Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/02/13e12a-2bac-4752-997d-df86b6dd997c/1/CiTkKTU4Et8fewejxVnCT0ACX-s.roa
File: CiTkKTU4Et8fewejxVnCT0ACX-s.roa (raw, json)
Hash identifier: nfcyCuX3zByuNuTsufvG1IZcLmXBxRNosySmh8dDoR0=
Subject key identifier: 0A:24:E4:29:35:38:12:DF:1F:7B:07:A3:C5:59:C2:4F:40:02:5F:EB
Certificate issuer: /CN=2f814adc1d5209e098f078adbc856bad83b749c2
Certificate serial: 0183C5E536132B01D0D39B094B2BB91030A7
Authority key identifier: 2F:81:4A:DC:1D:52:09:E0:98:F0:78:AD:BC:85:6B:AD:83:B7:49:C2
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/L4FK3B1SCeCY8HitvIVrrYO3ScI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/02/13e12a-2bac-4752-997d-df86b6dd997c/1/CiTkKTU4Et8fewejxVnCT0ACX-s.roa
Signing time: Tue 11 Oct 2022 07:14:36 +0000
ROA not before: Tue 11 Oct 2022 07:14:36 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 60976
IP address blocks: 31.214.248.0/21 maxlen: 21
31.214.249.0/24 maxlen: 24
31.214.248.0/24 maxlen: 24
31.214.253.0/24 maxlen: 24
31.214.252.0/24 maxlen: 24
31.214.251.0/24 maxlen: 24
31.214.250.0/24 maxlen: 24
31.214.255.0/24 maxlen: 24
31.214.254.0/24 maxlen: 24
37.228.139.0/24 maxlen: 24
37.228.138.0/24 maxlen: 24
37.228.137.0/24 maxlen: 24
37.228.136.0/24 maxlen: 24
134.255.200.0/21 maxlen: 21
134.255.206.0/24 maxlen: 24
134.255.205.0/24 maxlen: 24
134.255.204.0/24 maxlen: 24
134.255.203.0/24 maxlen: 24
134.255.202.0/24 maxlen: 24
134.255.201.0/24 maxlen: 24
134.255.200.0/24 maxlen: 24
134.255.207.0/24 maxlen: 24
95.156.237.0/24 maxlen: 24
95.156.236.0/24 maxlen: 24
95.156.253.0/24 maxlen: 24
95.156.252.0/24 maxlen: 24
95.156.252.0/22 maxlen: 22
95.156.255.0/24 maxlen: 24
95.156.254.0/24 maxlen: 24
91.99.96.0/21 maxlen: 21
91.99.98.0/24 maxlen: 24
91.99.97.0/24 maxlen: 24
91.99.96.0/24 maxlen: 24
91.99.103.0/24 maxlen: 24
91.99.102.0/24 maxlen: 24
91.99.101.0/24 maxlen: 24
91.99.99.0/24 maxlen: 24
31.214.172.0/24 maxlen: 24
31.214.171.0/24 maxlen: 24
31.214.170.0/24 maxlen: 24
31.214.169.0/24 maxlen: 24
31.214.168.0/24 maxlen: 24
31.214.168.0/21 maxlen: 21
31.214.175.0/24 maxlen: 24
31.214.174.0/24 maxlen: 24
31.214.173.0/24 maxlen: 24
82.99.216.0/22 maxlen: 22
82.99.219.0/24 maxlen: 24
91.99.219.0/24 maxlen: 24
82.99.218.0/24 maxlen: 24
82.99.215.0/24 maxlen: 24
91.99.218.0/24 maxlen: 24
82.99.217.0/24 maxlen: 24
91.99.217.0/24 maxlen: 24
82.99.216.0/24 maxlen: 24
91.99.216.0/24 maxlen: 24
82.99.238.0/24 maxlen: 24
82.99.244.0/24 maxlen: 24
82.99.243.0/24 maxlen: 24
82.99.242.0/24 maxlen: 24
91.99.75.0/24 maxlen: 24
91.99.74.0/24 maxlen: 24
91.99.73.0/24 maxlen: 24
91.99.72.0/24 maxlen: 24
91.98.96.0/21 maxlen: 21
91.98.97.0/24 maxlen: 24
91.98.96.0/24 maxlen: 24
91.98.98.0/24 maxlen: 24
91.98.102.0/24 maxlen: 24
91.98.100.0/24 maxlen: 24
91.98.99.0/24 maxlen: 24
91.98.31.0/24 maxlen: 24
185.13.231.0/24 maxlen: 24
91.98.28.0/22 maxlen: 22
91.98.30.0/24 maxlen: 24
91.98.29.0/24 maxlen: 24
185.13.230.0/24 maxlen: 24
185.13.229.0/24 maxlen: 24
185.13.228.0/24 maxlen: 24
185.13.228.0/22 maxlen: 22
91.98.28.0/24 maxlen: 24
