Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/dc/c515c9-df08-426c-80e6-0367268ff871/1/l9XmRwyggzwhh9pRiXa_tRXW4xU.roa
File: l9XmRwyggzwhh9pRiXa_tRXW4xU.roa (raw, json)
Hash identifier: Sn5J2e+7HrqFpfThgTSncpayqp3EDYuomxwERiHtqSw=
Subject key identifier: 97:D5:E6:47:0C:A0:83:3C:21:87:DA:51:89:76:BF:B5:15:D6:E3:15
Certificate issuer: /CN=081b7a22e51cfb9cf84205e4449998ad55d8f065
Certificate serial: 0B4853E8
Authority key identifier: 08:1B:7A:22:E5:1C:FB:9C:F8:42:05:E4:44:99:98:AD:55:D8:F0:65
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/CBt6IuUc-5z4QgXkRJmYrVXY8GU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/dc/c515c9-df08-426c-80e6-0367268ff871/1/l9XmRwyggzwhh9pRiXa_tRXW4xU.roa
Signing time: Sat 30 Apr 2022 11:38:37 +0000
ROA not before: Sat 30 Apr 2022 11:38:37 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 44285
IP address blocks: 45.140.224.0/22 maxlen: 22
45.87.4.0/22 maxlen: 22
185.18.213.0/24 maxlen: 24
185.18.212.0/22 maxlen: 22
185.18.212.0/24 maxlen: 24
185.18.215.0/24 maxlen: 24
185.18.214.0/24 maxlen: 24
37.32.32.0/24 maxlen: 24
37.32.33.0/24 maxlen: 24
37.32.32.0/21 maxlen: 21
37.32.32.0/22 maxlen: 22
37.32.36.0/22 maxlen: 22
37.32.37.0/24 maxlen: 24
37.32.38.0/24 maxlen: 24
37.32.36.0/24 maxlen: 24
37.32.35.0/24 maxlen: 24
37.32.34.0/24 maxlen: 24
37.32.39.0/24 maxlen: 24
185.51.201.0/24 maxlen: 24
185.51.200.0/24 maxlen: 24
185.51.203.0/24 maxlen: 24
185.51.202.0/24 maxlen: 24
86.57.120.0/23 maxlen: 23
86.57.122.0/23 maxlen: 23
86.57.96.0/20 maxlen: 20
86.57.112.0/23 maxlen: 23
86.57.114.0/23 maxlen: 23
86.57.116.0/22 maxlen: 22
217.172.124.0/23 maxlen: 23
217.172.120.0/24 maxlen: 24
217.172.120.0/21 maxlen: 21
217.172.127.0/24 maxlen: 24
217.172.126.0/23 maxlen: 23
85.198.48.0/20 maxlen: 20
45.9.253.0/24 maxlen: 24
45.9.252.0/24 maxlen: 24
45.9.254.0/24 maxlen: 24
37.75.246.0/24 maxlen: 24
37.75.245.0/24 maxlen: 24
37.75.244.0/24 maxlen: 24
37.75.244.0/22 maxlen: 22
37.75.243.0/24 maxlen: 24
37.75.247.0/24 maxlen: 24
195.110.38.0/24 maxlen: 24
195.110.38.0/23 maxlen: 23
195.110.39.0/24 maxlen: 24
185.182.250.0/24 maxlen: 24
185.182.250.0/23 maxlen: 23
185.182.248.0/22 maxlen: 22
185.182.248.0/23 maxlen: 23
185.182.251.0/24 maxlen: 24
95.82.0.0/21 maxlen: 21
95.82.0.0/20 maxlen: 20
95.82.0.0/18 maxlen: 18
95.82.8.0/21 maxlen: 21
95.82.16.0/21 maxlen: 21
95.82.16.0/20 maxlen: 20
95.82.24.0/21 maxlen: 21
91.236.168.0/23 maxlen: 23
91.236.169.0/24 maxlen: 24
91.236.168.0/24 maxlen: 24
95.82.32.0/21 maxlen: 21
95.82.40.0/21 maxlen: 21
46.28.74.0/24 maxlen: 24
95.82.48.0/21 maxlen: 21
46.28.73.0/24 maxlen: 24
46.28.72.0/24 maxlen: 24
46.28.72.0/21 maxlen: 24
95.82.56.0/21 maxlen: 21
185.121.128.0/22 maxlen: 24
185.121.128.0/24 maxlen: 24
185.121.131.0/24 maxlen: 24
185.121.130.0/24 maxlen: 24
185.121.129.0/24 maxlen: 24
88.135.38.0/24 maxlen: 24
88.135.37.0/24 maxlen: 24
185.141.132.0/24 maxlen: 24
185.141.134.0/24 maxlen: 24
185.141.133.0/24 maxlen: 24
185.141.135.0/24 maxlen: 24
84.47.226.0/24 maxlen: 24
84.47.224.0/22 maxlen: 22
84.47.225.0/24 maxlen: 24
84.47.224.0/21 maxlen: 21
84.47.224.0/24 maxlen: 24
188.209.152.0/23 maxlen: 23
84.47.231.0/24 maxlen: 24
84.47.227.0/24 maxlen: 24
84.47.230.0/24 maxlen: 24
84.47.229.0/24 maxlen: 24
84.47.228.0/24 maxlen: 24
84.47.228.0/22 maxlen: 22
88.135.39.0/24 maxlen: 24
185.128.138.0/24 maxlen: 24
185.128.137.0/24 maxlen: 24
185.128.136.0/24 maxlen: 24
185.128.139.0/24 maxlen: 24
2a02:828::/32 maxlen: 32
2a02:829::/32 maxlen: 32
