Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/18/ba2362-0cc5-49bd-a522-4f0e8ce11a7d/1/yB-BysZHp4TVHUn5pipwoBdnhnU.roa
File: yB-BysZHp4TVHUn5pipwoBdnhnU.roa (raw, json)
Hash identifier: /LuVmw2YluQhmra6wNsm5D0KGMWE+MKMc0b3S1aBRDo=
Subject key identifier: C8:1F:81:CA:C6:47:A7:84:D5:1D:49:F9:A6:2A:70:A0:17:67:86:75
Certificate issuer: /CN=d747017564c711bcbd57680a0dfd00f2a5d099db
Certificate serial: 0D48091E
Authority key identifier: D7:47:01:75:64:C7:11:BC:BD:57:68:0A:0D:FD:00:F2:A5:D0:99:DB
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/10cBdWTHEby9V2gKDf0A8qXQmds.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/18/ba2362-0cc5-49bd-a522-4f0e8ce11a7d/1/yB-BysZHp4TVHUn5pipwoBdnhnU.roa
Signing time: Tue 17 May 2022 08:03:33 +0000
ROA not before: Tue 17 May 2022 08:03:33 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 1239
IP address blocks: 195.180.128.0/22 maxlen: 24
194.163.192.0/19 maxlen: 24
194.64.92.0/22 maxlen: 22
195.252.160.0/22 maxlen: 24
194.163.96.0/20 maxlen: 24
217.172.168.0/23 maxlen: 24
195.179.100.0/22 maxlen: 22
195.179.108.0/22 maxlen: 22
212.224.16.0/22 maxlen: 22
212.224.24.0/22 maxlen: 22
62.138.64.0/22 maxlen: 22
62.138.72.0/22 maxlen: 22
195.180.224.0/20 maxlen: 24
194.163.64.0/22 maxlen: 22
194.163.80.0/22 maxlen: 22
195.180.192.0/20 maxlen: 24
194.64.152.0/22 maxlen: 22
194.195.32.0/19 maxlen: 24
Validation: Failed, RFC 3779 resource not subset of parent's resources
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 222824734 (0xd48091e)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=d747017564c711bcbd57680a0dfd00f2a5d099db
Validity
Not Before: May 17 08:03:33 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=c81f81cac647a784d51d49f9a62a70a017678675
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ab:16:59:8e:90:21:a7:62:d1:fd:8b:84:f4:14:
c7:8a:22:6c:ca:a3:df:ac:a7:8b:24:87:27:5b:9e:
4b:4c:7c:a3:81:e7:4e:e6:46:04:1a:de:d6:cc:f8:
91:cf:6b:7b:94:b3:b8:46:11:39:f6:a1:7f:bc:3f:
c1:25:80:31:64:3a:54:25:11:87:07:c9:e5:a6:1e:
51:3e:fb:f5:fd:9b:9e:64:93:7c:79:cb:f9:8b:fb:
bc:95:77:5b:e4:23:87:9f:f9:4d:5d:d7:ad:af:1c:
cb:f9:5c:85:a1:08:5e:42:dc:79:03:7c:3c:46:a4:
c4:4d:cf:a6:80:06:99:31:da:f9:6d:18:19:36:21:
85:39:84:6d:15:56:33:91:54:4c:01:88:b7:fb:59:
eb:42:c8:61:e4:08:7f:e3:7e:5e:8a:1b:11:f6:de:
4f:32:8f:6f:06:fc:f9:b1:57:bd:58:a3:f0:b0:25:
ab:aa:6b:ac:5a:f6:6c:d5:b8:84:78:b6:3a:2f:64:
2d:16:fd:02:62:49:9d:5e:7c:b1:34:93:8c:58:ba:
53:ab:76:3c:a0:7c:9f:6f:36:88:28:79:7a:c9:6f:
8f:40:dc:3b:29:a6:7e:18:2e:6f:39:80:11:5c:d9:
4d:bc:d4:7a:2c:cb:e5:c5:9b:40:13:04:92:52:fb:
d5:3b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C8:1F:81:CA:C6:47:A7:84:D5:1D:49:F9:A6:2A:70:A0:17:67:86:75
X509v3 Authority Key Identifier:
keyid:D7:47:01:75:64:C7:11:BC:BD:57:68:0A:0D:FD:00:F2:A5:D0:99:DB
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/10cBdWTHEby9V2gKDf0A8qXQmds.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/18/ba2362-0cc5-49bd-a522-4f0e8ce11a7d/1/yB-BysZHp4TVHUn5pipwoBdnhnU.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/18/ba2362-0cc5-49bd-a522-4f0e8ce11a7d/1/10cBdWTHEby9V2gKDf0A8qXQmds.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
