Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/02/13e12a-2bac-4752-997d-df86b6dd997c/1/e7C-rWTvotWLwVDSwVvqLPg8VPw.roa
File: e7C-rWTvotWLwVDSwVvqLPg8VPw.roa (raw, json)
Hash identifier: erKifx9rEe8RUWFZnmRgaldMuB6av1o99TCoakqPwBc=
Subject key identifier: 7B:B0:BE:AD:64:EF:A2:D5:8B:C1:50:D2:C1:5B:EA:2C:F8:3C:54:FC
Certificate issuer: /CN=2f814adc1d5209e098f078adbc856bad83b749c2
Certificate serial: 0185495E1901A19B7AF9F4AE7C02661965D5
Authority key identifier: 2F:81:4A:DC:1D:52:09:E0:98:F0:78:AD:BC:85:6B:AD:83:B7:49:C2
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/L4FK3B1SCeCY8HitvIVrrYO3ScI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/02/13e12a-2bac-4752-997d-df86b6dd997c/1/e7C-rWTvotWLwVDSwVvqLPg8VPw.roa
Signing time: Sun 25 Dec 2022 12:59:41 +0000
ROA not before: Sun 25 Dec 2022 12:59:41 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 60976
IP address blocks: 31.214.248.0/21 maxlen: 21
31.214.249.0/24 maxlen: 24
31.214.248.0/24 maxlen: 24
31.214.253.0/24 maxlen: 24
31.214.252.0/24 maxlen: 24
31.214.251.0/24 maxlen: 24
31.214.250.0/24 maxlen: 24
31.214.255.0/24 maxlen: 24
31.214.254.0/24 maxlen: 24
37.228.139.0/24 maxlen: 24
37.228.138.0/24 maxlen: 24
37.228.137.0/24 maxlen: 24
37.228.136.0/24 maxlen: 24
134.255.200.0/21 maxlen: 21
134.255.206.0/24 maxlen: 24
134.255.205.0/24 maxlen: 24
134.255.204.0/24 maxlen: 24
134.255.203.0/24 maxlen: 24
134.255.202.0/24 maxlen: 24
134.255.201.0/24 maxlen: 24
134.255.200.0/24 maxlen: 24
134.255.207.0/24 maxlen: 24
95.156.237.0/24 maxlen: 24
95.156.236.0/24 maxlen: 24
95.156.253.0/24 maxlen: 24
95.156.252.0/24 maxlen: 24
95.156.252.0/22 maxlen: 22
95.156.255.0/24 maxlen: 24
95.156.254.0/24 maxlen: 24
91.99.96.0/21 maxlen: 21
91.99.98.0/24 maxlen: 24
91.99.97.0/24 maxlen: 24
91.99.96.0/24 maxlen: 24
91.99.103.0/24 maxlen: 24
91.99.102.0/24 maxlen: 24
91.99.101.0/24 maxlen: 24
91.99.99.0/24 maxlen: 24
109.230.206.0/24 maxlen: 24
109.230.205.0/24 maxlen: 24
109.230.204.0/24 maxlen: 24
109.230.200.0/24 maxlen: 24
109.230.204.0/22 maxlen: 22
109.230.207.0/24 maxlen: 24
31.214.172.0/24 maxlen: 24
31.214.171.0/24 maxlen: 24
31.214.170.0/24 maxlen: 24
31.214.169.0/24 maxlen: 24
31.214.168.0/24 maxlen: 24
31.214.168.0/21 maxlen: 21
31.214.175.0/24 maxlen: 24
31.214.174.0/24 maxlen: 24
31.214.173.0/24 maxlen: 24
82.99.216.0/22 maxlen: 22
91.99.219.0/24 maxlen: 24
82.99.219.0/24 maxlen: 24
91.99.218.0/24 maxlen: 24
82.99.218.0/24 maxlen: 24
82.99.215.0/24 maxlen: 24
82.99.217.0/24 maxlen: 24
91.99.217.0/24 maxlen: 24
82.99.216.0/24 maxlen: 24
91.99.216.0/24 maxlen: 24
82.99.238.0/24 maxlen: 24
82.99.244.0/24 maxlen: 24
82.99.243.0/24 maxlen: 24
82.99.242.0/24 maxlen: 24
91.99.75.0/24 maxlen: 24
