Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/02/13e12a-2bac-4752-997d-df86b6dd997c/1/mona6mwcD-cj1Qkf94EtJueFbVE.roa
File: mona6mwcD-cj1Qkf94EtJueFbVE.roa (raw, json)
Hash identifier: eb22BFe6bIufcdR0DycYpm0piwy6qA1dGRsOqbxfwGw=
Subject key identifier: 9A:89:DA:EA:6C:1C:0F:E7:23:D5:09:1F:F7:81:2D:26:E7:85:6D:51
Certificate issuer: /CN=2f814adc1d5209e098f078adbc856bad83b749c2
Certificate serial: 018529920C75692F96565185115AA0970A00
Authority key identifier: 2F:81:4A:DC:1D:52:09:E0:98:F0:78:AD:BC:85:6B:AD:83:B7:49:C2
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/L4FK3B1SCeCY8HitvIVrrYO3ScI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/02/13e12a-2bac-4752-997d-df86b6dd997c/1/mona6mwcD-cj1Qkf94EtJueFbVE.roa
Signing time: Mon 19 Dec 2022 08:48:35 +0000
ROA not before: Mon 19 Dec 2022 08:48:35 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 60976
IP address blocks: 31.214.248.0/21 maxlen: 21
31.214.249.0/24 maxlen: 24
31.214.248.0/24 maxlen: 24
31.214.253.0/24 maxlen: 24
31.214.252.0/24 maxlen: 24
31.214.251.0/24 maxlen: 24
31.214.250.0/24 maxlen: 24
31.214.255.0/24 maxlen: 24
31.214.254.0/24 maxlen: 24
37.228.139.0/24 maxlen: 24
37.228.138.0/24 maxlen: 24
37.228.137.0/24 maxlen: 24
37.228.136.0/24 maxlen: 24
134.255.200.0/21 maxlen: 21
134.255.206.0/24 maxlen: 24
134.255.205.0/24 maxlen: 24
134.255.204.0/24 maxlen: 24
134.255.203.0/24 maxlen: 24
134.255.202.0/24 maxlen: 24
134.255.201.0/24 maxlen: 24
134.255.200.0/24 maxlen: 24
134.255.207.0/24 maxlen: 24
95.156.237.0/24 maxlen: 24
95.156.236.0/24 maxlen: 24
95.156.253.0/24 maxlen: 24
95.156.252.0/24 maxlen: 24
95.156.252.0/22 maxlen: 22
95.156.255.0/24 maxlen: 24
95.156.254.0/24 maxlen: 24
91.99.96.0/21 maxlen: 21
91.99.98.0/24 maxlen: 24
91.99.97.0/24 maxlen: 24
91.99.96.0/24 maxlen: 24
91.99.103.0/24 maxlen: 24
91.99.102.0/24 maxlen: 24
91.99.101.0/24 maxlen: 24
91.99.99.0/24 maxlen: 24
109.230.200.0/24 maxlen: 24
31.214.172.0/24 maxlen: 24
31.214.171.0/24 maxlen: 24
31.214.170.0/24 maxlen: 24
31.214.169.0/24 maxlen: 24
31.214.168.0/24 maxlen: 24
31.214.168.0/21 maxlen: 21
31.214.175.0/24 maxlen: 24
31.214.174.0/24 maxlen: 24
31.214.173.0/24 maxlen: 24
82.99.216.0/22 maxlen: 22
91.99.219.0/24 maxlen: 24
82.99.219.0/24 maxlen: 24
91.99.218.0/24 maxlen: 24
82.99.218.0/24 maxlen: 24
82.99.215.0/24 maxlen: 24
82.99.217.0/24 maxlen: 24
91.99.217.0/24 maxlen: 24
82.99.216.0/24 maxlen: 24
91.99.216.0/24 maxlen: 24
82.99.238.0/24 maxlen: 24
82.99.244.0/24 maxlen: 24
82.99.243.0/24 maxlen: 24
82.99.242.0/24 maxlen: 24
91.99.75.0/24 maxlen: 24
91.99.74.0/24 maxlen: 24
91.99.73.0/24 maxlen: 24
91.99.72.0/24 maxlen: 24
37.10.109.0/24 maxlen: 24
91.98.96.0/21 maxlen: 21
91.98.97.0/24 maxlen: 24
91.98.96.0/24 maxlen: 24
91.98.98.0/24 maxlen: 24
91.98.102.0/24 maxlen: 24
91.98.100.0/24 maxlen: 24
91.98.99.0/24 maxlen: 24
91.98.31.0/24 maxlen: 24
185.13.231.0/24 maxlen: 24
91.98.28.0/22 maxlen: 22
91.98.30.0/24 maxlen: 24
91.98.29.0/24 maxlen: 24
185.13.230.0/24 maxlen: 24
185.13.229.0/24 maxlen: 24
185.13.228.0/24 maxlen: 24
185.13.228.0/22 maxlen: 22
