Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a8/c61092-734a-4eef-9d67-4905243bc828/1/0LclCtSkOkDDzIIXl8f9TGJIJf8.roa
File: 0LclCtSkOkDDzIIXl8f9TGJIJf8.roa (raw, json)
Hash identifier: OQlSAPXIuews7iIiRkuv8XNn5Q51KHgFClmerB24fg0=
Subject key identifier: D0:B7:25:0A:D4:A4:3A:40:C3:CC:82:17:97:C7:FD:4C:62:48:25:FF
Certificate issuer: /CN=05b1d13c2e26e12786246a5ec4c5bea69864b20f
Certificate serial: 0185A514D7165B7ECC08FA94E93D5B074D78
Authority key identifier: 05:B1:D1:3C:2E:26:E1:27:86:24:6A:5E:C4:C5:BE:A6:98:64:B2:0F
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/BbHRPC4m4SeGJGpexMW-pphksg8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/a8/c61092-734a-4eef-9d67-4905243bc828/1/0LclCtSkOkDDzIIXl8f9TGJIJf8.roa
Signing time: Thu 12 Jan 2023 08:24:44 +0000
ROA not before: Thu 12 Jan 2023 08:24:44 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 41789
IP address blocks: 31.129.17.0/24 maxlen: 24
31.129.16.0/24 maxlen: 24
31.129.18.0/24 maxlen: 24
31.129.21.0/24 maxlen: 24
31.129.20.0/24 maxlen: 24
31.129.19.0/24 maxlen: 24
31.129.24.0/24 maxlen: 24
31.129.23.0/24 maxlen: 24
31.129.29.0/24 maxlen: 24
31.129.28.0/24 maxlen: 24
31.129.27.0/24 maxlen: 24
31.129.26.0/24 maxlen: 24
31.129.31.0/24 maxlen: 24
31.129.25.0/24 maxlen: 24
212.60.23.0/24 maxlen: 24
141.98.233.0/24 maxlen: 24
141.98.234.0/24 maxlen: 24
46.16.12.0/24 maxlen: 24
46.16.15.0/24 maxlen: 24
46.16.14.0/24 maxlen: 24
31.129.0.0/20 maxlen: 24
85.92.109.0/24 maxlen: 24
89.191.232.0/24 maxlen: 24
91.107.116.0/24 maxlen: 24
45.80.129.0/24 maxlen: 24
45.80.130.0/23 maxlen: 23
91.107.124.0/23 maxlen: 23
37.220.80.0/22 maxlen: 22
194.31.174.0/24 maxlen: 24
194.31.173.0/24 maxlen: 24
91.107.127.0/24 maxlen: 24
194.5.93.0/24 maxlen: 24
5.44.46.0/24 maxlen: 24
5.44.47.0/24 maxlen: 24
185.166.196.0/23 maxlen: 24
45.129.187.0/24 maxlen: 24
194.28.192.0/24 maxlen: 24
94.198.216.0/22 maxlen: 24
94.198.220.0/23 maxlen: 24
81.200.144.0/21 maxlen: 24
81.200.152.0/22 maxlen: 24
81.200.156.0/23 maxlen: 24
46.19.64.0/22 maxlen: 24
45.66.117.0/24 maxlen: 24
45.66.119.0/24 maxlen: 24
109.236.56.0/23 maxlen: 23
109.236.58.0/24 maxlen: 24
Validation: Failed, RFC 3779 resource not subset of parent's resources
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:85:a5:14:d7:16:5b:7e:cc:08:fa:94:e9:3d:5b:07:4d:78
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=05b1d13c2e26e12786246a5ec4c5bea69864b20f
Validity
Not Before: Jan 12 08:24:44 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=d0b7250ad4a43a40c3cc821797c7fd4c624825ff
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a6:12:98:9b:d8:5f:7c:cf:a4:df:9c:b7:3e:c5:
19:a4:0d:9a:1b:0c:9d:48:8d:39:a7:2d:be:c3:7a:
