Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/03/913a3a-f550-46f0-acc7-cd3ca5975712/1/elcahmXUswHjkGleqmLuak0iy7E.roa
File: elcahmXUswHjkGleqmLuak0iy7E.roa (raw, json)
Hash identifier: VJJclJAViv/Lrce6XsyCl06PO9A+SJCuQZbcepF95o8=
Subject key identifier: 7A:57:1A:86:65:D4:B3:01:E3:90:69:5E:AA:62:EE:6A:4D:22:CB:B1
Certificate issuer: /CN=22c4ac3e3c43d70d05349c815baadd38ad775e9d
Certificate serial: 0185E280030704D93541AD36F2BB13FBDD70
Authority key identifier: 22:C4:AC:3E:3C:43:D7:0D:05:34:9C:81:5B:AA:DD:38:AD:77:5E:9D
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/IsSsPjxD1w0FNJyBW6rdOK13Xp0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/03/913a3a-f550-46f0-acc7-cd3ca5975712/1/elcahmXUswHjkGleqmLuak0iy7E.roa
Signing time: Tue 24 Jan 2023 06:38:38 +0000
ROA not before: Tue 24 Jan 2023 06:38:38 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 8100
IP address blocks: 87.120.192.0/23 maxlen: 24
87.121.36.0/23 maxlen: 24
87.121.38.0/24 maxlen: 24
87.121.60.0/22 maxlen: 24
87.120.219.0/24 maxlen: 24
87.120.220.0/23 maxlen: 24
94.154.160.0/23 maxlen: 24
94.154.173.0/24 maxlen: 24
93.123.39.0/24 maxlen: 24
94.156.237.0/24 maxlen: 24
194.55.226.0/24 maxlen: 24
94.156.238.0/24 maxlen: 24
93.123.68.0/22 maxlen: 24
93.123.76.0/22 maxlen: 24
93.123.85.0/24 maxlen: 24
93.123.80.0/24 maxlen: 24
93.123.86.0/23 maxlen: 24
94.156.168.0/23 maxlen: 24
94.156.176.0/22 maxlen: 24
94.156.180.0/23 maxlen: 24
93.123.24.0/24 maxlen: 24
194.48.249.0/24 maxlen: 24
93.123.30.0/23 maxlen: 24
93.123.26.0/23 maxlen: 24
87.120.64.0/23 maxlen: 24
87.120.96.0/23 maxlen: 24
87.120.100.0/22 maxlen: 24
93.123.112.0/22 maxlen: 24
93.123.116.0/23 maxlen: 24
93.123.119.0/24 maxlen: 24
87.120.32.0/22 maxlen: 24
193.25.219.0/24 maxlen: 24
87.120.46.0/23 maxlen: 24
94.156.2.0/24 maxlen: 24
94.156.8.0/24 maxlen: 24
91.92.16.0/24 maxlen: 24
91.92.21.0/24 maxlen: 24
91.92.26.0/23 maxlen: 24
193.58.121.0/24 maxlen: 24
193.58.123.0/24 maxlen: 24
94.156.131.0/24 maxlen: 24
94.156.152.0/24 maxlen: 24
94.156.154.0/23 maxlen: 24
91.92.67.0/24 maxlen: 24
94.156.78.0/23 maxlen: 24
37.139.130.0/23 maxlen: 24
212.87.205.0/24 maxlen: 24
87.121.146.0/23 maxlen: 24
178.215.238.0/24 maxlen: 24
87.121.163.0/24 maxlen: 24
87.121.69.0/24 maxlen: 24
185.252.177.0/24 maxlen: 24
87.121.103.0/24 maxlen: 24
87.121.114.0/23 maxlen: 24
31.13.252.0/22 maxlen: 24
Validation: Failed, RFC 3779 resource not subset of parent's resources
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:85:e2:80:03:07:04:d9:35:41:ad:36:f2:bb:13:fb:dd:70
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=22c4ac3e3c43d70d05349c815baadd38ad775e9d
Validity
Not Before: Jan 24 06:38:38 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=7a571a8665d4b301e390695eaa62ee6a4d22cbb1
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bc:81:78:d1:3b:3f:4f:32:18:d0:34:12:67:7a:
75:7c:4b:22:e4:72:9b:a0:32:c6:15:81:57:93:3a:
bb:f5:4d:16:70:67:11:01:89:8a:d4:b1:eb:c7:0b:
08:2e:5e:7a:bf:76:e6:59:60:75:9d:7f:f5:da:23:
