268CA5B031D5478E58
Authority key identifier: 22:C4:AC:3E:3C:43:D7:0D:05:34:9C:81:5B:AA:DD:38:AD:77:5E:9D
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/IsSsPjxD1w0FNJyBW6rdOK13Xp0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/03/913a3a-f550-46f0-acc7-cd3ca5975712/1/dIY2us0fGyjbwYjXdq0H59H6ctA.roa
Signing time: Fri 19 May 2023 13:59:24 +0000
ROA not before: Fri 19 May 2023 13:59:24 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 0
IP address blocks: 185.218.84.0/22 maxlen: 24
94.156.10.0/24 maxlen: 24
185.222.163.0/24 maxlen: 24
178.215.236.0/24 maxlen: 24
171.22.72.0/22 maxlen: 24
147.78.101.0/24 maxlen: 24
147.78.100.0/24 maxlen: 24
92.119.196.0/23 maxlen: 24
185.216.70.0/24 maxlen: 24
185.216.84.0/22 maxlen: 24
94.103.126.0/24 maxlen: 24
185.218.137.0/24 maxlen: 24
94.154.162.0/23 maxlen: 24
94.154.161.0/24 maxlen: 24
185.219.126.0/24 maxlen: 24
45.151.89.0/24 maxlen: 24
Validation: Failed, RFC 3779 resource not subset of parent's resources
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:88:34:4e:e1:f5:64:38:d5:26:8c:a5:b0:31:d5:47:8e:58
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=22c4ac3e3c43d70d05349c815baadd38ad775e9d
Validity
Not Before: May 19 13:59:24 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=748636bacd1f1b28dbc188d776ad07e7d1fa72d0
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:86:31:f9:bd:9b:37:d2:fb:b0:ad:99:d9:e8:0c:
80:d8:fd:bb:3e:35:f2:9a:93:74:2d:03:41:61:d2:
ec:c6:93:3a:74:36:4c:a4:e5:6b:d8:8d:3b:7a:18:
c8:36:df:c3:09:0d:93:3a:a4:fb:18:7a:d1:de:17:
ab:bd:27:ae:62:bc:e0:95:e6:79:a3:81:ba:7c:45:
82:05:ef:d4:3a:33:67:95:f6:6f:af:39:6c:99:61:
b0:08:13:12:1c:00:2c:d2:12:a2:52:2b:90:b5:04:
1d:43:44:c4:ec:21:7b:b1:00:67:4a:5c:53:c8:d2:
46:db:1d:c8:bb:a2:db:84:fd:58:fd:d0:26:0c:67:
ed:4f:9c:3d:56:ef:36:6c:e6:b7:bb:79:b9:5b:fb:
88:94:61:45:17:89:43:b8:6a:24:fe:55:3c:27:cb:
b8:d2:3a:2b:07:49:d4:eb:3c:39:2c:92:d8:16:41:
89:1f:83:f7:1a:58:7b:0f:ec:3a:53:8a:a8:85:e2:
e1:17:97:be:b2:1b:8f:a3:5f:fb:20:41:8d:27:b3:
49:e0:82:69:e2:82:6c:8c:9f:d9:67:39:e2:0e:22:
70:99:de:af:25:0f:7b:d1:9b:09:22:c5:ab:0c:7e:
6a:19:8f:b9:ed:b9:f6:81:50:30:eb:50:f3:40:40:
a9:5d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
74:86:36:BA:CD:1F:1B:28:DB:C1:88:D7:76:AD:07:E7:D1:FA:72:D0
X509v3 Authority Key Identifier:
keyid:22:C4:AC:3E:3C:43:D7:0D:05:34:9C:81:5B:AA:DD:38:AD:77:5E:9D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/IsSsPjxD1w0FNJyBW6rdOK13Xp0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/03/913a3a-f550-46f0-acc7-cd3ca5975712/1/dIY2us0fGyjbwYjXdq0H59H6ctA.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/03/913a3a-f550-46f0-acc7-cd3ca5975712/1/IsSsPjxD1w0FNJyBW6rdOK13Xp0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
45.151.89.0/24
92.119.196.0/23
94.103.126.0/24
94.154.161.0-94.154.163.255
94.156.10.0/24
147.78.100.0/23
171.22.72.0/22
