Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/35/aa58c3-e706-4a49-a7c5-0ae2e922a292/1/X9wQ_8A0PJ00U__SWSms-YvGTUg.roa
File: X9wQ_8A0PJ00U__SWSms-YvGTUg.roa (raw, json)
Hash identifier: w+2mA9xitQw5k4PVlMq7mGpwlBmwhPxDXtvoJUaFXhM=
Subject key identifier: 5F:DC:10:FF:C0:34:3C:9D:34:53:FF:D2:59:29:AC:F9:8B:C6:4D:48
Certificate issuer: /CN=368bfb8a5eee49082ea628df25a4a5d50f3aa9b3
Certificate serial: 03AE6AA0
Authority key identifier: 36:8B:FB:8A:5E:EE:49:08:2E:A6:28:DF:25:A4:A5:D5:0F:3A:A9:B3
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Nov7il7uSQgupijfJaSl1Q86qbM.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/35/aa58c3-e706-4a49-a7c5-0ae2e922a292/1/X9wQ_8A0PJ00U__SWSms-YvGTUg.roa
Signing time: Wed 23 Mar 2022 10:38:33 +0000
ROA not before: Wed 23 Mar 2022 10:38:33 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 197518
IP address blocks: 185.225.20.0/22 maxlen: 22
185.199.212.0/22 maxlen: 24
45.157.208.0/22 maxlen: 22
185.251.228.0/22 maxlen: 24
185.194.176.0/22 maxlen: 22
185.108.204.0/22 maxlen: 22
194.5.64.0/22 maxlen: 22
185.255.200.0/22 maxlen: 22
194.146.92.0/23 maxlen: 23
45.90.16.0/22 maxlen: 22
185.218.20.0/22 maxlen: 22
188.95.248.0/21 maxlen: 21
185.250.24.0/22 maxlen: 24
193.58.144.0/22 maxlen: 22
185.221.24.0/22 maxlen: 22
45.147.224.0/22 maxlen: 22
176.125.248.0/22 maxlen: 22
194.147.16.0/23 maxlen: 23
185.214.108.0/22 maxlen: 22
130.193.104.0/21 maxlen: 21
185.36.204.0/22 maxlen: 22
2a03:680::/32 maxlen: 32
Validation: Failed, RFC 3779 resource not subset of parent's resources
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 61762208 (0x3ae6aa0)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=368bfb8a5eee49082ea628df25a4a5d50f3aa9b3
Validity
Not Before: Mar 23 10:38:33 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=5fdc10ffc0343c9d3453ffd25929acf98bc64d48
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:af:33:a1:48:a2:38:fb:15:10:a4:75:c6:95:a6:
03:c2:d4:36:c6:be:18:7a:c4:d5:c0:67:41:ea:fa:
61:31:77:5e:6f:5d:8e:c6:19:d3:de:00:c6:2b:43:
75:59:57:30:be:2e:cf:24:f7:6a:32:e0:df:c2:4b:
ce:0a:77:d2:82:f1:01:f6:15:56:5f:c1:e2:7c:d6:
2e:ee:9d:56:d9:7b:9b:e5:d6:8d:46:9a:c8:e9:c7:
