Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/02/13e12a-2bac-4752-997d-df86b6dd997c/1/591g0Jqh1nntabGQ_Ws_wROMhEs.roa
File: 591g0Jqh1nntabGQ_Ws_wROMhEs.roa (raw, json)
Hash identifier: h6sZsLp7OwSpDCfF9dAxpiXlSvmv/GQ3PFuZsiqwUBk=
Subject key identifier: E7:DD:60:D0:9A:A1:D6:79:ED:69:B1:90:FD:6B:3F:C1:13:8C:84:4B
Certificate issuer: /CN=2f814adc1d5209e098f078adbc856bad83b749c2
Certificate serial: 018573682C09BB33F6ECBA8C2A1A5A876BD8
Authority key identifier: 2F:81:4A:DC:1D:52:09:E0:98:F0:78:AD:BC:85:6B:AD:83:B7:49:C2
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/L4FK3B1SCeCY8HitvIVrrYO3ScI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/02/13e12a-2bac-4752-997d-df86b6dd997c/1/591g0Jqh1nntabGQ_Ws_wROMhEs.roa
Signing time: Mon 02 Jan 2023 16:54:44 +0000
ROA not before: Mon 02 Jan 2023 16:54:44 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 16322
IP address blocks: 31.214.248.0/21 maxlen: 21
37.228.131.0/24 maxlen: 24
37.228.135.0/24 maxlen: 24
37.228.133.0/24 maxlen: 24
37.228.136.0/22 maxlen: 22
31.214.200.0/23 maxlen: 23
31.214.228.0/22 maxlen: 22
134.255.200.0/21 maxlen: 21
134.255.245.0/24 maxlen: 24
134.255.246.0/24 maxlen: 24
134.255.249.0/24 maxlen: 24
134.255.196.0/23 maxlen: 23
91.99.160.0/19 maxlen: 19
91.99.160.0/20 maxlen: 20
91.99.176.0/20 maxlen: 20
91.99.184.0/22 maxlen: 22
91.99.182.0/23 maxlen: 23
91.99.192.0/20 maxlen: 20
82.99.192.0/24 maxlen: 24
82.99.192.0/19 maxlen: 22
82.99.193.0/24 maxlen: 24
82.99.195.0/24 maxlen: 24
82.99.196.0/24 maxlen: 24
82.99.192.0/18 maxlen: 18
91.99.104.0/21 maxlen: 21
91.99.112.0/20 maxlen: 20
91.99.130.0/23 maxlen: 23
91.99.128.0/19 maxlen: 19
91.99.128.0/18 maxlen: 18
91.99.128.0/20 maxlen: 20
91.99.132.0/22 maxlen: 22
91.99.136.0/21 maxlen: 21
91.99.144.0/22 maxlen: 22
91.99.144.0/20 maxlen: 20
31.214.146.0/24 maxlen: 24
31.214.147.0/24 maxlen: 24
31.214.146.0/23 maxlen: 23
31.214.154.0/24 maxlen: 24
31.214.172.0/22 maxlen: 22
31.214.170.0/23 maxlen: 23
31.214.168.0/23 maxlen: 23
31.214.168.0/21 maxlen: 21
82.99.204.0/24 maxlen: 24
82.99.206.0/24 maxlen: 24
82.99.201.0/24 maxlen: 24
82.99.212.0/24 maxlen: 24
82.99.209.0/24 maxlen: 24
82.99.210.0/24 maxlen: 24
91.99.208.0/20 maxlen: 20
91.99.210.0/23 maxlen: 23
82.99.216.0/22 maxlen: 22
91.99.214.0/23 maxlen: 23
82.99.224.0/19 maxlen: 19
91.99.224.0/23 maxlen: 23
91.99.220.0/22 maxlen: 22
82.99.233.0/24 maxlen: 24
82.99.228.0/24 maxlen: 24
82.99.231.0/24 maxlen: 24
82.99.240.0/24 maxlen: 24
82.99.235.0/24 maxlen: 24
91.99.238.0/23 maxlen: 23
91.99.236.0/23 maxlen: 23
91.99.240.0/20 maxlen: 20
91.99.252.0/22 maxlen: 22
91.99.248.0/22 maxlen: 22
31.214.132.0/23 maxlen: 23
82.99.249.0/24 maxlen: 24
82.99.250.0/24 maxlen: 24
82.99.251.0/24 maxlen: 24
91.98.192.0/20 maxlen: 20
91.98.192.0/19 maxlen: 19
91.98.208.0/20 maxlen: 20
91.98.226.0/23 maxlen: 23
91.98.224.0/19 maxlen: 19
91.98.224.0/24 maxlen: 24
91.98.144.0/23 maxlen: 23
91.98.152.0/22 maxlen: 22
91.98.160.0/20 maxlen: 20
91.98.160.0/19 maxlen: 19
91.99.64.0/19 maxlen: 19
91.99.65.0/24 maxlen: 24
91.99.66.0/24 maxlen: 24