2a02:82b::/32 maxlen: 32
2a02:82f::/32 maxlen: 32
2a02:828:1::/48 maxlen: 48
2a02:82a::/32 maxlen: 32
2a02:828::/29 maxlen: 29
2a02:828::/64 maxlen: 64
2a02:828::/48 maxlen: 48
2a02:82e::/32 maxlen: 32
2a02:82c::/32 maxlen: 32
2a02:82d::/32 maxlen: 32
Validation: Failed, RFC 3779 resource not subset of parent's resources
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 189289448 (0xb4853e8)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=081b7a22e51cfb9cf84205e4449998ad55d8f065
Validity
Not Before: Apr 30 11:38:37 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=97d5e6470ca0833c2187da518976bfb515d6e315
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a5:17:0c:45:f4:29:40:2b:8c:5d:12:e7:41:64:
cf:11:7b:8f:cd:f5:94:15:3b:6f:18:08:0c:ca:4e:
fb:9b:b4:75:62:66:01:a3:11:09:65:1a:0d:c4:4f:
49:5b:5f:12:0a:aa:79:3c:f3:58:ad:5a:d3:dd:0e:
8f:ac:92:8d:aa:3c:9d:23:5d:6c:92:88:d9:56:9b:
6d:ea:a3:a1:a6:6f:48:b8:19:84:f5:f7:bd:22:d2:
89:cc:35:31:3b:41:ca:1d:33:0d:3b:e0:aa:7a:9f:
45:e8:29:07:76:d7:b1:3c:73:8f:08:7d:8a:2e:94:
3a:65:b4:bf:a2:bc:85:5d:9a:b8:dc:c8:17:a6:2d:
fa:56:62:a9:e2:a5:40:be:33:82:f3:c8:30:b0:e0:
40:37:ae:83:5f:f3:b4:4f:43:8b:6f:99:46:b8:85:
cc:b9:c2:ae:4b:56:8d:c3:17:d4:e4:07:19:4c:5b:
39:b7:1f:a0:8f:65:63:38:88:5e:e6:58:22:12:fe:
0c:a3:0a:1a:f1:f4:9b:0d:27:5b:e0:c0:9f:8a:f5:
06:5d:4c:25:d0:23:b3:62:74:06:ea:42:d5:eb:a5:
af:47:5a:fa:63:87:3e:37:92:7e:88:8f:41:43:fc:
61:ed:2e:ad:62:6e:da:0d:56:2d:7f:3f:98:ca:99:
e9:b3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
97:D5:E6:47:0C:A0:83:3C:21:87:DA:51:89:76:BF:B5:15:D6:E3:15
X509v3 Authority Key Identifier:
keyid:08:1B:7A:22:E5:1C:FB:9C:F8:42:05:E4:44:99:98:AD:55:D8:F0:65
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/CBt6IuUc-5z4QgXkRJmYrVXY8GU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/dc/c515c9-df08-426c-80e6-0367268ff871/1/l9XmRwyggzwhh9pRiXa_tRXW4xU.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/dc/c515c9-df08-426c-80e6-0367268ff871/1/CBt6IuUc-5z4QgXkRJmYrVXY8GU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
37.32.32.0/21
37.75.243.0-37.75.247.255
45.9.252.0-45.9.254.255
45.87.4.0/22
45.140.224.0/22
46.28.72.0/21
84.47.224.0/21
85.198.48.0/20
86.57.96.0-86.57.123.255
88.135.37.0-88.135.39.255
91.236.168.0/23
95.82.0.0/18
185.18.212.0/22
185.51.200.0/22
185.121.128.0/22
185.128.136.0/22
185.141.132.0/22
185.182.248.0/22
188.209.152.0/23
195.110.38.0/23
217.172.120.0/21
IPv6:
2a02:828::/29
Signature Algorithm: sha256WithRSAEncryption
48:1c:7d:c2:72:f7:b8:a0:bd:d9:ec:22:52:3e:73:0d:bc:41:
05:91:8c:05:34:fd:1e:9c:88:0d:0e:6c:a7:df:a6:f7:81:d4:
0e:c7:82:60:5d:54:09:9e:f2:a0:cd:41:35:50:5a:38:20:cc:
e2:88:39:20:19:26:00:0a:29:29:fe:f1:b2:cb:d7:ff:26:8a:
c6:0a:71:b7:c2:a4:be:91:8e:16:98:36:61:49:eb:f3:cc:17:
54:a2:7d:58:90:70:ad:dc:bb:94:83:1b:d7:72:ca:ed:ea:e0:
2b:c0:41:df:d5:54:ee:8d:36:fd:0c:c4:42:01:54:94:87:6c:
e9:5b:ed:d3:ca:b1:84:5d:72:54:1c:f6:fc:6d:a2:52:b6:92:
64:38:9b:68:e1:9c:3e:88:01:85:68:9d:7f:a6:b1:1d:87:4e:
6b:fe:f0:c8:a5:0c:18:26:02:07:ae:67:09:10:d5:d3:c4:c0:
6f:e5:01:16:08:e2:17:04:bd:01:94:d6:f9:c4:f0:28:15:49:
57:45:65:8c:e5:a4:08:a7:e1:e7:f4:40:86:e2:05:8d:85:3c:
c7:96:49:8e:ec:51:2e:1e:07:3c:e3:c7:33:e7:23:1f:fa:05:
ad:08:50:8a:ef:35:17:7e:d0:b2:92:f8:c3:50:dd:37:be:68:
28:da:6d:5f
-----BEGIN CERTIFICATE-----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=
-----END CERTIFICATE-----
Generated at Thu Jul 20 00:08:49 2023 by rpki-client on console-ams.rpki-client.org