Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/02/13e12a-2bac-4752-997d-df86b6dd997c/1/XmxWvutLNPwzv0IG8Z6dYjyJwjE.roa
File: XmxWvutLNPwzv0IG8Z6dYjyJwjE.roa (raw, json)
Hash identifier: I4+RZ4HXk8Yk6t4LkcQxRK7lnCL/tXfbjSDu/W2lNg8=
Subject key identifier: 5E:6C:56:BE:EB:4B:34:FC:33:BF:42:06:F1:9E:9D:62:3C:89:C2:31
Certificate issuer: /CN=2f814adc1d5209e098f078adbc856bad83b749c2
Certificate serial: 018625EB193E79360BD3F6C1BE59377414B1
Authority key identifier: 2F:81:4A:DC:1D:52:09:E0:98:F0:78:AD:BC:85:6B:AD:83:B7:49:C2
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/L4FK3B1SCeCY8HitvIVrrYO3ScI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/02/13e12a-2bac-4752-997d-df86b6dd997c/1/XmxWvutLNPwzv0IG8Z6dYjyJwjE.roa
Signing time: Mon 06 Feb 2023 08:50:09 +0000
ROA not before: Mon 06 Feb 2023 08:50:09 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 16322
IP address blocks: 31.214.248.0/21 maxlen: 21
37.228.131.0/24 maxlen: 24
37.228.135.0/24 maxlen: 24
37.228.133.0/24 maxlen: 24
37.228.136.0/22 maxlen: 22
31.214.200.0/23 maxlen: 23
31.214.228.0/22 maxlen: 22
134.255.200.0/21 maxlen: 21
134.255.245.0/24 maxlen: 24
134.255.246.0/24 maxlen: 24
134.255.249.0/24 maxlen: 24
134.255.196.0/23 maxlen: 23
91.99.160.0/19 maxlen: 19
91.99.160.0/20 maxlen: 20
91.99.176.0/20 maxlen: 20
91.99.184.0/22 maxlen: 22
91.99.182.0/23 maxlen: 23
91.99.192.0/20 maxlen: 20
82.99.192.0/24 maxlen: 24
82.99.192.0/19 maxlen: 22
82.99.193.0/24 maxlen: 24
82.99.195.0/24 maxlen: 24
82.99.196.0/24 maxlen: 24
82.99.192.0/18 maxlen: 18
91.99.104.0/21 maxlen: 21
91.99.112.0/20 maxlen: 20
91.99.130.0/23 maxlen: 23
91.99.128.0/19 maxlen: 19
91.99.128.0/18 maxlen: 18
91.99.128.0/20 maxlen: 20
91.99.132.0/22 maxlen: 22
91.99.136.0/21 maxlen: 21
91.99.144.0/22 maxlen: 22
91.99.144.0/20 maxlen: 20
31.214.146.0/24 maxlen: 24
31.214.147.0/24 maxlen: 24
31.214.146.0/23 maxlen: 23
31.214.154.0/24 maxlen: 24
31.214.172.0/22 maxlen: 22
31.214.170.0/23 maxlen: 23
31.214.168.0/23 maxlen: 23
31.214.168.0/21 maxlen: 21
82.99.204.0/24 maxlen: 24
82.99.206.0/24 maxlen: 24
82.99.201.0/24 maxlen: 24
82.99.212.0/24 maxlen: 24
82.99.209.0/24 maxlen: 24
82.99.210.0/24 maxlen: 24
91.99.208.0/20 maxlen: 20
91.99.210.0/23 maxlen: 23
82.99.216.0/22 maxlen: 22
91.99.214.0/23 maxlen: 23
91.99.224.0/23 maxlen: 23
82.99.224.0/19 maxlen: 19
91.99.220.0/22 maxlen: 22
82.99.233.0/24 maxlen: 24
82.99.228.0/24 maxlen: 24
82.99.230.0/24 maxlen: 24
82.99.231.0/24 maxlen: 24
82.99.240.0/24 maxlen: 24
82.99.235.0/24 maxlen: 24
91.99.238.0/23 maxlen: 23
91.99.236.0/23 maxlen: 23
91.99.240.0/20 maxlen: 20
91.99.252.0/22 maxlen: 22
91.99.248.0/22 maxlen: 22
31.214.132.0/23 maxlen: 23
82.99.249.0/24 maxlen: 24
82.99.250.0/24 maxlen: 24
82.99.251.0/24 maxlen: 24
91.98.192.0/20 maxlen: 20
91.98.192.0/19 maxlen: 19
91.98.208.0/20 maxlen: 20
91.98.226.0/23 maxlen: 23
91.98.224.0/19 maxlen: 19
91.98.224.0/24 maxlen: 24
91.98.144.0/23 maxlen: 23
91.98.152.0/22 maxlen: 22
91.98.160.0/20 maxlen: 20
91.98.160.0/19 maxlen: 19
91.99.64.0/19 maxlen: 19
91.99.65.0/24 maxlen: 24