91.99.78.0/24 maxlen: 24
91.99.80.0/22 maxlen: 22
91.99.84.0/22 maxlen: 22
91.99.88.0/22 maxlen: 22
91.98.240.0/21 maxlen: 21
91.98.252.0/23 maxlen: 23
91.99.0.0/19 maxlen: 19
91.99.0.0/16 maxlen: 16
91.99.32.0/19 maxlen: 19
91.98.0.0/22 maxlen: 22
37.10.109.0/24 maxlen: 24
91.98.0.0/20 maxlen: 20
37.10.117.0/24 maxlen: 24
91.98.0.0/16 maxlen: 24
91.98.16.0/24 maxlen: 24
91.98.0.0/15 maxlen: 19
91.98.19.0/24 maxlen: 24
37.10.64.0/22 maxlen: 22
185.10.71.0/24 maxlen: 24
91.98.84.0/22 maxlen: 22
91.98.82.0/24 maxlen: 24
91.98.88.0/24 maxlen: 24
91.98.111.0/24 maxlen: 24
91.98.57.0/24 maxlen: 24
91.98.64.0/19 maxlen: 19
91.98.68.0/24 maxlen: 24
46.251.226.0/24 maxlen: 24
46.251.224.0/24 maxlen: 24
46.251.237.0/24 maxlen: 24
109.230.246.0/23 maxlen: 23
46.62.136.0/24 maxlen: 24
46.62.137.0/24 maxlen: 24
46.62.133.0/24 maxlen: 24
46.62.134.0/24 maxlen: 24
46.62.138.0/23 maxlen: 23
109.230.246.0/24 maxlen: 24
109.230.242.0/24 maxlen: 24
46.62.144.0/24 maxlen: 24
46.62.140.0/24 maxlen: 24
95.156.222.0/23 maxlen: 23
46.62.142.0/23 maxlen: 23
109.230.251.0/24 maxlen: 24
46.62.144.0/20 maxlen: 20
109.230.247.0/24 maxlen: 24
46.62.147.0/24 maxlen: 24
46.62.148.0/22 maxlen: 22
95.156.233.0/24 maxlen: 24
46.62.152.0/24 maxlen: 24
95.156.236.0/23 maxlen: 23
95.156.234.0/23 maxlen: 23
46.62.156.0/24 maxlen: 24
46.62.158.0/24 maxlen: 24
46.62.153.0/24 maxlen: 24
46.62.160.0/19 maxlen: 19
46.62.165.0/24 maxlen: 24
46.62.168.0/21 maxlen: 21
46.62.168.0/22 maxlen: 22
46.62.172.0/22 maxlen: 22
46.62.166.0/23 maxlen: 23
95.156.248.0/23 maxlen: 23
46.62.178.0/23 maxlen: 23
46.62.176.0/20 maxlen: 20
46.62.180.0/22 maxlen: 22
46.62.184.0/22 maxlen: 22
109.230.192.0/23 maxlen: 23
109.230.200.0/24 maxlen: 24
109.230.204.0/22 maxlen: 22
109.230.223.0/24 maxlen: 24
109.230.221.0/24 maxlen: 24
46.62.131.0/24 maxlen: 24
46.62.132.0/24 maxlen: 24
46.62.128.0/23 maxlen: 23
46.62.128.0/20 maxlen: 20
46.62.128.0/19 maxlen: 19
46.62.128.0/17 maxlen: 24
46.62.240.0/20 maxlen: 20
46.62.188.0/22 maxlen: 22
46.62.192.0/19 maxlen: 19
46.62.192.0/18 maxlen: 18
46.62.208.0/20 maxlen: 20
46.62.224.0/20 maxlen: 20
46.62.224.0/19 maxlen: 19
213.217.32.0/20 maxlen: 24
213.217.32.0/19 maxlen: 19
213.217.36.0/22 maxlen: 22
213.217.41.0/24 maxlen: 24
213.217.46.0/24 maxlen: 24
213.217.47.0/24 maxlen: 24
213.217.48.0/20 maxlen: 20
213.217.55.0/24 maxlen: 24
213.217.56.0/24 maxlen: 24
213.217.57.0/24 maxlen: 24
213.217.54.0/24 maxlen: 24
213.217.52.0/22 maxlen: 22
213.217.62.0/24 maxlen: 24
46.41.192.0/19 maxlen: 19
46.41.192.0/20 maxlen: 20
46.41.192.0/18 maxlen: 18
46.41.224.0/20 maxlen: 20
46.41.224.0/19 maxlen: 19
185.13.228.0/22 maxlen: 22
178.169.0.0/19 maxlen: 19
Validation: Failed, RFC 3779 resource not subset of parent's resources
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:85:73:68:2c:09:bb:33:f6:ec:ba:8c:2a:1a:5a:87:6b:d8
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2f814adc1d5209e098f078adbc856bad83b749c2
Validity
