Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/72/715d15-2810-4827-8dbd-0bee06126b1a/1/H417UIZhwqCskn6mfF1KZ-tEEug.roa
File: H417UIZhwqCskn6mfF1KZ-tEEug.roa (raw, json)
Hash identifier: q8eccpSaEWRd2bjJ/WGXy4GwVyICgX08Zxe9STSWKrw=
Subject key identifier: 1F:8D:7B:50:86:61:C2:A0:AC:92:7E:A6:7C:5D:4A:67:EB:44:12:E8
Certificate issuer: /CN=adf491488a7cd8448a420945871c0b99672dc66e
Certificate serial: 018DB973F8EA5CA79871FCE1461E786E46CA
Authority key identifier: AD:F4:91:48:8A:7C:D8:44:8A:42:09:45:87:1C:0B:99:67:2D:C6:6E
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/rfSRSIp82ESKQglFhxwLmWctxm4.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/72/715d15-2810-4827-8dbd-0bee06126b1a/1/H417UIZhwqCskn6mfF1KZ-tEEug.roa
Signing time: Sat 17 Feb 2024 23:43:21 +0000
ROA not before: Sat 17 Feb 2024 23:43:21 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 44559
IP address blocks: 31.56.0.0/24 maxlen: 24
31.56.1.0/24 maxlen: 24
31.56.2.0/24 maxlen: 24
31.56.3.0/24 maxlen: 24
31.56.4.0/24 maxlen: 24
31.56.5.0/24 maxlen: 24
31.56.6.0/24 maxlen: 24
31.56.7.0/24 maxlen: 24
31.56.8.0/24 maxlen: 24
31.56.9.0/24 maxlen: 24
31.56.10.0/24 maxlen: 24
31.56.11.0/24 maxlen: 24
31.56.12.0/24 maxlen: 24
31.56.13.0/24 maxlen: 24
31.56.14.0/24 maxlen: 24
31.56.15.0/24 maxlen: 24
31.56.16.0/24 maxlen: 24
31.56.17.0/24 maxlen: 24
31.56.18.0/24 maxlen: 24
31.56.19.0/24 maxlen: 24
31.56.20.0/24 maxlen: 24
31.56.21.0/24 maxlen: 24
31.56.22.0/24 maxlen: 24
31.56.23.0/24 maxlen: 24
31.56.24.0/24 maxlen: 24
31.56.25.0/24 maxlen: 24
31.56.26.0/24 maxlen: 24
31.56.27.0/24 maxlen: 24
31.56.28.0/24 maxlen: 24
31.56.29.0/24 maxlen: 24
31.56.30.0/24 maxlen: 24
31.56.31.0/24 maxlen: 24
31.56.32.0/24 maxlen: 24
31.56.33.0/24 maxlen: 24
31.56.34.0/24 maxlen: 24
31.56.35.0/24 maxlen: 24
31.56.36.0/24 maxlen: 24
31.56.37.0/24 maxlen: 24
31.56.38.0/24 maxlen: 24
31.56.39.0/24 maxlen: 24
31.56.40.0/24 maxlen: 24
31.56.41.0/24 maxlen: 24
31.56.42.0/24 maxlen: 24
31.56.43.0/24 maxlen: 24
31.56.44.0/24 maxlen: 24
31.56.45.0/24 maxlen: 24
31.56.46.0/24 maxlen: 24
31.56.47.0/24 maxlen: 24
31.56.48.0/24 maxlen: 24
31.56.49.0/24 maxlen: 24
31.56.50.0/24 maxlen: 24
31.56.51.0/24 maxlen: 24
31.56.52.0/24 maxlen: 24
31.56.53.0/24 maxlen: 24
31.56.54.0/24 maxlen: 24
31.56.55.0/24 maxlen: 24
31.56.56.0/24 maxlen: 24
31.56.57.0/24 maxlen: 24
31.56.58.0/24 maxlen: 24
31.56.59.0/24 maxlen: 24
31.56.60.0/24 maxlen: 24
31.56.61.0/24 maxlen: 24
31.56.62.0/24 maxlen: 24
31.56.63.0/24 maxlen: 24
31.56.64.0/24 maxlen: 24
31.56.65.0/24 maxlen: 24
31.56.66.0/24 maxlen: 24
31.56.67.0/24 maxlen: 24
31.56.68.0/24 maxlen: 24
31.56.69.0/24 maxlen: 24
31.56.70.0/24 maxlen: 24
31.56.71.0/24 maxlen: 24
31.56.72.0/24 maxlen: 24
31.56.73.0/24 maxlen: 24
31.56.74.0/24 maxlen: 24
31.56.75.0/24 maxlen: 24
31.56.76.0/24 maxlen: 24
31.56.77.0/24 maxlen: 24
31.56.78.0/24 maxlen: 24
31.56.79.0/24 maxlen: 24
31.56.80.0/24 maxlen: 24
31.56.81.0/24 maxlen: 24
31.56.82.0/24 maxlen: 24
31.56.83.0/24 maxlen: 24
31.56.84.0/24 maxlen: 24
31.56.85.0/24 maxlen: 24
31.56.86.0/24 maxlen: 24
31.56.87.0/24 maxlen: 24
31.56.88.0/24 maxlen: 24
31.56.89.0/24 maxlen: 24
