Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/72/715d15-2810-4827-8dbd-0bee06126b1a/1/udon3hiK-WT3WhPUeUVzs291X98.roa
File: udon3hiK-WT3WhPUeUVzs291X98.roa (raw, json)
Hash identifier: tKWy4g4dRe2fsGVy8ad68Ko8OQXd5H6O2cFNNvwv1kg=
Subject key identifier: B9:DA:27:DE:18:8A:F9:64:F7:5A:13:D4:79:45:73:B3:6F:75:5F:DF
Certificate issuer: /CN=adf491488a7cd8448a420945871c0b99672dc66e
Certificate serial: 0187836C3F2993BB810F7EFB1302CED2B837
Authority key identifier: AD:F4:91:48:8A:7C:D8:44:8A:42:09:45:87:1C:0B:99:67:2D:C6:6E
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/rfSRSIp82ESKQglFhxwLmWctxm4.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/72/715d15-2810-4827-8dbd-0bee06126b1a/1/udon3hiK-WT3WhPUeUVzs291X98.roa
Signing time: Sat 15 Apr 2023 05:38:41 +0000
ROA not before: Sat 15 Apr 2023 05:38:41 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 205647
IP address blocks: 151.242.0.0/21 maxlen: 21
151.240.80.0/21 maxlen: 21
31.56.116.0/24 maxlen: 24
94.182.204.0/24 maxlen: 24
94.182.205.0/24 maxlen: 24
94.182.206.0/24 maxlen: 24
94.182.204.0/22 maxlen: 22
94.182.207.0/24 maxlen: 24
94.182.217.0/24 maxlen: 24
94.182.226.0/24 maxlen: 24
94.182.228.0/22 maxlen: 22
151.241.224.0/21 maxlen: 21
151.240.168.0/22 maxlen: 22
151.240.192.0/21 maxlen: 21
31.58.236.0/22 maxlen: 22
151.247.214.0/23 maxlen: 23
151.247.216.0/21 maxlen: 21
94.182.41.0/24 maxlen: 24
151.247.224.0/22 maxlen: 22
94.182.56.0/22 maxlen: 22
151.247.232.0/22 maxlen: 22
151.247.228.0/22 maxlen: 22
94.182.60.0/22 maxlen: 22
151.247.238.0/23 maxlen: 23
151.247.237.0/24 maxlen: 24
151.247.240.0/24 maxlen: 24
151.247.236.0/24 maxlen: 24
151.247.241.0/24 maxlen: 24
151.247.248.0/22 maxlen: 22
94.182.72.0/21 maxlen: 21
31.58.240.0/20 maxlen: 20
85.15.49.0/24 maxlen: 24
85.15.48.0/24 maxlen: 24
94.182.97.192/28 maxlen: 28
151.240.240.0/21 maxlen: 21
31.59.12.0/22 maxlen: 22
94.182.8.0/23 maxlen: 23
94.182.12.0/23 maxlen: 23
31.56.64.0/19 maxlen: 19
31.56.96.0/20 maxlen: 20
31.56.0.0/18 maxlen: 18
94.182.82.0/24 maxlen: 24
94.182.116.0/22 maxlen: 22
94.182.114.0/23 maxlen: 23
94.182.120.0/21 maxlen: 21
Validation: Failed, RFC 3779 resource not subset of parent's resources
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:87:83:6c:3f:29:93:bb:81:0f:7e:fb:13:02:ce:d2:b8:37
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=adf491488a7cd8448a420945871c0b99672dc66e
Validity
Not Before: Apr 15 05:38:41 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=b9da27de188af964f75a13d4794573b36f755fdf
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:aa:82:8b:10:90:6d:88:02:b7:b8:2d:92:be:42:
aa:fd:fe:59:b7:ee:bf:1a:90:e1:8a:1e:23:79:1a:
