Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/03/913a3a-f550-46f0-acc7-cd3ca5975712/1/gzd37sdfiDR8Hcj7a3l1YufoWVg.roa
File: gzd37sdfiDR8Hcj7a3l1YufoWVg.roa (raw, json)
Hash identifier: egmeyFIFEBdZZx4x+0gL2Un6CMt8Lhd9xOaFMYaLJlY=
Subject key identifier: 83:37:77:EE:C7:5F:88:34:7C:1D:C8:FB:6B:79:75:62:E7:E8:59:58
Certificate issuer: /CN=22c4ac3e3c43d70d05349c815baadd38ad775e9d
Certificate serial: 0185C9A35ADB7F218EC49A623CF7CB924766
Authority key identifier: 22:C4:AC:3E:3C:43:D7:0D:05:34:9C:81:5B:AA:DD:38:AD:77:5E:9D
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/IsSsPjxD1w0FNJyBW6rdOK13Xp0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/03/913a3a-f550-46f0-acc7-cd3ca5975712/1/gzd37sdfiDR8Hcj7a3l1YufoWVg.roa
Signing time: Thu 19 Jan 2023 10:46:44 +0000
ROA not before: Thu 19 Jan 2023 10:46:44 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 50225
IP address blocks: 81.161.230.0/24 maxlen: 24
94.156.234.0/24 maxlen: 24
194.55.224.0/24 maxlen: 24
178.215.226.0/24 maxlen: 24
194.55.225.0/24 maxlen: 24
185.222.160.0/24 maxlen: 24
185.222.161.0/24 maxlen: 24
45.9.156.0/24 maxlen: 24
45.12.255.0/24 maxlen: 24
94.156.160.0/24 maxlen: 24
193.42.34.0/24 maxlen: 24
193.47.63.0/24 maxlen: 24
193.47.60.0/24 maxlen: 24
45.84.91.0/24 maxlen: 24
45.88.64.0/24 maxlen: 24
194.180.39.0/24 maxlen: 24
45.129.84.0/24 maxlen: 24
45.129.86.0/24 maxlen: 24
94.154.162.0/24 maxlen: 24
Validation: Failed, RFC 3779 resource not subset of parent's resources
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:85:c9:a3:5a:db:7f:21:8e:c4:9a:62:3c:f7:cb:92:47:66
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=22c4ac3e3c43d70d05349c815baadd38ad775e9d
Validity
Not Before: Jan 19 10:46:44 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=833777eec75f88347c1dc8fb6b797562e7e85958
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8c:ba:25:41:97:26:2e:45:b8:ef:ea:10:dd:61:
a6:89:83:ce:ba:3f:e2:9c:28:2e:5a:85:37:f1:e6:
38:e9:ce:b0:8a:d0:af:f6:de:13:3e:85:97:71:f6:
0c:c5:37:56:56:15:c4:ba:80:45:3c:67:59:18:3f:
1d:62:c0:c8:cb:79:4f:bc:69:c1:64:0e:d5:6c:01:
19:69:06:62:0c:cb:58:35:75:61:48:3c:73:a4:f9:
f5:50:bb:0c:c0:e1:9d:c3:61:bd:c7:a1:5b:69:5b:
c8:f8:95:de:69:5f:8f:ee:8f:ae:a2:5b:84:b3:6e:
95:79:9b:cf:45:e4:6c:3c:8f:9c:90:6e:7c:f0:76:
4d:23:6e:da:c3:c2:02:87:d2:cb:44:5d:90:75:e5:
ab:7c:5c:1e:fc:35:b7:98:7b:5a:c6:24:82:50:d7:
f8:d7:af:14:a3:00:02:7f:21:f9:9d:f2:bf:8d:50:
0a:85:76:11:aa:17:0e:b4:8d:23:73:7f:54:15:cc:
c6:98:a2:3b:84:ef:5f:26:45:fc:dd:4b:42:e4:a0:
27:78:0a:24:9a:e0:c7:b5:3b:d1:78:08:b7:e3:37:
52:8f:75:16:94:8a:c9:1e:54:0f:13:c9:8d:74:0c:
e5:4e:3a:72:cf:e6:cb:fd:c5:3a:5d:2a:2d:4b:0c:
2e:13
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
83:37:77:EE:C7:5F:88:34:7C:1D:C8:FB:6B:79:75:62:E7:E8:59:58
X509v3 Authority Key Identifier:
keyid:22:C4:AC:3E:3C:43:D7:0D:05:34:9C:81:5B:AA:DD:38:AD:77:5E:9D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/IsSsPjxD1w0FNJyBW6rdOK13Xp0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/03/913a3a-f550-46f0-acc7-cd3ca5975712/1/gzd37sdfiDR8Hcj7a3l1YufoWVg.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/03/913a3a-f550-46f0-acc7-cd3ca5975712/1/IsSsPjxD1w0FNJyBW6rdOK13Xp0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
