Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a8/c61092-734a-4eef-9d67-4905243bc828/1/Myegh-fKw_uAwr6ys92Ufyqz_cI.roa
File: Myegh-fKw_uAwr6ys92Ufyqz_cI.roa (raw, json)
Hash identifier: hhQH0fOutXMzaQ0gMhKLWXkaLcJBR8RlKwTWzy6a/7s=
Subject key identifier: 33:27:A0:87:E7:CA:C3:FB:80:C2:BE:B2:B3:DD:94:7F:2A:B3:FD:C2
Certificate issuer: /CN=05b1d13c2e26e12786246a5ec4c5bea69864b20f
Certificate serial: 0187931BBD82BEEA74B8BF4C95F2AFA65819
Authority key identifier: 05:B1:D1:3C:2E:26:E1:27:86:24:6A:5E:C4:C5:BE:A6:98:64:B2:0F
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/BbHRPC4m4SeGJGpexMW-pphksg8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/a8/c61092-734a-4eef-9d67-4905243bc828/1/Myegh-fKw_uAwr6ys92Ufyqz_cI.roa
Signing time: Tue 18 Apr 2023 06:44:41 +0000
ROA not before: Tue 18 Apr 2023 06:44:41 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 41789
IP address blocks: 31.129.17.0/24 maxlen: 24
31.129.16.0/24 maxlen: 24
31.129.18.0/24 maxlen: 24
31.129.20.0/24 maxlen: 24
31.129.19.0/24 maxlen: 24
31.129.24.0/24 maxlen: 24
31.129.23.0/24 maxlen: 24
31.129.29.0/24 maxlen: 24
31.129.28.0/24 maxlen: 24
31.129.27.0/24 maxlen: 24
31.129.26.0/24 maxlen: 24
31.129.31.0/24 maxlen: 24
31.129.25.0/24 maxlen: 24
141.98.233.0/24 maxlen: 24
141.98.234.0/24 maxlen: 24
46.16.12.0/24 maxlen: 24
46.16.15.0/24 maxlen: 24
46.16.14.0/24 maxlen: 24
31.129.0.0/20 maxlen: 24
85.92.108.0/24 maxlen: 24
45.95.235.0/24 maxlen: 24
45.80.129.0/24 maxlen: 24
45.80.130.0/23 maxlen: 23
37.220.80.0/22 maxlen: 22
185.166.196.0/23 maxlen: 24
94.198.216.0/22 maxlen: 24
94.198.220.0/23 maxlen: 24
81.200.144.0/21 maxlen: 24
81.200.152.0/22 maxlen: 24
81.200.156.0/23 maxlen: 24
46.19.64.0/22 maxlen: 24
Validation: Failed, RFC 3779 resource not subset of parent's resources
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:87:93:1b:bd:82:be:ea:74:b8:bf:4c:95:f2:af:a6:58:19
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=05b1d13c2e26e12786246a5ec4c5bea69864b20f
Validity
Not Before: Apr 18 06:44:41 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=3327a087e7cac3fb80c2beb2b3dd947f2ab3fdc2
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:85:f3:64:7f:4a:fc:23:fe:0b:5d:1d:0a:c7:59:
21:0f:39:fd:2a:94:bf:59:9c:0c:bb:39:4c:c4:71:
f3:96:00:1a:dd:c6:a2:44:08:0c:96:dc:6d:71:48:
31:2f:28:8d:cd:46:b8:0b:1d:f2:fa:1e:f9:4a:6d:
f9:b6:9d:e2:b0:67:16:31:8b:0d:c0:41:b3:5b:63:
1d:0b:19:0c:39:6d:10:a2:7d:b6:9a:54:c0:71:01:
6c:09:37:3a:da:f0:cf:ce:2c:f5:80:4e:d0:e0:78:
91:c1:2c:61:6a:40:ef:06:80:04:b7:62:1b:bd:67:
ec:be:67:5c:bf:d3:72:59:62:61:e8:b4:55:9c:66:
37:29:d8:27:fe:8f:f4:09:75:23:6d:5e:b7:a0:55:
01:41:92:64:ae:2f:2b:44:84:b1:66:b8:36:f0:d8:
8d:d4:2d:21:c7:98:ff:78:c1:a0:7b:7f:fc:65:2a:
11:2e:46:f3:89:a2:6f:52:12:d4:a3:af:72:4c:9d:
e1:55:08:30:85:ba:1a:b7:b1:68:fe:ef:15:87:4a:
8b:d3:33:b0:ce:54:d6:36:49:14:b3:a5:4e:93:dc:
1a:ef:01:58:c3:60:2e:e9:6f:d7:14:3d:8a:91:09:
90:6c:42:b2:b9:f1:8d:f0:be:a3:92:aa:5d:ef:0a:
2c:bb
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
33:27:A0:87:E7:CA:C3:FB:80:C2:BE:B2:B3:DD:94:7F:2A:B3:FD:C2
X509v3 Authority Key Identifier:
keyid:05:B1:D1:3C:2E:26:E1:27:86:24:6A:5E:C4:C5:BE:A6:98:64:B2:0F
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/BbHRPC4m4SeGJGpexMW-pphksg8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a8/c61092-734a-4eef-9d67-4905243bc828/1/Myegh-fKw_uAwr6ys92Ufyqz_cI.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/a8/c61092-734a-4eef-9d67-4905243bc828/1/BbHRPC4m4SeGJGpexMW-pphksg8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
31.129.0.0-31.129.20.255
31.129.23.0-31.129.29.255
31.129.31.0/24
37.220.80.0/22
45.80.129.0-45.80.131.255
45.95.235.0/24
46.16.12.0/24
46.16.14.0/23
46.19.64.0/22
81.200.144.0-81.200.157.255
85.92.108.0/24
94.198.216.0-94.198.221.255
141.98.233.0-141.98.234.255
185.166.196.0/23
Signature Algorithm: sha256WithRSAEncryption
3e:8a:49:56:b7:9d:0f:65:f7:f1:9c:f6:de:b3:16:7a:56:77:
4c:5c:32:ee:0e:d2:02:07:b6:18:1f:b3:5b:d0:9d:0a:ef:a0:
30:e1:5d:49:9d:b9:df:72:75:9d:bc:b4:b8:98:36:09:72:ce:
80:54:dd:f6:31:0a:f9:ac:79:06:8c:5d:fb:08:0a:17:7b:95:
b8:1d:99:c0:28:99:b9:70:f9:0d:65:d9:c9:d6:fc:8f:2d:2c:
01:93:a3:85:f1:7e:b3:1d:00:db:83:7f:bb:33:77:04:9a:cf:
27:8e:61:fa:ce:f6:03:bf:15:6f:0d:f9:02:6f:d4:91:50:98:
36:f2:2e:90:92:3b:d3:6a:38:bb:e1:7e:65:5d:59:e5:16:74:
7e:49:65:eb:7b:ef:9a:1b:d9:c6:ba:46:a0:1a:80:00:ec:5c:
ac:4c:b1:a5:5f:4c:14:43:17:5d:49:33:b3:a9:c3:34:95:23:
f9:4d:48:5b:f3:2c:2f:4b:0a:82:61:41:9d:05:47:5f:eb:05:
4d:92:f0:0c:e9:12:7e:6d:cd:e6:09:7a:ef:48:84:97:15:ba:
af:c3:cd:e3:df:8d:e6:c0:d5:bc:f6:12:4d:ce:52:4a:ab:34:
5a:70:9a:a6:00:aa:d4:eb:cb:27:87:87:af:26:77:61:e5:d8:
2f:24:23:3a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jul 20 00:05:47 2023 by rpki-client on console-ams.rpki-client.org