db:a8:e8:73:f8:9c:7c:1e:83:fa:9c:ee:3f:2e:d6:
73:18:8b:b9:1d:ad:49:ec:65:5e:1b:fe:ca:15:6c:
c3:c5:15:f8:36:e4:c8:61:b7:01:84:37:6e:db:5d:
59:54:23:c8:76:ac:bc:02:6d:74:5f:a8:7e:30:a3:
61:8f:80:2c:03:34:67:76:eb:75:36:4b:47:29:44:
0b:04:22:2e:a8:09:44:ea:22:ad:a3:d6:01:6d:a7:
81:43:94:35:c2:dc:51:d0:8d:56:ec:18:0e:06:86:
b8:9a:80:62:6e:66:5b:91:a4:a6:be:91:28:4d:32:
c4:69:b8:f1:05:1a:a9:71:27:cb:0e:e0:48:13:e4:
fa:62:8f:7b:e5:a4:f5:e7:a3:02:ad:cf:8f:73:50:
05:a3:6b:5f:06:8f:fc:c9:f4:c9:bf:d8:3a:10:63:
fd:b8:c9:a9:f5:e3:d2:de:f3:3d:b5:41:41:94:cb:
e5:e5:68:8b:75:65:6c:cf:24:43:55:d7:29:6c:90:
58:70:df:b0:ff:9d:fd:ce:3c:6b:1f:76:f7:81:a7:
ed:48:68:be:d6:91:38:d5:9b:72:a6:bb:e4:88:29:
c3:11
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B9:DA:27:DE:18:8A:F9:64:F7:5A:13:D4:79:45:73:B3:6F:75:5F:DF
X509v3 Authority Key Identifier:
keyid:AD:F4:91:48:8A:7C:D8:44:8A:42:09:45:87:1C:0B:99:67:2D:C6:6E
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/rfSRSIp82ESKQglFhxwLmWctxm4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/72/715d15-2810-4827-8dbd-0bee06126b1a/1/udon3hiK-WT3WhPUeUVzs291X98.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/72/715d15-2810-4827-8dbd-0bee06126b1a/1/rfSRSIp82ESKQglFhxwLmWctxm4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
31.56.0.0-31.56.111.255
31.56.116.0/24
31.58.236.0-31.58.255.255
31.59.12.0/22
85.15.48.0/23
94.182.8.0/23
94.182.12.0/23
94.182.41.0/24
94.182.56.0/21
94.182.72.0/21
94.182.82.0/24
94.182.97.192/28
94.182.114.0-94.182.127.255
94.182.204.0/22
94.182.217.0/24
94.182.226.0/24
94.182.228.0/22
151.240.80.0/21
151.240.168.0/22
151.240.192.0/21
151.240.240.0/21
151.241.224.0/21
151.242.0.0/21
151.247.214.0-151.247.241.255
151.247.248.0/22
Signature Algorithm: sha256WithRSAEncryption
69:2a:56:ca:bf:30:b1:61:c8:57:ae:a6:b9:18:81:93:6d:66:
f7:19:85:fd:fb:ac:e5:46:5a:9b:f3:85:e4:c5:8d:4e:23:d5:
7d:ac:1e:29:6e:d3:2e:c6:d8:73:a8:9d:46:cd:f2:dd:fe:92:
07:d8:f8:e3:f3:b9:27:1a:fd:d4:9b:77:3d:58:20:e6:d4:ed:
e6:f5:ec:9e:39:d3:35:c1:a7:9b:60:5e:e2:e7:20:6e:9f:91:
03:4e:8a:76:97:11:fc:0b:3b:4b:3b:d5:8c:6c:00:03:ea:fb:
3c:e9:b2:86:85:77:3a:26:b5:13:bb:c1:56:f4:5f:16:44:20:
c0:67:ec:62:d2:1d:59:97:79:78:49:66:33:0c:3b:a9:3e:b2:
eb:51:53:df:c2:34:9a:88:16:de:04:08:7f:2c:69:e0:15:2b:
2d:67:3a:08:b4:61:d3:e5:91:5f:01:34:e1:f6:c4:b1:3f:3d:
a8:df:2d:47:ed:d3:61:ee:0e:6b:48:df:5e:4b:4e:b5:99:b3:
68:f0:be:22:6c:3b:31:35:aa:a3:84:71:53:d7:6e:ce:e1:5b:
3d:6d:d9:ac:d6:ac:fe:04:36:0b:8a:ce:e4:79:7b:be:f3:ee:
d8:2d:c5:8a:82:60:5c:cf:24:a6:ba:cc:d0:fa:cb:a3:8a:e6:
d3:bd:0e:e6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:34:52 2024 by rpki-client on console-fra.rpki-client.org