5b:7b:3a:14:4c:9a:9a:9b:4e:11:2f:da:22:5a:f9:
95:8a:d6:d2:f3:7c:b1:62:da:c9:b8:74:5d:1d:78:
13:61:48:6c:e7:4c:72:5c:33:93:fe:05:35:14:16:
53:46:0f:53:2b:55:37:9a:47:de:43:ce:b1:bc:1f:
82:98:8d:2b:8e:45:e6:b7:77:61:ed:07:62:19:fc:
51:e9:62:2e:26:7f:70:11:ad:fa:0e:a3:d3:f0:a7:
83:18:01:0c:90:7a:5d:cd:d7:41:02:c8:99:d1:98:
cc:c7:26:dd:d1:f0:ea:fd:4c:79:af:fb:79:18:57:
fc:73:c8:ce:26:1c:f7:44:88:38:8f:50:56:9b:73:
65:54:8c:ae:55:d8:10:82:b5:5e:a9:1a:29:c3:8e:
e8:27:01:e9:bf:2e:c3:11:37:2a:bf:ab:92:1d:04:
6b:cd
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
5F:DC:10:FF:C0:34:3C:9D:34:53:FF:D2:59:29:AC:F9:8B:C6:4D:48
X509v3 Authority Key Identifier:
keyid:36:8B:FB:8A:5E:EE:49:08:2E:A6:28:DF:25:A4:A5:D5:0F:3A:A9:B3
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Nov7il7uSQgupijfJaSl1Q86qbM.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/35/aa58c3-e706-4a49-a7c5-0ae2e922a292/1/X9wQ_8A0PJ00U__SWSms-YvGTUg.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/35/aa58c3-e706-4a49-a7c5-0ae2e922a292/1/Nov7il7uSQgupijfJaSl1Q86qbM.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
45.90.16.0/22
45.147.224.0/22
45.157.208.0/22
130.193.104.0/21
176.125.248.0/22
185.36.204.0/22
185.108.204.0/22
185.194.176.0/22
185.199.212.0/22
185.214.108.0/22
185.218.20.0/22
185.221.24.0/22
185.225.20.0/22
185.250.24.0/22
185.251.228.0/22
185.255.200.0/22
188.95.248.0/21
193.58.144.0/22
194.5.64.0/22
194.146.92.0/23
194.147.16.0/23
IPv6:
2a03:680::/32
Signature Algorithm: sha256WithRSAEncryption
c1:11:d2:69:d6:dc:41:2a:1a:b9:63:ef:87:c0:57:10:83:7c:
77:09:4b:ac:6d:90:8f:01:a5:d1:08:58:a0:dd:b6:ce:63:12:
05:ca:bd:26:d0:e6:56:8f:55:9f:11:0e:f1:70:1d:70:7d:b5:
4b:a6:4f:64:1b:99:7f:e5:a6:93:49:ad:d1:54:6f:0f:f2:66:
9f:6e:88:e3:00:f9:16:9e:83:67:74:8b:0c:bb:5c:d7:f3:47:
41:60:60:d9:30:44:57:b3:95:18:bb:bb:29:ac:92:15:0e:a5:
b3:33:96:96:ee:97:68:ff:5b:2f:03:55:99:71:dd:04:26:d1:
2a:96:f1:63:5b:17:2f:f8:40:bb:3b:02:92:90:12:12:86:ad:
49:48:9f:43:d5:14:f5:e5:01:22:76:54:7c:d1:3b:fb:fc:3b:
5f:d4:a8:78:cb:16:06:c1:0b:2d:ce:59:22:1f:c2:d1:21:9f:
a5:0f:e7:f9:d8:40:36:5f:e8:6a:17:87:72:6d:e1:2b:0a:d1:
cb:95:4f:b5:3f:d0:84:c3:f5:c5:43:ea:e2:44:db:bc:2e:a3:
80:c9:8a:17:96:3a:da:9b:52:6a:ad:65:62:d9:2b:3c:51:57:
04:a8:9f:db:17:35:18:02:66:3b:8d:7c:ec:f1:06:d6:69:82:
5e:99:02:be
-----BEGIN CERTIFICATE-----
MIIFejCCBGKgAwIBAgIEA65qoDANBgkqhkiG9w0BAQsFADAzMTEwLwYDVQQDEygz
NjhiZmI4YTVlZWU0OTA4MmVhNjI4ZGYyNWE0YTVkNTBmM2FhOWIzMB4XDTIyMDMy
MzEwMzgzM1oXDTIzMDcwMTAwMDAwMFowMzExMC8GA1UEAxMoNWZkYzEwZmZjMDM0
M2M5ZDM0NTNmZmQyNTkyOWFjZjk4YmM2NGQ0ODCCASIwDQYJKoZIhvcNAQEBBQAD
ggEPADCCAQoCggEBAK8zoUiiOPsVEKR1xpWmA8LUNsa+GHrE1cBnQer6YTF3Xm9d
jsYZ094AxitDdVlXML4uzyT3ajLg38JLzgp30oLxAfYVVl/B4nzWLu6dVtl7m+XW
jUaayOnHW3s6FEyamptOES/aIlr5lYrW0vN8sWLaybh0XR14E2FIbOdMclwzk/4F
NRQWU0YPUytVN5pH3kPOsbwfgpiNK45F5rd3Ye0HYhn8UeliLiZ/cBGt+g6j0/Cn
gxgBDJB6Xc3XQQLImdGYzMcm3dHw6v1Mea/7eRhX/HPIziYc90SIOI9QVptzZVSM
rlXYEIK1XqkaKcOO6CcB6b8uwxE3Kr+rkh0Ea80CAwEAAaOCApQwggKQMB0GA1Ud
DgQWBBRf3BD/wDQ8nTRT/9JZKaz5i8ZNSDAfBgNVHSMEGDAWgBQ2i/uKXu5JCC6m
KN8lpKXVDzqpszAOBgNVHQ8BAf8EBAMCB4AwZAYIKwYBBQUHAQEEWDBWMFQGCCsG
AQUFBzAChkhyc3luYzovL3Jwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxU
L05vdjdpbDd1U1FndXBpamZKYVNsMVE4NnFiTS5jZXIwgY0GCCsGAQUFBwELBIGA
MH4wfAYIKwYBBQUHMAuGcHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5
L0RFRkFVTFQvMzUvYWE1OGMzLWU3MDYtNGE0OS1hN2M1LTBhZTJlOTIyYTI5Mi8x
L1g5d1FfOEEwUEowMFVfX1NXU21zLVl2R1RVZy5yb2EwgYEGA1UdHwR6MHgwdqB0
oHKGcHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvMzUv
YWE1OGMzLWU3MDYtNGE0OS1hN2M1LTBhZTJlOTIyYTI5Mi8xL05vdjdpbDd1U1Fn
dXBpamZKYVNsMVE4NnFiTS5jcmwwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjCB
qQYIKwYBBQUHAQcBAf8EgZkwgZYwgYQEAgABMH4DBAItWhADBAItk+ADBAItndAD
BAOCwWgDBAKwffgDBAK5JMwDBAK5bMwDBAK5wrADBAK5x9QDBAK51mwDBAK52hQD
BAK53RgDBAK54RQDBAK5+hgDBAK5++QDBAK5/8gDBAO8X/gDBALBOpADBALCBUAD
BAHCklwDBAHCkxAwDQQCAAIwBwMFACoDBoAwDQYJKoZIhvcNAQELBQADggEBAMER
0mnW3EEqGrlj74fAVxCDfHcJS6xtkI8BpdEIWKDdts5jEgXKvSbQ5laPVZ8RDvFw
HXB9tUumT2QbmX/lppNJrdFUbw/yZp9uiOMA+Raeg2d0iwy7XNfzR0FgYNkwRFez
lRi7uymskhUOpbMzlpbul2j/Wy8DVZlx3QQm0SqW8WNbFy/4QLs7ApKQEhKGrUlI
n0PVFPXlASJ2VHzRO/v8O1/UqHjLFgbBCy3OWSIfwtEhn6UP5/nYQDZf6GoXh3Jt
4SsK0cuVT7U/0ITD9cVD6uJE27wuo4DJiheWOtqbUmqtZWLZKzxRVwSon9sXNRgC
ZjuNfOzxBtZpgl6ZAr4=
-----END CERTIFICATE-----
Generated at Thu Jun 6 19:02:35 2024 by rpki-client on console-ams.rpki-client.org