Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/03/913a3a-f550-46f0-acc7-cd3ca5975712/1/39IaUQqbS354yBcQn6vL9RYc3FI.roa
File: 39IaUQqbS354yBcQn6vL9RYc3FI.roa (raw, json)
Hash identifier: qYCxcsfTzGSW7CMdAp2EMoS23MbRuEwUCuQa8wAT/XA=
Subject key identifier: DF:D2:1A:51:0A:9B:4B:7E:78:C8:17:10:9F:AB:CB:F5:16:1C:DC:52
Certificate issuer: /CN=22c4ac3e3c43d70d05349c815baadd38ad775e9d
Certificate serial: 0183E4E8AAB5C68FC37BED2F0DDB01785D51
Authority key identifier: 22:C4:AC:3E:3C:43:D7:0D:05:34:9C:81:5B:AA:DD:38:AD:77:5E:9D
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/IsSsPjxD1w0FNJyBW6rdOK13Xp0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/03/913a3a-f550-46f0-acc7-cd3ca5975712/1/39IaUQqbS354yBcQn6vL9RYc3FI.roa
Signing time: Mon 17 Oct 2022 07:46:36 +0000
ROA not before: Mon 17 Oct 2022 07:46:36 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 34224
IP address blocks: 212.73.131.0/24 maxlen: 24
212.73.128.0/23 maxlen: 24
212.73.132.0/24 maxlen: 24
212.73.130.0/23 maxlen: 24
212.73.136.0/24 maxlen: 24
87.120.176.0/24 maxlen: 24
212.73.133.0/24 maxlen: 24
212.73.138.0/23 maxlen: 24
212.73.138.0/24 maxlen: 24
212.73.134.0/24 maxlen: 24
212.73.143.0/24 maxlen: 24
212.73.140.0/24 maxlen: 24
212.73.144.0/24 maxlen: 24
212.73.141.0/24 maxlen: 24
212.73.145.0/24 maxlen: 24
212.73.142.0/24 maxlen: 24
212.73.147.0/24 maxlen: 24
212.73.148.0/24 maxlen: 24
212.73.146.0/24 maxlen: 24
212.73.155.0/24 maxlen: 24
212.73.157.0/24 maxlen: 24
87.120.195.0/24 maxlen: 24
87.120.199.0/24 maxlen: 24
87.120.206.0/24 maxlen: 24
87.120.206.0/23 maxlen: 24
87.120.201.0/24 maxlen: 24
87.120.200.0/24 maxlen: 24
87.120.207.0/24 maxlen: 24
87.120.109.0/24 maxlen: 24
87.120.128.0/23 maxlen: 24
87.120.132.0/24 maxlen: 24
87.120.134.0/24 maxlen: 24
87.120.133.0/24 maxlen: 24
87.120.135.0/24 maxlen: 24
37.60.138.0/24 maxlen: 24
87.121.42.0/24 maxlen: 24
37.60.139.0/24 maxlen: 24
92.249.49.0/24 maxlen: 24
87.121.52.0/24 maxlen: 24
87.121.54.0/24 maxlen: 24
87.121.59.0/24 maxlen: 24
87.121.64.0/24 maxlen: 24
87.120.217.0/24 maxlen: 24
87.120.223.0/24 maxlen: 24
87.120.36.100/32 maxlen: 32
87.120.253.0/24 maxlen: 24
87.120.255.0/24 maxlen: 24
87.121.0.0/23 maxlen: 24
87.121.0.0/24 maxlen: 24
87.121.1.0/24 maxlen: 24
87.121.2.0/24 maxlen: 24
87.120.254.0/24 maxlen: 24
87.121.6.0/23 maxlen: 24
91.92.219.0/24 maxlen: 24
91.92.230.0/24 maxlen: 24
91.92.198.0/23 maxlen: 24
91.92.197.0/24 maxlen: 24
87.120.61.0/24 maxlen: 24
87.120.104.0/24 maxlen: 24
87.120.6.0/23 maxlen: 24
87.120.6.0/24 maxlen: 24
87.120.8.0/24 maxlen: 24
87.120.13.0/24 maxlen: 24
87.120.37.0/24 maxlen: 24
87.120.43.0/24 maxlen: 24
87.120.39.0/24 maxlen: 24
91.92.0.0/24 maxlen: 24
91.92.2.0/24 maxlen: 24
91.92.1.0/24 maxlen: 24
91.92.109.0/24 maxlen: 24
91.92.139.0/24 maxlen: 24
91.92.69.0/24 maxlen: 24
91.92.65.0/24 maxlen: 24
91.92.66.0/24 maxlen: 24
91.92.68.0/24 maxlen: 24
91.92.105.0/24 maxlen: 24
94.156.216.0/21 maxlen: 24
94.156.233.0/24 maxlen: 24
94.156.227.0/24 maxlen: 24