45.9.156.0/24
45.12.255.0/24
45.84.91.0/24
45.88.64.0/24
45.129.84.0/24
45.129.86.0/24
81.161.230.0/24
94.154.162.0/24
94.156.160.0/24
94.156.234.0/24
178.215.226.0/24
185.222.160.0/23
193.42.34.0/24
193.47.60.0/24
193.47.63.0/24
194.55.224.0/23
194.180.39.0/24
Signature Algorithm: sha256WithRSAEncryption
9b:0a:81:d4:13:e7:82:87:57:81:ca:a2:4f:60:78:6a:fe:1d:
ef:eb:d9:28:41:54:39:16:a0:ab:3a:1b:4f:b3:09:f1:ad:0d:
48:52:00:81:7c:a2:28:08:b0:7a:ed:5b:7f:e5:34:ed:04:f2:
7e:31:31:ce:56:e0:74:44:66:1f:0f:0e:8a:7b:17:a1:87:7d:
eb:be:9a:84:c6:87:49:70:c9:c9:2c:df:bb:75:d2:46:b6:7b:
f4:b2:e6:8d:d4:52:04:3d:27:31:71:9c:d4:f9:ea:20:20:4c:
16:c8:0e:fe:0b:15:f7:10:35:0b:26:8c:20:07:a1:72:81:78:
9b:93:e1:8a:3c:36:cd:11:10:c6:0a:c1:c7:d5:e0:b2:f4:86:
f9:fe:13:51:2a:53:9a:bc:7a:30:6e:f4:92:6b:0c:a6:c1:13:
6c:9f:63:1e:b7:07:79:00:83:4f:52:e8:53:26:5b:88:04:14:
3c:de:8a:9a:6a:e0:6b:d5:4a:ad:e3:26:29:c7:9f:dd:63:b9:
9d:3a:ff:1a:a7:7e:83:10:c8:93:11:0e:7a:5f:10:ca:6f:48:
e7:2f:90:76:60:90:d5:80:38:71:67:2a:f0:d4:91:22:36:a4:
a8:b6:86:7a:26:e9:f3:16:bd:03:bf:a3:66:9a:53:df:d0:07:
58:1b:10:7e
-----BEGIN CERTIFICATE-----
MIIFXTCCBEWgAwIBAgISAYXJo1rbfyGOxJpiPPfLkkdmMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDIyYzRhYzNlM2M0M2Q3MGQwNTM0OWM4MTViYWFkZDM4YWQ3
NzVlOWQwHhcNMjMwMTE5MTA0NjQ0WhcNMjQwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
Eyg4MzM3NzdlZWM3NWY4ODM0N2MxZGM4ZmI2Yjc5NzU2MmU3ZTg1OTU4MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAjLolQZcmLkW47+oQ3WGmiYPOuj/i
nCguWoU38eY46c6witCv9t4TPoWXcfYMxTdWVhXEuoBFPGdZGD8dYsDIy3lPvGnB
ZA7VbAEZaQZiDMtYNXVhSDxzpPn1ULsMwOGdw2G9x6FbaVvI+JXeaV+P7o+uoluE
s26VeZvPReRsPI+ckG588HZNI27aw8ICh9LLRF2QdeWrfFwe/DW3mHtaxiSCUNf4
168UowACfyH5nfK/jVAKhXYRqhcOtI0jc39UFczGmKI7hO9fJkX83UtC5KAneAok
muDHtTvReAi34zdSj3UWlIrJHlQPE8mNdAzlTjpyz+bL/cU6XSotSwwuEwIDAQAB
o4ICaTCCAmUwHQYDVR0OBBYEFIM3d+7HX4g0fB3I+2t5dWLn6FlYMB8GA1UdIwQY
MBaAFCLErD48Q9cNBTScgVuq3Titd16dMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvSXNTc1BqeEQxdzBGTkp5Qlc2cmRPSzEzWHAwLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8wMy85MTNhM2EtZjU1MC00NmYwLWFjYzct
Y2QzY2E1OTc1NzEyLzEvZ3pkMzdzZGZpRFI4SGNqN2EzbDFZdWZvV1ZnLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8wMy85MTNhM2EtZjU1MC00NmYwLWFjYzctY2QzY2E1OTc1NzEy
LzEvSXNTc1BqeEQxdzBGTkp5Qlc2cmRPSzEzWHAwLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMH8GCCsGAQUFBwEHAQH/BHAwbjBsBAIAATBmAwQALQmcAwQA
LQz/AwQALVRbAwQALVhAAwQALYFUAwQALYFWAwQAUaHmAwQAXpqiAwQAXpygAwQA
XpzqAwQAstfiAwQBud6gAwQAwSoiAwQAwS88AwQAwS8/AwQBwjfgAwQAwrQnMA0G
CSqGSIb3DQEBCwUAA4IBAQCbCoHUE+eCh1eByqJPYHhq/h3v69koQVQ5FqCrOhtP
swnxrQ1IUgCBfKIoCLB67Vt/5TTtBPJ+MTHOVuB0RGYfDw6Kexehh33rvpqExodJ
cMnJLN+7ddJGtnv0suaN1FIEPScxcZzU+eogIEwWyA7+CxX3EDULJowgB6FygXib
k+GKPDbNERDGCsHH1eCy9Ib5/hNRKlOavHowbvSSawymwRNsn2Metwd5AINPUuhT
JluIBBQ83oqaauBr1Uqt4yYpx5/dY7mdOv8ap36DEMiTEQ56XxDKb0jnL5B2YJDV
gDhxZyrw1JEiNqSotoZ6JunzFr0Dv6NmmlPf0AdYGxB+
-----END CERTIFICATE-----
Generated at Wed Jul 19 23:46:40 2023 by rpki-client on console-ams.rpki-client.org