Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/35/aa58c3-e706-4a49-a7c5-0ae2e922a292/1/p33aZGeZM9osP5nQybrRnNBGw9U.roa
File: p33aZGeZM9osP5nQybrRnNBGw9U.roa (raw, json)
Hash identifier: X0VSaRio6ZLt5+tJyJ+AmR8eyO31ieg6CyZeTVI3VSU=
Subject key identifier: A7:7D:DA:64:67:99:33:DA:2C:3F:99:D0:C9:BA:D1:9C:D0:46:C3:D5
Certificate issuer: /CN=368bfb8a5eee49082ea628df25a4a5d50f3aa9b3
Certificate serial: 02EB8C42
Authority key identifier: 36:8B:FB:8A:5E:EE:49:08:2E:A6:28:DF:25:A4:A5:D5:0F:3A:A9:B3
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Nov7il7uSQgupijfJaSl1Q86qbM.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/35/aa58c3-e706-4a49-a7c5-0ae2e922a292/1/p33aZGeZM9osP5nQybrRnNBGw9U.roa
Signing time: Sat 01 Jan 2022 14:57:46 +0000
ROA not before: Sat 01 Jan 2022 14:57:46 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 197518
IP address blocks: 185.225.20.0/22 maxlen: 22
185.251.228.0/22 maxlen: 24
185.194.176.0/22 maxlen: 22
185.108.204.0/22 maxlen: 22
194.5.64.0/22 maxlen: 22
185.255.200.0/22 maxlen: 22
194.146.92.0/23 maxlen: 23
45.90.16.0/22 maxlen: 22
185.218.20.0/22 maxlen: 22
188.95.248.0/21 maxlen: 21
185.250.24.0/22 maxlen: 24
185.221.24.0/22 maxlen: 22
193.58.144.0/22 maxlen: 22
45.147.224.0/22 maxlen: 22
176.125.248.0/22 maxlen: 22
194.147.16.0/23 maxlen: 23
185.214.108.0/22 maxlen: 22
130.193.104.0/21 maxlen: 21
185.36.204.0/22 maxlen: 22
2a03:680::/32 maxlen: 32
Validation: Failed, RFC 3779 resource not subset of parent's resources
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 48991298 (0x2eb8c42)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=368bfb8a5eee49082ea628df25a4a5d50f3aa9b3
Validity
Not Before: Jan 1 14:57:46 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=a77dda64679933da2c3f99d0c9bad19cd046c3d5
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ed:1b:66:2c:ef:3d:99:54:e2:37:4e:f0:7a:29:
ac:f1:89:e6:21:a8:e9:74:eb:ac:a7:3d:b6:1c:d4:
43:20:be:2f:47:d5:d4:ae:40:0b:c3:66:56:c3:6c:
e1:36:ed:4d:ff:b3:9f:25:7f:f9:ec:eb:5f:c5:58:
f5:0b:7b:da:20:b7:ad:31:31:87:fa:80:7b:7b:60:
06:84:9e:92:73:e9:ef:7a:bf:c3:42:4a:e0:56:6b:
76:b9:64:3e:87:7a:75:3a:cc:17:c1:d0:42:b0:66:
a9:4f:22:5a:2d:5f:56:b7:35:c8:19:ec:33:e5:58:
55:b3:ea:ba:6d:32:bf:65:0d:e5:b3:5d:84:1b:6a:
2d:e3:d5:e8:f1:09:75:8d:92:7e:52:f6:bb:d3:88:
59:60:bf:78:51:2c:2e:dc:e5:0c:05:3a:32:28:b5:
dd:fa:48:6d:04:ee:e3:9a:9e:06:60:0c:a6:43:16:
3b:d5:2b:3b:a7:a3:bc:23:7b:35:08:6f:84:69:ba:
b2:76:75:e7:2f:75:ba:18:7e:03:50:a0:dd:2d:e5:
e7:69:cc:fb:52:bc:78:d0:4e:3b:b4:af:d0:28:7e:
cf:2c:42:14:1c:61:70:ed:da:b8:75:2b:e9:22:ae:
33:d4:f9:5f:06:1c:c7:ac:f9:b2:3d:ef:e6:d7:6f:
aa:d5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A7:7D:DA:64:67:99:33:DA:2C:3F:99:D0:C9:BA:D1:9C:D0:46:C3:D5
X509v3 Authority Key Identifier:
keyid:36:8B:FB:8A:5E:EE:49:08:2E:A6:28:DF:25:A4:A5:D5:0F:3A:A9:B3
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Nov7il7uSQgupijfJaSl1Q86qbM.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/35/aa58c3-e706-4a49-a7c5-0ae2e922a292/1/p33aZGeZM9osP5nQybrRnNBGw9U.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/35/aa58c3-e706-4a49-a7c5-0ae2e922a292/1/Nov7il7uSQgupijfJaSl1Q86qbM.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
