Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/02/13e12a-2bac-4752-997d-df86b6dd997c/1/HqEHh8dLTP-S8MOS8YpfquTHKbk.roa
File: HqEHh8dLTP-S8MOS8YpfquTHKbk.roa (raw, json)
Hash identifier: rDAOPWuwwCvxk1MvJcZz7wmxD1sVvRbk+iG4cHhOUig=
Subject key identifier: 1E:A1:07:87:C7:4B:4C:FF:92:F0:C3:92:F1:8A:5F:AA:E4:C7:29:B9
Certificate issuer: /CN=2f814adc1d5209e098f078adbc856bad83b749c2
Certificate serial: 018360E0A3EED0C290C09BA233ADC0441BA5
Authority key identifier: 2F:81:4A:DC:1D:52:09:E0:98:F0:78:AD:BC:85:6B:AD:83:B7:49:C2
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/L4FK3B1SCeCY8HitvIVrrYO3ScI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/02/13e12a-2bac-4752-997d-df86b6dd997c/1/HqEHh8dLTP-S8MOS8YpfquTHKbk.roa
Signing time: Wed 21 Sep 2022 16:27:58 +0000
ROA not before: Wed 21 Sep 2022 16:27:58 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 16322
IP address blocks: 31.214.248.0/21 maxlen: 21
37.228.131.0/24 maxlen: 24
37.228.135.0/24 maxlen: 24
37.228.133.0/24 maxlen: 24
37.228.136.0/22 maxlen: 22
31.214.200.0/23 maxlen: 23
31.214.228.0/22 maxlen: 22
134.255.200.0/21 maxlen: 21
134.255.245.0/24 maxlen: 24
134.255.246.0/24 maxlen: 24
134.255.249.0/24 maxlen: 24
134.255.196.0/23 maxlen: 23
91.99.160.0/19 maxlen: 19
91.99.160.0/20 maxlen: 20
91.99.176.0/20 maxlen: 20
91.99.184.0/22 maxlen: 22
91.99.182.0/23 maxlen: 23
91.99.192.0/20 maxlen: 20
82.99.192.0/24 maxlen: 24
82.99.192.0/19 maxlen: 22
82.99.193.0/24 maxlen: 24
82.99.195.0/24 maxlen: 24
82.99.196.0/24 maxlen: 24
82.99.192.0/18 maxlen: 18
91.99.104.0/21 maxlen: 21
91.99.112.0/20 maxlen: 20
91.99.130.0/23 maxlen: 23
91.99.128.0/19 maxlen: 19
91.99.128.0/18 maxlen: 18
91.99.128.0/20 maxlen: 20
91.99.132.0/22 maxlen: 22
91.99.136.0/21 maxlen: 21
91.99.144.0/22 maxlen: 22
91.99.144.0/20 maxlen: 20
31.214.146.0/23 maxlen: 23
31.214.154.0/24 maxlen: 24
31.214.172.0/22 maxlen: 22
31.214.170.0/23 maxlen: 23
31.214.168.0/23 maxlen: 23
31.214.168.0/21 maxlen: 21
82.99.204.0/24 maxlen: 24
82.99.206.0/24 maxlen: 24
82.99.201.0/24 maxlen: 24
82.99.212.0/24 maxlen: 24
82.99.209.0/24 maxlen: 24
82.99.210.0/24 maxlen: 24
91.99.208.0/20 maxlen: 20
91.99.210.0/23 maxlen: 23
82.99.216.0/22 maxlen: 22
91.99.214.0/23 maxlen: 23
82.99.224.0/19 maxlen: 19
91.99.224.0/23 maxlen: 23
91.99.220.0/22 maxlen: 22
82.99.233.0/24 maxlen: 24
82.99.228.0/24 maxlen: 24
82.99.231.0/24 maxlen: 24
82.99.240.0/24 maxlen: 24
82.99.235.0/24 maxlen: 24
91.99.238.0/23 maxlen: 23
91.99.236.0/23 maxlen: 23
91.99.240.0/20 maxlen: 20
91.99.252.0/22 maxlen: 22
91.99.248.0/22 maxlen: 22
31.214.132.0/23 maxlen: 23
82.99.249.0/24 maxlen: 24
82.99.250.0/24 maxlen: 24
82.99.251.0/24 maxlen: 24
91.98.192.0/20 maxlen: 20
91.98.192.0/19 maxlen: 19
91.98.208.0/20 maxlen: 20
91.98.226.0/23 maxlen: 23
91.98.224.0/19 maxlen: 19
91.98.224.0/24 maxlen: 24
91.98.144.0/23 maxlen: 23
91.98.152.0/22 maxlen: 22
91.98.160.0/20 maxlen: 20
91.98.160.0/19 maxlen: 19
91.99.64.0/19 maxlen: 19
91.99.65.0/24 maxlen: 24
91.99.66.0/24 maxlen: 24
91.99.78.0/24 maxlen: 24