62.138.64.0/22
62.138.72.0/22
194.64.92.0/22
194.64.152.0/22
194.163.64.0/22
194.163.80.0/22
194.163.96.0/20
194.163.192.0/19
194.195.32.0/19
195.179.100.0/22
195.179.108.0/22
195.180.128.0/22
195.180.192.0/20
195.180.224.0/20
195.252.160.0/22
212.224.16.0/22
212.224.24.0/22
217.172.168.0/23
Signature Algorithm: sha256WithRSAEncryption
63:99:94:5d:ca:4c:5c:17:23:74:32:29:12:f7:c4:ce:49:6d:
2b:7c:ce:9f:a6:e3:6f:76:4e:09:42:26:d1:be:52:b8:0a:de:
b5:76:f6:48:1c:bb:71:56:6b:57:b3:df:4e:0a:1d:38:a2:7a:
a6:d3:a9:e3:5b:fe:78:cd:04:61:d7:85:df:e3:1e:26:39:70:
98:b7:87:88:57:3a:78:e2:cb:c4:e8:c1:62:5d:b6:95:ea:40:
46:be:5a:0b:7e:cf:6e:24:97:47:5e:16:7c:05:dc:2c:27:54:
24:47:e5:65:5e:57:8e:92:91:12:6b:21:6f:b9:40:84:5e:be:
49:af:cf:a6:5a:33:43:09:4b:63:6a:aa:07:3c:61:ad:c2:19:
c7:1d:dd:b0:79:ef:f0:25:18:ea:4f:a1:15:6c:ee:c4:01:ce:
7f:12:b2:28:b7:77:2d:bc:fe:dc:22:b7:17:f5:a4:38:bf:70:
bf:bc:ac:72:c8:c8:8e:20:96:43:d1:2b:a4:08:86:67:50:e4:
aa:36:94:9b:05:c7:10:60:c6:32:8a:70:e8:5d:b8:0d:e9:3b:
33:b0:a1:75:ae:c2:fc:6d:bd:aa:58:26:62:87:a0:3e:9d:b8:
69:47:9f:6b:e8:58:a9:e2:31:a4:70:53:ea:1b:32:9d:ba:dc:
a4:61:c9:54
-----BEGIN CERTIFICATE-----
MIIFVjCCBD6gAwIBAgIEDUgJHjANBgkqhkiG9w0BAQsFADAzMTEwLwYDVQQDEyhk
NzQ3MDE3NTY0YzcxMWJjYmQ1NzY4MGEwZGZkMDBmMmE1ZDA5OWRiMB4XDTIyMDUx
NzA4MDMzM1oXDTIzMDcwMTAwMDAwMFowMzExMC8GA1UEAxMoYzgxZjgxY2FjNjQ3
YTc4NGQ1MWQ0OWY5YTYyYTcwYTAxNzY3ODY3NTCCASIwDQYJKoZIhvcNAQEBBQAD
ggEPADCCAQoCggEBAKsWWY6QIadi0f2LhPQUx4oibMqj36yniySHJ1ueS0x8o4Hn
TuZGBBre1sz4kc9re5SzuEYROfahf7w/wSWAMWQ6VCURhwfJ5aYeUT779f2bnmST
fHnL+Yv7vJV3W+Qjh5/5TV3Xra8cy/lchaEIXkLceQN8PEakxE3PpoAGmTHa+W0Y
GTYhhTmEbRVWM5FUTAGIt/tZ60LIYeQIf+N+XoobEfbeTzKPbwb8+bFXvVij8LAl
q6prrFr2bNW4hHi2Oi9kLRb9AmJJnV58sTSTjFi6U6t2PKB8n282iCh5eslvj0Dc
OymmfhgubzmAEVzZTbzUeizL5cWbQBMEklL71TsCAwEAAaOCAnAwggJsMB0GA1Ud
DgQWBBTIH4HKxkenhNUdSfmmKnCgF2eGdTAfBgNVHSMEGDAWgBTXRwF1ZMcRvL1X
aAoN/QDypdCZ2zAOBgNVHQ8BAf8EBAMCB4AwZAYIKwYBBQUHAQEEWDBWMFQGCCsG
AQUFBzAChkhyc3luYzovL3Jwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxU
LzEwY0JkV1RIRWJ5OVYyZ0tEZjBBOHFYUW1kcy5jZXIwgY0GCCsGAQUFBwELBIGA
MH4wfAYIKwYBBQUHMAuGcHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5
L0RFRkFVTFQvMTgvYmEyMzYyLTBjYzUtNDliZC1hNTIyLTRmMGU4Y2UxMWE3ZC8x
L3lCLUJ5c1pIcDRUVkhVbjVwaXB3b0JkbmhuVS5yb2EwgYEGA1UdHwR6MHgwdqB0
oHKGcHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvMTgv
YmEyMzYyLTBjYzUtNDliZC1hNTIyLTRmMGU4Y2UxMWE3ZC8xLzEwY0JkV1RIRWJ5
OVYyZ0tEZjBBOHFYUW1kcy5jcmwwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjCB
hQYIKwYBBQUHAQcBAf8EdjB0MHIEAgABMGwDBAI+ikADBAI+ikgDBALCQFwDBALC
QJgDBALCo0ADBALCo1ADBATCo2ADBAXCo8ADBAXCwyADBALDs2QDBALDs2wDBALD
tIADBATDtMADBATDtOADBALD/KADBALU4BADBALU4BgDBAHZrKgwDQYJKoZIhvcN
AQELBQADggEBAGOZlF3KTFwXI3QyKRL3xM5JbSt8zp+m4292TglCJtG+UrgK3rV2
9kgcu3FWa1ez304KHTiieqbTqeNb/njNBGHXhd/jHiY5cJi3h4hXOnjiy8TowWJd
tpXqQEa+Wgt+z24kl0deFnwF3CwnVCRH5WVeV46SkRJrIW+5QIRevkmvz6ZaM0MJ
S2Nqqgc8Ya3CGccd3bB57/AlGOpPoRVs7sQBzn8Ssii3dy28/twitxf1pDi/cL+8
rHLIyI4glkPRK6QIhmdQ5Ko2lJsFxxBgxjKKcOhduA3pOzOwoXWuwvxtvapYJmKH
oD6duGlHn2voWKniMaRwU+obMp263KRhyVQ=
-----END CERTIFICATE-----
Generated at Wed Jul 19 23:44:42 2023 by rpki-client on console-fra.rpki-client.org