45.90.16.0/22
45.147.224.0/22
130.193.104.0/21
176.125.248.0/22
185.36.204.0/22
185.108.204.0/22
185.194.176.0/22
185.214.108.0/22
185.218.20.0/22
185.221.24.0/22
185.225.20.0/22
185.250.24.0/22
185.251.228.0/22
185.255.200.0/22
188.95.248.0/21
193.58.144.0/22
194.5.64.0/22
194.146.92.0/23
194.147.16.0/23
IPv6:
2a03:680::/32
Signature Algorithm: sha256WithRSAEncryption
56:c8:47:2a:ae:44:d8:ec:cb:a1:75:29:73:2e:8c:f8:07:83:
ca:b4:54:aa:1b:45:5e:7b:9a:1c:9d:15:1b:49:70:f5:bc:90:
dd:4f:de:a8:fd:c6:8c:e0:f6:c1:3f:24:0c:96:dc:24:94:d1:
a9:a4:8e:c9:79:7f:14:e3:91:43:e0:11:3c:84:69:1d:11:32:
80:c6:12:8d:6c:17:be:ca:39:db:ea:c4:fb:5f:b6:e3:18:15:
8e:a9:da:51:e6:49:f0:fd:09:bb:ac:74:1a:a8:e0:26:53:bd:
b2:f0:61:d9:8d:c4:34:9d:59:16:1b:1f:7b:8b:2b:95:7f:58:
ad:74:fc:ea:7c:8d:14:5e:c7:32:22:5c:c5:8e:00:27:25:0d:
62:2c:90:0e:b3:ca:c5:87:f8:15:a3:cc:25:27:98:cd:75:d0:
3b:c0:c5:ea:a7:0a:2e:9a:ac:07:19:4f:f7:79:13:12:bf:c6:
bf:f6:1c:d8:f1:ac:de:84:14:20:53:1d:76:67:f7:f3:c0:89:
01:4d:4b:e0:23:5f:03:24:ee:44:32:0e:59:8f:90:28:e6:41:
36:da:aa:23:09:c9:60:9d:d7:a8:85:b7:bd:e3:24:c7:5c:a1:
b0:69:99:7c:85:d7:f0:19:7c:3c:49:e3:dc:1f:04:6a:5e:b8:
7e:b6:d5:33
-----BEGIN CERTIFICATE-----
MIIFbTCCBFWgAwIBAgIEAuuMQjANBgkqhkiG9w0BAQsFADAzMTEwLwYDVQQDEygz
NjhiZmI4YTVlZWU0OTA4MmVhNjI4ZGYyNWE0YTVkNTBmM2FhOWIzMB4XDTIyMDEw
MTE0NTc0NloXDTIzMDcwMTAwMDAwMFowMzExMC8GA1UEAxMoYTc3ZGRhNjQ2Nzk5
MzNkYTJjM2Y5OWQwYzliYWQxOWNkMDQ2YzNkNTCCASIwDQYJKoZIhvcNAQEBBQAD
ggEPADCCAQoCggEBAO0bZizvPZlU4jdO8HoprPGJ5iGo6XTrrKc9thzUQyC+L0fV
1K5AC8NmVsNs4TbtTf+znyV/+ezrX8VY9Qt72iC3rTExh/qAe3tgBoSeknPp73q/
w0JK4FZrdrlkPod6dTrMF8HQQrBmqU8iWi1fVrc1yBnsM+VYVbPqum0yv2UN5bNd
hBtqLePV6PEJdY2SflL2u9OIWWC/eFEsLtzlDAU6Mii13fpIbQTu45qeBmAMpkMW
O9UrO6ejvCN7NQhvhGm6snZ15y91uhh+A1Cg3S3l52nM+1K8eNBOO7Sv0Ch+zyxC
FBxhcO3auHUr6SKuM9T5XwYcx6z5sj3v5tdvqtUCAwEAAaOCAocwggKDMB0GA1Ud
DgQWBBSnfdpkZ5kz2iw/mdDJutGc0EbD1TAfBgNVHSMEGDAWgBQ2i/uKXu5JCC6m
KN8lpKXVDzqpszAOBgNVHQ8BAf8EBAMCB4AwZAYIKwYBBQUHAQEEWDBWMFQGCCsG
AQUFBzAChkhyc3luYzovL3Jwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxU
L05vdjdpbDd1U1FndXBpamZKYVNsMVE4NnFiTS5jZXIwgY0GCCsGAQUFBwELBIGA
MH4wfAYIKwYBBQUHMAuGcHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5
L0RFRkFVTFQvMzUvYWE1OGMzLWU3MDYtNGE0OS1hN2M1LTBhZTJlOTIyYTI5Mi8x
L3AzM2FaR2VaTTlvc1A1blF5YnJSbk5CR3c5VS5yb2EwgYEGA1UdHwR6MHgwdqB0
oHKGcHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvMzUv
YWE1OGMzLWU3MDYtNGE0OS1hN2M1LTBhZTJlOTIyYTI5Mi8xL05vdjdpbDd1U1Fn
dXBpamZKYVNsMVE4NnFiTS5jcmwwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjCB
nAYIKwYBBQUHAQcBAf8EgYwwgYkweAQCAAEwcgMEAi1aEAMEAi2T4AMEA4LBaAME
ArB9+AMEArkkzAMEArlszAMEArnCsAMEArnWbAMEArnaFAMEArndGAMEArnhFAME
Arn6GAMEArn75AMEArn/yAMEA7xf+AMEAsE6kAMEAsIFQAMEAcKSXAMEAcKTEDAN
BAIAAjAHAwUAKgMGgDANBgkqhkiG9w0BAQsFAAOCAQEAVshHKq5E2OzLoXUpcy6M
+AeDyrRUqhtFXnuaHJ0VG0lw9byQ3U/eqP3GjOD2wT8kDJbcJJTRqaSOyXl/FOOR
Q+ARPIRpHREygMYSjWwXvso52+rE+1+24xgVjqnaUeZJ8P0Ju6x0GqjgJlO9svBh
2Y3ENJ1ZFhsfe4srlX9YrXT86nyNFF7HMiJcxY4AJyUNYiyQDrPKxYf4FaPMJSeY
zXXQO8DF6qcKLpqsBxlP93kTEr/Gv/Yc2PGs3oQUIFMddmf388CJAU1L4CNfAyTu
RDIOWY+QKOZBNtqqIwnJYJ3XqIW3veMkx1yhsGmZfIXX8Bl8PEnj3B8Eal64frbV
Mw==
-----END CERTIFICATE-----
Generated at Thu Jun 6 19:02:35 2024 by rpki-client on console-ams.rpki-client.org