Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/97/16b8e4-1253-4d9e-bd49-fc37fb0cd43b/1/cZwb2JjqIrx9LrXjjbx66lHjLFg.roa
File: cZwb2JjqIrx9LrXjjbx66lHjLFg.roa (raw, json)
Hash identifier: VMPwCTagTEYQGW1iK8pdvMx8onf0n37vDwiLkxf8fGg=
Subject key identifier: 71:9C:1B:D8:98:EA:22:BC:7D:2E:B5:E3:8D:BC:7A:EA:51:E3:2C:58
Certificate issuer: /CN=6c03a2caf298019fbd668621516c8c6e1d10e83c
Certificate serial: 018515E3DF8D6F433E90D6966593C66B9D06
Authority key identifier: 6C:03:A2:CA:F2:98:01:9F:BD:66:86:21:51:6C:8C:6E:1D:10:E8:3C
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/bAOiyvKYAZ-9ZoYhUWyMbh0Q6Dw.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/97/16b8e4-1253-4d9e-bd49-fc37fb0cd43b/1/cZwb2JjqIrx9LrXjjbx66lHjLFg.roa
Signing time: Thu 15 Dec 2022 13:05:33 +0000
ROA not before: Thu 15 Dec 2022 13:05:33 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 203020
IP address blocks: 91.132.114.0/23 maxlen: 32
103.53.82.0/23 maxlen: 32
193.28.237.0/24 maxlen: 32
45.114.8.0/22 maxlen: 32
45.114.12.0/22 maxlen: 32
193.28.182.0/24 maxlen: 32
193.28.191.0/24 maxlen: 32
170.245.40.0/22 maxlen: 32
193.28.202.0/24 maxlen: 32
168.205.72.0/22 maxlen: 32
103.240.180.0/22 maxlen: 32
103.53.216.0/22 maxlen: 32
193.19.204.0/24 maxlen: 24
193.19.205.0/24 maxlen: 32
193.19.206.0/24 maxlen: 32
193.19.207.0/24 maxlen: 32
45.66.48.0/22 maxlen: 32
45.145.104.0/22 maxlen: 32
Validation: Failed, RFC 3779 resource not subset of parent's resources
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:85:15:e3:df:8d:6f:43:3e:90:d6:96:65:93:c6:6b:9d:06
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=6c03a2caf298019fbd668621516c8c6e1d10e83c
Validity
Not Before: Dec 15 13:05:33 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=719c1bd898ea22bc7d2eb5e38dbc7aea51e32c58
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d0:94:c5:37:99:c5:fb:24:04:d4:f6:01:de:75:
af:32:af:b1:cb:19:c9:d6:8a:49:2f:df:7e:7c:e4:
16:2e:88:40:c6:ae:9c:67:d0:20:02:95:44:32:38:
0f:b0:ac:75:37:be:a0:ad:4b:ce:4c:69:af:e0:0c:
63:18:d3:3d:7f:64:b4:d3:8c:35:51:c5:29:7b:f1:
cb:5e:af:79:c8:cb:3e:19:04:e1:c0:94:93:f5:b1:
41:e2:3f:04:7a:aa:60:f7:86:3a:12:3d:da:13:f6:
37:e5:d9:d7:26:41:5e:98:30:10:5a:c3:fd:04:fe:
10:f9:a8:01:af:e6:5d:74:0d:4e:0d:c4:17:0e:58:
92:ff:7d:16:4f:f7:25:b4:63:7f:b4:11:99:fe:a8:
67:3b:b7:f9:9c:92:b3:6b:d0:a3:3a:c2:1d:bf:ff:
83:fd:8e:5c:e0:9a:cc:d7:4e:e9:02:62:84:f1:82:
4c:23:89:2c:3b:3e:cc:29:77:a0:ad:8e:3d:2e:9f:
7a:94:e6:ff:e4:b8:6f:f7:b4:a9:a8:1e:0c:1b:a1:
c9:b3:c1:37:35:98:60:8e:47:7c:c4:6d:d7:59:31:
fe:ca:ee:a2:91:fd:18:e0:b5:25:e0:ba:a4:c4:4e:
01:d6:9a:f6:de:ef:60:3d:24:e0:02:ee:40:f0:27:
17:3d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
71:9C:1B:D8:98:EA:22:BC:7D:2E:B5:E3:8D:BC:7A:EA:51:E3:2C:58
X509v3 Authority Key Identifier:
keyid:6C:03:A2:CA:F2:98:01:9F:BD:66:86:21:51:6C:8C:6E:1D:10:E8:3C
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/bAOiyvKYAZ-9ZoYhUWyMbh0Q6Dw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/97/16b8e4-1253-4d9e-bd49-fc37fb0cd43b/1/cZwb2JjqIrx9LrXjjbx66lHjLFg.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/97/16b8e4-1253-4d9e-bd49-fc37fb0cd43b/1/bAOiyvKYAZ-9ZoYhUWyMbh0Q6Dw.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