94.156.232.0/22 maxlen: 22
94.156.232.0/24 maxlen: 24
93.123.64.0/24 maxlen: 24
94.156.249.0/24 maxlen: 24
94.156.251.0/24 maxlen: 24
94.156.252.0/24 maxlen: 24
94.156.248.0/24 maxlen: 24
94.156.172.0/23 maxlen: 24
94.156.186.0/24 maxlen: 24
93.123.8.0/24 maxlen: 24
94.156.185.0/24 maxlen: 24
94.156.188.0/24 maxlen: 24
94.156.190.0/24 maxlen: 24
93.123.12.0/24 maxlen: 24
93.123.18.0/24 maxlen: 24
93.123.28.0/23 maxlen: 24
93.123.37.0/24 maxlen: 24
93.123.36.0/24 maxlen: 24
93.123.32.0/22 maxlen: 24
94.156.10.0/24 maxlen: 24
94.156.15.0/24 maxlen: 24
94.156.12.0/24 maxlen: 24
94.156.44.0/24 maxlen: 24
94.156.42.0/24 maxlen: 24
94.156.106.0/24 maxlen: 24
94.156.129.0/24 maxlen: 24
94.156.159.0/24 maxlen: 24
94.156.158.0/24 maxlen: 24
94.156.153.0/24 maxlen: 24
94.156.77.0/24 maxlen: 24
94.156.98.0/24 maxlen: 24
94.156.94.0/24 maxlen: 24
94.156.100.0/24 maxlen: 24
94.156.102.0/24 maxlen: 24
31.13.195.0/24 maxlen: 24
31.13.197.0/24 maxlen: 24
87.121.150.0/23 maxlen: 24
31.13.217.0/24 maxlen: 24
87.121.161.0/24 maxlen: 24
31.13.216.0/21 maxlen: 24
31.13.223.0/24 maxlen: 24
31.13.221.0/24 maxlen: 24
87.121.79.0/24 maxlen: 24
87.121.83.0/24 maxlen: 24
87.121.82.0/24 maxlen: 24
87.121.90.0/23 maxlen: 24
87.121.112.0/24 maxlen: 24
87.121.111.0/24 maxlen: 24
87.121.118.0/24 maxlen: 24
87.121.113.0/24 maxlen: 24
31.13.230.0/23 maxlen: 24
31.13.236.0/22 maxlen: 24
31.13.245.0/24 maxlen: 24
31.13.241.0/24 maxlen: 24
2a00:1728:35::/48 maxlen: 48
2a00:1728:27::/48 maxlen: 48
2a00:1728:21::/48 maxlen: 48
2a00:1728:0:d::/64 maxlen: 64
2a00:1728:1b::/48 maxlen: 48
2a00:1728:34::/48 maxlen: 48
2a00:1728:23::/48 maxlen: 48
2a00:1728:31::/48 maxlen: 48
2a00:1728:25::/48 maxlen: 48
2a00:1728:3::/48 maxlen: 48
2a00:1728:1f::/48 maxlen: 48
2a00:1728::/32 maxlen: 48
Validation: Failed, RFC 3779 resource not subset of parent's resources
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:83:e4:e8:aa:b5:c6:8f:c3:7b:ed:2f:0d:db:01:78:5d:51
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=22c4ac3e3c43d70d05349c815baadd38ad775e9d
Validity
Not Before: Oct 17 07:46:36 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=dfd21a510a9b4b7e78c817109fabcbf5161cdc52
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:97:8a:ad:fb:34:cb:17:c0:a5:3f:32:39:fd:a3:
a6:de:ea:c1:7e:7f:b5:da:8d:75:ce:91:58:89:91:
58:70:8e:93:b2:10:2b:a2:bb:9d:dd:ed:8a:95:b7:
6e:be:9d:66:8a:c0:bd:75:f7:1f:4d:11:a3:8b:30:
ac:ef:e6:61:10:2b:04:84:1f:79:48:01:82:99:cf:
91:16:67:cc:a7:63:40:0d:72:a3:a8:ec:a6:3f:ec:
bd:8a:95:f1:f0:a0:31:0e:b9:ab:87:d8:15:df:2a:
fe:09:55:a8:ea:81:bd:57:67:23:40:eb:02:8d:88:
4d:04:c8:5f:13:13:f5:20:91:b9:25:27:73:eb:00:
19:ba:a0:b0:ff:42:e9:97:a2:f5:0b:f1:5f:77:74:
69:af:d3:b8:d6:dd:d2:89:58:ca:16:4e:5c:a6:3a:
42:65:8b:91:6f:f7:83:bc:fa:81:af:87:69:27:08:
39:16:3b:db:32:5f:3e:d2:78:6f:00:42:e2:6c:37:
57:f2:e1:ee:a1:7e:5f:f4:3e:cf:37:b1:32:d5:66:
b8:a3:b0:cc:7e:0d:7c:98:30:de:48:cd:06:d7:5c:
0b:78:05:1c:20:da:f8:6b:6a:7b:3d:41:7e:81:87:
cb:50:f0:a1:d8:44:cc:31:6f:70:e4:72:7a:0f:57:
51:e7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
DF:D2:1A:51:0A:9B:4B:7E:78:C8:17:10:9F:AB:CB:F5:16:1C:DC:52
X509v3 Authority Key Identifier:
keyid:22:C4:AC:3E:3C:43:D7:0D:05:34:9C:81:5B:AA:DD:38:AD:77:5E:9D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/IsSsPjxD1w0FNJyBW6rdOK13Xp0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/03/913a3a-f550-46f0-acc7-cd3ca5975712/1/39IaUQqbS354yBcQn6vL9RYc3FI.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/03/913a3a-f550-46f0-acc7-cd3ca5975712/1/IsSsPjxD1w0FNJyBW6rdOK13Xp0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
31.13.195.0/24
31.13.197.0/24
31.13.216.0/21
31.13.230.0/23
31.13.236.0/22
31.13.241.0/24
31.13.245.0/24
37.60.138.0/23
87.120.6.0-87.120.8.255
87.120.13.0/24
87.120.36.100/32
87.120.37.0/24
87.120.39.0/24
87.120.43.0/24
87.120.61.0/24
87.120.104.0/24
87.120.109.0/24
87.120.128.0/23
87.120.132.0/22
87.120.176.0/24
87.120.195.0/24
87.120.199.0-87.120.201.255
87.120.206.0/23
87.120.217.0/24
87.120.223.0/24
87.120.253.0-87.121.2.255
87.121.6.0/23
87.121.42.0/24
87.121.52.0/24
87.121.54.0/24
87.121.59.0/24
87.121.64.0/24
87.121.79.0/24
87.121.82.0/23
87.121.90.0/23
87.121.111.0-87.121.113.255
87.121.118.0/24
87.121.150.0/23
87.121.161.0/24
91.92.0.0-91.92.2.255
91.92.65.0-91.92.66.255
91.92.68.0/23
91.92.105.0/24
91.92.109.0/24
91.92.139.0/24
91.92.197.0-91.92.199.255
91.92.219.0/24
91.92.230.0/24
92.249.49.0/24
93.123.8.0/24
93.123.12.0/24
93.123.18.0/24
93.123.28.0/23
93.123.32.0-93.123.37.255
93.123.64.0/24
94.156.10.0/24
94.156.12.0/24
94.156.15.0/24
94.156.42.0/24
94.156.44.0/24
94.156.77.0/24
94.156.94.0/24
94.156.98.0/24
94.156.100.0/24
94.156.102.0/24
94.156.106.0/24
94.156.129.0/24
94.156.153.0/24
94.156.158.0/23
94.156.172.0/23
94.156.185.0-94.156.186.255
94.156.188.0/24
94.156.190.0/24
94.156.216.0/21
94.156.227.0/24
94.156.232.0/22
94.156.248.0/23
94.156.251.0-94.156.252.255
212.73.128.0-212.73.134.255
212.73.136.0/24
212.73.138.0-212.73.148.255
212.73.155.0/24
212.73.157.0/24
IPv6:
2a00:1728::/32
Signature Algorithm: sha256WithRSAEncryption
66:f4:4d:ba:7a:cf:45:78:82:fd:eb:eb:11:13:08:4a:49:bd:
4f:b8:df:7d:19:16:71:62:aa:20:c7:84:99:17:23:1b:91:42:
ca:19:76:6a:27:bd:2f:94:99:73:29:bb:8b:97:18:f4:3a:e5:
78:cf:f2:3a:f4:7d:49:62:2d:65:30:3c:2b:5f:c1:98:fd:04:
42:4b:91:6e:fa:14:a6:ed:25:1e:2a:c0:c7:96:37:70:2a:03:
4b:27:16:e9:5e:3f:f2:43:a9:0b:ef:e0:f4:42:39:82:52:02:
25:74:8e:da:0f:41:3e:40:be:7e:24:dc:b5:d3:3b:a7:06:46:
8e:be:fb:7a:98:5e:47:19:db:01:67:b3:cb:67:b1:fb:0f:3f:
b6:2b:bc:7f:07:0c:3e:49:dc:d3:ae:86:fb:c2:bd:7b:65:ec:
ee:93:79:20:bd:82:e1:17:7f:6c:58:36:62:c4:6b:92:e6:89:
85:e7:8e:3a:16:cc:0e:01:63:14:b4:81:bb:99:18:bd:29:7a:
26:41:2f:46:88:e5:02:3e:6b:58:46:38:93:16:97:1f:b5:84:
7a:5d:88:1e:f0:84:56:76:bf:57:8c:30:98:45:ab:ef:74:61:
64:78:09:87:2b:a8:6b:e5:06:a9:68:da:9a:70:f4:17:d9:00:
38:c3:c0:e6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 19 23:46:31 2023 by rpki-client on console-ams.rpki-client.org