Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/72/715d15-2810-4827-8dbd-0bee06126b1a/1/7D_ioVNm2TrNo6AnV6U-NeusRCE.roa
File: 7D_ioVNm2TrNo6AnV6U-NeusRCE.roa (raw, json)
Hash identifier: 2/mbi03P60WQUCfUCbsAr84pyliBQq7rpXmOT/5RK2I=
Subject key identifier: EC:3F:E2:A1:53:66:D9:3A:CD:A3:A0:27:57:A5:3E:35:EB:AC:44:21
Certificate issuer: /CN=adf491488a7cd8448a420945871c0b99672dc66e
Certificate serial: 018DB97D20CBFEC80FACFED1F908924A3B36
Authority key identifier: AD:F4:91:48:8A:7C:D8:44:8A:42:09:45:87:1C:0B:99:67:2D:C6:6E
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/rfSRSIp82ESKQglFhxwLmWctxm4.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/72/715d15-2810-4827-8dbd-0bee06126b1a/1/7D_ioVNm2TrNo6AnV6U-NeusRCE.roa
Signing time: Sat 17 Feb 2024 23:53:21 +0000
ROA not before: Sat 17 Feb 2024 23:53:21 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 44559
IP address blocks: 31.56.0.0/24 maxlen: 24
31.56.1.0/24 maxlen: 24
31.56.2.0/24 maxlen: 24
31.56.3.0/24 maxlen: 24
31.56.4.0/24 maxlen: 24
31.56.5.0/24 maxlen: 24
31.56.6.0/24 maxlen: 24
31.56.7.0/24 maxlen: 24
31.56.8.0/24 maxlen: 24
31.56.9.0/24 maxlen: 24
31.56.10.0/24 maxlen: 24
31.56.11.0/24 maxlen: 24
31.56.12.0/24 maxlen: 24
31.56.13.0/24 maxlen: 24
31.56.14.0/24 maxlen: 24
31.56.15.0/24 maxlen: 24
31.56.16.0/24 maxlen: 24
31.56.17.0/24 maxlen: 24
31.56.18.0/24 maxlen: 24
31.56.19.0/24 maxlen: 24
31.56.20.0/24 maxlen: 24
31.56.21.0/24 maxlen: 24
31.56.22.0/24 maxlen: 24
31.56.23.0/24 maxlen: 24
31.56.24.0/24 maxlen: 24
31.56.25.0/24 maxlen: 24
31.56.26.0/24 maxlen: 24
31.56.27.0/24 maxlen: 24
31.56.28.0/24 maxlen: 24
31.56.29.0/24 maxlen: 24
31.56.30.0/24 maxlen: 24
31.56.31.0/24 maxlen: 24
31.56.32.0/24 maxlen: 24
31.56.33.0/24 maxlen: 24
31.56.34.0/24 maxlen: 24
31.56.35.0/24 maxlen: 24
31.56.36.0/24 maxlen: 24
31.56.37.0/24 maxlen: 24
31.56.38.0/24 maxlen: 24
31.56.39.0/24 maxlen: 24
31.56.40.0/24 maxlen: 24
31.56.41.0/24 maxlen: 24
31.56.42.0/24 maxlen: 24
31.56.43.0/24 maxlen: 24
31.56.44.0/24 maxlen: 24
31.56.45.0/24 maxlen: 24
31.56.46.0/24 maxlen: 24
31.56.47.0/24 maxlen: 24
31.56.48.0/24 maxlen: 24
31.56.49.0/24 maxlen: 24
31.56.50.0/24 maxlen: 24
31.56.51.0/24 maxlen: 24
31.56.52.0/24 maxlen: 24
31.56.53.0/24 maxlen: 24
31.56.54.0/24 maxlen: 24
31.56.55.0/24 maxlen: 24
31.56.56.0/24 maxlen: 24
31.56.57.0/24 maxlen: 24
31.56.58.0/24 maxlen: 24
31.56.59.0/24 maxlen: 24
31.56.60.0/24 maxlen: 24
31.56.61.0/24 maxlen: 24
31.56.62.0/24 maxlen: 24
31.56.63.0/24 maxlen: 24
31.56.64.0/24 maxlen: 24
31.56.65.0/24 maxlen: 24
31.56.66.0/24 maxlen: 24
31.56.67.0/24 maxlen: 24
31.56.68.0/24 maxlen: 24
31.56.69.0/24 maxlen: 24
31.56.70.0/24 maxlen: 24
31.56.71.0/24 maxlen: 24
31.56.72.0/24 maxlen: 24
31.56.73.0/24 maxlen: 24
31.56.74.0/24 maxlen: 24
31.56.75.0/24 maxlen: 24
31.56.76.0/24 maxlen: 24
31.56.77.0/24 maxlen: 24
31.56.78.0/24 maxlen: 24
31.56.79.0/24 maxlen: 24
31.56.80.0/24 maxlen: 24
31.56.81.0/24 maxlen: 24
31.56.82.0/24 maxlen: 24
31.56.83.0/24 maxlen: 24
31.56.84.0/24 maxlen: 24
31.56.85.0/24 maxlen: 24
31.56.86.0/24 maxlen: 24
31.56.87.0/24 maxlen: 24
31.56.88.0/24 maxlen: 24
31.56.89.0/24 maxlen: 24
31.56.90.0/24 maxlen: 24
31.56.91.0/24 maxlen: 24