91.99.66.0/24 maxlen: 24
91.99.78.0/24 maxlen: 24
91.99.80.0/22 maxlen: 22
91.99.84.0/22 maxlen: 22
91.99.88.0/22 maxlen: 22
91.98.240.0/21 maxlen: 21
91.98.252.0/23 maxlen: 23
91.99.0.0/19 maxlen: 19
91.99.0.0/16 maxlen: 16
91.99.32.0/19 maxlen: 19
91.98.0.0/22 maxlen: 22
37.10.109.0/24 maxlen: 24
91.98.0.0/20 maxlen: 20
37.10.117.0/24 maxlen: 24
91.98.0.0/16 maxlen: 24
91.98.16.0/24 maxlen: 24
91.98.0.0/15 maxlen: 19
91.98.19.0/24 maxlen: 24
37.10.64.0/22 maxlen: 22
185.10.71.0/24 maxlen: 24
91.98.84.0/22 maxlen: 22
91.98.82.0/24 maxlen: 24
91.98.88.0/24 maxlen: 24
91.98.111.0/24 maxlen: 24
91.98.57.0/24 maxlen: 24
91.98.64.0/19 maxlen: 19
91.98.68.0/24 maxlen: 24
46.251.226.0/24 maxlen: 24
46.251.224.0/24 maxlen: 24
46.251.237.0/24 maxlen: 24
109.230.246.0/23 maxlen: 23
46.62.136.0/24 maxlen: 24
46.62.137.0/24 maxlen: 24
46.62.133.0/24 maxlen: 24
46.62.134.0/24 maxlen: 24
46.62.138.0/23 maxlen: 23
109.230.246.0/24 maxlen: 24
109.230.242.0/24 maxlen: 24
46.62.144.0/24 maxlen: 24
46.62.140.0/24 maxlen: 24
95.156.222.0/23 maxlen: 23
46.62.142.0/23 maxlen: 23
109.230.251.0/24 maxlen: 24
46.62.144.0/20 maxlen: 20
109.230.247.0/24 maxlen: 24
46.62.147.0/24 maxlen: 24
46.62.148.0/22 maxlen: 22
95.156.233.0/24 maxlen: 24
46.62.152.0/24 maxlen: 24
95.156.236.0/23 maxlen: 23
95.156.234.0/23 maxlen: 23
46.62.156.0/24 maxlen: 24
46.62.158.0/24 maxlen: 24
46.62.153.0/24 maxlen: 24
46.62.160.0/19 maxlen: 19
46.62.165.0/24 maxlen: 24
46.62.168.0/21 maxlen: 21
46.62.168.0/22 maxlen: 22
46.62.172.0/22 maxlen: 22
46.62.166.0/23 maxlen: 23
95.156.248.0/23 maxlen: 23
46.62.178.0/23 maxlen: 23
46.62.176.0/20 maxlen: 20
46.62.180.0/22 maxlen: 22
46.62.184.0/22 maxlen: 22
109.230.192.0/23 maxlen: 23
109.230.200.0/24 maxlen: 24
109.230.204.0/22 maxlen: 22
109.230.223.0/24 maxlen: 24
109.230.221.0/24 maxlen: 24
46.62.131.0/24 maxlen: 24
46.62.132.0/24 maxlen: 24
46.62.128.0/23 maxlen: 23
46.62.128.0/20 maxlen: 20
46.62.128.0/19 maxlen: 19
46.62.128.0/17 maxlen: 24
46.62.240.0/20 maxlen: 20
46.62.188.0/22 maxlen: 22
46.62.192.0/19 maxlen: 19
46.62.192.0/18 maxlen: 18
46.62.208.0/20 maxlen: 20
46.62.224.0/20 maxlen: 20
46.62.224.0/19 maxlen: 19
213.217.32.0/20 maxlen: 24
213.217.32.0/19 maxlen: 19
213.217.36.0/22 maxlen: 22
213.217.41.0/24 maxlen: 24
213.217.46.0/24 maxlen: 24
213.217.47.0/24 maxlen: 24
213.217.48.0/20 maxlen: 20
213.217.55.0/24 maxlen: 24
213.217.56.0/24 maxlen: 24
213.217.57.0/24 maxlen: 24
213.217.54.0/24 maxlen: 24
213.217.52.0/22 maxlen: 22
213.217.62.0/24 maxlen: 24
46.41.192.0/19 maxlen: 19
46.41.192.0/20 maxlen: 20
46.41.192.0/18 maxlen: 18
46.41.224.0/20 maxlen: 20
46.41.224.0/19 maxlen: 19
185.13.228.0/22 maxlen: 22
178.169.0.0/19 maxlen: 19
Validation: Failed, RFC 3779 resource not subset of parent's resources
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:86:25:eb:19:3e:79:36:0b:d3:f6:c1:be:59:37:74:14:b1
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2f814adc1d5209e098f078adbc856bad83b749c2
Validity
Not Before: Feb 6 08:50:09 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=5e6c56beeb4b34fc33bf4206f19e9d623c89c231
