Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/03/913a3a-f550-46f0-acc7-cd3ca5975712/1/pT8Kd6pAsa4YgvK_4_2CHKvHY24.roa
File: pT8Kd6pAsa4YgvK_4_2CHKvHY24.roa (raw, json)
Hash identifier: LrgwokWKluDfIg7jh68Iokn7FUx/8EQkHCDV2rKQvG4=
Subject key identifier: A5:3F:0A:77:AA:40:B1:AE:18:82:F2:BF:E3:FD:82:1C:AB:C7:63:6E
Certificate issuer: /CN=22c4ac3e3c43d70d05349c815baadd38ad775e9d
Certificate serial: 1E31F51E
Authority key identifier: 22:C4:AC:3E:3C:43:D7:0D:05:34:9C:81:5B:AA:DD:38:AD:77:5E:9D
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/IsSsPjxD1w0FNJyBW6rdOK13Xp0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/03/913a3a-f550-46f0-acc7-cd3ca5975712/1/pT8Kd6pAsa4YgvK_4_2CHKvHY24.roa
Signing time: Thu 28 Apr 2022 06:15:13 +0000
ROA not before: Thu 28 Apr 2022 06:15:13 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 43561
IP address blocks: 87.120.192.0/24 maxlen: 24
87.120.193.0/24 maxlen: 24
87.121.36.0/24 maxlen: 24
87.121.37.0/24 maxlen: 24
87.121.38.0/24 maxlen: 24
87.121.44.0/22 maxlen: 24
87.121.57.0/24 maxlen: 24
87.121.56.0/24 maxlen: 24
87.121.63.0/24 maxlen: 24
87.121.61.0/24 maxlen: 24
87.121.62.0/24 maxlen: 24
87.121.60.0/24 maxlen: 24
87.120.218.0/23 maxlen: 24
87.120.220.0/23 maxlen: 24
87.120.64.0/24 maxlen: 24
87.120.68.0/24 maxlen: 24
87.120.69.0/24 maxlen: 24
87.120.65.0/24 maxlen: 24
87.120.72.0/21 maxlen: 21
87.120.77.0/24 maxlen: 24
87.120.75.0/24 maxlen: 24
87.120.73.0/24 maxlen: 24
87.120.78.0/24 maxlen: 24
87.120.76.0/24 maxlen: 24
87.120.74.0/24 maxlen: 24
87.120.72.0/24 maxlen: 24
87.120.79.0/24 maxlen: 24
87.120.89.0/24 maxlen: 24
87.120.88.0/24 maxlen: 24
87.120.97.0/24 maxlen: 24
87.120.96.0/24 maxlen: 24
87.120.100.0/22 maxlen: 24
87.120.34.0/24 maxlen: 24
87.120.32.0/24 maxlen: 24
87.120.35.0/24 maxlen: 24
87.120.33.0/24 maxlen: 24
87.120.46.0/24 maxlen: 24
87.120.47.0/24 maxlen: 24
91.92.8.0/21 maxlen: 24
91.92.6.0/24 maxlen: 24
91.92.16.0/24 maxlen: 24
91.92.24.0/22 maxlen: 24
91.92.21.0/24 maxlen: 24
91.92.67.0/24 maxlen: 24
93.123.81.5/32 maxlen: 32
93.123.39.0/24 maxlen: 24
94.156.232.0/21 maxlen: 24
93.123.71.0/24 maxlen: 24
93.123.69.0/24 maxlen: 24
93.123.68.0/22 maxlen: 22
93.123.70.0/24 maxlen: 24
93.123.68.0/24 maxlen: 24
93.123.77.0/24 maxlen: 24
93.123.78.0/24 maxlen: 24
93.123.76.0/24 maxlen: 24
93.123.79.0/24 maxlen: 24
93.123.84.0/24 maxlen: 24
93.123.85.0/24 maxlen: 24
93.123.80.0/23 maxlen: 23
