Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/97/699e85-1027-4c7e-8ae7-df4a2e760ccb/1/0prrmwK9kbiI57cgWMJEdAjX8Gg.roa
File: 0prrmwK9kbiI57cgWMJEdAjX8Gg.roa (raw, json)
Hash identifier: jnPdCch38Xgk00VdXz6H58BgFNvdAesRE3dhYks/Nyg=
Subject key identifier: D2:9A:EB:9B:02:BD:91:B8:88:E7:B7:20:58:C2:44:74:08:D7:F0:68
Certificate issuer: /CN=e4a2b8e90d157ea022f8e700024a93dc356a514d
Certificate serial: 018F39946160FCDD0142E1782A0C8BDFA6B7
Authority key identifier: E4:A2:B8:E9:0D:15:7E:A0:22:F8:E7:00:02:4A:93:DC:35:6A:51:4D
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/5KK46Q0VfqAi-OcAAkqT3DVqUU0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/97/699e85-1027-4c7e-8ae7-df4a2e760ccb/1/0prrmwK9kbiI57cgWMJEdAjX8Gg.roa
Signing time: Thu 02 May 2024 13:52:56 +0000
ROA not before: Thu 02 May 2024 13:52:56 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 42910
IP address blocks: 31.210.32.0/24 maxlen: 24
31.210.33.0/24 maxlen: 24
31.210.46.0/24 maxlen: 24
31.210.56.0/24 maxlen: 24
31.210.57.0/24 maxlen: 24
31.210.58.0/24 maxlen: 24
31.210.59.0/24 maxlen: 24
31.210.60.0/24 maxlen: 24
31.210.61.0/24 maxlen: 32
77.92.128.0/24 maxlen: 24
77.92.129.0/24 maxlen: 24
77.92.131.0/24 maxlen: 24
77.92.132.0/24 maxlen: 24
77.92.133.0/24 maxlen: 32
77.92.134.0/24 maxlen: 24
77.92.135.0/24 maxlen: 24
77.92.136.0/24 maxlen: 24
77.92.137.0/24 maxlen: 24
77.92.138.0/24 maxlen: 24
77.92.139.0/24 maxlen: 24
77.92.140.0/24 maxlen: 32
77.92.141.0/24 maxlen: 24
77.92.148.0/24 maxlen: 24
77.92.149.0/24 maxlen: 24
77.92.155.0/24 maxlen: 32
77.92.156.0/24 maxlen: 24
77.92.157.0/24 maxlen: 32
77.92.158.0/24 maxlen: 24
77.92.159.0/24 maxlen: 24
78.135.79.0/24 maxlen: 24
78.135.108.0/24 maxlen: 32
78.135.113.0/24 maxlen: 32
78.135.114.0/24 maxlen: 32
78.135.116.0/24 maxlen: 24
188.132.134.0/24 maxlen: 24
188.132.135.0/24 maxlen: 32
188.132.142.0/24 maxlen: 24
188.132.147.0/24 maxlen: 32
188.132.148.0/24 maxlen: 24
188.132.157.0/24 maxlen: 24
188.132.158.0/24 maxlen: 32
188.132.172.0/24 maxlen: 24
188.132.175.0/24 maxlen: 24
188.132.176.0/24 maxlen: 32
188.132.180.0/24 maxlen: 24
188.132.194.0/24 maxlen: 24
188.132.204.0/24 maxlen: 32
188.132.205.0/24 maxlen: 32
188.132.244.0/24 maxlen: 32
188.132.245.0/24 maxlen: 24
188.132.246.0/24 maxlen: 24
188.132.252.0/24 maxlen: 24
188.132.253.0/24 maxlen: 24
188.132.254.0/24 maxlen: 24
188.132.255.0/24 maxlen: 24
212.68.32.0/24 maxlen: 24
212.68.33.0/24 maxlen: 32
212.68.40.0/24 maxlen: 32
212.68.41.0/24 maxlen: 32
212.68.42.0/24 maxlen: 32
212.68.43.0/24 maxlen: 32
212.68.44.0/24 maxlen: 24
212.68.45.0/24 maxlen: 32
212.68.46.0/24 maxlen: 32
212.68.50.0/24 maxlen: 32
212.68.51.0/24 maxlen: 24
212.68.56.0/24 maxlen: 32
212.68.57.0/24 maxlen: 32
212.68.61.0/24 maxlen: 32
2a02:26b0::/32 maxlen: 32
2a02:26b0:8000::/48 maxlen: 48
2a02:26b0:8001::/48 maxlen: 48
Validation: Failed, RFC 3779 resource not subset of parent's resources
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8f:39:94:61:60:fc:dd:01:42:e1:78:2a:0c:8b:df:a6:b7
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=e4a2b8e90d157ea022f8e700024a93dc356a514d
