Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/03/913a3a-f550-46f0-acc7-cd3ca5975712/1/p08sDDouEE_2G4crJr50wiIdy8E.roa
File: p08sDDouEE_2G4crJr50wiIdy8E.roa (raw, json)
Hash identifier: xu5/J0vh2tQ7JTDYjirqEKggv9vM7n/ytIvn1sZKprc=
Subject key identifier: A7:4F:2C:0C:3A:2E:10:4F:F6:1B:87:2B:26:BE:74:C2:22:1D:CB:C1
Certificate issuer: /CN=22c4ac3e3c43d70d05349c815baadd38ad775e9d
Certificate serial: 0186EFAEAC87586FF451C0BF6C22ED99C1BF
Authority key identifier: 22:C4:AC:3E:3C:43:D7:0D:05:34:9C:81:5B:AA:DD:38:AD:77:5E:9D
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/IsSsPjxD1w0FNJyBW6rdOK13Xp0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/03/913a3a-f550-46f0-acc7-cd3ca5975712/1/p08sDDouEE_2G4crJr50wiIdy8E.roa
Signing time: Fri 17 Mar 2023 13:07:27 +0000
ROA not before: Fri 17 Mar 2023 13:07:27 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 25369
IP address blocks: 171.22.31.0/24 maxlen: 24
45.90.88.0/22 maxlen: 24
141.98.4.0/24 maxlen: 24
194.55.227.0/24 maxlen: 24
45.12.254.0/24 maxlen: 24
193.58.120.0/24 maxlen: 24
193.222.98.0/23 maxlen: 24
45.149.241.0/24 maxlen: 24
194.48.248.0/24 maxlen: 24
171.22.18.0/24 maxlen: 24
194.31.204.0/24 maxlen: 24
185.221.67.0/24 maxlen: 24
79.110.48.0/23 maxlen: 24
195.178.121.0/24 maxlen: 24
194.169.174.0/24 maxlen: 24
194.169.173.0/24 maxlen: 24
194.49.86.0/24 maxlen: 24
193.25.218.0/24 maxlen: 24
193.25.217.0/24 maxlen: 24
109.206.239.0/24 maxlen: 24
Validation: Failed, RFC 3779 resource not subset of parent's resources
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:86:ef:ae:ac:87:58:6f:f4:51:c0:bf:6c:22:ed:99:c1:bf
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=22c4ac3e3c43d70d05349c815baadd38ad775e9d
Validity
Not Before: Mar 17 13:07:27 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=a74f2c0c3a2e104ff61b872b26be74c2221dcbc1
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ab:e3:af:7b:90:44:67:41:50:d8:a0:d3:71:12:
37:bc:4b:40:fb:bb:cc:77:bf:fa:84:b5:9c:8c:bd:
bb:18:79:c7:7b:1e:b4:5c:b9:65:bd:b5:72:bc:c9:
a6:c1:b9:15:5e:33:43:08:62:95:c6:6c:e6:2b:ff:
85:95:30:f3:73:1f:db:1e:32:3a:48:50:3f:c0:a5:
84:55:b8:f5:3b:68:26:2b:65:e3:6c:46:12:42:f6:
9b:d1:92:e1:9c:ae:a3:6c:23:60:d2:c1:2d:40:fd:
97:d9:79:bc:c7:bf:49:0f:24:71:57:76:fe:13:03:
66:8f:1f:8f:e2:d6:ea:b7:d7:2b:19:27:6b:08:43:
6f:7e:dc:f8:12:bf:ee:22:9a:6b:cd:ad:71:36:10:
4d:5d:06:e3:32:4b:47:93:4d:6c:45:93:23:7a:57:
50:da:fa:b9:04:c6:79:86:5c:7e:a1:53:11:8a:ac:
58:d1:15:a2:9f:30:47:26:4f:f1:a7:f1:85:b2:bb:
36:79:42:46:cc:33:24:01:9f:52:5a:ce:c9:c3:0c:
4b:03:c1:8a:7e:86:03:29:2f:fa:0c:de:1f:32:4a:
d8:49:d1:66:60:de:45:5a:e0:1e:50:35:dc:1c:a6:
f4:41:6d:b1:cf:90:6a:81:a0:23:15:d9:0f:92:8f:
8a:eb
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A7:4F:2C:0C:3A:2E:10:4F:F6:1B:87:2B:26:BE:74:C2:22:1D:CB:C1
X509v3 Authority Key Identifier:
keyid:22:C4:AC:3E:3C:43:D7:0D:05:34:9C:81:5B:AA:DD:38:AD:77:5E:9D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/IsSsPjxD1w0FNJyBW6rdOK13Xp0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/03/913a3a-f550-46f0-acc7-cd3ca5975712/1/p08sDDouEE_2G4crJr50wiIdy8E.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/03/913a3a-f550-46f0-acc7-cd3ca5975712/1/IsSsPjxD1w0FNJyBW6rdOK13Xp0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
