Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a8/c61092-734a-4eef-9d67-4905243bc828/1/EqyM5iS2MXr7FjRwCiUHslicJrk.roa
File: EqyM5iS2MXr7FjRwCiUHslicJrk.roa (raw, json)
Hash identifier: TaBSMgsSSM5KuNVozhqA4O1CW66ZNDM1hcFu1HIuQbE=
Subject key identifier: 12:AC:8C:E6:24:B6:31:7A:FB:16:34:70:0A:25:07:B2:58:9C:26:B9
Certificate issuer: /CN=05b1d13c2e26e12786246a5ec4c5bea69864b20f
Certificate serial: 01872808C5782410DAD27B271C13D07A6466
Authority key identifier: 05:B1:D1:3C:2E:26:E1:27:86:24:6A:5E:C4:C5:BE:A6:98:64:B2:0F
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/BbHRPC4m4SeGJGpexMW-pphksg8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/a8/c61092-734a-4eef-9d67-4905243bc828/1/EqyM5iS2MXr7FjRwCiUHslicJrk.roa
Signing time: Tue 28 Mar 2023 11:44:36 +0000
ROA not before: Tue 28 Mar 2023 11:44:36 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 41789
IP address blocks: 31.129.17.0/24 maxlen: 24
31.129.16.0/24 maxlen: 24
31.129.18.0/24 maxlen: 24
31.129.20.0/24 maxlen: 24
31.129.19.0/24 maxlen: 24
31.129.24.0/24 maxlen: 24
31.129.23.0/24 maxlen: 24
31.129.29.0/24 maxlen: 24
31.129.28.0/24 maxlen: 24
31.129.27.0/24 maxlen: 24
31.129.26.0/24 maxlen: 24
31.129.31.0/24 maxlen: 24
31.129.25.0/24 maxlen: 24
141.98.233.0/24 maxlen: 24
141.98.234.0/24 maxlen: 24
46.16.12.0/24 maxlen: 24
46.16.15.0/24 maxlen: 24
46.16.14.0/24 maxlen: 24
31.129.0.0/20 maxlen: 24
85.92.108.0/24 maxlen: 24
45.95.235.0/24 maxlen: 24
45.80.129.0/24 maxlen: 24
45.80.130.0/23 maxlen: 23
37.220.80.0/22 maxlen: 22
185.166.196.0/23 maxlen: 24
94.198.216.0/22 maxlen: 24
94.198.220.0/23 maxlen: 24
81.200.144.0/21 maxlen: 24
81.200.152.0/22 maxlen: 24
81.200.156.0/23 maxlen: 24
46.19.64.0/22 maxlen: 24
109.236.58.0/24 maxlen: 24
Validation: Failed, RFC 3779 resource not subset of parent's resources
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:87:28:08:c5:78:24:10:da:d2:7b:27:1c:13:d0:7a:64:66
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=05b1d13c2e26e12786246a5ec4c5bea69864b20f
Validity
Not Before: Mar 28 11:44:36 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=12ac8ce624b6317afb1634700a2507b2589c26b9
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:93:32:18:c4:33:3c:75:1e:6d:6c:2a:69:4b:d1:
0d:87:f0:8c:fb:b5:30:5a:66:91:cd:3f:3f:09:9d:
42:09:4f:55:80:5d:8a:a9:82:c0:be:1c:42:3f:8b:
44:f3:8e:b6:ae:a8:88:07:e1:b2:45:84:86:f2:19:
5d:b6:12:d9:b5:88:b7:0e:ea:41:49:10:54:65:4a:
69:54:0f:83:bd:07:9e:3a:5f:8c:46:e3:98:4a:cf:
51:86:5c:a6:89:40:5d:f5:98:5b:45:ba:d6:b6:a2:
45:cb:42:da:7b:3a:ee:45:49:fc:db:d9:e1:61:45:
11:24:fe:4c:c5:ec:45:3f:18:1e:d6:73:72:23:68:
d2:69:4c:9b:4b:c3:7c:10:b6:0c:2e:d9:6c:12:03:
1d:63:1e:1b:42:db:ba:59:d3:d5:89:a6:90:b2:ae:
e7:c5:29:db:b3:d2:6d:92:56:8f:24:49:f9:d2:d8:
72:fc:ac:e3:5d:ae:01:75:db:71:78:b9:1f:22:1c:
5a:69:3b:39:71:9d:b1:7c:7d:5d:bc:b1:74:ce:17:
c7:70:4d:df:28:f6:92:39:87:d3:2f:5b:1a:da:26:
72:35:30:11:79:66:5c:dc:eb:27:1f:82:37:0a:20:
f1:13:1f:ea:e4:4c:e8:1d:71:9c:74:5e:e6:0b:b9:
5b:27
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
12:AC:8C:E6:24:B6:31:7A:FB:16:34:70:0A:25:07:B2:58:9C:26:B9
X509v3 Authority Key Identifier:
keyid:05:B1:D1:3C:2E:26:E1:27:86:24:6A:5E:C4:C5:BE:A6:98:64:B2:0F
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/BbHRPC4m4SeGJGpexMW-pphksg8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a8/c61092-734a-4eef-9d67-4905243bc828/1/EqyM5iS2MXr7FjRwCiUHslicJrk.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/a8/c61092-734a-4eef-9d67-4905243bc828/1/BbHRPC4m4SeGJGpexMW-pphksg8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
31.129.0.0-31.129.20.255
31.129.23.0-31.129.29.255
31.129.31.0/24
37.220.80.0/22
45.80.129.0-45.80.131.255
45.95.235.0/24
46.16.12.0/24
46.16.14.0/23
46.19.64.0/22
81.200.144.0-81.200.157.255
85.92.108.0/24
94.198.216.0-94.198.221.255
109.236.58.0/24
141.98.233.0-141.98.234.255
185.166.196.0/23
Signature Algorithm: sha256WithRSAEncryption
6f:ed:2d:ff:49:7c:d6:b4:df:c9:51:34:75:01:6a:20:d8:7c:
0e:1a:d3:6b:85:83:de:25:72:6c:15:cd:bd:07:48:cd:56:06:
05:67:68:d8:a5:c5:1e:7d:df:55:e6:aa:55:a1:8d:e2:39:1e:
64:60:87:df:95:2d:ed:cc:79:6a:50:4f:f2:fc:38:ea:e3:d8:
11:b8:c3:87:de:d2:15:d6:5a:8e:6a:8d:d7:60:d1:b8:63:54:
67:9d:d2:c0:f5:28:51:30:4b:5a:28:3f:6d:31:d8:58:66:61:
d2:20:09:10:a8:b6:03:a7:f5:b9:32:a3:5f:ea:46:45:b3:0d:
11:2e:db:e8:4d:c0:cf:d4:50:f4:c3:9e:65:f6:72:21:46:19:
fb:16:a3:17:3b:63:68:07:60:da:ce:34:51:ca:3c:74:f0:ee:
54:62:63:ea:68:76:db:8c:62:c3:59:03:0b:20:50:0e:81:b4:
fd:de:99:dd:0a:1a:88:0b:f3:e7:d5:89:25:4e:31:83:00:d1:
20:dd:2b:35:7a:56:49:0d:06:df:39:6a:56:e6:87:d3:50:73:
63:0e:aa:7d:e1:5f:90:b9:4f:07:86:81:b6:42:85:bb:9e:44:
d8:b3:c0:46:68:1a:53:19:e2:5b:cc:ab:bf:6e:6a:7e:2a:a2:
dc:68:b5:c5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jul 20 00:01:54 2023 by rpki-client on console-fra.rpki-client.org