91.98.28.0/24 maxlen: 24
Validation: Failed, RFC 3779 resource not subset of parent's resources
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:85:29:92:0c:75:69:2f:96:56:51:85:11:5a:a0:97:0a:00
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2f814adc1d5209e098f078adbc856bad83b749c2
Validity
Not Before: Dec 19 08:48:35 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=9a89daea6c1c0fe723d5091ff7812d26e7856d51
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a6:59:27:11:d4:21:42:90:f9:f7:05:c4:d9:59:
fe:62:c7:8f:8f:cb:09:65:53:e1:d8:0c:7b:3e:fa:
cb:34:58:ec:2a:d0:0e:1f:64:61:3b:7e:93:ff:49:
da:11:51:38:8a:fd:37:bb:ac:eb:56:7e:52:37:66:
b5:62:07:de:c5:5c:ea:85:42:7d:33:fa:2c:17:35:
ab:22:17:f0:3f:3f:ba:7c:24:b4:8e:eb:a2:5c:e3:
b8:3f:39:b2:33:7d:2b:cd:99:23:77:2e:5a:7a:e5:
38:c2:a5:42:55:6d:a4:cc:86:bc:2a:63:88:c9:f0:
09:a9:6b:e1:ec:30:46:57:a4:2e:59:a8:c0:54:e9:
8e:fa:8a:bc:c8:6d:76:50:17:47:56:6b:e7:43:a7:
9f:0b:25:82:5b:93:b3:3f:66:0c:33:c3:ee:f8:73:
6c:ea:d2:e7:a0:0a:2f:67:d6:d3:96:fa:a2:4b:c3:
c5:97:2d:75:ed:e8:da:9f:10:27:0d:60:ee:9f:06:
23:22:5d:b1:89:3d:76:6c:0c:f4:00:86:d6:4a:89:
94:c4:d3:49:3a:f4:1b:13:4a:a0:ce:fe:bf:33:f7:
47:39:17:34:83:25:3b:21:24:ad:a5:61:8e:cf:b5:
7d:8f:7e:37:d4:b4:fc:cf:21:f7:30:f5:68:b8:4e:
b5:4f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
9A:89:DA:EA:6C:1C:0F:E7:23:D5:09:1F:F7:81:2D:26:E7:85:6D:51
X509v3 Authority Key Identifier:
keyid:2F:81:4A:DC:1D:52:09:E0:98:F0:78:AD:BC:85:6B:AD:83:B7:49:C2
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/L4FK3B1SCeCY8HitvIVrrYO3ScI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/02/13e12a-2bac-4752-997d-df86b6dd997c/1/mona6mwcD-cj1Qkf94EtJueFbVE.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/02/13e12a-2bac-4752-997d-df86b6dd997c/1/L4FK3B1SCeCY8HitvIVrrYO3ScI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
31.214.168.0/21
31.214.248.0/21
37.10.109.0/24
37.228.136.0/22
82.99.215.0-82.99.219.255
82.99.238.0/24
82.99.242.0-82.99.244.255
91.98.28.0/22
91.98.96.0/21
91.99.72.0/22
91.99.96.0/21
91.99.216.0/22
95.156.236.0/23
95.156.252.0/22
109.230.200.0/24
134.255.200.0/21
185.13.228.0/22
Signature Algorithm: sha256WithRSAEncryption
2c:db:50:06:6e:33:c8:19:9f:f2:43:ee:1a:1e:c4:0d:ad:86:
56:53:4c:28:50:ed:66:24:17:7c:d2:de:a5:93:c9:74:78:85:
ec:d3:80:0e:8d:5e:44:3d:ba:08:45:2e:cd:cb:b8:8c:48:c9:
32:8b:a1:a5:6c:99:54:e4:30:c4:d7:a3:40:66:c7:c5:70:e4:
35:b7:ac:34:bf:ed:b4:6f:ee:69:44:20:38:fb:b6:79:9c:1f:
cb:59:3d:04:14:69:f1:73:de:01:0f:a3:23:04:d8:ac:36:2f:
61:1a:cd:4e:3d:da:b3:0f:a2:cd:55:ed:c7:4c:9e:2c:6d:a9:
bf:82:27:c3:26:27:67:4b:70:f1:d0:4d:50:9d:e4:29:45:26:
2c:4c:5f:76:9d:98:99:48:5f:6f:ec:38:65:63:34:51:58:14:
82:66:9c:d7:ab:6b:dc:4c:9a:51:9e:6c:50:0c:a5:57:98:32:
d7:23:8c:68:0a:08:3a:be:a5:f1:dc:c0:e4:8d:fe:b4:60:4f:
a0:34:63:88:68:71:77:82:78:4f:2d:d3:c1:9a:cf:fb:c2:8c:
fe:97:2f:90:b1:7d:33:82:f9:24:8d:57:dd:03:ba:20:3c:bf:
08:75:be:db:d0:32:05:47:e7:87:af:e3:86:3c:5f:97:ab:a1:
09:76:c8:a3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:16:42 2024 by rpki-client on console-fra.rpki-client.org