Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/02/13e12a-2bac-4752-997d-df86b6dd997c/1/wqVLF2TcMSi1oUOzXuXVK0_-qUM.roa
File: wqVLF2TcMSi1oUOzXuXVK0_-qUM.roa (raw, json)
Hash identifier: woUXsfBerPmtpVwAJc6Qx1CJf7UDy+5AUSsfadjJjMw=
Subject key identifier: C2:A5:4B:17:64:DC:31:28:B5:A1:43:B3:5E:E5:D5:2B:4F:FE:A9:43
Certificate issuer: /CN=2f814adc1d5209e098f078adbc856bad83b749c2
Certificate serial: 0184A5BAD68C0E0713A9B8174EDE692D7CA5
Authority key identifier: 2F:81:4A:DC:1D:52:09:E0:98:F0:78:AD:BC:85:6B:AD:83:B7:49:C2
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/L4FK3B1SCeCY8HitvIVrrYO3ScI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/02/13e12a-2bac-4752-997d-df86b6dd997c/1/wqVLF2TcMSi1oUOzXuXVK0_-qUM.roa
Signing time: Wed 23 Nov 2022 18:23:16 +0000
ROA not before: Wed 23 Nov 2022 18:23:16 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 60976
IP address blocks: 31.214.248.0/21 maxlen: 21
31.214.249.0/24 maxlen: 24
31.214.248.0/24 maxlen: 24
31.214.253.0/24 maxlen: 24
31.214.252.0/24 maxlen: 24
31.214.251.0/24 maxlen: 24
31.214.250.0/24 maxlen: 24
31.214.255.0/24 maxlen: 24
31.214.254.0/24 maxlen: 24
37.228.139.0/24 maxlen: 24
37.228.138.0/24 maxlen: 24
37.228.137.0/24 maxlen: 24
37.228.136.0/24 maxlen: 24
134.255.200.0/21 maxlen: 21
134.255.206.0/24 maxlen: 24
134.255.205.0/24 maxlen: 24
134.255.204.0/24 maxlen: 24
134.255.203.0/24 maxlen: 24
134.255.202.0/24 maxlen: 24
134.255.201.0/24 maxlen: 24
134.255.200.0/24 maxlen: 24
134.255.207.0/24 maxlen: 24
95.156.237.0/24 maxlen: 24
95.156.236.0/24 maxlen: 24
95.156.253.0/24 maxlen: 24
95.156.252.0/24 maxlen: 24
95.156.252.0/22 maxlen: 22
95.156.255.0/24 maxlen: 24
95.156.254.0/24 maxlen: 24
91.99.96.0/21 maxlen: 21
91.99.98.0/24 maxlen: 24
91.99.97.0/24 maxlen: 24
91.99.96.0/24 maxlen: 24
91.99.103.0/24 maxlen: 24
91.99.102.0/24 maxlen: 24
91.99.101.0/24 maxlen: 24
91.99.99.0/24 maxlen: 24
31.214.172.0/24 maxlen: 24
31.214.171.0/24 maxlen: 24
31.214.170.0/24 maxlen: 24
31.214.169.0/24 maxlen: 24
31.214.168.0/24 maxlen: 24
31.214.168.0/21 maxlen: 21
31.214.175.0/24 maxlen: 24
31.214.174.0/24 maxlen: 24
31.214.173.0/24 maxlen: 24
82.99.216.0/22 maxlen: 22
82.99.219.0/24 maxlen: 24
91.99.219.0/24 maxlen: 24
82.99.218.0/24 maxlen: 24
82.99.215.0/24 maxlen: 24
91.99.218.0/24 maxlen: 24
82.99.217.0/24 maxlen: 24
91.99.217.0/24 maxlen: 24
82.99.216.0/24 maxlen: 24
91.99.216.0/24 maxlen: 24
82.99.238.0/24 maxlen: 24
82.99.244.0/24 maxlen: 24
82.99.243.0/24 maxlen: 24
82.99.242.0/24 maxlen: 24
91.99.75.0/24 maxlen: 24
91.99.74.0/24 maxlen: 24
91.99.73.0/24 maxlen: 24
91.99.72.0/24 maxlen: 24
37.10.109.0/24 maxlen: 24
91.98.96.0/21 maxlen: 21
91.98.97.0/24 maxlen: 24
91.98.96.0/24 maxlen: 24
91.98.98.0/24 maxlen: 24
91.98.102.0/24 maxlen: 24
91.98.100.0/24 maxlen: 24
91.98.99.0/24 maxlen: 24
91.98.31.0/24 maxlen: 24
185.13.231.0/24 maxlen: 24
91.98.28.0/22 maxlen: 22
91.98.30.0/24 maxlen: 24
91.98.29.0/24 maxlen: 24
185.13.230.0/24 maxlen: 24
185.13.229.0/24 maxlen: 24
185.13.228.0/24 maxlen: 24
185.13.228.0/22 maxlen: 22
