Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/03/913a3a-f550-46f0-acc7-cd3ca5975712/1/jW0xcl2mVpLXQ4LWbrPpIKCr574.roa
File: jW0xcl2mVpLXQ4LWbrPpIKCr574.roa (raw, json)
Hash identifier: ZQbkiS348kx9TNVi3qzQ1wca8lrZtnTUQk/yw+Ug9DE=
Subject key identifier: 8D:6D:31:72:5D:A6:56:92:D7:43:82:D6:6E:B3:E9:20:A0:AB:E7:BE
Certificate issuer: /CN=22c4ac3e3c43d70d05349c815baadd38ad775e9d
Certificate serial: 0182D42AE3399E776B16048D27D1EA25A20D
Authority key identifier: 22:C4:AC:3E:3C:43:D7:0D:05:34:9C:81:5B:AA:DD:38:AD:77:5E:9D
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/IsSsPjxD1w0FNJyBW6rdOK13Xp0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/03/913a3a-f550-46f0-acc7-cd3ca5975712/1/jW0xcl2mVpLXQ4LWbrPpIKCr574.roa
Signing time: Thu 25 Aug 2022 08:42:36 +0000
ROA not before: Thu 25 Aug 2022 08:42:36 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 209371
IP address blocks: 85.31.45.0/24 maxlen: 24
85.31.47.0/24 maxlen: 24
185.246.221.0/24 maxlen: 24
194.180.36.0/24 maxlen: 24
92.249.48.0/24 maxlen: 24
92.249.50.0/24 maxlen: 24
185.218.136.0/24 maxlen: 24
82.115.208.0/24 maxlen: 24
82.115.210.0/24 maxlen: 24
94.154.172.0/24 maxlen: 24
193.35.19.0/24 maxlen: 24
212.87.206.0/24 maxlen: 24
178.215.226.0/24 maxlen: 24
85.217.144.0/24 maxlen: 24
84.54.49.0/24 maxlen: 24
178.215.225.0/24 maxlen: 24
178.215.227.0/24 maxlen: 24
178.215.239.0/24 maxlen: 24
178.215.236.0/24 maxlen: 24
80.76.50.0/24 maxlen: 24
80.76.48.0/24 maxlen: 24
193.42.32.0/24 maxlen: 24
193.222.97.0/24 maxlen: 24
185.252.177.0/24 maxlen: 24
193.47.63.0/24 maxlen: 24
193.47.62.0/24 maxlen: 24
193.37.42.0/24 maxlen: 24
193.37.47.0/24 maxlen: 24
185.216.70.0/24 maxlen: 24
185.216.69.0/24 maxlen: 24
94.103.125.0/24 maxlen: 24
87.120.84.0/24 maxlen: 24
87.120.87.0/24 maxlen: 24
79.110.61.0/24 maxlen: 24
94.103.126.0/24 maxlen: 24
94.103.127.0/24 maxlen: 24
193.25.216.0/24 maxlen: 24
Validation: Failed, RFC 3779 resource not subset of parent's resources
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:82:d4:2a:e3:39:9e:77:6b:16:04:8d:27:d1:ea:25:a2:0d
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=22c4ac3e3c43d70d05349c815baadd38ad775e9d
Validity
Not Before: Aug 25 08:42:36 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=8d6d31725da65692d74382d66eb3e920a0abe7be
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:83:54:a5:67:6c:5a:4d:2a:a2:dc:c7:04:56:84:
e6:89:12:6a:4d:b6:98:ff:dc:23:7c:4c:a0:e9:6e:
9e:a6:98:32:20:a9:39:19:ce:96:15:e4:05:f7:95:
76:df:a4:1b:ec:a0:81:f2:03:dd:28:7c:a7:af:26:
6e:29:76:fb:fe:ce:2a:d6:55:b3:bb:10:0c:b0:27:
ad:e1:a6:ed:44:df:74:5c:a3:7c:6f:4a:d9:db:26:
87:2b:d7:7b:16:b0:b1:69:36:bb:91:73:43:10:77:
0f:8e:75:d2:1e:a6:89:07:cd:33:33:cb:9a:da:fb:
ec:d2:f9:59:93:42:f5:b3:6c:23:2b:61:2e:03:a7:
45:17:4e:75:da:33:c0:46:99:5a:fd:54:65:68:68:
cc:a3:8a:84:7c:0b:96:62:fe:bf:5e:10:d8:f3:a0:
3d:fe:01:b1:6d:b6:05:73:46:86:61:d6:b2:41:db:
37:8e:41:a4:f9:43:01:fa:dc:1c:54:13:cd:83:1b:
1e:bf:81:5b:27:8a:ec:08:1d:10:2b:5a:d4:e1:cb:
54:0c:39:63:de:ba:b2:67:b0:66:b7:95:99:58:36:
04:1d:df:8a:e2:36:3d:b3:9d:5a:7e:1f:57:ae:aa:
a2:1e:38:ec:37:0c:9f:e1:bd:74:33:ab:7a:c3:42:
b6:2b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
8D:6D:31:72:5D:A6:56:92:D7:43:82:D6:6E:B3:E9:20:A0:AB:E7:BE
X509v3 Authority Key Identifier:
keyid:22:C4:AC:3E:3C:43:D7:0D:05:34:9C:81:5B:AA:DD:38:AD:77:5E:9D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/IsSsPjxD1w0FNJyBW6rdOK13Xp0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/03/913a3a-f550-46f0-acc7-cd3ca5975712/1/jW0xcl2mVpLXQ4LWbrPpIKCr574.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/03/913a3a-f550-46f0-acc7-cd3ca5975712/1/IsSsPjxD1w0FNJyBW6rdOK13Xp0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
79.110.61.0/24
80.76.48.0/24
80.76.50.0/24
82.115.208.0/24
82.115.210.0/24
84.54.49.0/24
85.31.45.0/24
85.31.47.0/24
85.217.144.0/24
87.120.84.0/24
87.120.87.0/24
92.249.48.0/24
92.249.50.0/24
94.103.125.0-94.103.127.255
94.154.172.0/24
178.215.225.0-178.215.227.255
178.215.236.0/24
178.215.239.0/24
185.216.69.0-185.216.70.255
185.218.136.0/24
185.246.221.0/24
185.252.177.0/24
193.25.216.0/24
193.35.19.0/24
193.37.42.0/24
193.37.47.0/24
193.42.32.0/24
193.47.62.0/23
193.222.97.0/24
194.180.36.0/24
212.87.206.0/24
Signature Algorithm: sha256WithRSAEncryption
69:8b:3e:cb:0b:59:40:26:22:af:0a:25:07:ca:87:41:db:0c:
f2:0d:35:28:12:43:f2:03:6a:75:52:d4:bc:21:b3:ff:78:77:
eb:03:a8:86:7d:98:5f:2a:43:f0:c5:ba:99:bd:64:92:92:a8:
d2:c5:31:ff:69:69:49:3d:72:ae:71:9b:b6:d6:15:01:81:f7:
ac:51:ba:b6:63:ab:a0:bb:79:1c:0c:50:90:27:5e:60:b8:9f:
30:96:2e:5c:f5:0d:52:a3:fe:60:a3:2e:32:6a:ec:fd:0e:0f:
28:5f:e0:7c:c0:68:e7:11:d6:ca:36:b3:d0:e0:5b:26:9a:d9:
73:a4:9a:5d:aa:bf:87:e2:50:2a:31:2c:4a:a2:86:a0:08:47:
0e:c8:2b:fe:08:a1:3f:27:35:16:e5:11:2c:48:81:53:bd:a9:
