Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ca/a1f212-ba35-466b-b52e-3853d340c9a6/1/Vo1pnRK6ILm43BekgfewyKi206E.roa
File: Vo1pnRK6ILm43BekgfewyKi206E.roa (raw, json)
Hash identifier: 9Glhraw7iOgJ8IC3cgBL9Wc7zX1MyeFf7D1TCo2fubk=
Subject key identifier: 56:8D:69:9D:12:BA:20:B9:B8:DC:17:A4:81:F7:B0:C8:A8:B6:D3:A1
Certificate issuer: /CN=ab4f00f5c3ab3df4c674a410d8a0f0182fb5e918
Certificate serial: 38220AA4
Authority key identifier: AB:4F:00:F5:C3:AB:3D:F4:C6:74:A4:10:D8:A0:F0:18:2F:B5:E9:18
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/q08A9cOrPfTGdKQQ2KDwGC-16Rg.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ca/a1f212-ba35-466b-b52e-3853d340c9a6/1/Vo1pnRK6ILm43BekgfewyKi206E.roa
Signing time: Sat 01 Jan 2022 10:04:43 +0000
ROA not before: Sat 01 Jan 2022 10:04:43 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 43554
IP address blocks: 193.46.210.0/24 maxlen: 24
5.105.124.0/22 maxlen: 22
5.105.120.0/22 maxlen: 22
5.105.128.0/22 maxlen: 22
5.105.132.0/22 maxlen: 22
5.105.136.0/22 maxlen: 22
5.105.140.0/22 maxlen: 22
5.105.144.0/22 maxlen: 22
5.105.152.0/22 maxlen: 22
5.105.148.0/22 maxlen: 22
5.105.156.0/22 maxlen: 22
5.105.164.0/22 maxlen: 22
5.105.160.0/22 maxlen: 22
5.105.168.0/22 maxlen: 22
5.105.172.0/22 maxlen: 22
5.105.68.0/22 maxlen: 22
5.105.76.0/22 maxlen: 22
5.105.72.0/22 maxlen: 22
5.105.80.0/22 maxlen: 22
5.105.84.0/22 maxlen: 22
5.105.88.0/22 maxlen: 22
5.105.96.0/22 maxlen: 22
5.105.92.0/22 maxlen: 22
5.105.100.0/22 maxlen: 22
5.105.104.0/22 maxlen: 22
5.105.108.0/22 maxlen: 22
5.105.112.0/22 maxlen: 22
5.105.116.0/22 maxlen: 22
5.105.232.0/22 maxlen: 22
5.105.228.0/22 maxlen: 22
5.105.240.0/22 maxlen: 22
5.105.236.0/22 maxlen: 22
5.105.244.0/22 maxlen: 22
5.105.248.0/22 maxlen: 22
5.105.176.0/22 maxlen: 22
5.105.184.0/22 maxlen: 22
5.105.192.0/22 maxlen: 22
5.105.196.0/22 maxlen: 22
5.105.200.0/22 maxlen: 22
5.105.204.0/22 maxlen: 22
5.105.212.0/22 maxlen: 22
5.105.208.0/22 maxlen: 22
5.105.216.0/22 maxlen: 22
5.105.220.0/22 maxlen: 22
5.105.224.0/22 maxlen: 22
178.209.64.0/22 maxlen: 22
5.105.12.0/22 maxlen: 22
5.105.16.0/22 maxlen: 22
5.105.24.0/22 maxlen: 22
5.105.20.0/22 maxlen: 22
5.105.28.0/22 maxlen: 22
5.105.32.0/22 maxlen: 22
5.105.36.0/22 maxlen: 22
5.105.40.0/22 maxlen: 22
5.105.44.0/22 maxlen: 22
5.105.48.0/22 maxlen: 22
5.105.52.0/22 maxlen: 22
5.105.56.0/22 maxlen: 22
5.105.60.0/22 maxlen: 22
5.105.64.0/22 maxlen: 22
178.209.69.0/24 maxlen: 24
