Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/52/c961a0-4f53-422a-b7dd-3dfa510d6b16/1/I40fqYGkS_JztbaN6u_w00Etol4.roa
File: I40fqYGkS_JztbaN6u_w00Etol4.roa (raw, json)
Hash identifier: HF2X6auH2s14OC36NoRfG++kjlV+uVlmG3B2KUy8nNA=
Subject key identifier: 23:8D:1F:A9:81:A4:4B:F2:73:B5:B6:8D:EA:EF:F0:D3:41:2D:A2:5E
Certificate issuer: /CN=6ddb38b343da2d119309edaa19c7a78870327ebe
Certificate serial: 0181E1441132AAF2F82E494F9B82896F6908
Authority key identifier: 6D:DB:38:B3:43:DA:2D:11:93:09:ED:AA:19:C7:A7:88:70:32:7E:BE
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/bds4s0PaLRGTCe2qGceniHAyfr4.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/52/c961a0-4f53-422a-b7dd-3dfa510d6b16/1/I40fqYGkS_JztbaN6u_w00Etol4.roa
Signing time: Sat 09 Jul 2022 04:42:23 +0000
ROA not before: Sat 09 Jul 2022 04:42:23 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 39650
IP address blocks: 82.97.241.0/24 maxlen: 24
82.97.246.0/24 maxlen: 24
82.97.243.0/24 maxlen: 24
82.97.247.0/24 maxlen: 24
89.38.212.0/24 maxlen: 24
89.38.213.0/24 maxlen: 24
89.38.214.0/24 maxlen: 24
89.38.215.0/24 maxlen: 24
188.212.96.0/22 maxlen: 22
185.239.0.0/24 maxlen: 24
188.240.196.0/24 maxlen: 24
185.3.200.0/24 maxlen: 24
45.94.213.0/24 maxlen: 24
45.94.215.0/24 maxlen: 24
89.46.217.0/24 maxlen: 24
Validation: Failed, RFC 3779 resource not subset of parent's resources
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:81:e1:44:11:32:aa:f2:f8:2e:49:4f:9b:82:89:6f:69:08
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=6ddb38b343da2d119309edaa19c7a78870327ebe
Validity
Not Before: Jul 9 04:42:23 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=238d1fa981a44bf273b5b68deaeff0d3412da25e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:aa:18:3a:d2:82:fe:20:92:b6:c3:37:3a:9c:06:
01:89:0f:4b:b2:e7:a6:29:a9:9a:a8:49:48:b7:d2:
02:76:1a:0f:d5:51:d6:15:46:b0:a6:85:1f:35:46:
f6:29:0f:52:57:a6:63:21:50:68:69:bb:ef:03:cb:
2b:68:ff:d4:2d:87:b8:94:4c:15:c2:b0:b1:e3:57:
2e:65:05:13:88:9e:40:7c:76:32:02:b9:71:20:91:
27:d2:61:28:7c:b3:08:94:54:a2:2d:77:b5:90:55:
13:ce:ee:7b:ee:9f:e9:d8:28:cc:3c:2b:e2:28:09:
79:8b:a9:12:95:69:99:ef:03:be:55:de:15:e8:16:
d5:18:f7:13:ce:5a:bc:ed:e4:79:96:66:4a:61:0c:
0e:33:55:2e:94:e5:52:d4:f7:43:e7:2c:c8:59:78:
26:75:84:a9:19:13:89:00:87:2a:3b:1d:18:b9:2a:
05:99:c9:0b:31:d8:2a:9c:e0:09:30:bc:5e:f9:3c:
52:c9:6c:66:5a:b4:96:db:c3:ed:81:d8:7d:d7:2e:
4a:45:b9:fc:d7:a6:ab:ef:eb:f4:fd:20:ef:c1:58:
bc:6b:bb:2e:cf:35:ac:54:19:0b:c2:80:cd:1e:b3:
e7:3e:fd:16:d0:93:c0:53:08:b4:ad:5d:66:57:1a:
32:e3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
23:8D:1F:A9:81:A4:4B:F2:73:B5:B6:8D:EA:EF:F0:D3:41:2D:A2:5E
X509v3 Authority Key Identifier:
keyid:6D:DB:38:B3:43:DA:2D:11:93:09:ED:AA:19:C7:A7:88:70:32:7E:BE
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/bds4s0PaLRGTCe2qGceniHAyfr4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/52/c961a0-4f53-422a-b7dd-3dfa510d6b16/1/I40fqYGkS_JztbaN6u_w00Etol4.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/52/c961a0-4f53-422a-b7dd-3dfa510d6b16/1/bds4s0PaLRGTCe2qGceniHAyfr4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