28:51:ca:0b:51:4d:38:99:95:2c:99:35:97:fe:7f:48:83:e7:
58:e1:27:0c:63:2d:34:fa:f2:33:2e:89:45:a5:8c:2f:24:ba:
ee:1f:c9:d7:bc:67:80:89:7e:61:6e:d2:bf:5e:0a:08:f3:da:
05:f9:cc:1e:56:37:fa:d5:8a:50:a0:48:90:f2:56:f5:9e:ce:
4a:e8:a8:b7:b0:88:1a:3a:8d:2e:29:71:d1:bb:d1:d6:5d:2c:
7f:ba:2a:88
-----BEGIN CERTIFICATE-----
MIIFzjCCBLagAwIBAgISAYLUKuM5nndrFgSNJ9HqJaINMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDIyYzRhYzNlM2M0M2Q3MGQwNTM0OWM4MTViYWFkZDM4YWQ3
NzVlOWQwHhcNMjIwODI1MDg0MjM2WhcNMjMwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
Eyg4ZDZkMzE3MjVkYTY1NjkyZDc0MzgyZDY2ZWIzZTkyMGEwYWJlN2JlMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAg1SlZ2xaTSqi3McEVoTmiRJqTbaY
/9wjfEyg6W6eppgyIKk5Gc6WFeQF95V236Qb7KCB8gPdKHynryZuKXb7/s4q1lWz
uxAMsCet4abtRN90XKN8b0rZ2yaHK9d7FrCxaTa7kXNDEHcPjnXSHqaJB80zM8ua
2vvs0vlZk0L1s2wjK2EuA6dFF0512jPARpla/VRlaGjMo4qEfAuWYv6/XhDY86A9
/gGxbbYFc0aGYdayQds3jkGk+UMB+twcVBPNgxsev4FbJ4rsCB0QK1rU4ctUDDlj
3rqyZ7Bmt5WZWDYEHd+K4jY9s51afh9XrqqiHjjsNwyf4b10M6t6w0K2KwIDAQAB
o4IC2jCCAtYwHQYDVR0OBBYEFI1tMXJdplaS10OC1m6z6SCgq+e+MB8GA1UdIwQY
MBaAFCLErD48Q9cNBTScgVuq3Titd16dMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvSXNTc1BqeEQxdzBGTkp5Qlc2cmRPSzEzWHAwLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8wMy85MTNhM2EtZjU1MC00NmYwLWFjYzct
Y2QzY2E1OTc1NzEyLzEvalcweGNsMm1WcExYUTRMV2JyUHBJS0NyNTc0LnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8wMy85MTNhM2EtZjU1MC00NmYwLWFjYzctY2QzY2E1OTc1NzEy
LzEvSXNTc1BqeEQxdzBGTkp5Qlc2cmRPSzEzWHAwLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMIHvBggrBgEFBQcBBwEB/wSB3zCB3DCB2QQCAAEwgdIDBABP
bj0DBABQTDADBABQTDIDBABSc9ADBABSc9IDBABUNjEDBABVHy0DBABVHy8DBABV
2ZADBABXeFQDBABXeFcDBABc+TADBABc+TIwDAMEAF5nfQMEB15nAAMEAF6arDAM
AwQAstfhAwQCstfgAwQAstfsAwQAstfvMAwDBAC52EUDBAC52EYDBAC52ogDBAC5
9t0DBAC5/LEDBADBGdgDBADBIxMDBADBJSoDBADBJS8DBADBKiADBAHBLz4DBADB
3mEDBADCtCQDBADUV84wDQYJKoZIhvcNAQELBQADggEBAGmLPssLWUAmIq8KJQfK
h0HbDPINNSgSQ/IDanVS1Lwhs/94d+sDqIZ9mF8qQ/DFupm9ZJKSqNLFMf9paUk9
cq5xm7bWFQGB96xRurZjq6C7eRwMUJAnXmC4nzCWLlz1DVKj/mCjLjJq7P0ODyhf
4HzAaOcR1so2s9DgWyaa2XOkml2qv4fiUCoxLEqihqAIRw7IK/4IoT8nNRblESxI
gVO9qShRygtRTTiZlSyZNZf+f0iD51jhJwxjLTT68jMuiUWljC8kuu4fyde8Z4CJ
fmFu0r9eCgjz2gX5zB5WN/rVilCgSJDyVvWezkroqLewiBo6jS4pcdG70dZdLH+6
Kog=
-----END CERTIFICATE-----
Generated at Thu Jun 6 18:50:41 2024 by rpki-client on console-ams.rpki-client.org