45.12.254.0/24
45.90.88.0/22
45.149.241.0/24
79.110.48.0/23
109.206.239.0/24
141.98.4.0/24
171.22.18.0/24
171.22.31.0/24
185.221.67.0/24
193.25.217.0-193.25.218.255
193.58.120.0/24
193.222.98.0/23
194.31.204.0/24
194.48.248.0/24
194.49.86.0/24
194.55.227.0/24
194.169.173.0-194.169.174.255
195.178.121.0/24
Signature Algorithm: sha256WithRSAEncryption
49:65:1f:e1:52:c2:36:3e:63:6c:2b:70:93:82:2c:70:5d:d5:
25:e8:6c:cd:df:65:21:eb:3b:a9:11:1b:3e:99:ea:7f:17:a0:
98:20:ba:dd:ca:bd:da:c4:b4:bd:31:bf:17:2e:3b:20:9f:ed:
ae:4b:b3:d1:03:91:c0:71:ef:a1:33:87:1f:d3:04:90:c0:5e:
85:7c:bd:a5:ed:e7:ab:6f:83:2b:c6:28:a2:21:d4:8e:36:2a:
29:82:46:3c:cd:1a:d6:3e:43:6b:2e:e4:25:fa:ca:0f:1e:ef:
65:82:0e:08:1b:b9:0a:5f:d5:e8:1d:a9:a4:75:2f:d8:d0:3a:
29:81:d2:8a:2a:50:96:5d:ab:97:58:0c:65:d0:bf:26:6b:8c:
d6:8a:cf:15:7b:f3:14:9e:ab:12:4a:ba:2b:95:4a:ce:38:59:
35:68:c5:57:d7:8f:d7:86:ec:d2:c7:8b:87:ff:88:92:b5:9b:
ad:86:fa:80:e5:c9:68:70:2e:22:00:ec:de:0d:e7:12:55:e8:
3c:4f:d9:59:96:c9:26:95:63:64:ca:c3:62:84:25:3e:f4:1e:
1c:29:f1:93:01:ea:58:22:ba:39:3b:58:a8:12:3f:ba:4e:46:
fe:29:47:d6:71:2d:b2:b6:84:84:2e:3a:08:f9:65:45:8e:a1:
3d:a4:25:f4
-----BEGIN CERTIFICATE-----
MIIFdzCCBF+gAwIBAgISAYbvrqyHWG/0UcC/bCLtmcG/MA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDIyYzRhYzNlM2M0M2Q3MGQwNTM0OWM4MTViYWFkZDM4YWQ3
NzVlOWQwHhcNMjMwMzE3MTMwNzI3WhcNMjQwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EyhhNzRmMmMwYzNhMmUxMDRmZjYxYjg3MmIyNmJlNzRjMjIyMWRjYmMxMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAq+Ove5BEZ0FQ2KDTcRI3vEtA+7vM
d7/6hLWcjL27GHnHex60XLllvbVyvMmmwbkVXjNDCGKVxmzmK/+FlTDzcx/bHjI6
SFA/wKWEVbj1O2gmK2XjbEYSQvab0ZLhnK6jbCNg0sEtQP2X2Xm8x79JDyRxV3b+
EwNmjx+P4tbqt9crGSdrCENvftz4Er/uIpprza1xNhBNXQbjMktHk01sRZMjeldQ
2vq5BMZ5hlx+oVMRiqxY0RWinzBHJk/xp/GFsrs2eUJGzDMkAZ9SWs7JwwxLA8GK
foYDKS/6DN4fMkrYSdFmYN5FWuAeUDXcHKb0QW2xz5BqgaAjFdkPko+K6wIDAQAB
o4ICgzCCAn8wHQYDVR0OBBYEFKdPLAw6LhBP9huHKya+dMIiHcvBMB8GA1UdIwQY
MBaAFCLErD48Q9cNBTScgVuq3Titd16dMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvSXNTc1BqeEQxdzBGTkp5Qlc2cmRPSzEzWHAwLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8wMy85MTNhM2EtZjU1MC00NmYwLWFjYzct
Y2QzY2E1OTc1NzEyLzEvcDA4c0REb3VFRV8yRzRjckpyNTB3aUlkeThFLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8wMy85MTNhM2EtZjU1MC00NmYwLWFjYzctY2QzY2E1OTc1NzEy
LzEvSXNTc1BqeEQxdzBGTkp5Qlc2cmRPSzEzWHAwLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMIGYBggrBgEFBQcBBwEB/wSBiDCBhTCBggQCAAEwfAMEAC0M
/gMEAi1aWAMEAC2V8QMEAU9uMAMEAG3O7wMEAI1iBAMEAKsWEgMEAKsWHwMEALnd
QzAMAwQAwRnZAwQAwRnaAwQAwTp4AwQBwd5iAwQAwh/MAwQAwjD4AwQAwjFWAwQA
wjfjMAwDBADCqa0DBADCqa4DBADDsnkwDQYJKoZIhvcNAQELBQADggEBAEllH+FS
wjY+Y2wrcJOCLHBd1SXobM3fZSHrO6kRGz6Z6n8XoJggut3KvdrEtL0xvxcuOyCf
7a5Ls9EDkcBx76Ezhx/TBJDAXoV8vaXt56tvgyvGKKIh1I42KimCRjzNGtY+Q2su
5CX6yg8e72WCDggbuQpf1egdqaR1L9jQOimB0ooqUJZdq5dYDGXQvyZrjNaKzxV7
8xSeqxJKuiuVSs44WTVoxVfXj9eG7NLHi4f/iJK1m62G+oDlyWhwLiIA7N4N5xJV
6DxP2VmWySaVY2TKw2KEJT70Hhwp8ZMB6lgiujk7WKgSP7pORv4pR9ZxLbK2hIQu
Ogj5ZUWOoT2kJfQ=
-----END CERTIFICATE-----
Generated at Thu Jun 6 17:17:19 2024 by rpki-client on console-fra.rpki-client.org