Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/03/913a3a-f550-46f0-acc7-cd3ca5975712/1/knAEqynC3wlEAvNZshn8EwH6C_s.roa
File: knAEqynC3wlEAvNZshn8EwH6C_s.roa (raw, json)
Hash identifier: y/KV1Tj78PH56hzeK9F0EPUfCha7GGr9RYjfgoHf3T4=
Subject key identifier: 92:70:04:AB:29:C2:DF:09:44:02:F3:59:B2:19:FC:13:01:FA:0B:FB
Certificate issuer: /CN=22c4ac3e3c43d70d05349c815baadd38ad775e9d
Certificate serial: 01862FB88F2C86FCD3F576677A8067EBB5AA
Authority key identifier: 22:C4:AC:3E:3C:43:D7:0D:05:34:9C:81:5B:AA:DD:38:AD:77:5E:9D
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/IsSsPjxD1w0FNJyBW6rdOK13Xp0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/03/913a3a-f550-46f0-acc7-cd3ca5975712/1/knAEqynC3wlEAvNZshn8EwH6C_s.roa
Signing time: Wed 08 Feb 2023 06:31:09 +0000
ROA not before: Wed 08 Feb 2023 06:31:09 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 50225
IP address blocks: 81.161.230.0/24 maxlen: 24
94.156.234.0/24 maxlen: 24
194.55.224.0/24 maxlen: 24
178.215.226.0/24 maxlen: 24
185.222.160.0/24 maxlen: 24
185.222.162.0/24 maxlen: 24
45.9.156.0/24 maxlen: 24
45.66.228.0/24 maxlen: 24
45.12.255.0/24 maxlen: 24
94.156.160.0/24 maxlen: 24
193.42.34.0/24 maxlen: 24
193.47.63.0/24 maxlen: 24
193.47.60.0/24 maxlen: 24
45.84.91.0/24 maxlen: 24
45.88.64.0/24 maxlen: 24
194.180.39.0/24 maxlen: 24
45.129.84.0/24 maxlen: 24
45.129.86.0/24 maxlen: 24
176.125.252.0/24 maxlen: 24
94.154.162.0/24 maxlen: 24
Validation: Failed, RFC 3779 resource not subset of parent's resources
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:86:2f:b8:8f:2c:86:fc:d3:f5:76:67:7a:80:67:eb:b5:aa
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=22c4ac3e3c43d70d05349c815baadd38ad775e9d
Validity
Not Before: Feb 8 06:31:09 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=927004ab29c2df094402f359b219fc1301fa0bfb
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:96:24:14:77:74:d9:5e:2b:3d:65:94:69:10:1c:
1d:4b:f8:9f:bf:a1:b1:26:60:ae:57:71:12:72:57:
d8:0f:23:c1:ab:5f:75:4b:30:45:88:84:66:a3:33:
8a:66:67:55:78:99:84:e6:f8:e4:69:b1:08:a0:9c:
a6:51:e3:f8:d2:2e:80:a0:c7:d2:b0:94:35:de:5e:
87:64:c9:45:64:18:20:51:9e:66:5f:9c:f4:61:d0:
28:f2:a6:b2:e2:b5:3b:f6:b6:2f:70:2d:e2:fc:11:
1f:77:57:0a:fc:5e:4d:7a:d6:70:6d:9a:e0:2a:8a:
24:ec:53:6c:5c:b3:2a:41:39:6f:ef:92:18:f9:33:
5a:56:f7:29:cc:50:e0:ae:f1:84:ca:2f:2c:1a:3b:
8a:25:b3:93:c7:4e:6f:01:68:a6:15:c1:ee:e8:a6:
b8:c2:58:79:2b:60:c7:7b:3f:58:27:47:8e:2f:37:
a7:ba:f5:e3:8f:9b:7a:22:94:4a:0e:d3:6c:bb:71:
c7:c9:47:37:6b:8b:b2:25:81:2b:64:96:fd:f6:f6:
b1:81:fc:1e:04:7d:ba:b0:61:06:16:fe:23:b9:a9:
e1:63:4d:7a:5f:f8:30:54:40:25:3a:17:dc:96:ed:
1d:ac:64:e8:2d:c4:f4:77:d4:79:c6:2f:f2:09:f0:
df:f1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
92:70:04:AB:29:C2:DF:09:44:02:F3:59:B2:19:FC:13:01:FA:0B:FB
X509v3 Authority Key Identifier:
keyid:22:C4:AC:3E:3C:43:D7:0D:05:34:9C:81:5B:AA:DD:38:AD:77:5E:9D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/IsSsPjxD1w0FNJyBW6rdOK13Xp0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/03/913a3a-f550-46f0-acc7-cd3ca5975712/1/knAEqynC3wlEAvNZshn8EwH6C_s.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/03/913a3a-f550-46f0-acc7-cd3ca5975712/1/IsSsPjxD1w0FNJyBW6rdOK13Xp0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
