Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/77/fb212a-7a76-42e2-8989-965529f20d11/1/4PsiC70NfwfPBCRqpI9sjxNM7bQ.roa
File: 4PsiC70NfwfPBCRqpI9sjxNM7bQ.roa (raw, json)
Hash identifier: VP2VpJsV++rSrxAiwoh/XGP2EEcny2MFnp81zwFU+oE=
Subject key identifier: E0:FB:22:0B:BD:0D:7F:07:CF:04:24:6A:A4:8F:6C:8F:13:4C:ED:B4
Certificate issuer: /CN=80f9a24bd26cc8217518a11f598e6372025e8ae9
Certificate serial: 018DCB84A74829C253124739D2F31126C7D2
Authority key identifier: 80:F9:A2:4B:D2:6C:C8:21:75:18:A1:1F:59:8E:63:72:02:5E:8A:E9
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/gPmiS9JsyCF1GKEfWY5jcgJeiuk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/77/fb212a-7a76-42e2-8989-965529f20d11/1/4PsiC70NfwfPBCRqpI9sjxNM7bQ.roa
Signing time: Wed 21 Feb 2024 11:54:44 +0000
ROA not before: Wed 21 Feb 2024 11:54:44 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 3212
IP address blocks: 31.15.128.0/17 maxlen: 17
46.150.32.0/19 maxlen: 19
46.182.224.0/21 maxlen: 21
77.38.0.0/17 maxlen: 17
77.73.104.0/22 maxlen: 22
77.111.0.0/18 maxlen: 18
78.153.32.0/19 maxlen: 19
82.192.32.0/19 maxlen: 19
84.20.224.0/19 maxlen: 19
84.52.128.0/18 maxlen: 18
87.119.128.0/19 maxlen: 19
91.132.208.0/22 maxlen: 22
91.185.192.0/19 maxlen: 19
91.237.132.0/22 maxlen: 22
92.53.128.0/19 maxlen: 19
92.63.16.0/20 maxlen: 20
94.140.64.0/19 maxlen: 19
95.143.144.0/20 maxlen: 20
176.57.92.0/22 maxlen: 22
176.76.0.0/16 maxlen: 16
185.30.136.0/22 maxlen: 22
185.65.228.0/22 maxlen: 22
185.66.148.0/22 maxlen: 22
185.79.228.0/22 maxlen: 22
185.85.148.0/22 maxlen: 22
185.97.68.0/22 maxlen: 22
193.111.220.0/22 maxlen: 22
195.47.228.0/24 maxlen: 24
212.85.160.0/19 maxlen: 19
213.143.64.0/19 maxlen: 19
213.172.224.0/19 maxlen: 19
217.72.64.0/19 maxlen: 19
2a00:fc0::/32 maxlen: 32
2a00:13d8::/29 maxlen: 29
2a00:1c80::/29 maxlen: 29
2a00:1da8::/32 maxlen: 32
2a00:b2a0::/32 maxlen: 32
2a02:840::/32 maxlen: 32
2a05:acc0::/29 maxlen: 29
Validation: Failed, RFC 3779 resource not subset of parent's resources
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8d:cb:84:a7:48:29:c2:53:12:47:39:d2:f3:11:26:c7:d2
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=80f9a24bd26cc8217518a11f598e6372025e8ae9
Validity
Not Before: Feb 21 11:54:44 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=e0fb220bbd0d7f07cf04246aa48f6c8f134cedb4
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b6:4a:46:75:88:5e:df:b7:cf:79:1f:db:36:96:
96:21:d4:51:cb:cb:83:21:1c:03:05:ca:dd:96:b4:
b2:b6:21:f3:af:bb:fa:8b:05:cf:bb:66:84:72:d3:
24:35:be:30:8a:2d:a7:83:9c:a2:cf:5e:c7:60:a3:
f6:e3:4e:57:83:21:5d:ad:7d:b3:8c:01:e4:4c:fc:
67:2c:30:c1:5c:4b:01:80:84:c2:8c:62:c2:9f:0f:
