Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/18/ba2362-0cc5-49bd-a522-4f0e8ce11a7d/1/LCGPX9y728uoybEOzHeh4ruqSvE.roa
File: LCGPX9y728uoybEOzHeh4ruqSvE.roa (raw, json)
Hash identifier: J0Bh9kG2eMenIqszQE/1bkyp/W68dvrBnlvx+nhCiF0=
Subject key identifier: 2C:21:8F:5F:DC:BB:DB:CB:A8:C9:B1:0E:CC:77:A1:E2:BB:AA:4A:F1
Certificate issuer: /CN=d747017564c711bcbd57680a0dfd00f2a5d099db
Certificate serial: 0D7E31FE
Authority key identifier: D7:47:01:75:64:C7:11:BC:BD:57:68:0A:0D:FD:00:F2:A5:D0:99:DB
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/10cBdWTHEby9V2gKDf0A8qXQmds.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/18/ba2362-0cc5-49bd-a522-4f0e8ce11a7d/1/LCGPX9y728uoybEOzHeh4ruqSvE.roa
Signing time: Thu 02 Jun 2022 06:24:20 +0000
ROA not before: Thu 02 Jun 2022 06:24:20 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 1239
IP address blocks: 195.180.128.0/22 maxlen: 24
194.64.89.0/24 maxlen: 24
194.163.192.0/19 maxlen: 24
194.64.92.0/22 maxlen: 22
194.163.96.0/20 maxlen: 24
195.179.100.0/22 maxlen: 22
195.179.108.0/22 maxlen: 22
212.224.16.0/22 maxlen: 22
212.224.24.0/22 maxlen: 22
62.138.64.0/22 maxlen: 22
62.138.72.0/22 maxlen: 22
195.180.224.0/20 maxlen: 24
194.163.64.0/22 maxlen: 22
195.180.192.0/20 maxlen: 24
194.64.152.0/22 maxlen: 22
194.195.32.0/19 maxlen: 24
Validation: Failed, RFC 3779 resource not subset of parent's resources
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 226374142 (0xd7e31fe)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=d747017564c711bcbd57680a0dfd00f2a5d099db
Validity
Not Before: Jun 2 06:24:20 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=2c218f5fdcbbdbcba8c9b10ecc77a1e2bbaa4af1
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c5:d1:0c:13:33:2a:35:c1:a9:51:63:63:1d:b3:
6f:83:77:63:a7:44:09:3a:5e:d3:30:35:84:65:10:
a9:63:c6:4f:51:43:cf:75:52:85:7e:18:7b:bf:43:
fb:ec:93:c3:72:17:41:df:f5:cc:dd:2d:27:ee:9f:
19:4e:6b:39:47:2d:dd:0e:bd:c1:55:b4:e7:93:31:
72:de:18:97:01:fe:31:9f:c4:57:dc:ef:f0:83:e0:
2d:33:55:1e:76:3b:da:62:f5:b0:cf:de:d1:92:57:
c1:95:c1:7d:07:8e:23:e5:c1:98:f9:bf:f0:79:07:
b8:06:7b:d1:7e:88:84:df:43:74:2f:43:6b:04:b2:
94:fd:14:72:e9:59:7a:44:e6:49:f5:4e:6f:55:6e:
b0:aa:ea:60:89:65:0b:2e:d3:e0:ef:92:5e:59:7a:
df:be:c5:68:bc:ab:63:34:7d:ad:60:59:2b:59:7d:
98:77:7f:07:94:8c:05:82:91:d5:2b:17:04:65:2d:
3e:df:50:eb:15:81:d9:6c:56:4e:ca:c0:bf:66:ec:
ce:cc:a2:85:b4:8c:b2:6b:0c:26:51:e0:46:77:53:
65:82:5d:19:52:02:39:00:1c:c5:9d:cd:b9:3c:ee:
b0:a3:6c:0e:a8:ad:fd:77:6c:9e:97:f9:92:b7:28:
1e:03
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
2C:21:8F:5F:DC:BB:DB:CB:A8:C9:B1:0E:CC:77:A1:E2:BB:AA:4A:F1
X509v3 Authority Key Identifier:
keyid:D7:47:01:75:64:C7:11:BC:BD:57:68:0A:0D:FD:00:F2:A5:D0:99:DB
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/10cBdWTHEby9V2gKDf0A8qXQmds.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/18/ba2362-0cc5-49bd-a522-4f0e8ce11a7d/1/LCGPX9y728uoybEOzHeh4ruqSvE.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/18/ba2362-0cc5-49bd-a522-4f0e8ce11a7d/1/10cBdWTHEby9V2gKDf0A8qXQmds.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
