Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/70/405bbd-5913-4e95-8e75-fe0659176a56/1/VS_waQ61Zt2f15AEquXMkUrfZfM.roa
File: VS_waQ61Zt2f15AEquXMkUrfZfM.roa (raw, json)
Hash identifier: xvnkrgOlMqEsPJR/fk+fOAgdtG5E46F9/kpzcaNRNko=
Subject key identifier: 55:2F:F0:69:0E:B5:66:DD:9F:D7:90:04:AA:E5:CC:91:4A:DF:65:F3
Certificate issuer: /CN=2ac3daa1b14850f2e61c592b2191915a5e65a478
Certificate serial: 13CA2C6F
Authority key identifier: 2A:C3:DA:A1:B1:48:50:F2:E6:1C:59:2B:21:91:91:5A:5E:65:A4:78
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/KsPaobFIUPLmHFkrIZGRWl5lpHg.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/70/405bbd-5913-4e95-8e75-fe0659176a56/1/VS_waQ61Zt2f15AEquXMkUrfZfM.roa
Signing time: Fri 18 Feb 2022 02:40:36 +0000
ROA not before: Fri 18 Feb 2022 02:40:36 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 31732
IP address blocks: 212.90.100.0/22 maxlen: 24
185.220.236.0/22 maxlen: 24
45.139.6.0/23 maxlen: 24
193.36.72.0/23 maxlen: 23
46.249.97.0/24 maxlen: 24
46.249.98.0/23 maxlen: 23
46.249.104.0/21 maxlen: 21
46.249.100.0/22 maxlen: 22
46.249.112.0/21 maxlen: 21
188.209.155.0/24 maxlen: 24
82.115.0.0/21 maxlen: 24
185.59.114.0/23 maxlen: 24
185.129.108.0/22 maxlen: 24
Validation: Failed, RFC 3779 resource not subset of parent's resources
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 332016751 (0x13ca2c6f)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2ac3daa1b14850f2e61c592b2191915a5e65a478
Validity
Not Before: Feb 18 02:40:36 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=552ff0690eb566dd9fd79004aae5cc914adf65f3
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d5:76:3f:86:c3:e0:2d:d3:fe:3a:9e:6f:ea:7d:
58:7c:1b:c6:6a:7c:51:f1:c5:a4:3e:ad:0e:df:94:
4c:73:16:70:b9:88:76:aa:eb:85:fd:2f:41:1a:31:
a3:59:97:73:32:33:42:3b:2f:16:a1:8d:14:07:38:
9e:4c:ff:3c:38:77:0a:4d:ba:f4:85:4d:90:ff:80:
8e:11:7b:65:20:d6:9b:7e:cf:e2:7b:53:6a:98:69:
dc:43:b9:a0:18:51:9d:6d:60:1b:d7:45:3d:67:00:
5a:30:c6:3b:23:70:bc:b5:0a:d3:08:da:53:bd:df:
8a:81:d5:3d:48:69:93:ad:c5:6d:a2:2e:b9:0e:30:
88:d8:91:2b:b6:42:e6:d5:bc:1d:e0:13:ed:f9:ec:
b8:e9:de:a3:4e:fc:00:a7:2e:b9:1e:b7:34:02:8a:
bf:ed:1a:df:6a:7f:de:4d:e2:e6:61:ee:24:8b:5f:
36:6d:f5:fb:fb:3e:df:b5:da:54:47:f7:9c:23:5a:
b2:a0:d3:0b:2b:8a:04:36:03:7e:04:f3:cd:3f:19:
dd:e7:0f:ee:ef:ef:10:56:36:b6:be:dc:40:d2:b4:
be:e0:d0:cf:9e:e4:0a:90:04:a8:d9:0b:fe:f3:9d:
0e:82:6c:a7:71:bd:6b:48:ff:d0:bd:a3:fe:d1:7f:
56:2f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
55:2F:F0:69:0E:B5:66:DD:9F:D7:90:04:AA:E5:CC:91:4A:DF:65:F3
X509v3 Authority Key Identifier:
keyid:2A:C3:DA:A1:B1:48:50:F2:E6:1C:59:2B:21:91:91:5A:5E:65:A4:78
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/KsPaobFIUPLmHFkrIZGRWl5lpHg.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/70/405bbd-5913-4e95-8e75-fe0659176a56/1/VS_waQ61Zt2f15AEquXMkUrfZfM.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/70/405bbd-5913-4e95-8e75-fe0659176a56/1/KsPaobFIUPLmHFkrIZGRWl5lpHg.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