Validity
Not Before: May 2 13:52:56 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=d29aeb9b02bd91b888e7b72058c2447408d7f068
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a6:a8:a9:3e:2c:e4:11:22:11:fc:48:7f:59:6d:
50:10:8e:03:ae:7c:78:af:38:de:12:8b:ca:2b:09:
d0:a1:c7:a8:f7:55:f1:de:eb:2c:51:40:2f:ce:a5:
e6:c2:38:fb:fe:f6:47:01:b6:86:9e:98:e3:be:44:
bd:4f:b1:70:58:e1:2b:dd:32:b1:ba:69:c1:b6:43:
1a:00:cb:08:78:fd:9c:37:c2:38:b5:af:13:e3:dc:
ad:f8:45:f2:db:51:38:31:81:ec:4c:19:f1:02:34:
55:f7:1c:28:a4:41:9f:e8:c9:95:cd:7b:f8:a2:f1:
6d:18:92:34:ff:53:ad:24:bc:7d:66:53:70:ac:5a:
da:84:d4:cd:b4:3e:bf:dd:94:76:b2:d0:84:ae:00:
38:ae:4f:c9:67:2e:9a:f9:95:e4:8b:ba:bc:c9:60:
34:44:a8:e5:c6:0a:df:8f:e0:37:13:88:20:a9:02:
7b:a1:d4:2c:c7:53:af:45:64:c5:52:1a:4d:ad:e5:
79:32:34:0a:01:34:42:89:ea:70:1f:22:78:7f:ec:
22:b9:a4:c3:bd:c7:23:29:f3:57:8c:00:22:37:5f:
f4:bb:24:8d:05:dc:a3:32:1f:89:0d:98:ff:5e:fe:
1e:d0:e3:73:47:65:be:c7:10:9c:51:df:35:3f:ef:
e3:13
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D2:9A:EB:9B:02:BD:91:B8:88:E7:B7:20:58:C2:44:74:08:D7:F0:68
X509v3 Authority Key Identifier:
keyid:E4:A2:B8:E9:0D:15:7E:A0:22:F8:E7:00:02:4A:93:DC:35:6A:51:4D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/5KK46Q0VfqAi-OcAAkqT3DVqUU0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/97/699e85-1027-4c7e-8ae7-df4a2e760ccb/1/0prrmwK9kbiI57cgWMJEdAjX8Gg.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/97/699e85-1027-4c7e-8ae7-df4a2e760ccb/1/5KK46Q0VfqAi-OcAAkqT3DVqUU0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
31.210.32.0/23
31.210.46.0/24
31.210.56.0-31.210.61.255
77.92.128.0/23
77.92.131.0-77.92.141.255
77.92.148.0/23
77.92.155.0-77.92.159.255
78.135.79.0/24
78.135.108.0/24
78.135.113.0-78.135.114.255
78.135.116.0/24
188.132.134.0/23
188.132.142.0/24
188.132.147.0-188.132.148.255
188.132.157.0-188.132.158.255
188.132.172.0/24
188.132.175.0-188.132.176.255
188.132.180.0/24
188.132.194.0/24
188.132.204.0/23
188.132.244.0-188.132.246.255
188.132.252.0/22
212.68.32.0/23
212.68.40.0-212.68.46.255
212.68.50.0/23
212.68.56.0/23
212.68.61.0/24
IPv6:
2a02:26b0::/32
Signature Algorithm: sha256WithRSAEncryption
4b:ef:61:72:00:af:74:67:32:ce:17:80:b2:99:ec:b2:64:13:
6e:3a:e4:c3:a4:b8:57:42:ee:d9:92:1c:bc:9a:68:79:31:b3:
8c:9f:78:93:2d:ee:c7:41:18:27:70:11:76:5a:91:c4:46:16:
60:be:6a:02:2c:8b:3d:e5:8a:f3:bf:97:f0:f5:96:65:89:d6:
e4:d1:0a:d8:6e:26:e4:34:b4:ab:64:42:10:c7:a6:2a:54:b5:
04:dd:73:a0:a4:36:67:61:01:10:e1:08:18:e4:be:4e:24:b8:
ae:cc:81:94:60:f4:b4:c9:e9:b6:26:e9:5e:e4:af:90:fc:b9:
16:21:e7:0b:10:79:2f:f8:99:3b:be:c0:47:71:9d:82:60:b9:
cb:e4:73:7a:1c:9e:1d:c6:56:7c:cf:f9:17:92:d8:9e:ee:de:
a2:d1:a5:02:0b:99:6b:b1:c8:0e:89:7b:06:96:c0:71:d9:4d:
3a:33:ec:ab:d4:d4:e3:58:df:55:dd:e3:62:66:46:bf:9f:db:
a6:73:d1:ce:93:eb:0c:e9:95:fa:b2:19:5e:f1:eb:d9:fc:a9:
15:f3:7d:1f:2f:4e:de:e1:80:f1:3c:fb:8d:15:f6:22:f0:2e:
fa:ac:6f:f4:48:c6:5b:47:62:c7:33:fb:8c:5e:d4:04:fb:f5:
1d:d6:05:b1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Oct 4 17:15:46 2024 by rpki-client on console-fra.rpki-client.org