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:81:77:c5:af:db:a1:30:68:fb:b8:c8:f4:4e:59:
72:5b:72:b1:1a:2b:09:24:61:86:d2:1f:88:1e:9a:
28:77:11:56:14:e9:e3:39:65:ad:87:6f:1a:cc:97:
36:4a:6d:4b:1f:b8:86:1e:98:84:c3:a9:6f:61:66:
f8:70:9c:55:ce:73:1c:a9:08:23:f1:55:42:17:09:
73:3f:3f:3f:2a:db:a0:84:ba:78:bb:31:4a:1f:e0:
90:fe:d9:dd:19:b4:57:01:ca:3e:0b:dd:63:39:ae:
5b:4f:47:15:f6:b7:99:1c:98:6c:2b:12:5e:41:41:
b1:0e:9b:b7:ae:ad:de:e7:6b:e6:1f:ae:93:70:f1:
36:73:68:3a:9b:be:5b:7a:fa:a6:13:45:f1:92:dd:
fb:ee:b7:7e:09:5c:7e:2f:94:9b:79:b9:dc:2c:29:
9a:29:40:44:cf:f3:b0:07:16:bf:59:0e:3d:0c:e0:
e2:7a:22:41:57:2b:89:8c:6a:e8:c1:36:69:fb:e4:
5c:af:87:a9:08:4e:98:82:5f:68:ec:4d:8b:79:b4:
c5:af:80:23:1f:d7:80:89:85:eb:50:85:b8:a8:56:
f8:78:b9:0e:9f:1d:ad:ed:b7:bb:d0:35:d6:91:c2:
06:55:d4:f7:f7:21:f9:bf:ab:e0:3f:9c:23:4f:24:
39:47
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
5E:6C:56:BE:EB:4B:34:FC:33:BF:42:06:F1:9E:9D:62:3C:89:C2:31
X509v3 Authority Key Identifier:
keyid:2F:81:4A:DC:1D:52:09:E0:98:F0:78:AD:BC:85:6B:AD:83:B7:49:C2
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/L4FK3B1SCeCY8HitvIVrrYO3ScI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/02/13e12a-2bac-4752-997d-df86b6dd997c/1/XmxWvutLNPwzv0IG8Z6dYjyJwjE.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/02/13e12a-2bac-4752-997d-df86b6dd997c/1/L4FK3B1SCeCY8HitvIVrrYO3ScI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
31.214.132.0/23
31.214.146.0/23
31.214.154.0/24
31.214.168.0/21
31.214.200.0/23
31.214.228.0/22
31.214.248.0/21
37.10.64.0/22
37.10.109.0/24
37.10.117.0/24
37.228.131.0/24
37.228.133.0/24
37.228.135.0-37.228.139.255
46.41.192.0/18
46.62.128.0/17
46.251.224.0/24
46.251.226.0/24
46.251.237.0/24
82.99.192.0/18
91.98.0.0/15
95.156.222.0/23
95.156.233.0-95.156.237.255
95.156.248.0/23
109.230.192.0/23
109.230.200.0/24
109.230.204.0/22
109.230.221.0/24
109.230.223.0/24
109.230.242.0/24
109.230.246.0/23
109.230.251.0/24
134.255.196.0/23
134.255.200.0/21
134.255.245.0-134.255.246.255
134.255.249.0/24
178.169.0.0/19
185.10.71.0/24
185.13.228.0/22
213.217.32.0/19
Signature Algorithm: sha256WithRSAEncryption
7a:cc:1f:cd:1d:67:71:aa:9a:b8:10:7a:9b:3c:80:89:99:b7:
b0:aa:b6:c4:b7:de:93:6f:60:75:fd:25:f0:e2:f3:a8:1d:d6:
a6:15:d8:a7:c8:72:04:7c:c8:9d:c5:ab:47:1b:96:10:72:79:
89:94:40:8d:58:f2:3c:e2:b6:e2:5b:ae:00:41:31:ed:42:3f:
d9:d5:d7:31:c5:15:4f:a4:aa:7d:91:67:09:51:90:22:d1:72:
70:39:72:cb:d6:63:78:af:a7:f8:1b:35:ab:de:17:92:50:db:
bf:92:13:3f:2a:2a:a0:e4:5a:d3:5a:85:b8:0a:7d:8c:45:99:
f2:ad:e0:09:45:c6:9a:c1:59:92:a6:8f:c9:47:8b:bb:75:c4:
6f:b4:21:e1:ca:ec:86:b3:7f:09:89:75:54:99:35:26:99:15:
c4:c8:38:6d:93:8a:22:f5:e2:e9:2f:cb:96:b2:6c:f3:8d:6f:
3f:1a:5c:92:52:38:a6:fe:a7:da:65:44:1c:a2:43:e7:68:f9:
21:83:8e:80:bd:88:88:4e:86:79:a7:2b:e1:94:23:97:69:89:
1e:bc:06:4f:4f:7f:9d:6e:81:ed:bf:78:ee:06:49:5f:e4:1d:
ff:ea:24:bc:3d:57:60:d0:59:95:2c:b8:35:1a:03:8d:37:cd:
ff:bc:67:15
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:16:42 2024 by rpki-client on console-fra.rpki-client.org