c1:e9:55:99:c2:71:fa:8f:21:0d:b1:5c:ab:8f:3b:
6d:cd:4b:4c:2d:a1:43:23:25:3d:42:b7:d9:4a:a4:
ed:a5:5c:83:44:39:95:2f:a9:d0:c2:71:2e:b1:87:
af:52:96:fc:78:c9:f5:5b:b1:54:af:40:4c:81:1d:
9b:24:2f:62:1b:b9:7c:d5:6e:7a:8c:38:6e:94:09:
c1:1d:66:f4:5b:a1:5a:cf:5e:8e:af:3e:dd:a3:e2:
86:a1:36:7d:ab:fe:14:17:a5:7f:2c:1c:87:b2:51:
53:79:46:2f:66:bd:df:79:3c:b3:18:9a:53:9e:f6:
16:10:68:34:27:ea:c1:8c:1a:81:fd:c7:e9:7e:4b:
e0:61:a2:8f:85:6a:08:00:37:65:c0:e9:83:ed:7c:
c3:01:69:ab:4b:39:70:99:aa:9e:e3:f9:75:16:8d:
e0:0c:e2:f6:ae:b4:7c:5d:1b:73:36:49:e4:ab:38:
a7:a3:65:0a:81:eb:2d:f5:f7:1b:4b:e7:70:67:d3:
98:15:53:9a:9b:97:9c:5e:65:20:96:7e:ce:59:f3:
8c:1d:ea:04:4a:fe:a4:f1:6f:b7:b8:62:c0:3c:98:
e0:39
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D0:B7:25:0A:D4:A4:3A:40:C3:CC:82:17:97:C7:FD:4C:62:48:25:FF
X509v3 Authority Key Identifier:
keyid:05:B1:D1:3C:2E:26:E1:27:86:24:6A:5E:C4:C5:BE:A6:98:64:B2:0F
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/BbHRPC4m4SeGJGpexMW-pphksg8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a8/c61092-734a-4eef-9d67-4905243bc828/1/0LclCtSkOkDDzIIXl8f9TGJIJf8.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/a8/c61092-734a-4eef-9d67-4905243bc828/1/BbHRPC4m4SeGJGpexMW-pphksg8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
5.44.46.0/23
31.129.0.0-31.129.21.255
31.129.23.0-31.129.29.255
31.129.31.0/24
37.220.80.0/22
45.66.117.0/24
45.66.119.0/24
45.80.129.0-45.80.131.255
45.129.187.0/24
46.16.12.0/24
46.16.14.0/23
46.19.64.0/22
81.200.144.0-81.200.157.255
85.92.109.0/24
89.191.232.0/24
91.107.116.0/24
91.107.124.0/23
91.107.127.0/24
94.198.216.0-94.198.221.255
109.236.56.0-109.236.58.255
141.98.233.0-141.98.234.255
185.166.196.0/23
194.5.93.0/24
194.28.192.0/24
194.31.173.0-194.31.174.255
212.60.23.0/24
Signature Algorithm: sha256WithRSAEncryption
37:e3:e8:e8:a7:27:8c:f0:54:78:51:b4:9f:ff:f1:d5:e6:74:
17:00:56:01:f8:0b:b1:20:01:14:1d:52:e9:94:9b:8b:d7:e4:
58:88:6a:41:a8:e2:87:b6:66:d9:4e:08:46:ca:05:1c:34:1c:
eb:3f:92:68:5c:f4:fa:f0:3f:1f:76:c4:1a:4d:76:9c:3c:7a:
c6:a1:25:4e:60:ac:1b:87:de:85:c0:d1:ad:9c:42:96:a1:1a:
31:29:3e:f0:46:41:47:a3:72:9b:35:b3:ac:86:6c:98:8c:15:
97:e6:b2:da:19:f3:b9:7a:30:13:d9:ce:bd:fb:1c:c5:02:e2:
c4:9c:e3:3e:0a:10:4c:df:c0:ce:80:0b:83:70:8c:08:23:1f:
ea:fc:1d:02:db:80:0f:30:e1:86:a4:9b:c9:a7:a6:a5:94:43:
80:49:54:41:08:46:28:cf:39:af:2c:5c:35:29:8b:a9:76:53:
bc:e6:c1:f4:b5:5f:b7:54:42:45:24:a0:8c:91:c1:bf:54:83:
45:43:9b:ae:3e:e4:32:24:20:e3:9c:89:64:c7:2e:03:84:8f:
76:b2:e3:21:b7:58:91:8b:d7:04:16:85:cd:9a:46:05:eb:0f:
5f:66:b0:b6:d5:48:52:e8:c8:83:d8:a1:c9:b4:01:47:84:67:
6e:a4:94:1f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jul 20 00:05:47 2023 by rpki-client on console-ams.rpki-client.org