91.99.74.0/24 maxlen: 24
91.99.73.0/24 maxlen: 24
91.99.72.0/24 maxlen: 24
37.10.109.0/24 maxlen: 24
91.98.96.0/21 maxlen: 21
91.98.97.0/24 maxlen: 24
91.98.96.0/24 maxlen: 24
91.98.98.0/24 maxlen: 24
91.98.102.0/24 maxlen: 24
91.98.100.0/24 maxlen: 24
91.98.99.0/24 maxlen: 24
91.98.31.0/24 maxlen: 24
185.13.231.0/24 maxlen: 24
91.98.28.0/22 maxlen: 22
91.98.30.0/24 maxlen: 24
91.98.29.0/24 maxlen: 24
185.13.230.0/24 maxlen: 24
185.13.229.0/24 maxlen: 24
185.13.228.0/24 maxlen: 24
185.13.228.0/22 maxlen: 22
91.98.28.0/24 maxlen: 24
Validation: Failed, RFC 3779 resource not subset of parent's resources
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:85:49:5e:19:01:a1:9b:7a:f9:f4:ae:7c:02:66:19:65:d5
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2f814adc1d5209e098f078adbc856bad83b749c2
Validity
Not Before: Dec 25 12:59:41 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=7bb0bead64efa2d58bc150d2c15bea2cf83c54fc
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c4:bf:9d:30:52:5d:96:8e:78:8f:98:85:da:1b:
40:42:e6:9b:12:78:3b:89:88:8f:cd:c9:75:fc:fb:
48:36:ac:9c:7f:de:5d:d0:43:b8:fa:50:0c:d6:a2:
38:9d:4b:d3:d9:cc:b5:5e:dc:98:49:d8:18:5c:a0:
e0:93:7f:89:5d:dc:08:93:0e:25:62:8e:a9:8b:b6:
a0:88:19:55:35:25:1e:6f:e9:ee:12:f5:c5:ad:8d:
bd:eb:5e:07:e7:dc:80:d6:88:25:4f:2b:1b:54:51:
fb:1a:6c:09:f6:2f:f1:6b:c8:b4:c3:bc:29:08:83:
d7:46:6a:33:a9:7d:d2:fc:cb:f1:d0:f3:7b:ec:af:
9a:a7:c2:1d:25:1a:4f:fc:4e:6e:c4:d9:c7:67:b5:
a4:f8:78:fd:5d:ef:83:fe:62:7f:22:f0:3a:ce:f0:
c4:ee:39:fa:cf:22:3a:d8:2f:91:07:3e:80:35:dd:
b9:28:d4:93:60:ff:5e:52:d7:09:2e:6b:f6:eb:de:
75:cc:f8:3a:5b:1b:f6:26:93:ff:99:63:cd:23:6b:
0c:ac:f3:87:fb:b0:50:20:4a:7c:89:70:22:36:fe:
32:68:6b:7a:40:dd:f8:85:71:32:a9:83:dd:c0:33:
f4:26:60:b5:a1:f7:db:f7:37:e7:ce:ae:ec:71:54:
98:67
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
7B:B0:BE:AD:64:EF:A2:D5:8B:C1:50:D2:C1:5B:EA:2C:F8:3C:54:FC
X509v3 Authority Key Identifier:
keyid:2F:81:4A:DC:1D:52:09:E0:98:F0:78:AD:BC:85:6B:AD:83:B7:49:C2
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/L4FK3B1SCeCY8HitvIVrrYO3ScI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/02/13e12a-2bac-4752-997d-df86b6dd997c/1/e7C-rWTvotWLwVDSwVvqLPg8VPw.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/02/13e12a-2bac-4752-997d-df86b6dd997c/1/L4FK3B1SCeCY8HitvIVrrYO3ScI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
31.214.168.0/21
31.214.248.0/21
37.10.109.0/24
37.228.136.0/22
82.99.215.0-82.99.219.255
82.99.238.0/24
82.99.242.0-82.99.244.255
91.98.28.0/22
91.98.96.0/21
91.99.72.0/22
91.99.96.0/21
91.99.216.0/22
95.156.236.0/23
95.156.252.0/22
109.230.200.0/24
109.230.204.0/22
134.255.200.0/21
185.13.228.0/22
Signature Algorithm: sha256WithRSAEncryption