f3:cb:17:78:a8:20:41:54:ef:ae:48:58:60:85:71:
09:5b:ab:82:12:b0:82:bd:a2:b8:d3:3d:83:72:cf:
8f:5c:4b:f3:ae:ca:1c:ad:b3:45:0c:70:8b:69:44:
8a:45:03:48:f5:0b:c0:73:f3:f4:6e:8c:3d:c9:49:
33:4e:71:cf:bc:6b:be:f0:d5:d1:c6:0a:f2:40:7b:
f4:6c:bc:6e:d7:d7:d8:02:85:df:f3:fa:03:da:cf:
94:8d:73:48:67:fb:6b:58:00:d7:43:e2:a2:64:de:
bc:f9:5c:3e:14:b4:70:dd:f6:d7:5f:77:cd:a9:1c:
00:d0:9b:b6:22:7e:c7:f4:4d:f6:93:5f:63:e8:32:
18:0a:89:5d:f4:f1:4b:80:2b:8d:5e:1b:04:50:09:
62:e1:28:ba:ee:97:ee:9c:e0:03:84:65:07:ec:29:
c9:88:3a:d4:52:cf:79:b0:79:a6:66:c3:9a:34:83:
55:bf:42:09:bd:83:9f:f9:d6:42:28:7a:ff:ee:d7:
b9:03
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
7A:57:1A:86:65:D4:B3:01:E3:90:69:5E:AA:62:EE:6A:4D:22:CB:B1
X509v3 Authority Key Identifier:
keyid:22:C4:AC:3E:3C:43:D7:0D:05:34:9C:81:5B:AA:DD:38:AD:77:5E:9D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/IsSsPjxD1w0FNJyBW6rdOK13Xp0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/03/913a3a-f550-46f0-acc7-cd3ca5975712/1/elcahmXUswHjkGleqmLuak0iy7E.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/03/913a3a-f550-46f0-acc7-cd3ca5975712/1/IsSsPjxD1w0FNJyBW6rdOK13Xp0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
31.13.252.0/22
37.139.130.0/23
87.120.32.0/22
87.120.46.0/23
87.120.64.0/23
87.120.96.0/23
87.120.100.0/22
87.120.192.0/23
87.120.219.0-87.120.221.255
87.121.36.0-87.121.38.255
87.121.60.0/22
87.121.69.0/24
87.121.103.0/24
87.121.114.0/23
87.121.146.0/23
87.121.163.0/24
91.92.16.0/24
91.92.21.0/24
91.92.26.0/23
91.92.67.0/24
93.123.24.0/24
93.123.26.0/23
93.123.30.0/23
93.123.39.0/24
93.123.68.0/22
93.123.76.0-93.123.80.255
93.123.85.0-93.123.87.255
93.123.112.0-93.123.117.255
93.123.119.0/24
94.154.160.0/23
94.154.173.0/24
94.156.2.0/24
94.156.8.0/24
94.156.78.0/23
94.156.131.0/24
94.156.152.0/24
94.156.154.0/23
94.156.168.0/23
94.156.176.0-94.156.181.255
94.156.237.0-94.156.238.255
178.215.238.0/24
185.252.177.0/24
193.25.219.0/24
193.58.121.0/24
193.58.123.0/24
194.48.249.0/24
194.55.226.0/24
212.87.205.0/24
Signature Algorithm: sha256WithRSAEncryption
a9:aa:64:9b:42:2c:0b:4e:f1:72:a7:14:44:20:d6:67:ad:5c:
67:52:56:ce:1d:06:fd:74:87:f1:be:4a:96:45:d7:d9:ce:df:
5d:5c:9e:1d:87:0b:c5:9d:b6:13:12:de:72:39:8f:2e:30:7b:
e3:2f:79:10:3f:8e:67:87:9e:5a:e8:51:21:25:1e:2c:75:26:
f7:4b:de:0b:8f:ad:7e:23:24:fc:de:46:e6:2f:b5:1f:5e:76:
57:3b:0a:18:61:fd:3a:a9:71:8c:b3:ec:76:3d:54:2b:a8:8c:
26:b3:33:2d:d5:f2:90:98:01:75:12:6b:90:2d:4d:ee:89:6c:
b9:31:ce:28:c7:22:7a:6a:6b:67:a7:9d:4e:ae:d6:a3:4b:2b:
9f:6a:e3:52:eb:66:67:13:0c:9b:22:bf:07:20:ea:75:22:20:
58:c1:d2:b6:ef:36:29:d2:1a:b2:ba:83:b3:4b:ba:88:22:1d:
14:70:7d:9d:57:85:28:3d:8b:f2:4f:58:65:9b:cd:28:fe:a2:
ad:b8:e1:8e:85:7b:74:22:ee:17:38:7b:e1:a9:72:fb:01:82:
c9:1d:fe:f4:28:9f:97:cd:75:09:da:29:67:80:9d:0b:75:b7:
d0:a1:35:3f:7f:03:6e:7e:55:93:07:09:39:f1:58:c3:8e:2b:
09:18:4a:11
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 19 23:46:40 2023 by rpki-client on console-ams.rpki-client.org