91.98.28.0/24 maxlen: 24
Validation: Failed, RFC 3779 resource not subset of parent's resources
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:84:a5:ba:d6:8c:0e:07:13:a9:b8:17:4e:de:69:2d:7c:a5
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2f814adc1d5209e098f078adbc856bad83b749c2
Validity
Not Before: Nov 23 18:23:16 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=c2a54b1764dc3128b5a143b35ee5d52b4ffea943
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bd:b5:02:8c:1b:83:b7:d8:3e:e8:b6:19:d5:3a:
90:4a:df:10:df:4e:d6:62:be:1c:e1:1a:9d:1b:eb:
48:74:97:a9:39:f4:ad:90:71:83:9b:a8:6b:02:13:
27:90:38:95:4d:31:b0:af:30:41:24:7c:ce:2d:d9:
d2:70:29:55:0b:53:08:c7:0e:26:72:57:69:a7:6f:
45:9c:01:05:48:63:98:4d:97:dc:84:47:7c:72:2d:
f7:f1:37:86:70:e9:3e:55:c4:78:20:2e:4c:0f:dd:
c0:b5:9e:b1:b8:50:00:81:e1:79:d9:65:4a:9b:37:
fa:64:ef:07:7b:c2:4c:c5:9d:ec:40:b6:d2:93:c3:
ad:57:4a:b9:d2:fd:cb:ea:14:2d:70:fe:5b:59:a5:
4d:33:e1:8e:5e:9d:6a:32:3b:8f:90:86:73:61:1a:
49:96:c7:aa:cb:1e:05:6e:17:ef:df:87:0c:7d:b6:
da:c0:c4:88:cf:74:a3:6d:fe:54:e4:b5:c0:9a:35:
59:f2:d7:48:b3:2a:c3:df:e4:58:b7:3b:3c:aa:b0:
0e:31:ee:e6:d0:6a:60:28:a8:6a:fc:a4:bf:7b:39:
bc:fa:3c:7b:fa:09:7f:d4:e4:de:52:91:35:8e:3e:
7d:f8:ea:65:4c:18:df:18:22:ae:1c:65:72:6a:a4:
39:07
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C2:A5:4B:17:64:DC:31:28:B5:A1:43:B3:5E:E5:D5:2B:4F:FE:A9:43
X509v3 Authority Key Identifier:
keyid:2F:81:4A:DC:1D:52:09:E0:98:F0:78:AD:BC:85:6B:AD:83:B7:49:C2
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/L4FK3B1SCeCY8HitvIVrrYO3ScI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/02/13e12a-2bac-4752-997d-df86b6dd997c/1/wqVLF2TcMSi1oUOzXuXVK0_-qUM.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/02/13e12a-2bac-4752-997d-df86b6dd997c/1/L4FK3B1SCeCY8HitvIVrrYO3ScI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
31.214.168.0/21
31.214.248.0/21
37.10.109.0/24
37.228.136.0/22
82.99.215.0-82.99.219.255
82.99.238.0/24
82.99.242.0-82.99.244.255
91.98.28.0/22
91.98.96.0/21
91.99.72.0/22
91.99.96.0/21
91.99.216.0/22
95.156.236.0/23
95.156.252.0/22
134.255.200.0/21
185.13.228.0/22
Signature Algorithm: sha256WithRSAEncryption
1d:b9:d0:b0:9f:7d:eb:e2:63:b8:8a:d5:d6:bf:8f:81:c7:7d:
90:d7:c7:b8:b3:f3:a5:73:fc:19:c1:8c:52:38:37:6d:cf:2d:
89:ca:98:4b:92:80:f5:22:44:19:73:49:85:c7:fe:17:6d:f7:
f9:dc:b4:79:5a:68:f6:8b:16:7e:21:9c:54:10:45:75:b8:66:
a3:2c:eb:a5:75:cb:60:dd:a6:65:fe:7f:03:78:07:41:a7:68:
fd:d3:04:dd:e8:e5:7a:47:2e:a9:6a:14:55:1b:93:4a:06:49:
2a:dc:40:f1:74:ec:1e:4f:74:4f:7c:e2:4c:d3:4a:81:ff:ca:
cb:91:f2:80:dd:af:6c:d9:ad:20:d2:b4:57:b5:73:8c:d2:23:
95:59:a7:ce:b9:10:0d:04:ca:5c:d4:c5:68:ec:33:62:53:80:
20:e1:c1:ce:53:e9:c8:f5:23:55:9d:84:59:3e:fb:43:93:0b:
eb:de:2e:24:c7:58:f1:b1:f5:14:c4:6c:50:7f:2a:bd:9f:0c:
e6:fc:00:21:ce:37:15:fb:f2:88:53:59:b4:b8:fc:f3:fd:35:
a4:7e:96:35:d6:72:42:49:4f:43:5c:c2:fd:68:09:f4:5d:57:
4c:1a:cb:26:03:3e:86:45:7c:bb:f4:ae:72:d4:0c:36:89:65:
b5:67:5b:5d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 18:50:06 2024 by rpki-client on console-ams.rpki-client.org