bb:df:15:08:79:93:c6:a7:4b:65:7a:c1:49:be:b0:
a9:fa:04:c8:ef:6d:2a:9c:e8:2f:ed:c9:10:f6:3b:
68:db:de:59:3e:48:04:55:17:77:64:82:a5:3a:56:
97:ad:38:79:c1:00:1e:a5:45:92:f6:40:c0:a2:1a:
15:13:e2:b1:0d:f9:2d:fa:0c:8c:fb:3d:ec:a0:bf:
05:42:30:8d:d3:f3:04:27:79:aa:7a:01:7c:ba:f3:
f1:f3:eb:26:73:c3:57:5c:92:0d:8a:18:a9:9b:61:
b0:62:26:1d:df:0a:f7:69:55:1f:14:c6:fd:bd:e9:
59:3b:db:32:a7:f6:40:9b:4b:0c:1e:7e:b3:38:a4:
21:04:2d:a9:4f:ce:e8:57:0a:74:72:5b:47:46:36:
2e:4b:89:43:04:1b:00:3f:17:58:60:3a:25:7e:a1:
8a:a9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E0:FB:22:0B:BD:0D:7F:07:CF:04:24:6A:A4:8F:6C:8F:13:4C:ED:B4
X509v3 Authority Key Identifier:
keyid:80:F9:A2:4B:D2:6C:C8:21:75:18:A1:1F:59:8E:63:72:02:5E:8A:E9
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/gPmiS9JsyCF1GKEfWY5jcgJeiuk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/77/fb212a-7a76-42e2-8989-965529f20d11/1/4PsiC70NfwfPBCRqpI9sjxNM7bQ.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/77/fb212a-7a76-42e2-8989-965529f20d11/1/gPmiS9JsyCF1GKEfWY5jcgJeiuk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
31.15.128.0/17
46.150.32.0/19
46.182.224.0/21
77.38.0.0/17
77.73.104.0/22
77.111.0.0/18
78.153.32.0/19
82.192.32.0/19
84.20.224.0/19
84.52.128.0/18
87.119.128.0/19
91.132.208.0/22
91.185.192.0/19
91.237.132.0/22
92.53.128.0/19
92.63.16.0/20
94.140.64.0/19
95.143.144.0/20
176.57.92.0/22
176.76.0.0/16
185.30.136.0/22
185.65.228.0/22
185.66.148.0/22
185.79.228.0/22
185.85.148.0/22
185.97.68.0/22
193.111.220.0/22
195.47.228.0/24
212.85.160.0/19
213.143.64.0/19
213.172.224.0/19
217.72.64.0/19
IPv6:
2a00:fc0::/32
2a00:13d8::/29
2a00:1c80::/29
2a00:1da8::/32
2a00:b2a0::/32
2a02:840::/32
2a05:acc0::/29
Signature Algorithm: sha256WithRSAEncryption
06:01:84:d9:d8:30:ff:ce:fa:1d:7f:dd:55:84:c9:20:af:57:
2e:94:86:f4:71:82:54:d6:2d:0b:c1:6e:d3:a9:55:10:00:48:
96:17:7a:54:43:74:29:cf:5c:f9:82:0c:e0:c5:52:72:8f:0d:
22:6a:18:2d:67:13:72:08:24:03:bc:19:2e:e6:96:d3:2f:ad:
b2:49:18:98:20:93:0d:52:c3:15:40:9a:dd:b9:03:4f:81:d3:
c7:0b:82:4e:0c:a1:97:df:59:6e:1e:8a:49:10:58:6d:5a:a7:
8f:36:33:83:68:97:c1:16:e2:c3:a0:96:f1:81:c7:0d:0a:34:
84:41:3e:00:c3:f4:50:c8:a3:27:9c:be:b4:62:e3:3f:c5:e3:
25:be:11:40:86:59:33:27:41:dd:9e:ac:b7:f6:67:24:0e:64:
43:b8:7c:32:fd:5a:3f:b6:65:ee:1a:0b:0d:6f:fe:0e:f4:0e:
e9:09:db:05:10:39:fd:2a:c8:fc:0f:01:31:47:92:c5:6e:43:
05:3f:16:1c:22:19:7a:41:3d:79:78:88:03:94:59:7b:99:85:
10:93:26:25:b1:86:c1:1b:79:79:7d:92:ed:f3:54:5a:cd:04:
46:87:da:c9:24:0d:0c:3b:76:4e:c0:6b:8c:0d:7a:4a:55:27:
24:1a:b9:39
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Apr 8 07:54:11 2025 by rpki-client