25:3e:f1:33:07:0e:33:d4:6c:79:64:68:bc:7a:7a:ec:6b:d2:
3f:e5:4d:89:ec:a7:77:0b:c1:0e:bb:2a:8a:97:59:bb:49:8e:
ab:be:17:cc:a4:de:de:75:ac:25:9f:1f:2f:2e:b5:7e:68:0d:
83:92:1c:d4:65:2f:f4:ad:8c:97:14:96:b1:c7:ed:f2:c7:01:
88:ad:84:ac:81:9e:e0:2f:57:e1:a6:8d:50:95:1c:b3:e2:69:
ac:72:fd:fb:a6:2e:07:37:fe:57:a9:9b:c8:46:33:4f:54:28:
a6:f9:83:55:42:84:3b:f6:66:a2:0b:bc:d0:84:d8:7d:1b:29:
76:91:35:fb:48:54:9c:01:59:76:2d:53:b0:7a:18:e8:db:f8:
1c:6f:f4:4b:c5:73:e2:97:0f:55:e0:f5:04:8e:6b:48:9d:50:
8a:10:38:f5:bc:5b:e9:d8:d8:24:90:d8:5c:66:9b:ec:37:8d:
07:4d:7e:07:76:a8:9e:4e:72:7f:0b:16:75:45:f6:15:28:f1:
e0:2e:d4:84:ff:36:6f:24:16:7b:5c:33:12:a6:5c:96:8e:14:
e9:a2:e8:93:ca:6c:11:b6:93:27:db:b5:8f:e6:64:04:af:b6:
9b:f0:18:db:fa:17:04:32:73:e3:46:67:ea:2c:55:bc:0c:e5:
29:b3:ec:84
-----BEGIN CERTIFICATE-----
MIIFdzCCBF+gAwIBAgISAYVJXhkBoZt6+fSufAJmGWXVMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDJmODE0YWRjMWQ1MjA5ZTA5OGYwNzhhZGJjODU2YmFkODNi
NzQ5YzIwHhcNMjIxMjI1MTI1OTQxWhcNMjMwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
Eyg3YmIwYmVhZDY0ZWZhMmQ1OGJjMTUwZDJjMTViZWEyY2Y4M2M1NGZjMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAxL+dMFJdlo54j5iF2htAQuabEng7
iYiPzcl1/PtINqycf95d0EO4+lAM1qI4nUvT2cy1XtyYSdgYXKDgk3+JXdwIkw4l
Yo6pi7agiBlVNSUeb+nuEvXFrY29614H59yA1oglTysbVFH7GmwJ9i/xa8i0w7wp
CIPXRmozqX3S/Mvx0PN77K+ap8IdJRpP/E5uxNnHZ7Wk+Hj9Xe+D/mJ/IvA6zvDE
7jn6zyI62C+RBz6ANd25KNSTYP9eUtcJLmv26951zPg6Wxv2JpP/mWPNI2sMrPOH
+7BQIEp8iXAiNv4yaGt6QN34hXEyqYPdwDP0JmC1offb9zfnzq7scVSYZwIDAQAB
o4ICgzCCAn8wHQYDVR0OBBYEFHuwvq1k76LVi8FQ0sFb6iz4PFT8MB8GA1UdIwQY
MBaAFC+BStwdUgngmPB4rbyFa62Dt0nCMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvTDRGSzNCMVNDZUNZOEhpdHZJVnJyWU8zU2NJLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8wMi8xM2UxMmEtMmJhYy00NzUyLTk5N2Qt
ZGY4NmI2ZGQ5OTdjLzEvZTdDLXJXVHZvdFdMd1ZEU3dWdnFMUGc4VlB3LnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8wMi8xM2UxMmEtMmJhYy00NzUyLTk5N2QtZGY4NmI2ZGQ5OTdj
LzEvTDRGSzNCMVNDZUNZOEhpdHZJVnJyWU8zU2NJLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMIGYBggrBgEFBQcBBwEB/wSBiDCBhTCBggQCAAEwfAMEAx/W
qAMEAx/W+AMEACUKbQMEAiXkiDAMAwQAUmPXAwQCUmPYAwQAUmPuMAwDBAFSY/ID
BABSY/QDBAJbYhwDBANbYmADBAJbY0gDBANbY2ADBAJbY9gDBAFfnOwDBAJfnPwD
BABt5sgDBAJt5swDBAOG/8gDBAK5DeQwDQYJKoZIhvcNAQELBQADggEBACU+8TMH
DjPUbHlkaLx6euxr0j/lTYnsp3cLwQ67KoqXWbtJjqu+F8yk3t51rCWfHy8utX5o
DYOSHNRlL/StjJcUlrHH7fLHAYithKyBnuAvV+GmjVCVHLPiaaxy/fumLgc3/lep
m8hGM09UKKb5g1VChDv2ZqILvNCE2H0bKXaRNftIVJwBWXYtU7B6GOjb+Bxv9EvF
c+KXD1Xg9QSOa0idUIoQOPW8W+nY2CSQ2Fxmm+w3jQdNfgd2qJ5Ocn8LFnVF9hUo
8eAu1IT/Nm8kFntcMxKmXJaOFOmi6JPKbBG2kyfbtY/mZASvtpvwGNv6FwQyc+NG
Z+osVbwM5Smz7IQ=
-----END CERTIFICATE-----
Generated at Mon Feb 17 07:58:08 2025 by rpki-client