178.209.70.0/23 maxlen: 23
178.209.76.0/22 maxlen: 22
178.209.72.0/22 maxlen: 22
178.209.80.0/21 maxlen: 21
5.105.0.0/22 maxlen: 22
5.105.4.0/22 maxlen: 22
5.105.8.0/22 maxlen: 22
5.105.0.0/16 maxlen: 16
Validation: Failed, RFC 3779 resource not subset of parent's resources
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 941755044 (0x38220aa4)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=ab4f00f5c3ab3df4c674a410d8a0f0182fb5e918
Validity
Not Before: Jan 1 10:04:43 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=568d699d12ba20b9b8dc17a481f7b0c8a8b6d3a1
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b0:d5:c4:0e:e3:62:d3:29:d5:60:4f:bf:1d:8d:
24:74:ec:1f:80:ff:3e:6c:2c:34:57:54:71:5c:31:
fb:e2:b9:ac:0b:59:8c:55:f3:ea:57:a4:12:4f:d0:
c1:9d:1f:5c:9f:08:82:68:34:98:69:47:7e:3f:c5:
9e:1c:a1:0c:81:24:89:e8:aa:e6:d3:e8:38:0a:32:
76:d9:27:24:24:89:46:64:a7:74:88:31:d4:56:53:
41:b2:39:4e:71:2c:d7:67:5c:2c:8d:6d:80:e1:90:
f5:cc:e5:25:bd:82:61:4b:a4:3d:f1:4c:81:b8:de:
f7:ea:23:45:c7:d2:5e:f3:65:9f:97:4c:d0:6d:ac:
2d:89:71:a7:f4:2e:bc:93:98:a2:e6:35:07:9a:2f:
44:92:34:ac:f6:45:9c:29:0c:b7:6c:a6:68:ed:cb:
b3:22:56:3a:4e:1e:57:7c:24:82:80:e5:4a:e2:c4:
1d:fe:78:1e:51:cf:9c:96:38:2b:e1:6d:92:67:f4:
73:02:04:b0:6b:b2:e9:3d:5a:4a:c1:cb:6b:14:a1:
06:71:65:5d:73:83:eb:cc:cb:6b:0e:c7:3b:2f:45:
e5:85:8f:eb:c5:de:25:d0:fa:4d:c3:37:ac:11:6b:
15:9e:40:15:3b:c9:67:9f:0d:67:6e:77:bf:4a:8c:
96:15
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
56:8D:69:9D:12:BA:20:B9:B8:DC:17:A4:81:F7:B0:C8:A8:B6:D3:A1
X509v3 Authority Key Identifier:
keyid:AB:4F:00:F5:C3:AB:3D:F4:C6:74:A4:10:D8:A0:F0:18:2F:B5:E9:18
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/q08A9cOrPfTGdKQQ2KDwGC-16Rg.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ca/a1f212-ba35-466b-b52e-3853d340c9a6/1/Vo1pnRK6ILm43BekgfewyKi206E.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/ca/a1f212-ba35-466b-b52e-3853d340c9a6/1/q08A9cOrPfTGdKQQ2KDwGC-16Rg.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
5.105.0.0/16
178.209.64.0/22
178.209.69.0-178.209.87.255
193.46.210.0/24
Signature Algorithm: sha256WithRSAEncryption
3d:4b:04:1f:b1:84:0e:e3:28:31:8c:28:60:59:99:7f:3a:77:
c2:cd:40:12:0e:fe:d6:92:0b:7a:2e:6c:ee:11:76:56:75:65:
45:ec:e2:92:68:a5:ca:11:40:19:e6:c5:22:bc:61:82:26:0e:
d9:e0:c1:80:e6:4b:22:80:02:62:a1:49:d7:d7:51:4b:ae:e3:
b3:5c:d4:90:57:ef:3a:ac:42:4a:b2:40:b0:7c:44:f7:db:00:
86:19:e5:d6:f1:24:55:42:76:04:90:12:c3:68:61:4b:3e:3e:
a3:44:9a:ff:43:73:c4:52:55:d1:22:85:08:c7:0b:12:31:a7:
33:c9:cd:04:cf:96:67:a7:d4:85:d0:f8:82:a5:9b:b8:7a:46:
1b:6e:c6:eb:eb:fb:df:05:32:9c:7a:0c:ae:fd:11:38:26:2f:
aa:4c:c6:5f:8c:30:1e:ae:f5:ad:47:9c:5a:12:b2:65:d2:a4:
cc:d0:60:fd:b4:55:04:17:31:d8:a1:f6:4b:80:ae:c6:1a:0f:
6a:d8:ec:0c:4a:2b:bf:03:32:9e:75:44:d5:1a:5f:3d:86:96:
8b:92:1d:ce:78:b3:1b:dd:d4:af:c3:8c:ea:07:d1:82:3d:8e:
1d:d7:56:9f:b9:c4:09:b3:66:9f:9f:84:5a:9c:c9:92:ca:b6:
6b:a0:c4:a4
-----BEGIN CERTIFICATE-----
MIIFCDCCA/CgAwIBAgIEOCIKpDANBgkqhkiG9w0BAQsFADAzMTEwLwYDVQQDEyhh
YjRmMDBmNWMzYWIzZGY0YzY3NGE0MTBkOGEwZjAxODJmYjVlOTE4MB4XDTIyMDEw
MTEwMDQ0M1oXDTIzMDcwMTAwMDAwMFowMzExMC8GA1UEAxMoNTY4ZDY5OWQxMmJh
MjBiOWI4ZGMxN2E0ODFmN2IwYzhhOGI2ZDNhMTCCASIwDQYJKoZIhvcNAQEBBQAD
ggEPADCCAQoCggEBALDVxA7jYtMp1WBPvx2NJHTsH4D/PmwsNFdUcVwx++K5rAtZ
jFXz6lekEk/QwZ0fXJ8Igmg0mGlHfj/FnhyhDIEkieiq5tPoOAoydtknJCSJRmSn
dIgx1FZTQbI5TnEs12dcLI1tgOGQ9czlJb2CYUukPfFMgbje9+ojRcfSXvNln5dM
0G2sLYlxp/QuvJOYouY1B5ovRJI0rPZFnCkMt2ymaO3LsyJWOk4eV3wkgoDlSuLE
Hf54HlHPnJY4K+Ftkmf0cwIEsGuy6T1aSsHLaxShBnFlXXOD68zLaw7HOy9F5YWP
68XeJdD6TcM3rBFrFZ5AFTvJZ58NZ253v0qMlhUCAwEAAaOCAiIwggIeMB0GA1Ud
DgQWBBRWjWmdErogubjcF6SB97DIqLbToTAfBgNVHSMEGDAWgBSrTwD1w6s99MZ0
pBDYoPAYL7XpGDAOBgNVHQ8BAf8EBAMCB4AwZAYIKwYBBQUHAQEEWDBWMFQGCCsG
AQUFBzAChkhyc3luYzovL3Jwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxU
L3EwOEE5Y09yUGZUR2RLUVEyS0R3R0MtMTZSZy5jZXIwgY0GCCsGAQUFBwELBIGA
MH4wfAYIKwYBBQUHMAuGcHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5
L0RFRkFVTFQvY2EvYTFmMjEyLWJhMzUtNDY2Yi1iNTJlLTM4NTNkMzQwYzlhNi8x
L1ZvMXBuUks2SUxtNDNCZWtnZmV3eUtpMjA2RS5yb2EwgYEGA1UdHwR6MHgwdqB0
oHKGcHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvY2Ev
YTFmMjEyLWJhMzUtNDY2Yi1iNTJlLTM4NTNkMzQwYzlhNi8xL3EwOEE5Y09yUGZU
R2RLUVEyS0R3R0MtMTZSZy5jcmwwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjA4
BggrBgEFBQcBBwEB/wQpMCcwJQQCAAEwHwMDAAVpAwQCstFAMAwDBACy0UUDBAOy
0VADBADBLtIwDQYJKoZIhvcNAQELBQADggEBAD1LBB+xhA7jKDGMKGBZmX86d8LN
QBIO/taSC3oubO4RdlZ1ZUXs4pJopcoRQBnmxSK8YYImDtngwYDmSyKAAmKhSdfX
UUuu47Nc1JBX7zqsQkqyQLB8RPfbAIYZ5dbxJFVCdgSQEsNoYUs+PqNEmv9Dc8RS
VdEihQjHCxIxpzPJzQTPlmen1IXQ+IKlm7h6Rhtuxuvr+98FMpx6DK79ETgmL6pM
xl+MMB6u9a1HnFoSsmXSpMzQYP20VQQXMdih9kuArsYaD2rY7AxKK78DMp51RNUa
Xz2GlouSHc54sxvd1K/DjOoH0YI9jh3XVp+5xAmzZp+fhFqcyZLKtmugxKQ=
-----END CERTIFICATE-----
Generated at Thu Jun 6 17:53:57 2024 by rpki-client on console-fra.rpki-client.org