45.139.6.0/23
46.249.97.0-46.249.119.255
82.115.0.0/21
185.59.114.0/23
185.129.108.0/22
185.220.236.0/22
188.209.155.0/24
193.36.72.0/23
212.90.100.0/22
Signature Algorithm: sha256WithRSAEncryption
2f:f5:4c:9a:4f:e3:ca:61:39:97:6b:07:f5:ab:76:0e:e2:0d:
90:2f:dd:0b:a2:3c:d1:d9:7f:9f:5c:14:d2:0c:0b:69:cf:e8:
c4:0c:db:31:2d:2f:69:69:32:e5:8d:31:0f:df:41:16:aa:b7:
b3:dc:b5:7e:be:09:d3:ba:79:b0:a2:89:5b:88:0d:8c:f3:90:
8d:94:93:37:35:6e:28:e7:84:ae:f5:ef:fb:4d:94:24:35:33:
b8:e5:96:af:7e:6f:ee:88:83:51:87:f5:6d:95:b0:15:61:30:
67:af:bb:4f:83:34:49:9f:90:a1:15:13:cf:1f:f2:50:a2:ee:
c2:49:15:21:98:8e:13:e8:c4:53:e7:6c:36:bd:50:e3:13:f6:
47:9f:74:c8:4b:25:12:e2:62:b4:da:94:c4:d0:f6:38:cd:9b:
af:77:0f:0e:51:3b:6a:f0:bf:49:b0:28:a2:bb:3c:8c:30:37:
eb:ed:94:b0:04:82:12:c5:d6:8a:b0:53:a6:2f:0f:b0:fe:4f:
15:f7:4e:20:b9:31:b8:d7:26:24:c4:24:8c:32:b9:79:82:88:
e1:48:f4:04:34:ee:bc:bf:32:46:d5:f0:0a:cf:9f:17:07:01:
04:17:dd:8f:fe:4a:c7:66:d0:2b:e7:64:5f:ed:e3:b3:da:f4:
21:4a:83:e0
-----BEGIN CERTIFICATE-----
MIIFJzCCBA+gAwIBAgIEE8osbzANBgkqhkiG9w0BAQsFADAzMTEwLwYDVQQDEygy
YWMzZGFhMWIxNDg1MGYyZTYxYzU5MmIyMTkxOTE1YTVlNjVhNDc4MB4XDTIyMDIx
ODAyNDAzNloXDTIzMDcwMTAwMDAwMFowMzExMC8GA1UEAxMoNTUyZmYwNjkwZWI1
NjZkZDlmZDc5MDA0YWFlNWNjOTE0YWRmNjVmMzCCASIwDQYJKoZIhvcNAQEBBQAD
ggEPADCCAQoCggEBANV2P4bD4C3T/jqeb+p9WHwbxmp8UfHFpD6tDt+UTHMWcLmI
dqrrhf0vQRoxo1mXczIzQjsvFqGNFAc4nkz/PDh3Ck269IVNkP+AjhF7ZSDWm37P
4ntTaphp3EO5oBhRnW1gG9dFPWcAWjDGOyNwvLUK0wjaU73fioHVPUhpk63FbaIu
uQ4wiNiRK7ZC5tW8HeAT7fnsuOneo078AKcuuR63NAKKv+0a32p/3k3i5mHuJItf
Nm31+/s+37XaVEf3nCNasqDTCyuKBDYDfgTzzT8Z3ecP7u/vEFY2tr7cQNK0vuDQ
z57kCpAEqNkL/vOdDoJsp3G9a0j/0L2j/tF/Vi8CAwEAAaOCAkEwggI9MB0GA1Ud
DgQWBBRVL/BpDrVm3Z/XkASq5cyRSt9l8zAfBgNVHSMEGDAWgBQqw9qhsUhQ8uYc
WSshkZFaXmWkeDAOBgNVHQ8BAf8EBAMCB4AwZAYIKwYBBQUHAQEEWDBWMFQGCCsG
AQUFBzAChkhyc3luYzovL3Jwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxU
L0tzUGFvYkZJVVBMbUhGa3JJWkdSV2w1bHBIZy5jZXIwgY0GCCsGAQUFBwELBIGA
MH4wfAYIKwYBBQUHMAuGcHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5
L0RFRkFVTFQvNzAvNDA1YmJkLTU5MTMtNGU5NS04ZTc1LWZlMDY1OTE3NmE1Ni8x
L1ZTX3dhUTYxWnQyZjE1QUVxdVhNa1VyZlpmTS5yb2EwgYEGA1UdHwR6MHgwdqB0
oHKGcHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvNzAv
NDA1YmJkLTU5MTMtNGU5NS04ZTc1LWZlMDY1OTE3NmE1Ni8xL0tzUGFvYkZJVVBM
bUhGa3JJWkdSV2w1bHBIZy5jcmwwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjBX
BggrBgEFBQcBBwEB/wRIMEYwRAQCAAEwPgMEAS2LBjAMAwQALvlhAwQDLvlwAwQD
UnMAAwQBuTtyAwQCuYFsAwQCudzsAwQAvNGbAwQBwSRIAwQC1FpkMA0GCSqGSIb3
DQEBCwUAA4IBAQAv9UyaT+PKYTmXawf1q3YO4g2QL90LojzR2X+fXBTSDAtpz+jE
DNsxLS9paTLljTEP30EWqrez3LV+vgnTunmwoolbiA2M85CNlJM3NW4o54Su9e/7
TZQkNTO45Zavfm/uiINRh/VtlbAVYTBnr7tPgzRJn5ChFRPPH/JQou7CSRUhmI4T
6MRT52w2vVDjE/ZHn3TISyUS4mK02pTE0PY4zZuvdw8OUTtq8L9JsCiiuzyMMDfr
7ZSwBIISxdaKsFOmLw+w/k8V904guTG41yYkxCSMMrl5gojhSPQENO68vzJG1fAK
z58XBwEEF92P/krHZtAr52Rf7eOz2vQhSoPg
-----END CERTIFICATE-----
Generated at Thu Jul 20 00:01:24 2023 by rpki-client on console-ams.rpki-client.org