178.215.236.0/24
185.216.70.0/24
185.216.84.0/22
185.218.84.0/22
185.218.137.0/24
185.219.126.0/24
185.222.163.0/24
Signature Algorithm: sha256WithRSAEncryption
5b:58:dd:ae:ef:6f:45:a1:c5:ac:e2:de:46:ec:4c:e4:77:a2:
dc:38:e4:d9:42:66:fe:eb:99:0b:97:b4:37:91:16:e8:e8:03:
46:d0:2e:4f:1f:43:76:20:b8:b1:ce:36:02:2a:45:53:b4:fe:
f8:34:6b:9d:1a:37:52:4a:e5:fc:0c:67:25:7a:65:72:82:e2:
c2:00:b7:e6:90:9e:d6:7d:d7:b2:3a:06:76:a7:91:76:58:16:
15:e0:cf:8b:23:ed:bb:fb:19:0a:c1:94:86:18:df:2e:c7:07:
d7:c4:57:3e:11:8d:8d:a8:73:3a:4f:3f:28:fb:2b:fc:80:d5:
6f:e5:18:6a:ea:41:c7:7b:a2:fa:71:84:6f:7e:3e:17:16:3b:
2a:92:fb:a1:60:93:c9:b6:f1:4f:51:ca:b9:7c:e0:fe:f3:fb:
7f:64:71:db:6d:41:d7:71:ae:e5:05:b9:0e:f0:ff:0a:0d:0e:
53:a7:fa:29:73:a3:ac:bb:17:fd:07:95:0e:cb:09:6b:32:e8:
04:1e:0d:5d:d0:5c:67:20:c5:fc:e9:ba:4a:d4:cd:00:13:f3:
a3:f6:2f:6b:67:4f:cb:af:23:6d:63:d6:3b:55:3c:2a:40:7c:
93:c6:32:da:fd:e0:e6:c0:00:ca:6c:ee:db:b5:d9:e9:20:d9:
41:6b:2f:71
-----BEGIN CERTIFICATE-----
MIIFUzCCBDugAwIBAgISAYg0TuH1ZDjVJoylsDHVR45YMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDIyYzRhYzNlM2M0M2Q3MGQwNTM0OWM4MTViYWFkZDM4YWQ3
NzVlOWQwHhcNMjMwNTE5MTM1OTI0WhcNMjQwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
Eyg3NDg2MzZiYWNkMWYxYjI4ZGJjMTg4ZDc3NmFkMDdlN2QxZmE3MmQwMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAhjH5vZs30vuwrZnZ6AyA2P27PjXy
mpN0LQNBYdLsxpM6dDZMpOVr2I07ehjINt/DCQ2TOqT7GHrR3hervSeuYrzgleZ5
o4G6fEWCBe/UOjNnlfZvrzlsmWGwCBMSHAAs0hKiUiuQtQQdQ0TE7CF7sQBnSlxT
yNJG2x3Iu6LbhP1Y/dAmDGftT5w9Vu82bOa3u3m5W/uIlGFFF4lDuGok/lU8J8u4
0jorB0nU6zw5LJLYFkGJH4P3Glh7D+w6U4qoheLhF5e+shuPo1/7IEGNJ7NJ4IJp
4oJsjJ/ZZzniDiJwmd6vJQ970ZsJIsWrDH5qGY+57bn2gVAw61DzQECpXQIDAQAB
o4ICXzCCAlswHQYDVR0OBBYEFHSGNrrNHxso28GI13atB+fR+nLQMB8GA1UdIwQY
MBaAFCLErD48Q9cNBTScgVuq3Titd16dMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvSXNTc1BqeEQxdzBGTkp5Qlc2cmRPSzEzWHAwLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8wMy85MTNhM2EtZjU1MC00NmYwLWFjYzct
Y2QzY2E1OTc1NzEyLzEvZElZMnVzMGZHeWpid1lqWGRxMEg1OUg2Y3RBLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8wMy85MTNhM2EtZjU1MC00NmYwLWFjYzctY2QzY2E1OTc1NzEy
LzEvSXNTc1BqeEQxdzBGTkp5Qlc2cmRPSzEzWHAwLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMHUGCCsGAQUFBwEHAQH/BGYwZDBiBAIAATBcAwQALZdZAwQB
XHfEAwQAXmd+MAwDBABemqEDBAJemqADBABenAoDBAGTTmQDBAKrFkgDBACy1+wD
BAC52EYDBAK52FQDBAK52lQDBAC52okDBAC5234DBAC53qMwDQYJKoZIhvcNAQEL
BQADggEBAFtY3a7vb0Whxazi3kbsTOR3otw45NlCZv7rmQuXtDeRFujoA0bQLk8f
Q3YguLHONgIqRVO0/vg0a50aN1JK5fwMZyV6ZXKC4sIAt+aQntZ917I6BnankXZY
FhXgz4sj7bv7GQrBlIYY3y7HB9fEVz4RjY2oczpPPyj7K/yA1W/lGGrqQcd7ovpx
hG9+PhcWOyqS+6Fgk8m28U9Ryrl84P7z+39kcdttQddxruUFuQ7w/woNDlOn+ilz
o6y7F/0HlQ7LCWsy6AQeDV3QXGcgxfzpukrUzQAT86P2L2tnT8uvI21j1jtVPCpA
fJPGMtr94ObAAMps7tu12ekg2UFrL3E=
-----END CERTIFICATE-----
Generated at Thu Jun 6 18:50:38 2024 by rpki-client on console-ams.rpki-client.org