Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/9d/8b07cd-0ced-4afc-8d02-972a4c3dc3f3/1/WwlyFyc7l-0zPZiEApF9zl3Txms.roa
File: WwlyFyc7l-0zPZiEApF9zl3Txms.roa (raw, json)
Hash identifier: A8d74jJ/bh1RCpSYXyrmAwc2v7kgPamJ8gunm9QNsJY=
Subject key identifier: 5B:09:72:17:27:3B:97:ED:33:3D:98:84:02:91:7D:CE:5D:D3:C6:6B
Certificate issuer: /CN=53b62ace615b906b42ab27f4fb1d203df36d5436
Certificate serial: 018F5D0541F430CA0E88BDFE95B299C30382
Authority key identifier: 53:B6:2A:CE:61:5B:90:6B:42:AB:27:F4:FB:1D:20:3D:F3:6D:54:36
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/U7YqzmFbkGtCqyf0-x0gPfNtVDY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/9d/8b07cd-0ced-4afc-8d02-972a4c3dc3f3/1/WwlyFyc7l-0zPZiEApF9zl3Txms.roa
Signing time: Thu 09 May 2024 11:02:56 +0000
ROA not before: Thu 09 May 2024 11:02:56 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 31708
IP address blocks: 31.193.168.0/21 maxlen: 21
31.193.170.0/24 maxlen: 24
62.197.40.0/23 maxlen: 23
62.197.44.0/23 maxlen: 23
62.197.44.0/24 maxlen: 24
62.197.50.0/23 maxlen: 23
83.142.24.0/21 maxlen: 21
83.142.24.0/22 maxlen: 22
83.142.28.0/24 maxlen: 24
83.142.29.0/24 maxlen: 24
83.142.30.0/23 maxlen: 23
85.13.192.0/18 maxlen: 18
85.13.192.0/24 maxlen: 24
85.13.199.0/24 maxlen: 24
85.13.208.0/24 maxlen: 24
85.13.209.0/24 maxlen: 24
85.13.214.0/24 maxlen: 24
85.13.216.0/24 maxlen: 24
85.13.222.0/24 maxlen: 24
85.13.228.0/24 maxlen: 24
85.13.230.0/24 maxlen: 24
85.13.234.0/24 maxlen: 24
85.13.247.0/24 maxlen: 24
85.13.251.0/24 maxlen: 24
89.187.64.0/19 maxlen: 19
89.187.64.0/22 maxlen: 22
89.187.70.0/23 maxlen: 23
89.187.72.0/24 maxlen: 24
89.187.74.0/23 maxlen: 23
89.187.76.0/24 maxlen: 24
89.187.78.0/23 maxlen: 23
89.187.78.0/24 maxlen: 24
89.187.79.0/24 maxlen: 24
89.187.80.0/21 maxlen: 21
89.187.80.0/24 maxlen: 24
89.187.81.0/24 maxlen: 24
89.187.84.0/24 maxlen: 24
89.187.85.0/24 maxlen: 24
89.187.86.0/24 maxlen: 24
89.187.88.0/22 maxlen: 22
89.187.91.0/24 maxlen: 24
89.187.92.0/24 maxlen: 24
89.187.93.0/24 maxlen: 24
89.187.94.0/23 maxlen: 23
89.187.95.0/24 maxlen: 24
109.70.136.0/21 maxlen: 21
109.70.141.0/24 maxlen: 24
109.70.143.0/24 maxlen: 24
185.101.80.0/22 maxlen: 24
185.101.80.0/23 maxlen: 23
185.101.83.0/24 maxlen: 24
193.26.222.0/24 maxlen: 24
2a01:c0::/32 maxlen: 32
Validation: Failed, RFC 3779 resource not subset of parent's resources
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8f:5d:05:41:f4:30:ca:0e:88:bd:fe:95:b2:99:c3:03:82
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=53b62ace615b906b42ab27f4fb1d203df36d5436
Validity