31.56.92.0/24 maxlen: 24
31.56.93.0/24 maxlen: 24
31.56.94.0/24 maxlen: 24
31.56.95.0/24 maxlen: 24
31.56.96.0/24 maxlen: 24
31.56.97.0/24 maxlen: 24
31.56.98.0/24 maxlen: 24
31.56.99.0/24 maxlen: 24
31.56.100.0/24 maxlen: 24
31.56.101.0/24 maxlen: 24
31.56.102.0/24 maxlen: 24
31.56.103.0/24 maxlen: 24
31.56.104.0/24 maxlen: 24
31.56.105.0/24 maxlen: 24
31.56.106.0/24 maxlen: 24
31.56.107.0/24 maxlen: 24
31.56.108.0/24 maxlen: 24
Validation: Failed, RFC 3779 resource not subset of parent's resources
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8d:b9:7d:20:cb:fe:c8:0f:ac:fe:d1:f9:08:92:4a:3b:36
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=adf491488a7cd8448a420945871c0b99672dc66e
Validity
Not Before: Feb 17 23:53:21 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=ec3fe2a15366d93acda3a02757a53e35ebac4421
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bf:13:cf:71:d2:11:bf:67:6d:21:cf:76:dd:27:
0e:9c:f6:b6:98:ae:5b:2c:22:05:8d:6d:03:95:c4:
f3:97:f0:47:d5:4f:e5:21:ab:d8:d4:03:0c:8d:5b:
21:69:76:c0:a2:80:e6:65:22:b4:9d:3b:a7:fb:44:
61:2a:1b:23:f3:d3:cf:59:45:23:ec:ac:e2:df:ff:
09:66:f7:34:af:2b:4d:1d:88:e6:e2:db:e3:f1:b7:
9d:3c:b6:56:74:ba:90:3b:23:bc:3e:5b:c3:be:c2:
b9:bc:3a:ee:59:bb:71:aa:90:20:49:3a:7d:1b:88:
62:8b:38:76:11:95:4b:99:41:b7:3b:99:a0:0b:59:
47:1a:d3:1a:16:bd:1f:26:c5:a5:b0:ee:df:b3:be:
c1:e6:b8:04:11:32:2e:e9:1e:d7:32:6c:8e:4f:b1:
53:25:a9:ec:e9:9e:56:b9:e4:bc:66:ef:76:96:f5:
03:cb:c8:4d:9f:f6:12:71:a4:96:53:35:af:49:b6:
8b:7f:aa:e1:36:0e:25:c9:66:52:bb:8a:fa:4b:f5:
d1:ca:23:40:70:4b:2d:e0:f6:04:df:a7:05:74:8e:
36:bf:9f:86:98:ba:3f:c0:d2:29:ba:da:20:d7:e8:
34:73:37:4d:87:62:7f:17:e9:f8:b6:80:96:1a:e5:
a5:db
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
EC:3F:E2:A1:53:66:D9:3A:CD:A3:A0:27:57:A5:3E:35:EB:AC:44:21
X509v3 Authority Key Identifier:
keyid:AD:F4:91:48:8A:7C:D8:44:8A:42:09:45:87:1C:0B:99:67:2D:C6:6E
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/rfSRSIp82ESKQglFhxwLmWctxm4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/72/715d15-2810-4827-8dbd-0bee06126b1a/1/7D_ioVNm2TrNo6AnV6U-NeusRCE.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/72/715d15-2810-4827-8dbd-0bee06126b1a/1/rfSRSIp82ESKQglFhxwLmWctxm4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
31.56.0.0-31.56.108.255
Signature Algorithm: sha256WithRSAEncryption
58:65:87:38:a7:b9:c0:69:0c:4e:40:fa:8d:f8:8c:7a:1e:87:
b0:c6:9a:fa:6c:33:72:7d:39:94:28:74:db:fe:02:b0:2c:d2:
0c:78:8f:87:1a:2f:ed:03:43:53:84:59:bc:93:3d:2a:a3:e7:
f8:0f:f3:25:28:08:47:91:a8:43:da:e1:70:4e:f8:da:76:94:
e1:79:fa:1b:bc:32:41:12:01:ce:a4:d3:b4:ce:43:04:e9:8e:
6f:e4:48:6e:e9:71:d6:be:3e:76:45:db:e4:21:99:75:c7:e1:
52:0b:b9:9a:49:7c:a4:f3:e1:71:af:93:14:e6:23:e0:6e:aa:
71:22:cc:c1:04:1d:c5:3b:c5:00:c2:55:79:25:24:bd:61:99:
36:fd:7f:46:ea:d4:88:bd:39:d2:36:6b:5d:3a:8d:aa:02:46:
9d:ac:f6:c2:81:66:df:03:e1:20:3d:c0:2f:72:6b:75:b9:0a:
b6:82:f8:43:32:9f:46:77:4f:d3:7e:d3:50:01:72:39:bb:07:
58:74:4b:03:28:b7:0a:9a:a6:1a:4f:00:64:52:26:da:e4:f7:
d4:50:b4:13:46:b4:df:25:ec:59:29:ee:5b:db:de:b3:93:1b:
e1:95:37:a3:3c:04:da:59:b2:25:56:30:a8:44:aa:7f:e3:10:
9c:31:c7:15
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jun 8 06:22:39 2025 by rpki-client