Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/02/13e12a-2bac-4752-997d-df86b6dd997c/1/kmeKSRmfQX2shulzgOvVFVHIM6Y.roa
File: kmeKSRmfQX2shulzgOvVFVHIM6Y.roa (raw, json)
Hash identifier: FpIhpjrovVaqq+79JylWjBFZrXqRscLORvXx2Bwo9NY=
Subject key identifier: 92:67:8A:49:19:9F:41:7D:AC:86:E9:73:80:EB:D5:15:51:C8:33:A6
Certificate issuer: /CN=2f814adc1d5209e098f078adbc856bad83b749c2
Certificate serial: 018751407FE98E3E9C378B2B0F7705A72B2E
Authority key identifier: 2F:81:4A:DC:1D:52:09:E0:98:F0:78:AD:BC:85:6B:AD:83:B7:49:C2
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/L4FK3B1SCeCY8HitvIVrrYO3ScI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/02/13e12a-2bac-4752-997d-df86b6dd997c/1/kmeKSRmfQX2shulzgOvVFVHIM6Y.roa
Signing time: Wed 05 Apr 2023 11:49:54 +0000
ROA not before: Wed 05 Apr 2023 11:49:54 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 16322
IP address blocks: 31.214.248.0/21 maxlen: 21
37.228.131.0/24 maxlen: 24
37.228.135.0/24 maxlen: 24
37.228.133.0/24 maxlen: 24
37.228.136.0/22 maxlen: 22
31.214.200.0/23 maxlen: 23
31.214.228.0/22 maxlen: 22
134.255.200.0/21 maxlen: 21
134.255.245.0/24 maxlen: 24
134.255.246.0/24 maxlen: 24
134.255.249.0/24 maxlen: 24
134.255.196.0/23 maxlen: 23
82.99.192.0/24 maxlen: 24
82.99.192.0/19 maxlen: 22
82.99.193.0/24 maxlen: 24
82.99.195.0/24 maxlen: 24
82.99.196.0/24 maxlen: 24
82.99.192.0/18 maxlen: 18
31.214.146.0/24 maxlen: 24
31.214.147.0/24 maxlen: 24
31.214.146.0/23 maxlen: 23
31.214.154.0/24 maxlen: 24
31.214.172.0/22 maxlen: 22
31.214.170.0/23 maxlen: 23
31.214.168.0/23 maxlen: 23
31.214.168.0/21 maxlen: 21
82.99.204.0/24 maxlen: 24
82.99.206.0/24 maxlen: 24
82.99.201.0/24 maxlen: 24
82.99.212.0/24 maxlen: 24
82.99.209.0/24 maxlen: 24
82.99.210.0/24 maxlen: 24
82.99.216.0/22 maxlen: 22
82.99.224.0/19 maxlen: 19
82.99.233.0/24 maxlen: 24
82.99.228.0/24 maxlen: 24
82.99.230.0/24 maxlen: 24
82.99.231.0/24 maxlen: 24
82.99.240.0/24 maxlen: 24
82.99.235.0/24 maxlen: 24
31.214.132.0/23 maxlen: 23
82.99.249.0/24 maxlen: 24
82.99.250.0/24 maxlen: 24
82.99.251.0/24 maxlen: 24
91.98.192.0/20 maxlen: 20
91.98.192.0/19 maxlen: 19
91.98.208.0/20 maxlen: 20
91.98.226.0/23 maxlen: 23
91.98.224.0/19 maxlen: 19
91.98.224.0/24 maxlen: 24
91.98.144.0/23 maxlen: 23
91.98.152.0/22 maxlen: 22
91.98.160.0/20 maxlen: 20
91.98.160.0/19 maxlen: 19
91.98.240.0/21 maxlen: 21
91.98.252.0/23 maxlen: 23
91.98.0.0/22 maxlen: 22
37.10.109.0/24 maxlen: 24
91.98.0.0/20 maxlen: 20
37.10.117.0/24 maxlen: 24
91.98.0.0/16 maxlen: 24
91.98.16.0/24 maxlen: 24
91.98.19.0/24 maxlen: 24
37.10.64.0/22 maxlen: 22
185.10.71.0/24 maxlen: 24
91.98.84.0/22 maxlen: 22
91.98.82.0/24 maxlen: 24
91.98.88.0/24 maxlen: 24
91.98.111.0/24 maxlen: 24
91.98.57.0/24 maxlen: 24
