Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/72/715d15-2810-4827-8dbd-0bee06126b1a/1/7DBmYVBcoqBYSeaS-vxquVFb308.roa
File: 7DBmYVBcoqBYSeaS-vxquVFb308.roa (raw, json)
Hash identifier: 2OwLHwTVEyJnX2BbDnq9V+9TDxnFEDU8EBczurT+n5o=
Subject key identifier: EC:30:66:61:50:5C:A2:A0:58:49:E6:92:FA:FC:6A:B9:51:5B:DF:4F
Certificate issuer: /CN=adf491488a7cd8448a420945871c0b99672dc66e
Certificate serial: 01899203C1F8A32E4770FC2743C0EDA1B77B
Authority key identifier: AD:F4:91:48:8A:7C:D8:44:8A:42:09:45:87:1C:0B:99:67:2D:C6:6E
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/rfSRSIp82ESKQglFhxwLmWctxm4.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/72/715d15-2810-4827-8dbd-0bee06126b1a/1/7DBmYVBcoqBYSeaS-vxquVFb308.roa
Signing time: Wed 26 Jul 2023 11:44:27 +0000
ROA not before: Wed 26 Jul 2023 11:44:27 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 205647
IP address blocks: 151.242.0.0/21 maxlen: 21
151.242.8.0/22 maxlen: 22
31.56.116.0/24 maxlen: 24
151.241.224.0/21 maxlen: 21
151.247.214.0/23 maxlen: 23
151.247.216.0/21 maxlen: 21
151.247.224.0/22 maxlen: 22
151.247.232.0/22 maxlen: 22
151.247.228.0/22 maxlen: 22
151.247.238.0/23 maxlen: 23
151.247.237.0/24 maxlen: 24
151.247.240.0/24 maxlen: 24
151.247.236.0/24 maxlen: 24
151.247.241.0/24 maxlen: 24
151.247.248.0/22 maxlen: 22
31.58.240.0/20 maxlen: 20
151.244.52.0/22 maxlen: 22
151.244.56.0/21 maxlen: 21
85.15.49.0/24 maxlen: 24
85.15.48.0/24 maxlen: 24
151.244.64.0/21 maxlen: 21
151.244.72.0/22 maxlen: 22
151.240.240.0/21 maxlen: 21
31.59.12.0/22 maxlen: 22
94.183.192.0/18 maxlen: 18
31.56.64.0/19 maxlen: 19
31.56.96.0/20 maxlen: 20
31.56.0.0/18 maxlen: 18
94.183.0.0/18 maxlen: 18
151.240.80.0/21 maxlen: 21
94.182.192.0/18 maxlen: 18
94.182.204.0/24 maxlen: 24
94.182.205.0/24 maxlen: 24
94.182.206.0/24 maxlen: 24
94.182.204.0/22 maxlen: 22
94.182.207.0/24 maxlen: 24
94.182.217.0/24 maxlen: 24
94.182.226.0/24 maxlen: 24
94.182.222.0/23 maxlen: 23
94.182.228.0/22 maxlen: 22
151.240.168.0/22 maxlen: 22
151.240.192.0/21 maxlen: 21
94.183.128.0/18 maxlen: 18
151.244.48.0/22 maxlen: 22
31.58.236.0/22 maxlen: 22
94.183.64.0/18 maxlen: 18
94.182.41.0/24 maxlen: 24
94.182.56.0/22 maxlen: 22
94.182.60.0/22 maxlen: 22
94.182.64.0/18 maxlen: 18
94.182.72.0/21 maxlen: 21
94.182.97.192/28 maxlen: 28
94.182.0.0/18 maxlen: 18
94.182.8.0/23 maxlen: 23
94.182.12.0/23 maxlen: 23
94.182.82.0/24 maxlen: 24
94.182.116.0/22 maxlen: 22
94.182.114.0/23 maxlen: 23
94.182.120.0/21 maxlen: 21
94.182.128.0/18 maxlen: 18
Validation: Failed, RFC 3779 resource not subset of parent's resources
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:89:92:03:c1:f8:a3:2e:47:70:fc:27:43:c0:ed:a1:b7:7b
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=adf491488a7cd8448a420945871c0b99672dc66e
Validity