Validation: Failed, RFC 3779 resource not subset of parent's resources
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:83:c5:e5:36:13:2b:01:d0:d3:9b:09:4b:2b:b9:10:30:a7
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2f814adc1d5209e098f078adbc856bad83b749c2
Validity
Not Before: Oct 11 07:14:36 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=0a24e429353812df1f7b07a3c559c24f40025feb
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8d:e3:ea:cf:8f:5d:e2:20:bc:a6:69:19:3e:79:
fd:c1:af:3d:fd:24:ae:0a:14:a8:a0:cb:06:4a:0c:
be:9f:ff:ac:d7:86:97:89:eb:67:d2:0c:57:15:23:
09:4f:8d:51:95:79:20:39:2e:26:68:9d:8a:42:06:
fe:43:69:40:ef:a5:a5:36:31:2d:9c:54:62:30:4e:
35:00:87:ae:fd:64:4b:e8:87:6d:08:df:f6:a5:34:
93:a4:d2:82:3c:1d:73:b0:e9:68:bc:d3:95:5e:32:
19:4f:c7:4f:b3:06:17:95:cf:95:06:99:0d:13:49:
dc:31:62:49:ed:95:75:76:53:14:cd:68:f4:65:d4:
24:e9:4e:60:c4:1d:f7:ee:22:30:2d:01:63:a2:25:
ca:7f:f3:17:73:2e:1c:69:0e:2a:5c:ac:75:31:89:
66:3a:c6:cf:ed:ea:48:3e:a2:b2:ad:a4:22:33:e1:
4e:6a:9a:f9:95:81:b4:38:24:e9:04:6f:2a:72:74:
af:f3:c0:6f:fb:35:1c:f3:39:50:c2:29:88:f8:d4:
86:a5:af:b4:fb:cb:fa:f4:0c:81:d2:a3:c7:47:9d:
8f:77:16:be:8c:6e:e4:b7:d6:99:db:2a:99:77:42:
70:af:86:f7:da:44:9e:d8:e2:8e:c6:80:57:f1:d2:
90:cb
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
0A:24:E4:29:35:38:12:DF:1F:7B:07:A3:C5:59:C2:4F:40:02:5F:EB
X509v3 Authority Key Identifier:
keyid:2F:81:4A:DC:1D:52:09:E0:98:F0:78:AD:BC:85:6B:AD:83:B7:49:C2
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/L4FK3B1SCeCY8HitvIVrrYO3ScI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/02/13e12a-2bac-4752-997d-df86b6dd997c/1/CiTkKTU4Et8fewejxVnCT0ACX-s.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/02/13e12a-2bac-4752-997d-df86b6dd997c/1/L4FK3B1SCeCY8HitvIVrrYO3ScI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
31.214.168.0/21
31.214.248.0/21
37.228.136.0/22
82.99.215.0-82.99.219.255
82.99.238.0/24
82.99.242.0-82.99.244.255
91.98.28.0/22
91.98.96.0/21
91.99.72.0/22
91.99.96.0/21
91.99.216.0/22
95.156.236.0/23
95.156.252.0/22
134.255.200.0/21
185.13.228.0/22
Signature Algorithm: sha256WithRSAEncryption
45:e1:4f:35:11:91:be:db:ac:fe:6b:47:34:c7:fd:e9:d2:54:
2e:03:53:a5:fa:aa:49:d1:14:a4:32:60:ec:1d:81:1a:77:6e:
ba:3c:a9:2e:d6:4e:b4:0c:01:9b:07:33:22:f5:b0:4a:09:6a:
16:b1:51:c4:a4:47:16:cc:4f:4b:22:75:66:ba:4e:c8:f1:79:
4e:7a:bc:6e:cf:38:65:78:9d:5e:d7:21:23:7b:1b:50:96:ef:
18:ca:ab:63:ac:f6:9b:84:d7:9e:16:59:fe:81:e1:0a:df:14:
d3:75:e7:1d:5f:a1:fd:dc:41:c3:06:9e:1e:bf:a6:95:2b:13:
1e:15:62:50:a5:53:12:fe:c1:6a:3f:e2:5b:b7:70:11:b7:7f:
11:4c:1d:48:13:68:8b:e1:37:44:b9:f0:17:dc:30:ba:b0:1e:
0a:17:6b:56:d4:c9:82:82:62:57:72:f2:26:58:4b:66:f0:e0:
ce:c9:8a:f3:6d:1b:30:73:db:3d:7f:cb:3f:00:06:ac:f9:73:
6f:65:15:15:b5:14:c0:71:6a:8c:b2:ca:77:3e:23:27:cf:80:
77:71:06:19:cd:db:cc:f7:c1:d9:2e:8b:b1:24:b6:d0:fb:f3:
cc:55:13:95:e6:c0:cb:e6:e5:e3:f9:b0:af:ab:ad:ba:41:ea:
ae:6b:09:3a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:16:42 2024 by rpki-client on console-fra.rpki-client.org