Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/62/43ff8f-cd54-4cf1-8aaf-4be18ef128b4/1/xsD8ab3nt4soXTrzM2sJFmgBE04.roa
File: xsD8ab3nt4soXTrzM2sJFmgBE04.roa (raw, json)
Hash identifier: 4M1hUizEHc2m0RWw4aUmC2fHMXWGbnIFpZRFygO0vcc=
Subject key identifier: C6:C0:FC:69:BD:E7:B7:8B:28:5D:3A:F3:33:6B:09:16:68:01:13:4E
Certificate issuer: /CN=94166b704843d3d9754095c83a91b493828200a2
Certificate serial: 0188DF59628407177828BF23AA58CA46F615
Authority key identifier: 94:16:6B:70:48:43:D3:D9:75:40:95:C8:3A:91:B4:93:82:82:00:A2
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/lBZrcEhD09l1QJXIOpG0k4KCAKI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/62/43ff8f-cd54-4cf1-8aaf-4be18ef128b4/1/xsD8ab3nt4soXTrzM2sJFmgBE04.roa
Signing time: Wed 21 Jun 2023 19:05:57 +0000
ROA not before: Wed 21 Jun 2023 19:05:57 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 834
IP address blocks: 171.22.146.0/24 maxlen: 24
91.103.120.0/21 maxlen: 24
185.235.71.0/24 maxlen: 24
95.111.128.0/20 maxlen: 20
95.111.144.0/20 maxlen: 20
185.149.12.0/23 maxlen: 24
185.149.13.0/24 maxlen: 24
185.149.14.0/23 maxlen: 24
89.46.96.0/22 maxlen: 24
89.46.96.0/24 maxlen: 24
Validation: Failed, RFC 3779 resource not subset of parent's resources
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:88:df:59:62:84:07:17:78:28:bf:23:aa:58:ca:46:f6:15
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=94166b704843d3d9754095c83a91b493828200a2
Validity
Not Before: Jun 21 19:05:57 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=c6c0fc69bde7b78b285d3af3336b09166801134e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9c:62:32:85:21:d7:38:ae:71:dc:c1:2c:ca:ef:
7f:6c:4f:bc:21:8f:15:91:0a:1a:4f:57:56:54:b5:
13:1d:43:59:02:91:30:c7:86:35:48:09:a1:1b:5c:
5d:a4:57:d2:78:33:b9:9b:5d:ec:1c:6c:fa:cc:03:
47:8b:68:e3:37:b4:99:45:b4:af:a3:8f:55:44:3c:
71:e7:22:34:0b:87:41:f7:82:b7:f7:4f:93:22:7b:
bc:49:28:c4:14:49:61:90:e5:91:3d:b2:a2:97:1a:
8a:98:cf:0e:ec:e0:64:5a:aa:a6:53:83:cf:64:95:
ec:c6:22:7f:d7:a9:b2:2d:09:9f:71:68:b8:bf:e0:
e1:e1:d6:c7:22:1b:f9:86:c0:07:a9:34:03:7d:b2:
15:89:6b:34:b5:c7:fd:27:19:61:90:2c:2d:24:01:
b3:f2:a9:31:ad:49:75:ed:05:9c:90:d2:fd:e6:cd:
41:c5:b3:3d:86:5f:10:ed:11:60:c2:f2:28:02:db:
26:25:ab:b5:9f:dd:fa:e3:48:fd:a8:ca:86:e6:51:
78:cc:51:48:e2:8e:8c:d3:27:8b:05:d9:3e:5e:89:
60:a2:a3:ef:24:ec:b3:5b:b8:35:78:5a:b9:38:3e:
4f:e7:13:56:f9:a4:56:11:08:e5:fa:ba:73:8f:ac:
2a:73
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C6:C0:FC:69:BD:E7:B7:8B:28:5D:3A:F3:33:6B:09:16:68:01:13:4E
X509v3 Authority Key Identifier:
keyid:94:16:6B:70:48:43:D3:D9:75:40:95:C8:3A:91:B4:93:82:82:00:A2
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/lBZrcEhD09l1QJXIOpG0k4KCAKI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/62/43ff8f-cd54-4cf1-8aaf-4be18ef128b4/1/xsD8ab3nt4soXTrzM2sJFmgBE04.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/62/43ff8f-cd54-4cf1-8aaf-4be18ef128b4/1/lBZrcEhD09l1QJXIOpG0k4KCAKI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