Not Before: Jul 26 11:44:27 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=ec306661505ca2a05849e692fafc6ab9515bdf4f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b1:b7:d8:51:6c:45:cd:48:2b:47:e6:c6:5e:ef:
41:b5:be:c8:e9:37:3c:f4:88:41:af:82:ea:2f:8a:
d1:cb:ab:e8:55:47:9b:f9:f8:f8:89:7d:eb:6c:fd:
03:23:ee:e5:c2:a7:0c:f9:ea:c0:02:45:dd:66:f0:
7b:99:46:10:1a:1b:84:81:c9:b3:47:d3:5f:b9:68:
f7:51:38:42:12:e2:6e:6f:b5:67:61:39:d7:0e:e6:
0e:ab:f1:5f:67:24:4d:15:c2:5a:0b:6a:2a:8c:0e:
e7:f5:42:69:ea:5c:fd:8b:fd:09:b4:a4:f6:6f:4e:
23:cd:c4:e4:98:41:f8:43:c3:11:6c:cd:01:64:53:
f8:b1:32:22:62:62:9c:05:ee:f6:c7:a2:72:4d:41:
3a:ff:a2:36:2e:02:50:0b:4a:22:a4:05:89:9d:30:
af:27:0f:6b:0c:fd:43:b6:e3:29:1e:a7:b9:73:1e:
0f:bf:31:78:85:6b:06:ce:28:ca:64:f9:71:6a:7a:
aa:e0:8b:cd:b6:f1:5f:4b:78:fd:fc:12:4e:66:84:
f7:64:9f:15:69:44:c0:86:0b:ac:e1:cc:76:3d:b8:
c9:71:15:7a:20:b9:6e:35:95:3d:8c:25:9b:93:19:
f2:82:05:ae:65:5e:1f:6f:78:06:a9:9c:cd:b4:70:
09:51
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
EC:30:66:61:50:5C:A2:A0:58:49:E6:92:FA:FC:6A:B9:51:5B:DF:4F
X509v3 Authority Key Identifier:
keyid:AD:F4:91:48:8A:7C:D8:44:8A:42:09:45:87:1C:0B:99:67:2D:C6:6E
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/rfSRSIp82ESKQglFhxwLmWctxm4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/72/715d15-2810-4827-8dbd-0bee06126b1a/1/7DBmYVBcoqBYSeaS-vxquVFb308.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/72/715d15-2810-4827-8dbd-0bee06126b1a/1/rfSRSIp82ESKQglFhxwLmWctxm4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
31.56.0.0-31.56.111.255
31.56.116.0/24
31.58.236.0-31.58.255.255
31.59.12.0/22
85.15.48.0/23
94.182.0.0/15
151.240.80.0/21
151.240.168.0/22
151.240.192.0/21
151.240.240.0/21
151.241.224.0/21
151.242.0.0-151.242.11.255
151.244.48.0-151.244.75.255
151.247.214.0-151.247.241.255
151.247.248.0/22
Signature Algorithm: sha256WithRSAEncryption
94:34:a6:b6:6d:19:8f:08:ab:1d:94:32:83:31:a4:89:35:54:
5a:1c:b1:f5:4b:c6:e3:af:10:26:b0:fd:68:0e:e5:b9:e4:4f:
10:e7:f1:99:69:5e:16:b8:8b:ba:1d:5b:28:76:7a:79:cd:63:
20:42:91:80:e4:d3:f4:42:9a:8b:b8:1f:98:c9:7e:17:47:ee:
3f:ba:79:ac:ba:ab:ff:8e:46:ef:16:35:3a:cc:a8:1a:ca:7b:
d4:ef:f0:6f:b4:51:3f:18:4c:cb:26:a4:4a:ff:39:f5:86:7a:
55:d6:03:9c:f7:2e:99:25:df:1b:f1:25:73:ba:8b:ea:44:6b:
22:03:dc:72:1f:2f:c2:ad:56:98:24:97:41:a7:2b:80:38:ae:
4e:0f:86:72:3f:96:df:82:06:30:f9:f6:a3:e9:9f:59:03:d5:
e4:1b:2c:c3:d4:71:ac:15:69:4b:0d:39:24:37:02:af:eb:76:
9c:17:eb:2b:1f:e6:07:76:d9:c3:36:34:6b:bb:c7:08:2d:23:
dd:80:69:84:11:7f:8a:da:e3:81:a3:b6:e3:68:d6:d5:82:29:
1e:5a:fd:0b:ee:11:a6:75:41:f5:4a:85:2d:e7:6f:67:c4:71:
a9:87:aa:01:1f:6d:72:3f:10:ef:90:6d:83:93:83:52:2b:6b:
66:40:c5:72
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:34:51 2024 by rpki-client on console-fra.rpki-client.org