31.56.90.0/24 maxlen: 24
31.56.91.0/24 maxlen: 24
31.56.92.0/24 maxlen: 24
31.56.93.0/24 maxlen: 24
31.56.94.0/24 maxlen: 24
31.56.95.0/24 maxlen: 24
31.56.96.0/24 maxlen: 24
31.56.97.0/24 maxlen: 24
31.56.98.0/24 maxlen: 24
31.56.99.0/24 maxlen: 24
31.56.100.0/24 maxlen: 24
31.56.101.0/24 maxlen: 24
31.56.102.0/24 maxlen: 24
31.56.103.0/24 maxlen: 24
Validation: Failed, RFC 3779 resource not subset of parent's resources
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8d:b9:73:f8:ea:5c:a7:98:71:fc:e1:46:1e:78:6e:46:ca
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=adf491488a7cd8448a420945871c0b99672dc66e
Validity
Not Before: Feb 17 23:43:21 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=1f8d7b508661c2a0ac927ea67c5d4a67eb4412e8
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a7:52:38:e3:24:82:f5:a4:08:41:4e:f9:de:8e:
95:54:cf:9d:28:22:52:f5:94:a5:23:0f:5e:37:27:
c4:d6:65:96:6f:c4:93:ea:8f:30:35:24:34:32:cb:
91:0d:53:fe:2c:5f:75:3e:48:8a:79:a2:38:43:60:
e1:9b:58:dc:9d:c0:fb:7e:90:0e:24:7a:f4:af:88:
d6:04:ec:ce:d4:18:49:93:50:9a:4f:95:a0:ad:c6:
f9:b9:ac:83:8f:40:87:ac:eb:5e:a9:84:99:b0:4c:
63:54:57:cd:82:ad:71:0e:31:80:b3:90:af:95:31:
f9:aa:ba:be:dc:81:69:77:57:4c:56:1d:92:29:46:
34:65:60:ad:5b:7c:1a:a8:89:e8:c0:9e:7b:15:92:
12:31:a7:4f:2a:1b:5f:90:ba:d8:ed:46:2e:4a:bb:
ba:96:f2:f8:0a:72:ad:f1:c1:49:64:cd:98:bd:e7:
d2:a4:6a:6b:18:8a:4a:05:be:d2:75:b1:7a:52:9e:
bc:48:a4:1a:8a:b6:c4:f2:25:2f:19:75:d1:d9:77:
99:f9:20:bf:5d:8c:ef:fa:79:20:75:9c:6f:ad:a9:
63:e5:a8:d0:10:34:88:89:b1:60:fb:cb:81:bd:8b:
ef:72:5d:7f:e5:21:7f:9e:79:9f:d6:8e:08:8b:43:
19:c7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
1F:8D:7B:50:86:61:C2:A0:AC:92:7E:A6:7C:5D:4A:67:EB:44:12:E8
X509v3 Authority Key Identifier:
keyid:AD:F4:91:48:8A:7C:D8:44:8A:42:09:45:87:1C:0B:99:67:2D:C6:6E
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/rfSRSIp82ESKQglFhxwLmWctxm4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/72/715d15-2810-4827-8dbd-0bee06126b1a/1/H417UIZhwqCskn6mfF1KZ-tEEug.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/72/715d15-2810-4827-8dbd-0bee06126b1a/1/rfSRSIp82ESKQglFhxwLmWctxm4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
31.56.0.0-31.56.103.255
Signature Algorithm: sha256WithRSAEncryption
1c:d1:48:b5:49:e1:c6:0e:65:a5:a8:c2:56:54:e9:7a:25:56:
03:d6:71:14:18:b8:cd:73:13:b2:0b:ef:1b:74:17:eb:40:ed:
a2:63:78:3d:99:11:8f:69:c0:07:e3:6d:e8:a8:c3:b3:b3:54:
97:de:33:29:e5:be:c6:2c:05:25:e0:00:55:a9:a4:24:a0:37:
28:46:ad:87:43:6a:7c:9d:25:ef:7f:0d:df:8d:8d:dd:8e:59:
b1:2d:51:b8:89:ab:e9:72:7c:4a:c7:0c:2f:a7:85:5d:42:dc:
84:6b:59:d8:9d:eb:f1:cf:90:97:17:ba:59:87:ce:4e:01:bc:
5a:3f:90:84:70:62:5e:e2:c5:99:0d:f8:30:9a:26:62:ff:46:
c2:25:ae:49:a3:a8:75:b2:7b:18:b1:fb:6b:f0:3a:00:b7:08:
92:b5:5a:ed:61:cd:94:38:d3:20:aa:a8:06:ce:cc:2e:1c:ae:
86:7f:83:d4:70:a4:db:1f:b3:39:cc:bc:ea:66:f8:7f:a2:7c:
04:fc:cf:51:8f:ae:48:81:eb:1b:cf:10:a0:e9:77:61:83:71:
0d:24:cb:e3:e5:b8:ec:44:85:44:76:97:f2:ce:b8:3e:6f:10:
b9:85:10:d2:61:a6:82:1f:34:74:52:ed:e6:e2:f4:d8:a6:48:
ae:dc:f6:0d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Apr 22 01:16:50 2025 by rpki-client