89.46.96.0/22
91.103.120.0/21
95.111.128.0/19
171.22.146.0/24
185.149.12.0/22
185.235.71.0/24
Signature Algorithm: sha256WithRSAEncryption
31:eb:3d:33:dc:d9:83:20:19:32:d4:76:4e:88:d9:0e:e3:57:
82:40:0f:91:55:12:46:4f:15:45:da:19:06:e1:80:02:07:5d:
06:6b:34:fb:67:4f:26:fc:8d:c1:49:d6:74:ac:80:c7:53:68:
91:3e:06:ce:0f:40:e6:f0:43:46:df:67:72:4a:34:13:96:d3:
f3:8f:a5:7f:f6:f8:02:3c:57:3d:48:8f:01:db:7a:57:e9:46:
39:a2:5d:9c:63:7d:7b:cb:e8:1c:8c:b9:b9:79:09:6a:f5:d6:
8d:9e:a3:72:0b:85:a0:ff:05:0b:26:56:b3:d7:9d:fd:a1:f1:
b7:4e:62:91:35:7d:25:02:12:d8:6a:9b:93:3a:af:ce:26:eb:
a6:76:79:07:ea:f5:b8:0e:02:99:87:71:f6:4b:8a:ce:99:66:
d4:3e:90:dc:34:fa:fd:b7:eb:a3:ee:90:05:1a:91:d9:04:11:
b6:74:e8:93:8a:f4:80:15:0c:00:2f:06:e4:43:20:d7:f6:7e:
87:15:8f:ef:f3:86:25:44:21:09:f1:df:40:29:6b:68:a2:6c:
86:d2:7e:53:f3:14:ca:a5:ce:84:67:2e:c7:9b:b1:ee:01:bc:
b0:da:78:71:ae:c2:c7:98:03:05:c7:8a:74:21:24:12:2b:f0:
39:d6:cf:5a
-----BEGIN CERTIFICATE-----
MIIFGzCCBAOgAwIBAgISAYjfWWKEBxd4KL8jqljKRvYVMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDk0MTY2YjcwNDg0M2QzZDk3NTQwOTVjODNhOTFiNDkzODI4
MjAwYTIwHhcNMjMwNjIxMTkwNTU3WhcNMjQwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EyhjNmMwZmM2OWJkZTdiNzhiMjg1ZDNhZjMzMzZiMDkxNjY4MDExMzRlMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAnGIyhSHXOK5x3MEsyu9/bE+8IY8V
kQoaT1dWVLUTHUNZApEwx4Y1SAmhG1xdpFfSeDO5m13sHGz6zANHi2jjN7SZRbSv
o49VRDxx5yI0C4dB94K390+TInu8SSjEFElhkOWRPbKilxqKmM8O7OBkWqqmU4PP
ZJXsxiJ/16myLQmfcWi4v+Dh4dbHIhv5hsAHqTQDfbIViWs0tcf9JxlhkCwtJAGz
8qkxrUl17QWckNL95s1BxbM9hl8Q7RFgwvIoAtsmJau1n93640j9qMqG5lF4zFFI
4o6M0yeLBdk+XolgoqPvJOyzW7g1eFq5OD5P5xNW+aRWEQjl+rpzj6wqcwIDAQAB
o4ICJzCCAiMwHQYDVR0OBBYEFMbA/Gm957eLKF068zNrCRZoARNOMB8GA1UdIwQY
MBaAFJQWa3BIQ9PZdUCVyDqRtJOCggCiMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvbEJacmNFaEQwOWwxUUpYSU9wRzBrNEtDQUtJLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC82Mi80M2ZmOGYtY2Q1NC00Y2YxLThhYWYt
NGJlMThlZjEyOGI0LzEveHNEOGFiM250NHNvWFRyek0yc0pGbWdCRTA0LnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC82Mi80M2ZmOGYtY2Q1NC00Y2YxLThhYWYtNGJlMThlZjEyOGI0
LzEvbEJacmNFaEQwOWwxUUpYSU9wRzBrNEtDQUtJLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMD0GCCsGAQUFBwEHAQH/BC4wLDAqBAIAATAkAwQCWS5gAwQD
W2d4AwQFX2+AAwQAqxaSAwQCuZUMAwQAuetHMA0GCSqGSIb3DQEBCwUAA4IBAQAx
6z0z3NmDIBky1HZOiNkO41eCQA+RVRJGTxVF2hkG4YACB10GazT7Z08m/I3BSdZ0
rIDHU2iRPgbOD0Dm8ENG32dySjQTltPzj6V/9vgCPFc9SI8B23pX6UY5ol2cY317
y+gcjLm5eQlq9daNnqNyC4Wg/wULJlaz1539ofG3TmKRNX0lAhLYapuTOq/OJuum
dnkH6vW4DgKZh3H2S4rOmWbUPpDcNPr9t+uj7pAFGpHZBBG2dOiTivSAFQwALwbk
QyDX9n6HFY/v84YlRCEJ8d9AKWtoomyG0n5T8xTKpc6EZy7Hm7HuAbyw2nhxrsLH
mAMFx4p0ISQSK/A51s9a
-----END CERTIFICATE-----
Generated at Thu Jul 20 00:00:42 2023 by rpki-client on console-ams.rpki-client.org