Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/03/913a3a-f550-46f0-acc7-cd3ca5975712/1/f1kSs8vuyeVu1QI7qM5QCFSiMzM.roa
File: f1kSs8vuyeVu1QI7qM5QCFSiMzM.roa (raw, json)
Hash identifier: lSbVEmxwcU+pWTRtbIcHpOLKVjgBWUxLi6rp7KWaHuc=
Subject key identifier: 7F:59:12:B3:CB:EE:C9:E5:6E:D5:02:3B:A8:CE:50:08:54:A2:33:33
Certificate issuer: /CN=22c4ac3e3c43d70d05349c815baadd38ad775e9d
Certificate serial: 018F0979D0BFAE05768E64AB5537DB4A2F93
Authority key identifier: 22:C4:AC:3E:3C:43:D7:0D:05:34:9C:81:5B:AA:DD:38:AD:77:5E:9D
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/IsSsPjxD1w0FNJyBW6rdOK13Xp0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/03/913a3a-f550-46f0-acc7-cd3ca5975712/1/f1kSs8vuyeVu1QI7qM5QCFSiMzM.roa
Signing time: Tue 23 Apr 2024 05:42:09 +0000
ROA not before: Tue 23 Apr 2024 05:42:09 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 207279
IP address blocks: 2.59.253.0/24 maxlen: 24
45.88.64.0/24 maxlen: 24
79.110.51.0/24 maxlen: 24
87.120.166.0/24 maxlen: 24
92.119.198.0/24 maxlen: 24
94.154.162.0/24 maxlen: 24
94.156.75.0/24 maxlen: 24
109.206.239.0/24 maxlen: 24
178.215.225.0/24 maxlen: 24
178.215.227.0/24 maxlen: 24
178.215.236.0/24 maxlen: 24
185.222.161.0/24 maxlen: 24
185.222.162.0/24 maxlen: 24
193.25.217.0/24 maxlen: 24
193.37.40.0/24 maxlen: 24
193.37.42.0/24 maxlen: 24
193.37.44.0/24 maxlen: 24
193.222.97.0/24 maxlen: 24
193.222.99.0/24 maxlen: 24
194.55.187.0/24 maxlen: 24
194.55.225.0/24 maxlen: 24
194.180.38.0/24 maxlen: 24
Validation: Failed, RFC 3779 resource not subset of parent's resources
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8f:09:79:d0:bf:ae:05:76:8e:64:ab:55:37:db:4a:2f:93
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=22c4ac3e3c43d70d05349c815baadd38ad775e9d
Validity
Not Before: Apr 23 05:42:09 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=7f5912b3cbeec9e56ed5023ba8ce500854a23333
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b4:ed:cf:48:38:65:62:d5:7d:75:2d:26:9c:44:
0c:d7:3e:ed:dd:e7:44:4c:55:e0:b0:23:18:20:e9:
e3:ac:87:83:be:b6:46:32:97:1c:cc:d7:7a:1d:b0:
d8:fb:d6:04:7a:68:9f:f8:f6:31:06:9d:3e:cb:f2:
90:f2:49:b5:5b:98:a2:04:6a:eb:52:eb:64:16:22:
3a:df:aa:23:fe:5d:10:d9:b2:18:53:c6:8f:ea:80:
f5:25:7a:c3:78:43:bd:5d:f3:13:26:b4:95:c6:61:
c4:68:57:c5:49:e8:b5:8e:60:33:da:c8:e7:f5:ae:
0c:3d:e4:03:d3:01:86:02:96:64:ec:58:0f:a8:79:
a6:51:f7:38:c1:de:7b:aa:3f:f9:73:52:87:22:6a:
f6:1c:ab:d4:24:8c:30:0f:75:f9:aa:56:8d:99:4a:
15:6b:3f:a7:1b:b1:d7:e3:28:eb:90:00:4a:39:93:
88:53:23:17:14:dc:8f:f8:fb:01:44:a3:7b:53:0d:
ff:8a:f6:87:a9:3f:8c:13:17:3d:b5:ac:68:93:c0:
a1:11:57:af:7b:21:41:d7:6c:7a:da:5b:83:e1:4e:
4e:d4:1a:52:76:80:b6:58:c1:78:e3:70:55:f9:5a:
a8:5f:93:81:d4:13:a0:38:33:39:a2:bf:6f:c7:4c:
ac:05
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
7F:59:12:B3:CB:EE:C9:E5:6E:D5:02:3B:A8:CE:50:08:54:A2:33:33
X509v3 Authority Key Identifier:
keyid:22:C4:AC:3E:3C:43:D7:0D:05:34:9C:81:5B:AA:DD:38:AD:77:5E:9D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/IsSsPjxD1w0FNJyBW6rdOK13Xp0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/03/913a3a-f550-46f0-acc7-cd3ca5975712/1/f1kSs8vuyeVu1QI7qM5QCFSiMzM.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/03/913a3a-f550-46f0-acc7-cd3ca5975712/1/IsSsPjxD1w0FNJyBW6rdOK13Xp0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
