Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/9d/8b07cd-0ced-4afc-8d02-972a4c3dc3f3/1/he0Zpp05lnSyupRugS9KHplPrDc.roa
File: he0Zpp05lnSyupRugS9KHplPrDc.roa (raw, json)
Hash identifier: 8Cji0lkUJk5xFGdACI96g55pAuDEieJpgTgjyDrqCgk=
Subject key identifier: 85:ED:19:A6:9D:39:96:74:B2:BA:94:6E:81:2F:4A:1E:99:4F:AC:37
Certificate issuer: /CN=53b62ace615b906b42ab27f4fb1d203df36d5436
Certificate serial: 018F71D85F2643743D9D2ED1E4541FCA7430
Authority key identifier: 53:B6:2A:CE:61:5B:90:6B:42:AB:27:F4:FB:1D:20:3D:F3:6D:54:36
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/U7YqzmFbkGtCqyf0-x0gPfNtVDY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/9d/8b07cd-0ced-4afc-8d02-972a4c3dc3f3/1/he0Zpp05lnSyupRugS9KHplPrDc.roa
Signing time: Mon 13 May 2024 12:05:56 +0000
ROA not before: Mon 13 May 2024 12:05:56 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 31708
IP address blocks: 31.193.168.0/21 maxlen: 21
31.193.170.0/24 maxlen: 24
62.197.40.0/23 maxlen: 23
62.197.44.0/23 maxlen: 23
62.197.44.0/24 maxlen: 24
62.197.50.0/23 maxlen: 23
83.142.24.0/21 maxlen: 21
83.142.24.0/22 maxlen: 22
83.142.28.0/24 maxlen: 24
83.142.29.0/24 maxlen: 24
83.142.30.0/23 maxlen: 23
85.13.192.0/18 maxlen: 18
85.13.192.0/24 maxlen: 24
85.13.199.0/24 maxlen: 24
85.13.208.0/24 maxlen: 24
85.13.209.0/24 maxlen: 24
85.13.214.0/24 maxlen: 24
85.13.216.0/24 maxlen: 24
85.13.222.0/24 maxlen: 24
85.13.228.0/24 maxlen: 24
85.13.230.0/24 maxlen: 24
85.13.234.0/24 maxlen: 24
85.13.247.0/24 maxlen: 24
85.13.251.0/24 maxlen: 24
89.187.64.0/22 maxlen: 22
89.187.70.0/23 maxlen: 23
89.187.72.0/24 maxlen: 24
89.187.74.0/23 maxlen: 23
89.187.76.0/24 maxlen: 24
89.187.78.0/23 maxlen: 23
89.187.78.0/24 maxlen: 24
89.187.79.0/24 maxlen: 24
89.187.80.0/21 maxlen: 21
89.187.80.0/24 maxlen: 24
89.187.81.0/24 maxlen: 24
89.187.84.0/24 maxlen: 24
89.187.85.0/24 maxlen: 24
89.187.86.0/24 maxlen: 24
89.187.88.0/22 maxlen: 22
89.187.91.0/24 maxlen: 24
89.187.92.0/24 maxlen: 24
89.187.93.0/24 maxlen: 24
89.187.94.0/23 maxlen: 23
89.187.95.0/24 maxlen: 24
109.70.136.0/21 maxlen: 21
109.70.141.0/24 maxlen: 24
109.70.143.0/24 maxlen: 24
185.101.80.0/22 maxlen: 24
185.101.80.0/23 maxlen: 23
185.101.83.0/24 maxlen: 24
193.26.222.0/24 maxlen: 24
2a01:c0::/32 maxlen: 32
Validation: Failed, RFC 3779 resource not subset of parent's resources
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8f:71:d8:5f:26:43:74:3d:9d:2e:d1:e4:54:1f:ca:74:30
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=53b62ace615b906b42ab27f4fb1d203df36d5436
Validity
Not Before: May 13 12:05:56 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=85ed19a69d399674b2ba946e812f4a1e994fac37