62.138.64.0/22
62.138.72.0/22
194.64.89.0/24
194.64.92.0/22
194.64.152.0/22
194.163.64.0/22
194.163.96.0/20
194.163.192.0/19
194.195.32.0/19
195.179.100.0/22
195.179.108.0/22
195.180.128.0/22
195.180.192.0/20
195.180.224.0/20
212.224.16.0/22
212.224.24.0/22
Signature Algorithm: sha256WithRSAEncryption
97:c4:f5:6f:6e:c4:3a:88:0c:f4:55:2f:d5:fe:23:e1:2c:f6:
72:6c:bb:e8:28:03:6f:9f:6e:b1:3c:90:66:dd:a4:fe:07:5c:
87:0e:94:26:3b:7b:f3:cc:7d:f5:f3:61:a2:c3:d8:c1:07:ab:
52:33:f8:98:7d:4b:0e:18:54:66:eb:10:4b:53:da:04:ad:59:
8e:45:f7:4c:6d:6f:c0:9d:e7:51:af:b1:db:c1:71:1c:2c:4a:
42:88:0b:37:63:f8:96:01:56:4a:3a:b2:49:3e:56:10:e2:33:
f1:c6:4f:1c:22:9a:a5:4c:2d:17:84:66:bc:46:3b:16:ea:31:
4f:f7:83:c8:51:2c:f4:1d:11:dc:7f:63:f0:20:82:22:42:8f:
77:78:01:d1:ec:cb:15:16:46:19:a4:25:3b:98:60:b2:4f:f3:
14:f3:a2:00:4d:15:62:85:5f:92:f7:94:12:f5:8c:6e:12:52:
75:f6:42:11:54:88:64:30:e3:70:cc:52:6b:5d:b7:54:40:a1:
9b:98:95:87:d5:0b:63:27:27:bb:9b:d7:d4:dd:07:f6:64:83:
e9:ad:04:a0:a3:fa:1b:62:c9:b2:2b:72:0e:0c:06:11:26:43:
46:fd:b6:6c:f1:2d:78:7e:58:25:5f:02:f6:67:f4:cb:f6:7f:
01:98:dc:06
-----BEGIN CERTIFICATE-----
MIIFSTCCBDGgAwIBAgIEDX4x/jANBgkqhkiG9w0BAQsFADAzMTEwLwYDVQQDEyhk
NzQ3MDE3NTY0YzcxMWJjYmQ1NzY4MGEwZGZkMDBmMmE1ZDA5OWRiMB4XDTIyMDYw
MjA2MjQyMFoXDTIzMDcwMTAwMDAwMFowMzExMC8GA1UEAxMoMmMyMThmNWZkY2Ji
ZGJjYmE4YzliMTBlY2M3N2ExZTJiYmFhNGFmMTCCASIwDQYJKoZIhvcNAQEBBQAD
ggEPADCCAQoCggEBAMXRDBMzKjXBqVFjYx2zb4N3Y6dECTpe0zA1hGUQqWPGT1FD
z3VShX4Ye79D++yTw3IXQd/1zN0tJ+6fGU5rOUct3Q69wVW055Mxct4YlwH+MZ/E
V9zv8IPgLTNVHnY72mL1sM/e0ZJXwZXBfQeOI+XBmPm/8HkHuAZ70X6IhN9DdC9D
awSylP0UculZekTmSfVOb1VusKrqYIllCy7T4O+SXll6377FaLyrYzR9rWBZK1l9
mHd/B5SMBYKR1SsXBGUtPt9Q6xWB2WxWTsrAv2bszsyihbSMsmsMJlHgRndTZYJd
GVICOQAcxZ3NuTzusKNsDqit/Xdsnpf5krcoHgMCAwEAAaOCAmMwggJfMB0GA1Ud
DgQWBBQsIY9f3Lvby6jJsQ7Md6Hiu6pK8TAfBgNVHSMEGDAWgBTXRwF1ZMcRvL1X
aAoN/QDypdCZ2zAOBgNVHQ8BAf8EBAMCB4AwZAYIKwYBBQUHAQEEWDBWMFQGCCsG
AQUFBzAChkhyc3luYzovL3Jwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxU
LzEwY0JkV1RIRWJ5OVYyZ0tEZjBBOHFYUW1kcy5jZXIwgY0GCCsGAQUFBwELBIGA
MH4wfAYIKwYBBQUHMAuGcHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5
L0RFRkFVTFQvMTgvYmEyMzYyLTBjYzUtNDliZC1hNTIyLTRmMGU4Y2UxMWE3ZC8x
L0xDR1BYOXk3Mjh1b3liRU96SGVoNHJ1cVN2RS5yb2EwgYEGA1UdHwR6MHgwdqB0
oHKGcHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvMTgv
YmEyMzYyLTBjYzUtNDliZC1hNTIyLTRmMGU4Y2UxMWE3ZC8xLzEwY0JkV1RIRWJ5
OVYyZ0tEZjBBOHFYUW1kcy5jcmwwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjB5
BggrBgEFBQcBBwEB/wRqMGgwZgQCAAEwYAMEAj6KQAMEAj6KSAMEAMJAWQMEAsJA
XAMEAsJAmAMEAsKjQAMEBMKjYAMEBcKjwAMEBcLDIAMEAsOzZAMEAsOzbAMEAsO0
gAMEBMO0wAMEBMO04AMEAtTgEAMEAtTgGDANBgkqhkiG9w0BAQsFAAOCAQEAl8T1
b27EOogM9FUv1f4j4Sz2cmy76CgDb59usTyQZt2k/gdchw6UJjt788x99fNhosPY
wQerUjP4mH1LDhhUZusQS1PaBK1ZjkX3TG1vwJ3nUa+x28FxHCxKQogLN2P4lgFW
SjqyST5WEOIz8cZPHCKapUwtF4RmvEY7FuoxT/eDyFEs9B0R3H9j8CCCIkKPd3gB
0ezLFRZGGaQlO5hgsk/zFPOiAE0VYoVfkveUEvWMbhJSdfZCEVSIZDDjcMxSa123
VEChm5iVh9ULYycnu5vX1N0H9mSD6a0EoKP6G2LJsityDgwGESZDRv22bPEteH5Y
JV8C9mf0y/Z/AZjcBg==
-----END CERTIFICATE-----
Generated at Wed Jul 19 23:44:42 2023 by rpki-client on console-fra.rpki-client.org