45.94.213.0/24
45.94.215.0/24
82.97.241.0/24
82.97.243.0/24
82.97.246.0/23
89.38.212.0/22
89.46.217.0/24
185.3.200.0/24
185.239.0.0/24
188.212.96.0/22
188.240.196.0/24
Signature Algorithm: sha256WithRSAEncryption
5e:8a:8e:b6:ad:08:85:7b:78:f5:61:ec:85:64:3e:c7:70:6c:
17:e6:8b:c0:57:4e:1c:e8:21:0a:a1:24:5c:f4:e5:ec:29:87:
8e:d3:49:20:d7:80:b0:21:d2:60:52:fb:1c:48:bd:03:b4:1e:
a2:64:6c:52:00:99:c0:f3:c1:ab:4f:ff:03:cd:70:06:cc:a6:
da:c5:b3:03:02:2b:b4:4c:85:46:8a:bb:d8:0c:8d:f4:87:d6:
89:b5:f4:2a:fb:ed:b4:bd:fe:16:26:39:87:f8:d1:3c:69:1d:
f7:f1:8d:4c:14:8b:eb:3d:ba:1b:8f:85:44:34:62:19:f4:01:
ae:42:6c:01:6d:c0:dc:4c:ae:54:14:37:4b:a9:bd:aa:2b:34:
7f:56:d9:ff:55:5d:8e:89:24:f8:71:42:cc:f5:ea:aa:90:4a:
08:c3:80:97:ba:eb:38:be:18:4f:e0:10:8c:0d:be:8d:65:71:
c6:33:b4:c8:c1:f0:75:34:41:4b:88:50:6e:e3:55:84:9a:8c:
51:93:f5:2e:fb:07:49:32:7d:b6:36:26:b8:16:25:ab:fe:01:
02:2b:61:f2:ed:6d:0a:02:ff:2a:a3:2b:fa:56:48:27:a8:38:
16:dd:0d:df:8f:ed:8d:c3:75:4b:86:e1:26:87:41:12:10:96:
fc:12:5e:fa
-----BEGIN CERTIFICATE-----
MIIFOTCCBCGgAwIBAgISAYHhRBEyqvL4LklPm4KJb2kIMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDZkZGIzOGIzNDNkYTJkMTE5MzA5ZWRhYTE5YzdhNzg4NzAz
MjdlYmUwHhcNMjIwNzA5MDQ0MjIzWhcNMjMwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EygyMzhkMWZhOTgxYTQ0YmYyNzNiNWI2OGRlYWVmZjBkMzQxMmRhMjVlMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAqhg60oL+IJK2wzc6nAYBiQ9Lsuem
KamaqElIt9ICdhoP1VHWFUawpoUfNUb2KQ9SV6ZjIVBoabvvA8sraP/ULYe4lEwV
wrCx41cuZQUTiJ5AfHYyArlxIJEn0mEofLMIlFSiLXe1kFUTzu577p/p2CjMPCvi
KAl5i6kSlWmZ7wO+Vd4V6BbVGPcTzlq87eR5lmZKYQwOM1UulOVS1PdD5yzIWXgm
dYSpGROJAIcqOx0YuSoFmckLMdgqnOAJMLxe+TxSyWxmWrSW28Ptgdh91y5KRbn8
16ar7+v0/SDvwVi8a7suzzWsVBkLwoDNHrPnPv0W0JPAUwi0rV1mVxoy4wIDAQAB
o4ICRTCCAkEwHQYDVR0OBBYEFCONH6mBpEvyc7W2jerv8NNBLaJeMB8GA1UdIwQY
MBaAFG3bOLND2i0RkwntqhnHp4hwMn6+MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvYmRzNHMwUGFMUkdUQ2UycUdjZW5pSEF5ZnI0LmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC81Mi9jOTYxYTAtNGY1My00MjJhLWI3ZGQt
M2RmYTUxMGQ2YjE2LzEvSTQwZnFZR2tTX0p6dGJhTjZ1X3cwMEV0b2w0LnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC81Mi9jOTYxYTAtNGY1My00MjJhLWI3ZGQtM2RmYTUxMGQ2YjE2
LzEvYmRzNHMwUGFMUkdUQ2UycUdjZW5pSEF5ZnI0LmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMFsGCCsGAQUFBwEHAQH/BEwwSjBIBAIAATBCAwQALV7VAwQA
LV7XAwQAUmHxAwQAUmHzAwQBUmH2AwQCWSbUAwQAWS7ZAwQAuQPIAwQAue8AAwQC
vNRgAwQAvPDEMA0GCSqGSIb3DQEBCwUAA4IBAQBeio62rQiFe3j1YeyFZD7HcGwX
5ovAV04c6CEKoSRc9OXsKYeO00kg14CwIdJgUvscSL0DtB6iZGxSAJnA88GrT/8D
zXAGzKbaxbMDAiu0TIVGirvYDI30h9aJtfQq++20vf4WJjmH+NE8aR338Y1MFIvr
Pbobj4VENGIZ9AGuQmwBbcDcTK5UFDdLqb2qKzR/Vtn/VV2OiST4cULM9eqqkEoI
w4CXuus4vhhP4BCMDb6NZXHGM7TIwfB1NEFLiFBu41WEmoxRk/Uu+wdJMn22Nia4
FiWr/gECK2Hy7W0KAv8qoyv6VkgnqDgW3Q3fj+2Nw3VLhuEmh0ESEJb8El76
-----END CERTIFICATE-----
Generated at Thu Jun 6 17:29:51 2024 by rpki-client on console-fra.rpki-client.org