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:88:6d:b0:2c:2b:a7:9d:8a:5b:2c:bd:ce:7d:5d:
64:95:3a:11:12:8b:06:54:47:ab:a8:c7:a6:22:c8:
6b:23:19:13:8f:43:a7:ba:d1:d0:4b:db:89:cf:c7:
a9:f3:78:73:7b:b0:02:97:07:06:06:49:eb:72:e4:
5f:e5:4d:84:88:b4:7d:78:41:94:84:77:f9:43:f2:
b7:d9:4a:1a:2d:03:65:ce:94:59:c9:af:62:a5:7f:
92:89:62:90:ad:f1:8d:6b:27:9f:bc:a3:e6:a6:57:
1a:b0:5b:3b:45:79:ae:2a:cd:44:b3:89:86:06:87:
a0:2e:5c:3a:ad:2b:0b:af:9b:e1:e7:86:23:e8:de:
b0:69:30:67:0b:fc:9e:ed:39:a6:f9:99:53:1c:ee:
b5:bb:aa:a9:d4:a0:2c:b3:bf:32:db:3a:98:11:3d:
bc:b4:e4:36:d5:6d:cb:ff:33:3b:83:d0:4d:5d:44:
7a:3e:04:b5:09:cf:ab:5f:8b:42:2a:7e:fb:2a:2b:
07:b1:80:3c:36:f5:de:3d:c1:4b:3f:aa:b9:a2:e0:
a7:d1:82:d7:ff:95:5d:48:da:99:8d:ac:44:eb:51:
72:64:25:49:f6:55:4f:a1:9e:ed:e2:d6:4d:28:e4:
82:0b:54:cc:12:6f:4a:b2:ee:e3:18:31:c6:ca:14:
88:65
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
85:ED:19:A6:9D:39:96:74:B2:BA:94:6E:81:2F:4A:1E:99:4F:AC:37
X509v3 Authority Key Identifier:
keyid:53:B6:2A:CE:61:5B:90:6B:42:AB:27:F4:FB:1D:20:3D:F3:6D:54:36
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/U7YqzmFbkGtCqyf0-x0gPfNtVDY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/9d/8b07cd-0ced-4afc-8d02-972a4c3dc3f3/1/he0Zpp05lnSyupRugS9KHplPrDc.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/9d/8b07cd-0ced-4afc-8d02-972a4c3dc3f3/1/U7YqzmFbkGtCqyf0-x0gPfNtVDY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
31.193.168.0/21
62.197.40.0/23
62.197.44.0/23
62.197.50.0/23
83.142.24.0/21
85.13.192.0/18
89.187.64.0/22
89.187.70.0-89.187.72.255
89.187.74.0-89.187.76.255
89.187.78.0-89.187.95.255
109.70.136.0/21
185.101.80.0/22
193.26.222.0/24
IPv6:
2a01:c0::/32
Signature Algorithm: sha256WithRSAEncryption
c8:f1:ed:4d:50:26:c8:70:1d:fa:29:da:d1:c8:ac:ed:5b:07:
37:80:7f:e3:2b:1e:a4:5b:57:9c:93:a2:53:90:83:a0:11:73:
e8:2c:ca:d1:34:11:a4:e6:3d:f4:68:c9:fc:b2:ca:59:c5:61:
08:50:05:7c:34:d1:9e:8e:d7:7b:88:8b:6a:76:72:c9:21:48:
65:01:bf:20:7d:96:ad:01:69:4d:db:f2:76:e7:28:61:e1:ae:
60:ae:32:72:cb:7d:9b:0c:bf:03:d4:e4:cb:9a:41:14:d3:67:
22:c7:63:07:30:06:10:55:24:59:20:fe:11:6b:df:17:bb:66:
03:75:53:e4:74:37:cc:68:cd:16:f2:3f:e9:16:73:4c:12:98:
24:da:7a:27:6d:07:49:bd:f5:49:98:a5:11:13:51:4c:10:ab:
29:48:65:cf:71:92:f1:ef:45:a1:f4:58:be:5a:36:c6:f6:a3:
4c:ce:1d:f8:5a:f9:1b:4f:3f:d3:04:8c:0f:a1:6a:dc:bd:b2:
92:b3:29:60:7f:76:68:85:55:d7:7a:59:b7:66:08:cd:eb:7c:
06:e8:0f:3f:78:96:a4:75:82:ec:40:5f:6c:8b:fa:33:bd:ce:
1a:32:d1:e1:5a:c7:c0:d2:c9:ff:e6:92:c1:4a:89:3b:4c:05:
7f:29:50:05
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 19:26:15 2024 by rpki-client on console-ams.rpki-client.org