45.66.48.0/22
45.114.8.0/21
45.145.104.0/22
91.132.114.0/23
103.53.82.0/23
103.53.216.0/22
103.240.180.0/22
168.205.72.0/22
170.245.40.0/22
193.19.204.0/22
193.28.182.0/24
193.28.191.0/24
193.28.202.0/24
193.28.237.0/24
Signature Algorithm: sha256WithRSAEncryption
55:c5:89:12:b5:86:f4:33:5b:eb:73:01:d2:70:d1:0a:9e:3b:
f8:af:62:fe:23:c2:2a:66:74:6e:7e:87:b2:7f:3d:49:f6:3d:
93:f5:34:3f:80:29:61:25:5a:f7:53:6b:47:42:f1:91:22:77:
88:d6:50:c0:ba:c7:4e:f7:30:65:77:fd:6d:63:86:1f:98:b7:
9c:a3:af:2c:4f:7e:ab:76:a6:18:14:8c:ec:de:55:91:e3:59:
51:9e:df:52:8f:b7:a9:b0:4e:63:c7:52:4a:f1:79:74:4e:16:
e6:5d:73:25:f4:ce:4e:5e:1e:86:d3:c4:06:1c:e6:4e:66:f5:
3a:a2:c7:2a:de:1f:4e:e1:20:86:a5:27:b2:e1:c8:b2:8d:88:
3f:9e:fe:7b:67:f4:d2:15:a8:e6:8e:c5:46:f8:f4:29:6a:62:
14:9e:2d:e6:57:e6:92:98:0d:d5:0e:f4:cc:8d:e1:ac:70:aa:
6c:05:75:0a:56:29:e1:4a:96:29:42:be:9a:20:48:df:f7:ae:
79:de:8f:bd:71:92:93:d7:7b:36:b2:40:e2:d2:79:9a:46:65:
1b:66:b9:fd:08:0d:8c:5b:a8:58:4f:a5:a6:16:4e:62:4d:f6:
36:67:76:92:28:d8:34:8b:11:4a:2b:07:cd:b9:66:29:66:a9:
7d:8e:c0:3f
-----BEGIN CERTIFICATE-----
MIIFSzCCBDOgAwIBAgISAYUV49+Nb0M+kNaWZZPGa50GMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDZjMDNhMmNhZjI5ODAxOWZiZDY2ODYyMTUxNmM4YzZlMWQx
MGU4M2MwHhcNMjIxMjE1MTMwNTMzWhcNMjMwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
Eyg3MTljMWJkODk4ZWEyMmJjN2QyZWI1ZTM4ZGJjN2FlYTUxZTMyYzU4MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA0JTFN5nF+yQE1PYB3nWvMq+xyxnJ
1opJL99+fOQWLohAxq6cZ9AgApVEMjgPsKx1N76grUvOTGmv4AxjGNM9f2S004w1
UcUpe/HLXq95yMs+GQThwJST9bFB4j8Eeqpg94Y6Ej3aE/Y35dnXJkFemDAQWsP9
BP4Q+agBr+ZddA1ODcQXDliS/30WT/cltGN/tBGZ/qhnO7f5nJKza9CjOsIdv/+D
/Y5c4JrM107pAmKE8YJMI4ksOz7MKXegrY49Lp96lOb/5Lhv97SpqB4MG6HJs8E3
NZhgjkd8xG3XWTH+yu6ikf0Y4LUl4LqkxE4B1pr23u9gPSTgAu5A8CcXPQIDAQAB
o4ICVzCCAlMwHQYDVR0OBBYEFHGcG9iY6iK8fS614428eupR4yxYMB8GA1UdIwQY
MBaAFGwDosrymAGfvWaGIVFsjG4dEOg8MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvYkFPaXl2S1lBWi05Wm9ZaFVXeU1iaDBRNkR3LmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC85Ny8xNmI4ZTQtMTI1My00ZDllLWJkNDkt
ZmMzN2ZiMGNkNDNiLzEvY1p3YjJKanFJcng5THJYampieDY2bEhqTEZnLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC85Ny8xNmI4ZTQtMTI1My00ZDllLWJkNDktZmMzN2ZiMGNkNDNi
LzEvYkFPaXl2S1lBWi05Wm9ZaFVXeU1iaDBRNkR3LmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMG0GCCsGAQUFBwEHAQH/BF4wXDBaBAIAATBUAwQCLUIwAwQD
LXIIAwQCLZFoAwQBW4RyAwQBZzVSAwQCZzXYAwQCZ/C0AwQCqM1IAwQCqvUoAwQC
wRPMAwQAwRy2AwQAwRy/AwQAwRzKAwQAwRztMA0GCSqGSIb3DQEBCwUAA4IBAQBV
xYkStYb0M1vrcwHScNEKnjv4r2L+I8IqZnRufoeyfz1J9j2T9TQ/gClhJVr3U2tH
QvGRIneI1lDAusdO9zBld/1tY4YfmLeco68sT36rdqYYFIzs3lWR41lRnt9Sj7ep
sE5jx1JK8Xl0ThbmXXMl9M5OXh6G08QGHOZOZvU6oscq3h9O4SCGpSey4ciyjYg/
nv57Z/TSFajmjsVG+PQpamIUni3mV+aSmA3VDvTMjeGscKpsBXUKVinhSpYpQr6a
IEjf96553o+9cZKT13s2skDi0nmaRmUbZrn9CA2MW6hYT6WmFk5iTfY2Z3aSKNg0
ixFKKwfNuWYpZql9jsA/
-----END CERTIFICATE-----
Generated at Thu Jun 6 17:39:58 2024 by rpki-client on console-fra.rpki-client.org