45.9.156.0/24
45.12.255.0/24
45.66.228.0/24
45.84.91.0/24
45.88.64.0/24
45.129.84.0/24
45.129.86.0/24
81.161.230.0/24
94.154.162.0/24
94.156.160.0/24
94.156.234.0/24
176.125.252.0/24
178.215.226.0/24
185.222.160.0/24
185.222.162.0/24
193.42.34.0/24
193.47.60.0/24
193.47.63.0/24
194.55.224.0/24
194.180.39.0/24
Signature Algorithm: sha256WithRSAEncryption
5f:8d:27:c5:9e:83:96:cf:d2:02:b6:15:f0:af:68:36:8f:fe:
b5:c5:f3:0f:62:b2:f3:72:b6:1b:da:a7:9c:02:72:f5:05:f3:
8f:db:4d:76:c9:31:69:ef:b9:cc:f1:8c:bd:3d:24:40:55:b1:
c2:ba:45:a5:68:2d:d5:84:75:a7:be:e3:b1:06:98:70:f6:a6:
be:2e:f9:df:8d:2e:00:9e:99:c8:ed:d1:5a:05:41:65:42:36:
36:27:ad:1a:27:6c:26:7e:53:40:17:dd:eb:9c:92:10:97:13:
65:91:fb:e2:b0:7b:65:b1:f9:56:0b:27:60:4d:12:0b:05:23:
35:6e:2b:52:0b:d8:5e:71:7d:2f:5d:0c:05:2d:75:20:7d:af:
be:9a:fa:c0:1a:07:c7:6b:9e:82:1d:b0:70:51:ee:49:29:b6:
0c:54:eb:ee:01:4e:cf:40:4b:70:dd:93:bd:c2:74:0a:73:55:
06:81:6f:f3:35:0a:5c:6b:b6:92:c8:6f:4c:6f:fb:da:81:1c:
81:d8:11:b3:e1:8a:60:a4:0d:3d:e5:dc:88:87:f5:08:8c:df:
73:cb:db:be:a6:dc:d4:1f:69:c0:7c:21:f6:c0:5b:1a:e5:eb:
4d:0a:e4:0a:32:43:a2:82:20:7e:bc:8e:31:a4:be:72:a4:18:
50:60:ac:b7
-----BEGIN CERTIFICATE-----
MIIFcjCCBFqgAwIBAgISAYYvuI8shvzT9XZneoBn67WqMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDIyYzRhYzNlM2M0M2Q3MGQwNTM0OWM4MTViYWFkZDM4YWQ3
NzVlOWQwHhcNMjMwMjA4MDYzMTA5WhcNMjQwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
Eyg5MjcwMDRhYjI5YzJkZjA5NDQwMmYzNTliMjE5ZmMxMzAxZmEwYmZiMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAliQUd3TZXis9ZZRpEBwdS/ifv6Gx
JmCuV3ESclfYDyPBq191SzBFiIRmozOKZmdVeJmE5vjkabEIoJymUeP40i6AoMfS
sJQ13l6HZMlFZBggUZ5mX5z0YdAo8qay4rU79rYvcC3i/BEfd1cK/F5NetZwbZrg
Kook7FNsXLMqQTlv75IY+TNaVvcpzFDgrvGEyi8sGjuKJbOTx05vAWimFcHu6Ka4
wlh5K2DHez9YJ0eOLzenuvXjj5t6IpRKDtNsu3HHyUc3a4uyJYErZJb99vaxgfwe
BH26sGEGFv4juanhY016X/gwVEAlOhfclu0drGToLcT0d9R5xi/yCfDf8QIDAQAB
o4ICfjCCAnowHQYDVR0OBBYEFJJwBKspwt8JRALzWbIZ/BMB+gv7MB8GA1UdIwQY
MBaAFCLErD48Q9cNBTScgVuq3Titd16dMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvSXNTc1BqeEQxdzBGTkp5Qlc2cmRPSzEzWHAwLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8wMy85MTNhM2EtZjU1MC00NmYwLWFjYzct
Y2QzY2E1OTc1NzEyLzEva25BRXF5bkMzd2xFQXZOWnNobjhFd0g2Q19zLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8wMy85MTNhM2EtZjU1MC00NmYwLWFjYzctY2QzY2E1OTc1NzEy
LzEvSXNTc1BqeEQxdzBGTkp5Qlc2cmRPSzEzWHAwLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMIGTBggrBgEFBQcBBwEB/wSBgzCBgDB+BAIAATB4AwQALQmc
AwQALQz/AwQALULkAwQALVRbAwQALVhAAwQALYFUAwQALYFWAwQAUaHmAwQAXpqi
AwQAXpygAwQAXpzqAwQAsH38AwQAstfiAwQAud6gAwQAud6iAwQAwSoiAwQAwS88
AwQAwS8/AwQAwjfgAwQAwrQnMA0GCSqGSIb3DQEBCwUAA4IBAQBfjSfFnoOWz9IC
thXwr2g2j/61xfMPYrLzcrYb2qecAnL1BfOP2012yTFp77nM8Yy9PSRAVbHCukWl
aC3VhHWnvuOxBphw9qa+LvnfjS4AnpnI7dFaBUFlQjY2J60aJ2wmflNAF93rnJIQ
lxNlkfvisHtlsflWCydgTRILBSM1bitSC9hecX0vXQwFLXUgfa++mvrAGgfHa56C
HbBwUe5JKbYMVOvuAU7PQEtw3ZO9wnQKc1UGgW/zNQpca7aSyG9Mb/vagRyB2BGz
4YpgpA095dyIh/UIjN9zy9u+ptzUH2nAfCH2wFsa5etNCuQKMkOigiB+vI4xpL5y
pBhQYKy3
-----END CERTIFICATE-----
Generated at Wed Jul 19 23:46:41 2023 by rpki-client on console-ams.rpki-client.org