Not Before: Jan 2 16:54:44 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=e7dd60d09aa1d679ed69b190fd6b3fc1138c844b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c3:4b:79:be:a8:84:d4:c4:ff:58:83:b3:6b:56:
f0:b7:d4:41:9c:c0:84:ac:cc:41:be:74:e5:95:ca:
6e:79:67:ce:c6:ce:03:0a:0b:a9:1e:12:d3:03:fe:
4e:29:99:79:0f:c8:8a:1f:d3:95:38:af:fa:48:0a:
30:a3:b4:92:01:dd:c8:97:28:64:34:c4:04:de:cf:
1b:c3:c0:57:0f:08:e7:f9:0d:d3:69:ce:25:88:0c:
dd:75:f3:9b:eb:83:28:a7:e0:03:1d:9a:d6:b1:c9:
cc:83:1d:fe:eb:3c:2e:f5:e4:82:4b:21:a9:c5:e2:
25:c2:ef:3e:86:69:91:99:08:86:71:b2:c9:87:14:
c7:4a:13:b6:b5:ff:1b:ab:ad:10:0c:13:8e:81:ca:
2b:ac:23:a4:e7:9b:cf:1a:30:f7:52:7b:e5:f2:85:
21:bd:30:05:9b:95:71:8d:83:7e:cb:47:69:cc:d4:
6c:2f:30:5d:33:df:5e:fb:ac:a2:0c:bd:90:1b:b2:
3a:56:25:b7:ba:78:1d:db:66:1c:be:a4:dc:93:a4:
01:21:25:cf:97:4f:ea:95:f6:92:be:55:6a:b5:04:
02:e5:23:de:77:53:34:ac:10:9f:b5:54:ee:ca:e1:
0c:09:ec:4e:0d:30:a6:7d:8e:3d:e9:8c:f8:fa:50:
c0:61
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E7:DD:60:D0:9A:A1:D6:79:ED:69:B1:90:FD:6B:3F:C1:13:8C:84:4B
X509v3 Authority Key Identifier:
keyid:2F:81:4A:DC:1D:52:09:E0:98:F0:78:AD:BC:85:6B:AD:83:B7:49:C2
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/L4FK3B1SCeCY8HitvIVrrYO3ScI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/02/13e12a-2bac-4752-997d-df86b6dd997c/1/591g0Jqh1nntabGQ_Ws_wROMhEs.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/02/13e12a-2bac-4752-997d-df86b6dd997c/1/L4FK3B1SCeCY8HitvIVrrYO3ScI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
31.214.132.0/23
31.214.146.0/23
31.214.154.0/24
31.214.168.0/21
31.214.200.0/23
31.214.228.0/22
31.214.248.0/21
37.10.64.0/22
37.10.109.0/24
37.10.117.0/24
37.228.131.0/24
37.228.133.0/24
37.228.135.0-37.228.139.255
46.41.192.0/18
46.62.128.0/17
46.251.224.0/24
46.251.226.0/24
46.251.237.0/24
82.99.192.0/18
91.98.0.0/15
95.156.222.0/23
95.156.233.0-95.156.237.255
95.156.248.0/23
109.230.192.0/23
109.230.200.0/24
109.230.204.0/22
109.230.221.0/24
109.230.223.0/24
109.230.242.0/24
109.230.246.0/23
109.230.251.0/24
134.255.196.0/23
134.255.200.0/21
134.255.245.0-134.255.246.255
134.255.249.0/24
178.169.0.0/19
185.10.71.0/24
185.13.228.0/22
213.217.32.0/19
Signature Algorithm: sha256WithRSAEncryption
0f:11:7f:c2:f1:30:b2:db:3d:65:e5:6b:f6:fa:5e:0a:7b:1f:
25:3b:50:c7:2c:4d:b8:d9:ed:bd:fb:36:04:32:3a:21:5b:4d:
99:bd:ee:1c:7b:b6:71:ad:70:36:08:30:15:4a:b3:fd:06:25:
14:ea:02:e3:87:be:0a:b4:b0:5d:a3:fd:e3:6d:3c:b7:b0:15:
df:2e:c2:65:76:ae:04:4f:65:f2:47:c2:54:ae:1a:1c:b5:33:
cd:55:2b:a0:98:be:13:8d:e9:da:f9:96:7d:11:cf:67:f7:67:
62:f0:51:f3:d7:10:35:18:a5:35:c0:30:5c:d5:bd:94:18:2c:
04:70:ba:0f:a2:e4:ce:15:81:ae:b5:f3:17:d4:c3:73:78:dd:
f6:74:86:2c:f2:d3:7b:79:dc:88:51:61:a4:99:91:6c:15:8f:
33:a1:2d:12:1c:95:1e:76:69:b0:49:a4:aa:6b:d2:c5:94:cd:
40:a8:c5:8b:58:42:1c:fe:d0:b5:8f:ce:e9:a5:19:b6:c7:48:
22:0b:9c:f4:a1:bc:08:7d:03:34:4b:c3:ef:d5:8e:8e:bd:f1:
e8:1b:04:70:73:32:06:b7:d5:cb:5b:6f:33:2d:5b:52:11:f9:
53:4a:af:0b:5d:22:cf:b0:91:9b:b9:f4:83:c1:e6:5e:59:00:
2a:1d:c6:74
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 18:50:06 2024 by rpki-client on console-ams.rpki-client.org