91.99.80.0/22 maxlen: 22
91.99.84.0/22 maxlen: 22
91.99.88.0/22 maxlen: 22
91.98.240.0/21 maxlen: 21
91.98.252.0/23 maxlen: 23
91.99.0.0/19 maxlen: 19
91.99.0.0/16 maxlen: 16
91.99.32.0/19 maxlen: 19
91.98.0.0/22 maxlen: 22
37.10.109.0/24 maxlen: 24
91.98.0.0/20 maxlen: 20
37.10.117.0/24 maxlen: 24
91.98.0.0/16 maxlen: 24
91.98.16.0/24 maxlen: 24
91.98.0.0/15 maxlen: 19
91.98.19.0/24 maxlen: 24
37.10.64.0/22 maxlen: 22
185.10.71.0/24 maxlen: 24
91.98.84.0/22 maxlen: 22
91.98.82.0/24 maxlen: 24
91.98.88.0/24 maxlen: 24
91.98.111.0/24 maxlen: 24
91.98.57.0/24 maxlen: 24
91.98.64.0/19 maxlen: 19
91.98.68.0/24 maxlen: 24
46.251.226.0/24 maxlen: 24
46.251.224.0/24 maxlen: 24
46.251.237.0/24 maxlen: 24
109.230.246.0/23 maxlen: 23
46.62.136.0/24 maxlen: 24
46.62.137.0/24 maxlen: 24
46.62.133.0/24 maxlen: 24
46.62.134.0/24 maxlen: 24
46.62.138.0/23 maxlen: 23
109.230.246.0/24 maxlen: 24
109.230.242.0/24 maxlen: 24
46.62.144.0/24 maxlen: 24
46.62.140.0/24 maxlen: 24
95.156.222.0/23 maxlen: 23
46.62.142.0/23 maxlen: 23
109.230.251.0/24 maxlen: 24
46.62.144.0/20 maxlen: 20
109.230.247.0/24 maxlen: 24
46.62.147.0/24 maxlen: 24
46.62.148.0/22 maxlen: 22
95.156.233.0/24 maxlen: 24
46.62.152.0/24 maxlen: 24
95.156.236.0/23 maxlen: 23
95.156.234.0/23 maxlen: 23
46.62.156.0/24 maxlen: 24
46.62.158.0/24 maxlen: 24
46.62.153.0/24 maxlen: 24
46.62.160.0/19 maxlen: 19
46.62.165.0/24 maxlen: 24
46.62.168.0/21 maxlen: 21
46.62.168.0/22 maxlen: 22
46.62.172.0/22 maxlen: 22
46.62.166.0/23 maxlen: 23
95.156.248.0/23 maxlen: 23
46.62.178.0/23 maxlen: 23
46.62.176.0/20 maxlen: 20
46.62.180.0/22 maxlen: 22
46.62.184.0/22 maxlen: 22
109.230.192.0/23 maxlen: 23
109.230.200.0/24 maxlen: 24
109.230.204.0/22 maxlen: 22
109.230.223.0/24 maxlen: 24
109.230.221.0/24 maxlen: 24
46.62.131.0/24 maxlen: 24
46.62.132.0/24 maxlen: 24
46.62.128.0/23 maxlen: 23
46.62.128.0/20 maxlen: 20
46.62.128.0/19 maxlen: 19
46.62.128.0/17 maxlen: 24
46.62.240.0/20 maxlen: 20
46.62.188.0/22 maxlen: 22
46.62.192.0/19 maxlen: 19
46.62.192.0/18 maxlen: 18
46.62.208.0/20 maxlen: 20
46.62.224.0/20 maxlen: 20
46.62.224.0/19 maxlen: 19
213.217.32.0/20 maxlen: 24
213.217.32.0/19 maxlen: 19
213.217.36.0/22 maxlen: 22
213.217.41.0/24 maxlen: 24
213.217.46.0/24 maxlen: 24
213.217.47.0/24 maxlen: 24
213.217.48.0/20 maxlen: 20
213.217.55.0/24 maxlen: 24
213.217.56.0/24 maxlen: 24
213.217.57.0/24 maxlen: 24
213.217.54.0/24 maxlen: 24
213.217.52.0/22 maxlen: 22
213.217.62.0/24 maxlen: 24
46.41.192.0/19 maxlen: 19
46.41.192.0/20 maxlen: 20
46.41.192.0/18 maxlen: 18
46.41.224.0/20 maxlen: 20
46.41.224.0/19 maxlen: 19
185.13.228.0/22 maxlen: 22
178.169.0.0/19 maxlen: 19
Validation: Failed, RFC 3779 resource not subset of parent's resources
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:83:60:e0:a3:ee:d0:c2:90:c0:9b:a2:33:ad:c0:44:1b:a5
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2f814adc1d5209e098f078adbc856bad83b749c2
Validity
Not Before: Sep 21 16:27:58 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=1ea10787c74b4cff92f0c392f18a5faae4c729b9