93.123.86.0/24 maxlen: 24
93.123.88.0/21 maxlen: 24
93.123.87.0/24 maxlen: 24
94.156.160.0/23 maxlen: 24
94.156.169.0/24 maxlen: 24
94.156.168.0/24 maxlen: 24
94.156.176.0/21 maxlen: 24
93.123.24.0/24 maxlen: 24
93.123.22.0/24 maxlen: 24
93.123.31.0/24 maxlen: 24
93.123.27.0/24 maxlen: 24
93.123.30.0/24 maxlen: 24
93.123.26.0/24 maxlen: 24
93.123.112.0/24 maxlen: 24
93.123.118.0/24 maxlen: 24
93.123.116.0/24 maxlen: 24
93.123.114.0/24 maxlen: 24
93.123.117.0/24 maxlen: 24
93.123.115.0/24 maxlen: 24
93.123.113.0/24 maxlen: 24
93.123.119.0/24 maxlen: 24
94.156.2.0/24 maxlen: 24
94.156.6.0/24 maxlen: 24
94.156.8.0/24 maxlen: 24
94.156.131.0/24 maxlen: 24
94.156.136.0/21 maxlen: 24
94.156.152.0/24 maxlen: 24
94.156.157.0/24 maxlen: 24
94.156.156.0/24 maxlen: 24
94.156.154.0/23 maxlen: 24
94.156.78.0/24 maxlen: 24
94.156.79.0/24 maxlen: 24
87.121.147.0/24 maxlen: 24
87.121.146.0/24 maxlen: 24
87.121.162.0/23 maxlen: 24
87.121.69.0/24 maxlen: 24
87.121.105.0/24 maxlen: 24
87.121.103.0/24 maxlen: 24
87.121.101.0/24 maxlen: 24
87.121.104.0/24 maxlen: 24
87.121.100.0/24 maxlen: 24
87.121.115.0/24 maxlen: 24
87.121.114.0/24 maxlen: 24
31.13.252.0/24 maxlen: 24
31.13.252.0/22 maxlen: 22
31.13.253.0/24 maxlen: 24
31.13.254.0/24 maxlen: 24
31.13.255.0/24 maxlen: 24
Validation: Failed, RFC 3779 resource not subset of parent's resources
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 506590494 (0x1e31f51e)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=22c4ac3e3c43d70d05349c815baadd38ad775e9d
Validity
Not Before: Apr 28 06:15:13 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=a53f0a77aa40b1ae1882f2bfe3fd821cabc7636e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ce:19:be:4c:f4:df:9c:cc:06:84:a5:c5:ae:6c:
1e:07:95:2c:73:70:05:eb:9c:c9:88:de:de:b7:af:
eb:b1:83:88:c6:41:99:dd:ae:d4:11:77:b9:6a:a4:
72:fd:29:06:ab:c8:b2:6f:72:20:f8:e5:f8:95:a4:
5f:79:e1:9b:8f:c4:9b:b4:cf:1c:c3:8d:36:dd:d3:
61:e5:d8:ef:35:79:ab:96:c2:4e:bf:f1:7f:64:a1:
8a:d0:bc:69:19:34:37:45:2c:46:35:a6:39:44:ed:
eb:b7:91:b8:ba:b9:d3:d8:92:0e:20:ff:d9:62:a7:
40:27:f6:2c:b5:a8:c0:72:82:76:e7:ce:ab:69:59:
7f:91:cb:f6:0f:b9:57:99:7d:1b:63:20:cd:15:28:
79:bc:53:21:86:12:9d:f5:7a:62:4c:f7:dc:a9:ba:
25:ed:b5:cc:a8:95:a5:a0:69:de:f5:cc:4e:9d:80:
2d:21:7f:2b:dc:d8:bc:24:8b:93:45:e0:43:12:35:
3e:11:41:d3:90:81:62:9d:67:6d:14:5b:db:91:a8:
57:bf:6a:34:b9:bb:8d:dc:64:70:01:f5:55:6c:6f:
b1:27:46:44:fc:34:78:d1:2b:9b:16:a6:a1:01:c1:
4b:fd:3d:f0:64:4f:a5:6c:77:3f:67:37:b2:b6:2d:
2e:05
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A5:3F:0A:77:AA:40:B1:AE:18:82:F2:BF:E3:FD:82:1C:AB:C7:63:6E
X509v3 Authority Key Identifier:
keyid:22:C4:AC:3E:3C:43:D7:0D:05:34:9C:81:5B:AA:DD:38:AD:77:5E:9D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/IsSsPjxD1w0FNJyBW6rdOK13Xp0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/03/913a3a-f550-46f0-acc7-cd3ca5975712/1/pT8Kd6pAsa4YgvK_4_2CHKvHY24.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/03/913a3a-f550-46f0-acc7-cd3ca5975712/1/IsSsPjxD1w0FNJyBW6rdOK13Xp0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
31.13.252.0/22
87.120.32.0/22
87.120.46.0/23
87.120.64.0/23
87.120.68.0/23
87.120.72.0/21
87.120.88.0/23
87.120.96.0/23
87.120.100.0/22
87.120.192.0/23
87.120.218.0-87.120.221.255
87.121.36.0-87.121.38.255
87.121.44.0/22
87.121.56.0/23
87.121.60.0/22
87.121.69.0/24
87.121.100.0/23
87.121.103.0-87.121.105.255
87.121.114.0/23
87.121.146.0/23
87.121.162.0/23
91.92.6.0/24
91.92.8.0-91.92.16.255
91.92.21.0/24
91.92.24.0/22
91.92.67.0/24
93.123.22.0/24
93.123.24.0/24
93.123.26.0/23
93.123.30.0/23
93.123.39.0/24
93.123.68.0/22
93.123.76.0-93.123.81.255
93.123.84.0-93.123.95.255
93.123.112.0/21
94.156.2.0/24
94.156.6.0/24
94.156.8.0/24
94.156.78.0/23
94.156.131.0/24
94.156.136.0/21
94.156.152.0/24
94.156.154.0-94.156.157.255
94.156.160.0/23
94.156.168.0/23
94.156.176.0/21
94.156.232.0/21
Signature Algorithm: sha256WithRSAEncryption
ae:78:c7:9d:49:8b:3e:2b:5c:fe:49:3d:54:d9:b4:70:db:25:
0b:56:79:26:df:a9:b3:f6:2a:5c:a6:6e:7f:1b:40:35:45:85:
aa:a8:ec:5e:84:48:5a:4a:9b:40:14:b3:61:25:78:43:7e:c6:
a7:f1:f5:fd:b7:a4:d3:75:97:ec:2e:06:d7:72:e8:0f:41:5b:
31:1f:df:c6:5a:6b:08:47:2b:4c:3c:4c:07:2f:dc:a5:54:52:
ee:18:01:2d:49:b7:26:8c:38:8a:b9:ed:59:66:fd:2c:2f:e1:
7c:41:9b:88:4a:59:1e:70:b5:99:d0:c5:0c:10:ff:8d:3d:f0:
39:61:98:4a:6a:70:e4:f2:bd:85:5c:0a:fc:10:78:f0:81:2d:
9f:63:b6:ec:8d:5b:64:c2:d9:d4:34:e4:c7:a2:37:eb:22:a9:
9d:a6:cd:2b:96:1d:f0:9d:2b:97:46:2f:bc:ce:b1:d7:f5:dc:
aa:c3:ca:01:87:11:7f:73:c3:63:29:2e:ee:6d:76:b7:f1:e7:
1a:ef:e7:cc:d7:a2:c0:1a:c0:4a:4c:df:89:10:93:02:4c:af:
68:2b:b1:c9:61:16:17:ea:a7:7e:ae:7f:c8:a0:74:70:dc:a0:
fe:e8:7c:8c:f4:d8:ff:e1:bc:28:3d:45:e4:02:7c:13:b3:cd:
30:68:41:cb
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 19 23:46:42 2023 by rpki-client on console-ams.rpki-client.org