Not Before: May 9 11:02:56 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=5b097217273b97ed333d988402917dce5dd3c66b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:df:86:41:d2:cc:50:30:18:79:ad:10:80:e2:ec:
18:e6:fd:ac:27:08:5f:4b:f5:f3:72:6b:db:aa:e3:
18:50:37:ad:b0:8a:4b:f0:41:2f:f2:31:85:17:fd:
83:57:62:3c:63:e9:54:22:5b:77:da:d4:ec:ab:7f:
4e:19:1d:dd:03:13:01:d3:95:3d:96:1e:46:91:c7:
c0:61:ae:97:87:e4:46:49:06:c8:a9:e5:5d:75:ae:
28:f8:9a:c3:d1:9c:94:0e:7c:0c:46:31:33:cd:f9:
98:60:41:98:62:69:89:83:41:eb:71:0a:a2:a9:dc:
a3:f3:87:dc:e5:d0:81:4a:b7:20:25:26:02:36:dc:
b5:a2:be:78:fd:eb:03:04:82:5f:0f:8f:53:8e:ae:
00:26:97:cb:cf:97:ba:d7:dc:8c:6b:b5:89:a9:4a:
2a:70:f2:57:43:5f:1f:a5:13:c1:f0:7b:f8:49:d7:
5c:87:c6:9f:cc:09:a1:0d:ab:67:f0:32:fc:bb:d9:
89:a8:27:dd:d2:36:2e:13:60:00:fb:22:04:57:bb:
f0:56:fd:ab:66:05:dc:36:1d:61:7d:71:99:a1:4a:
fe:03:a2:bb:b0:f1:57:db:30:ec:e3:e1:01:ba:2a:
67:a2:a2:3c:83:23:6c:19:95:a4:8d:82:3f:ec:c0:
f5:67
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
5B:09:72:17:27:3B:97:ED:33:3D:98:84:02:91:7D:CE:5D:D3:C6:6B
X509v3 Authority Key Identifier:
keyid:53:B6:2A:CE:61:5B:90:6B:42:AB:27:F4:FB:1D:20:3D:F3:6D:54:36
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/U7YqzmFbkGtCqyf0-x0gPfNtVDY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/9d/8b07cd-0ced-4afc-8d02-972a4c3dc3f3/1/WwlyFyc7l-0zPZiEApF9zl3Txms.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/9d/8b07cd-0ced-4afc-8d02-972a4c3dc3f3/1/U7YqzmFbkGtCqyf0-x0gPfNtVDY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
31.193.168.0/21
62.197.40.0/23
62.197.44.0/23
62.197.50.0/23
83.142.24.0/21
85.13.192.0/18
89.187.64.0/19
109.70.136.0/21
185.101.80.0/22
193.26.222.0/24
IPv6:
2a01:c0::/32
Signature Algorithm: sha256WithRSAEncryption
be:4f:af:61:92:1f:f5:97:d8:26:af:d0:d0:4e:99:07:bb:be:
c1:d2:ca:5e:d4:ed:30:3b:ae:dc:ea:a1:d9:65:b0:4d:13:6b:
4c:e6:f7:72:47:0c:59:a3:34:c3:51:38:29:29:bc:2c:d7:3f:
bc:c5:c1:29:a6:23:9e:9c:91:87:af:18:f7:62:b6:55:07:97:
d5:35:51:d6:35:c1:7e:62:01:60:6a:a8:d4:92:7d:9d:65:50:
22:6c:e1:78:89:b9:22:45:73:bc:07:0e:37:be:5d:77:b3:d5:
98:c7:1d:87:af:2f:9d:e7:8b:14:46:46:6d:f2:c5:77:26:ae:
0c:cb:a7:1b:be:3c:a8:8c:de:a9:4f:29:11:a3:8b:ef:45:3c:
6c:eb:ae:99:2b:0f:00:fc:2b:10:5e:00:34:41:71:74:cf:ad:
48:d3:94:3c:22:c9:d7:47:c3:33:4f:7f:6c:b2:28:57:58:de:
a3:3a:d7:bc:f6:8f:6c:4c:ae:cf:ad:83:42:c4:6d:2d:43:22:
08:c8:c0:7b:8d:1a:0c:5c:9b:0d:1b:39:9f:7c:15:33:3e:86:
90:b3:90:91:32:05:1e:9a:a3:99:e0:fc:93:eb:54:8b:bd:67:
17:cc:ff:5f:19:d2:c3:18:ce:a1:03:e6:12:87:93:6c:7b:56:
5a:8a:ed:fa
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 7 23:46:24 2025 by rpki-client