Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/71/9e2b1a-163b-4854-961a-ea75ddf47b4a/1/7vrrkMxValMlvMvtvZ_prERgJvg.roa
File: 7vrrkMxValMlvMvtvZ_prERgJvg.roa (raw, json)
Hash identifier: Xjwq7xc2fntGzv0DQbmW3Bok/Uv3zJFWeQljJ8Iw9VU=
Subject key identifier: EE:FA:EB:90:CC:55:6A:53:25:BC:CB:ED:BD:9F:E9:AC:44:60:26:F8
Certificate issuer: /CN=f4c0aa7b3e3cbff88262add92b339e35051ce1a0
Certificate serial: 0188B390AE300D8D6C579AD96460F051A726
Authority key identifier: F4:C0:AA:7B:3E:3C:BF:F8:82:62:AD:D9:2B:33:9E:35:05:1C:E1:A0
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/9MCqez48v_iCYq3ZKzOeNQUc4aA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/71/9e2b1a-163b-4854-961a-ea75ddf47b4a/1/7vrrkMxValMlvMvtvZ_prERgJvg.roa
Signing time: Tue 13 Jun 2023 07:03:03 +0000
ROA not before: Tue 13 Jun 2023 07:03:03 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 47956
IP address blocks: 141.226.144.0/20 maxlen: 24
141.226.144.0/21 maxlen: 21
141.226.152.0/21 maxlen: 21
188.120.128.0/19 maxlen: 24
141.226.160.0/20 maxlen: 24
141.226.160.0/22 maxlen: 22
141.226.160.0/21 maxlen: 21
141.226.168.0/21 maxlen: 21
141.226.176.0/21 maxlen: 24
94.230.80.0/20 maxlen: 24
141.226.0.0/22 maxlen: 22
141.226.0.0/21 maxlen: 21
141.226.0.0/19 maxlen: 24
141.226.4.0/22 maxlen: 22
141.226.8.0/22 maxlen: 22
141.226.8.0/21 maxlen: 21
141.226.12.0/22 maxlen: 22
5.102.192.0/18 maxlen: 24
91.205.152.0/22 maxlen: 24
31.210.176.0/20 maxlen: 24
37.46.32.0/20 maxlen: 24
141.226.32.0/20 maxlen: 24
141.226.48.0/22 maxlen: 24
141.226.52.0/23 maxlen: 24
141.226.54.0/24 maxlen: 24
141.226.56.0/21 maxlen: 24
141.226.64.0/22 maxlen: 24
141.226.68.0/23 maxlen: 24
141.226.70.0/24 maxlen: 24
141.226.72.0/21 maxlen: 24
2a02:ed5::/32 maxlen: 32
2a02:ed0::/29 maxlen: 29
2a02:ed1::/32 maxlen: 32
2a02:ed2::/32 maxlen: 32
2a02:ed0::/32 maxlen: 48
Validation: Failed, RFC 3779 resource not subset of parent's resources
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:88:b3:90:ae:30:0d:8d:6c:57:9a:d9:64:60:f0:51:a7:26
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=f4c0aa7b3e3cbff88262add92b339e35051ce1a0
Validity
Not Before: Jun 13 07:03:03 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=eefaeb90cc556a5325bccbedbd9fe9ac446026f8
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e7:cb:4c:2e:f9:0f:78:0f:ea:0d:b1:68:b2:cf:
ea:42:f0:6a:fc:e3:8e:d6:b8:d0:5c:9b:87:4a:02:
95:a2:a6:0b:b3:4f:91:6c:98:bd:6a:c5:a3:7e:d7:
65:b3:85:17:e0:7e:c3:50:c4:d2:89:77:c5:aa:5d:
15:6a:99:d3:eb:c2:a0:29:cc:a8:8e:15:7f:83:34:
61:f7:7a:4d:be:0f:ec:cb:5b:c7:1b:e7:26:4b:cb:
e2:f2:22:6c:84:9b:90:48:7c:d8:57:32:47:ae:88:
45:e1:eb:cc:4d:ec:80:ff:a2:96:7b:7e:c5:5f:84:
4e:81:3e:a0:1e:0f:0f:64:5b:eb:b0:92:d4:05:be:
25:59:de:95:32:ac:0a:3f:51:79:97:37:2d:27:9e:
39:27:0a:65:30:60:d5:b1:2e:51:90:85:ee:c5:23:
f6:06:75:4f:9b:0b:06:f6:a7:9c:35:98:0c:b4:2e:
79:0a:0c:cc:21:fc:19:51:ec:22:4b:16:f5:ec:69:
9c:25:b0:c0:a0:2f:ed:35:54:df:fd:6b:5d:12:36:
2c:31:7f:a3:65:a1:8b:88:ec:7f:f5:72:7b:39:03:
21:3a:74:18:bb:fb:ad:8a:a0:24:74:c6:7f:ba:96:
2b:95:07:3b:58:65:ad:02:cf:e6:9c:50:5a:9c:05:
14:39
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
EE:FA:EB:90:CC:55:6A:53:25:BC:CB:ED:BD:9F:E9:AC:44:60:26:F8
X509v3 Authority Key Identifier:
keyid:F4:C0:AA:7B:3E:3C:BF:F8:82:62:AD:D9:2B:33:9E:35:05:1C:E1:A0
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/9MCqez48v_iCYq3ZKzOeNQUc4aA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/71/9e2b1a-163b-4854-961a-ea75ddf47b4a/1/7vrrkMxValMlvMvtvZ_prERgJvg.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/71/9e2b1a-163b-4854-961a-ea75ddf47b4a/1/9MCqez48v_iCYq3ZKzOeNQUc4aA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
5.102.192.0/18
31.210.176.0/20
37.46.32.0/20
91.205.152.0/22
94.230.80.0/20
141.226.0.0-141.226.54.255
141.226.56.0-141.226.70.255
141.226.72.0/21
141.226.144.0-141.226.183.255
188.120.128.0/19
IPv6:
2a02:ed0::/29
Signature Algorithm: sha256WithRSAEncryption
bf:ca:e0:0a:8d:29:21:2d:52:ed:38:20:30:d2:32:a1:32:9b:
7e:d0:8a:07:45:7e:0a:6d:b7:02:24:83:cf:37:0f:f4:00:28:
90:b1:76:64:ac:cf:d5:58:7a:37:00:96:65:dc:16:7f:70:07:
dd:d9:b1:84:1a:0e:f6:a4:86:e4:9e:9b:fd:9f:09:97:db:2a:
4f:ce:3d:fb:1c:1e:e4:60:1d:9b:f6:68:2e:46:4d:59:2a:c5:
89:07:bb:d3:04:6d:33:a0:27:9d:34:1e:70:b2:cc:34:be:39:
32:44:6c:30:9a:b6:4d:5a:0c:71:ae:b1:4f:d2:de:ce:2d:c7:
82:19:b6:4f:2b:6a:4f:f9:b0:3e:5a:18:29:eb:ef:d3:44:3a:
24:f4:94:ab:58:d7:56:4b:e6:e6:ea:3b:82:a9:5a:4a:e1:e2:
23:b7:28:b7:2b:a2:45:58:e4:fb:eb:87:84:aa:47:da:56:eb:
65:58:0c:70:39:96:6f:ad:72:e5:5b:be:e5:90:10:ab:0b:c7:
a3:7a:03:4c:b1:79:99:2f:99:91:1f:5d:f9:66:03:9d:95:85:
74:31:04:87:b6:c0:40:c7:a4:3f:bd:4c:0b:17:8b:a6:65:4a:
fe:45:69:a7:50:a8:49:ba:42:5e:7c:e7:31:1d:00:14:9e:f0:
5a:9c:e4:1b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Apr 22 12:35:50 2025 by rpki-client