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:92:c8:e8:05:e0:50:e2:18:8a:bb:42:51:f2:04:
0e:e3:6d:f0:84:41:94:06:96:32:e6:41:1a:2c:e2:
e5:b5:0f:57:22:80:41:44:3d:cd:bb:a9:d8:5f:a8:
c2:08:f9:68:4f:10:8b:03:e8:6b:32:f9:1d:14:e4:
0c:11:34:91:5b:84:1c:3c:a8:8f:62:82:66:df:e5:
a1:c4:ef:96:29:f5:b9:9f:9d:91:98:a7:e3:1f:cf:
c2:28:fa:f2:57:54:17:d6:f9:f6:21:9b:a8:61:ca:
f7:3c:85:02:34:67:8c:40:66:b6:89:40:de:23:ad:
17:fb:69:e1:ac:67:4b:a0:d2:ec:cc:cf:cc:72:bc:
ac:43:95:02:23:0f:cd:9c:b2:1a:cc:21:61:e5:bf:
6f:4b:df:ad:0c:c3:81:3e:72:ad:23:9f:c5:78:59:
d2:3e:92:9e:47:34:e4:56:fb:ef:b1:5a:c2:37:91:
b7:3d:34:1a:58:aa:a5:d0:a3:24:4a:32:4a:7a:3c:
00:9e:c4:e6:b8:ec:c2:38:e4:cd:8e:6c:39:12:d5:
32:50:8a:fd:a9:8d:82:81:b9:3f:35:23:ec:b9:de:
52:c1:68:00:56:50:c2:f8:0d:7f:51:63:80:cd:67:
9e:88:8d:b3:9d:4f:99:f1:b8:bc:e9:3e:f8:9b:91:
8f:d7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
1E:A1:07:87:C7:4B:4C:FF:92:F0:C3:92:F1:8A:5F:AA:E4:C7:29:B9
X509v3 Authority Key Identifier:
keyid:2F:81:4A:DC:1D:52:09:E0:98:F0:78:AD:BC:85:6B:AD:83:B7:49:C2
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/L4FK3B1SCeCY8HitvIVrrYO3ScI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/02/13e12a-2bac-4752-997d-df86b6dd997c/1/HqEHh8dLTP-S8MOS8YpfquTHKbk.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/02/13e12a-2bac-4752-997d-df86b6dd997c/1/L4FK3B1SCeCY8HitvIVrrYO3ScI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
31.214.132.0/23
31.214.146.0/23
31.214.154.0/24
31.214.168.0/21
31.214.200.0/23
31.214.228.0/22
31.214.248.0/21
37.10.64.0/22
37.10.109.0/24
37.10.117.0/24
37.228.131.0/24
37.228.133.0/24
37.228.135.0-37.228.139.255
46.41.192.0/18
46.62.128.0/17
46.251.224.0/24
46.251.226.0/24
46.251.237.0/24
82.99.192.0/18
91.98.0.0/15
95.156.222.0/23
95.156.233.0-95.156.237.255
95.156.248.0/23
109.230.192.0/23
109.230.200.0/24
109.230.204.0/22
109.230.221.0/24
109.230.223.0/24
109.230.242.0/24
109.230.246.0/23
109.230.251.0/24
134.255.196.0/23
134.255.200.0/21
134.255.245.0-134.255.246.255
134.255.249.0/24
178.169.0.0/19
185.10.71.0/24
185.13.228.0/22
213.217.32.0/19
Signature Algorithm: sha256WithRSAEncryption
3c:05:c4:35:0f:1b:9f:bf:0c:ff:73:d5:8e:b4:e3:26:47:cf:
3e:64:c5:3f:8a:64:39:d7:65:02:6e:83:7f:b8:8b:1b:80:c9:
34:f4:6b:89:36:88:0b:40:41:b0:a5:ef:f5:94:62:a9:40:e6:
6e:87:76:47:44:20:80:bb:a8:aa:f4:f0:fd:a5:8e:16:ea:66:
c2:05:d4:eb:e8:5e:a7:83:24:d7:34:13:66:33:01:26:9b:73:
0b:16:7d:a7:73:4f:6f:aa:29:c7:cc:53:bd:92:c7:5d:3a:ed:
d3:c7:6c:45:78:a8:91:5d:6b:87:e9:80:f0:c9:e5:29:9d:6f:
5f:7e:a1:6d:0d:e4:21:07:cf:fd:b2:75:e0:35:31:d0:6d:73:
1a:08:20:bf:6d:7c:89:73:bd:92:5b:95:86:86:b2:5d:b2:55:
8f:d0:56:f5:c5:9d:14:9e:6d:ca:b7:0b:f2:b6:d9:df:1f:80:
01:cd:5b:df:e4:36:ac:7c:4b:b9:eb:bf:be:39:dd:43:32:63:
33:30:40:16:50:a8:de:6c:32:e8:55:f3:f3:65:e9:b4:b5:99:
d8:56:27:24:47:0d:20:47:70:91:a8:37:45:10:91:fc:17:82:
bf:f6:a3:6a:6e:f5:6d:7a:65:06:07:79:9d:b1:4c:43:ee:c3:
e9:c4:3a:b0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:16:42 2024 by rpki-client on console-fra.rpki-client.org