2.59.253.0/24
45.88.64.0/24
79.110.51.0/24
87.120.166.0/24
92.119.198.0/24
94.154.162.0/24
94.156.75.0/24
109.206.239.0/24
178.215.225.0/24
178.215.227.0/24
178.215.236.0/24
185.222.161.0-185.222.162.255
193.25.217.0/24
193.37.40.0/24
193.37.42.0/24
193.37.44.0/24
193.222.97.0/24
193.222.99.0/24
194.55.187.0/24
194.55.225.0/24
194.180.38.0/24
Signature Algorithm: sha256WithRSAEncryption
1b:c6:6b:82:1f:0d:ed:57:6b:0b:85:b8:7e:c8:7a:8f:82:af:
5f:74:65:c6:64:c6:fb:d4:f3:56:dd:18:47:6f:74:b0:4f:a1:
de:a0:7f:a0:7c:94:38:85:ad:e6:52:d2:6f:5a:9f:ed:00:7a:
fd:a4:d3:41:58:e0:c4:2a:e9:a1:e3:f6:54:09:83:51:e7:08:
c4:7d:3a:0e:17:bc:68:e7:08:9e:f5:48:b0:55:18:6c:a5:3e:
50:79:d1:3a:f4:a3:6f:73:68:3f:09:2b:0e:2c:b6:18:4d:eb:
06:f4:3f:7f:cb:8d:d7:2b:97:92:05:ef:2c:06:98:15:47:65:
c3:59:62:a9:22:f5:dd:95:e1:89:4d:16:75:3a:be:92:8d:ec:
14:a7:ae:27:8c:90:bc:21:25:e1:91:b1:b4:be:b8:75:fe:ed:
f3:ce:1a:f6:9e:34:19:1f:de:24:72:fd:43:a4:0a:e3:74:8a:
f9:b5:1c:bb:c4:3c:56:fc:6a:78:5a:41:bc:90:d9:c1:14:38:
12:66:ee:77:20:42:70:2e:0a:ce:73:16:22:21:b6:3a:f4:53:
1c:ff:fa:52:45:26:b4:47:5d:2d:33:8e:ae:58:54:e6:c5:de:
48:45:6a:f8:a8:29:7f:66:4a:af:c5:6c:fc:1f:56:62:3f:a0:
8b:17:bb:6e
-----BEGIN CERTIFICATE-----
MIIFgjCCBGqgAwIBAgISAY8JedC/rgV2jmSrVTfbSi+TMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDIyYzRhYzNlM2M0M2Q3MGQwNTM0OWM4MTViYWFkZDM4YWQ3
NzVlOWQwHhcNMjQwNDIzMDU0MjA5WhcNMjUwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
Eyg3ZjU5MTJiM2NiZWVjOWU1NmVkNTAyM2JhOGNlNTAwODU0YTIzMzMzMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAtO3PSDhlYtV9dS0mnEQM1z7t3edE
TFXgsCMYIOnjrIeDvrZGMpcczNd6HbDY+9YEemif+PYxBp0+y/KQ8km1W5iiBGrr
UutkFiI636oj/l0Q2bIYU8aP6oD1JXrDeEO9XfMTJrSVxmHEaFfFSei1jmAz2sjn
9a4MPeQD0wGGApZk7FgPqHmmUfc4wd57qj/5c1KHImr2HKvUJIwwD3X5qlaNmUoV
az+nG7HX4yjrkABKOZOIUyMXFNyP+PsBRKN7Uw3/ivaHqT+MExc9taxok8ChEVev
eyFB12x62luD4U5O1BpSdoC2WMF443BV+VqoX5OB1BOgODM5or9vx0ysBQIDAQAB
o4ICjjCCAoowHQYDVR0OBBYEFH9ZErPL7snlbtUCO6jOUAhUojMzMB8GA1UdIwQY
MBaAFCLErD48Q9cNBTScgVuq3Titd16dMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvSXNTc1BqeEQxdzBGTkp5Qlc2cmRPSzEzWHAwLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8wMy85MTNhM2EtZjU1MC00NmYwLWFjYzct
Y2QzY2E1OTc1NzEyLzEvZjFrU3M4dnV5ZVZ1MVFJN3FNNVFDRlNpTXpNLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8wMy85MTNhM2EtZjU1MC00NmYwLWFjYzctY2QzY2E1OTc1NzEy
LzEvSXNTc1BqeEQxdzBGTkp5Qlc2cmRPSzEzWHAwLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMIGjBggrBgEFBQcBBwEB/wSBkzCBkDCBjQQCAAEwgYYDBAAC
O/0DBAAtWEADBABPbjMDBABXeKYDBABcd8YDBABemqIDBABenEsDBABtzu8DBACy
1+EDBACy1+MDBACy1+wwDAMEALneoQMEALneogMEAMEZ2QMEAMElKAMEAMElKgME
AMElLAMEAMHeYQMEAMHeYwMEAMI3uwMEAMI34QMEAMK0JjANBgkqhkiG9w0BAQsF
AAOCAQEAG8Zrgh8N7VdrC4W4fsh6j4KvX3RlxmTG+9TzVt0YR290sE+h3qB/oHyU
OIWt5lLSb1qf7QB6/aTTQVjgxCrpoeP2VAmDUecIxH06Dhe8aOcInvVIsFUYbKU+
UHnROvSjb3NoPwkrDiy2GE3rBvQ/f8uN1yuXkgXvLAaYFUdlw1liqSL13ZXhiU0W
dTq+ko3sFKeuJ4yQvCEl4ZGxtL64df7t884a9p40GR/eJHL9Q6QK43SK+bUcu8Q8
VvxqeFpBvJDZwRQ4EmbudyBCcC4KznMWIiG2OvRTHP/6UkUmtEddLTOOrlhU5sXe
SEVq+Kgpf2ZKr8Vs/B9WYj+gixe7bg==
-----END CERTIFICATE-----
Generated at Thu Jun 6 17:17:16 2024 by rpki-client on console-fra.rpki-client.org