91.98.64.0/19 maxlen: 19
91.98.68.0/24 maxlen: 24
46.251.226.0/24 maxlen: 24
46.251.224.0/24 maxlen: 24
46.251.237.0/24 maxlen: 24
109.230.246.0/23 maxlen: 23
46.62.136.0/24 maxlen: 24
46.62.137.0/24 maxlen: 24
46.62.133.0/24 maxlen: 24
46.62.134.0/24 maxlen: 24
46.62.138.0/23 maxlen: 23
109.230.246.0/24 maxlen: 24
109.230.242.0/24 maxlen: 24
46.62.144.0/24 maxlen: 24
46.62.140.0/24 maxlen: 24
95.156.222.0/23 maxlen: 23
46.62.142.0/23 maxlen: 23
109.230.251.0/24 maxlen: 24
46.62.144.0/20 maxlen: 20
109.230.247.0/24 maxlen: 24
46.62.147.0/24 maxlen: 24
46.62.148.0/22 maxlen: 22
95.156.233.0/24 maxlen: 24
46.62.152.0/24 maxlen: 24
95.156.236.0/23 maxlen: 23
95.156.234.0/23 maxlen: 23
46.62.156.0/24 maxlen: 24
46.62.158.0/24 maxlen: 24
46.62.153.0/24 maxlen: 24
46.62.160.0/19 maxlen: 19
46.62.165.0/24 maxlen: 24
46.62.168.0/21 maxlen: 21
46.62.168.0/22 maxlen: 22
46.62.172.0/22 maxlen: 22
46.62.166.0/23 maxlen: 23
95.156.248.0/23 maxlen: 23
46.62.178.0/23 maxlen: 23
46.62.176.0/20 maxlen: 20
46.62.180.0/22 maxlen: 22
46.62.184.0/22 maxlen: 22
109.230.192.0/23 maxlen: 23
109.230.200.0/24 maxlen: 24
109.230.204.0/22 maxlen: 22
109.230.223.0/24 maxlen: 24
109.230.221.0/24 maxlen: 24
46.62.131.0/24 maxlen: 24
46.62.132.0/24 maxlen: 24
46.62.128.0/23 maxlen: 23
46.62.128.0/20 maxlen: 20
46.62.128.0/19 maxlen: 19
46.62.128.0/17 maxlen: 24
46.62.240.0/20 maxlen: 20
46.62.188.0/22 maxlen: 22
46.62.192.0/19 maxlen: 19
46.62.192.0/18 maxlen: 18
46.62.208.0/20 maxlen: 20
46.62.224.0/20 maxlen: 20
46.62.224.0/19 maxlen: 19
213.217.32.0/20 maxlen: 24
213.217.32.0/19 maxlen: 19
213.217.36.0/22 maxlen: 22
213.217.41.0/24 maxlen: 24
213.217.46.0/24 maxlen: 24
213.217.47.0/24 maxlen: 24
213.217.48.0/20 maxlen: 20
213.217.55.0/24 maxlen: 24
213.217.56.0/24 maxlen: 24
213.217.57.0/24 maxlen: 24
213.217.54.0/24 maxlen: 24
213.217.52.0/22 maxlen: 22
213.217.62.0/24 maxlen: 24
46.41.192.0/19 maxlen: 19
46.41.192.0/20 maxlen: 20
46.41.192.0/18 maxlen: 18
46.41.224.0/20 maxlen: 20
46.41.224.0/19 maxlen: 19
185.13.228.0/22 maxlen: 22
178.169.0.0/19 maxlen: 19
Validation: Failed, RFC 3779 resource not subset of parent's resources
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:87:51:40:7f:e9:8e:3e:9c:37:8b:2b:0f:77:05:a7:2b:2e
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2f814adc1d5209e098f078adbc856bad83b749c2
Validity
Not Before: Apr 5 11:49:54 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=92678a49199f417dac86e97380ebd51551c833a6
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cf:58:42:47:7a:47:dd:de:0d:1b:c2:11:69:6b:
08:38:b5:a5:8b:66:65:0e:c0:78:84:3e:48:1b:95:
39:d4:08:8c:93:d0:f6:80:a9:ff:17:ca:e0:4c:1d:
fe:09:41:b7:28:cd:af:c5:9f:59:22:4e:d1:e6:a2:
1f:de:ad:45:91:59:33:e1:c1:48:1c:5e:28:0b:6b:
7f:15:6c:5d:a1:1f:aa:c8:fe:aa:d7:2f:b6:8e:e2:
a1:69:78:d5:53:5e:80:3f:81:7b:77:e9:a8:b9:71:
eb:6b:67:b1:e5:39:ad:d9:f6:5e:26:53:6e:84:ef:
71:4d:fe:d0:52:24:f1:37:1a:c5:78:17:db:c9:54:
bf:b7:83:aa:06:35:d8:ce:68:ee:7c:bb:4a:38:85:
c6:9a:16:ae:a8:67:3b:ce:1b:fa:cc:19:b8:79:b7:
84:97:9f:86:bb:17:41:60:e1:d0:7e:fc:74:2d:47:
10:63:96:71:01:e5:4b:18:f5:58:43:4d:4b:67:fd:
fe:84:cf:a6:c1:ee:a4:5e:d3:37:4d:20:c8:6c:b5:
04:88:34:c2:65:0c:a5:2a:bc:b2:2f:2a:31:43:e6:
31:40:de:0a:8e:c9:b7:d0:96:c5:ae:1c:18:e1:fc:
ab:64:ce:d2:34:76:f6:53:73:f6:ef:44:0f:b6:37:
c3:f9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
92:67:8A:49:19:9F:41:7D:AC:86:E9:73:80:EB:D5:15:51:C8:33:A6
X509v3 Authority Key Identifier:
keyid:2F:81:4A:DC:1D:52:09:E0:98:F0:78:AD:BC:85:6B:AD:83:B7:49:C2
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/L4FK3B1SCeCY8HitvIVrrYO3ScI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/02/13e12a-2bac-4752-997d-df86b6dd997c/1/kmeKSRmfQX2shulzgOvVFVHIM6Y.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/02/13e12a-2bac-4752-997d-df86b6dd997c/1/L4FK3B1SCeCY8HitvIVrrYO3ScI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
31.214.132.0/23
31.214.146.0/23
31.214.154.0/24
31.214.168.0/21
31.214.200.0/23
31.214.228.0/22
31.214.248.0/21
37.10.64.0/22
37.10.109.0/24
37.10.117.0/24
37.228.131.0/24
37.228.133.0/24
37.228.135.0-37.228.139.255
46.41.192.0/18
46.62.128.0/17
46.251.224.0/24
46.251.226.0/24
46.251.237.0/24
82.99.192.0/18
91.98.0.0/16
95.156.222.0/23
95.156.233.0-95.156.237.255
95.156.248.0/23
109.230.192.0/23
109.230.200.0/24
109.230.204.0/22
109.230.221.0/24
109.230.223.0/24
109.230.242.0/24
109.230.246.0/23
109.230.251.0/24
134.255.196.0/23
134.255.200.0/21
134.255.245.0-134.255.246.255
134.255.249.0/24
178.169.0.0/19
185.10.71.0/24
185.13.228.0/22
213.217.32.0/19
Signature Algorithm: sha256WithRSAEncryption
02:41:68:da:16:fa:a2:da:fa:dd:03:88:22:21:54:f3:c1:9b:
75:c3:0b:f6:e1:50:6a:30:e7:cb:77:e0:cc:ed:38:e7:84:70:
f2:a6:79:9d:e9:5c:59:6d:a6:a0:3e:e6:94:23:0b:fd:93:1a:
55:ce:04:b6:51:fb:02:44:d7:7f:b9:5e:43:58:d3:ed:f5:1d:
c1:74:a0:8a:0d:b3:1a:f2:0c:d4:55:e7:eb:2b:40:16:35:cf:
3b:e8:33:7c:50:55:b2:63:ed:a6:fc:9d:ec:67:27:05:d8:73:
97:db:a3:11:c7:64:a2:fa:83:64:11:47:56:73:96:e7:e8:bf:
ea:f2:a2:07:7d:be:a1:06:f0:7c:d0:d5:df:dd:19:c0:43:7b:
3a:82:cd:73:7b:5b:da:91:88:88:d6:9e:98:db:23:e4:2a:58:
48:43:e7:03:6f:a3:86:17:17:81:9d:c0:32:88:c0:13:37:b0:
4f:7b:91:4a:a9:3c:94:ff:2a:90:64:6c:00:55:ab:04:d9:e4:
41:d6:a4:26:d7:84:47:b7:e5:99:ec:ea:a5:7a:39:2c:35:5c:
a9:1c:19:36:dd:9f:f5:a9:23:43:3a:bb:42:db:7e:8a:b0:5b:
a7:55:f7:0d:15:66:08:57:7c:e2:3f:7f:e1:bc:48:b5:91:5c:
9d:16:ab:ea
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 18:50:06 2024 by rpki-client on console-ams.rpki-client.org