Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a8/c61092-734a-4eef-9d67-4905243bc828/1/65epr7lAWWYrX4-bTO468A_wenM.roa
File: 65epr7lAWWYrX4-bTO468A_wenM.roa (raw, json)
Hash identifier: LH2SVdUmnF/MSHrkFbtggU3/tbqRGEFDSHzfzPVEipw=
Subject key identifier: EB:97:A9:AF:B9:40:59:66:2B:5F:8F:9B:4C:EE:3A:F0:0F:F0:7A:73
Certificate issuer: /CN=05b1d13c2e26e12786246a5ec4c5bea69864b20f
Certificate serial: 01884D035BB625BEF8C546112142662386B8
Authority key identifier: 05:B1:D1:3C:2E:26:E1:27:86:24:6A:5E:C4:C5:BE:A6:98:64:B2:0F
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/BbHRPC4m4SeGJGpexMW-pphksg8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/a8/c61092-734a-4eef-9d67-4905243bc828/1/65epr7lAWWYrX4-bTO468A_wenM.roa
Signing time: Wed 24 May 2023 09:07:25 +0000
ROA not before: Wed 24 May 2023 09:07:25 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 41789
IP address blocks: 31.129.17.0/24 maxlen: 24
31.129.16.0/24 maxlen: 24
31.129.18.0/24 maxlen: 24
31.129.20.0/24 maxlen: 24
31.129.19.0/24 maxlen: 24
31.129.24.0/24 maxlen: 24
31.129.23.0/24 maxlen: 24
31.129.29.0/24 maxlen: 24
31.129.28.0/24 maxlen: 24
31.129.27.0/24 maxlen: 24
31.129.26.0/24 maxlen: 24
31.129.31.0/24 maxlen: 24
31.129.25.0/24 maxlen: 24
141.98.233.0/24 maxlen: 24
141.98.234.0/24 maxlen: 24
46.16.12.0/24 maxlen: 24
46.16.15.0/24 maxlen: 24
46.16.14.0/24 maxlen: 24
31.129.0.0/20 maxlen: 24
85.92.110.0/24 maxlen: 24
45.80.130.0/23 maxlen: 23
45.80.129.0/24 maxlen: 24
37.220.80.0/22 maxlen: 22
185.166.196.0/23 maxlen: 24
94.198.216.0/22 maxlen: 24
94.198.220.0/23 maxlen: 24
81.200.144.0/21 maxlen: 24
81.200.152.0/22 maxlen: 24
81.200.156.0/23 maxlen: 24
46.19.64.0/22 maxlen: 24
Validation: Failed, RFC 3779 resource not subset of parent's resources
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:88:4d:03:5b:b6:25:be:f8:c5:46:11:21:42:66:23:86:b8
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=05b1d13c2e26e12786246a5ec4c5bea69864b20f
Validity
Not Before: May 24 09:07:25 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=eb97a9afb94059662b5f8f9b4cee3af00ff07a73
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8a:4c:fa:bf:a8:13:e8:a5:0a:4c:e7:12:d2:9f:
c0:60:13:9e:43:f2:c4:11:16:15:b1:b1:9e:31:1e:
d8:fc:c9:b3:df:f5:18:8f:59:a1:b0:e1:0b:8e:a8:
5e:b3:7a:7a:fc:e6:d0:49:d6:50:58:4e:4c:b2:d4:
03:c0:cb:5a:5b:a6:82:3f:84:14:c3:5c:04:4b:c2:
f2:42:79:a9:5a:7b:9d:7f:b6:b6:66:39:74:88:81:
8b:f1:7e:fa:04:66:f6:cb:70:b7:fe:c3:d4:7b:74:
ab:6e:3b:cf:7b:3d:51:64:69:0a:c8:13:08:b4:39:
2a:1e:fd:8d:5f:a9:11:43:71:05:5e:e4:67:24:5d:
9f:32:cb:a3:16:38:3a:75:57:bd:85:34:c9:b2:57:
0a:a4:b9:d2:02:f0:5f:2f:2d:4f:61:42:9c:96:83:
0c:5b:12:01:f8:cf:1b:b7:6d:12:81:16:4f:e5:90:
10:6d:ca:fb:c3:1d:89:e0:3f:af:d2:8c:bc:06:cd:
a3:33:5b:96:7f:e2:a4:03:e3:03:3e:6d:93:a7:85:
d4:2d:93:d3:3d:e4:4b:4c:2a:ed:cd:70:a8:14:09:
6d:bd:62:44:5d:5e:54:fb:f6:3b:a6:e2:16:b9:1b:
00:60:09:76:77:5d:fa:b5:7b:af:81:b0:e1:d2:48:
69:79
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
EB:97:A9:AF:B9:40:59:66:2B:5F:8F:9B:4C:EE:3A:F0:0F:F0:7A:73
X509v3 Authority Key Identifier:
keyid:05:B1:D1:3C:2E:26:E1:27:86:24:6A:5E:C4:C5:BE:A6:98:64:B2:0F
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/BbHRPC4m4SeGJGpexMW-pphksg8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a8/c61092-734a-4eef-9d67-4905243bc828/1/65epr7lAWWYrX4-bTO468A_wenM.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/a8/c61092-734a-4eef-9d67-4905243bc828/1/BbHRPC4m4SeGJGpexMW-pphksg8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
31.129.0.0-31.129.20.255
31.129.23.0-31.129.29.255
31.129.31.0/24
37.220.80.0/22
45.80.129.0-45.80.131.255
46.16.12.0/24
46.16.14.0/23
46.19.64.0/22
81.200.144.0-81.200.157.255
85.92.110.0/24
94.198.216.0-94.198.221.255
141.98.233.0-141.98.234.255
185.166.196.0/23
Signature Algorithm: sha256WithRSAEncryption
94:75:9a:d6:3c:5d:7e:7a:a9:ef:05:e4:bb:a0:ca:4c:1e:6c:
2e:8b:cc:89:67:cf:8b:a2:7b:1a:4c:b4:6a:21:d9:a3:26:9d:
47:75:02:4c:db:c6:8e:3d:38:cf:78:61:4e:bd:88:fc:c5:03:
ea:81:70:93:22:2d:dd:28:ea:30:05:a5:84:dc:2a:8e:e8:6e:
da:4f:c0:54:da:08:41:e5:46:e3:ab:84:44:57:00:89:6f:55:
89:05:02:c4:0a:b2:3b:d1:45:c6:04:99:8f:8f:1d:86:de:2f:
10:87:42:4e:a2:c2:69:17:ef:2d:68:72:ff:d5:ca:0d:b1:f6:
2e:cd:2e:66:96:74:60:c4:38:91:cc:61:38:04:06:3b:f9:a6:
f0:90:9d:3a:d6:ec:7a:6f:02:05:42:43:56:3f:37:5d:84:a3:
7e:09:df:43:f3:bc:28:df:79:61:ba:23:af:ef:5d:18:2d:67:
c3:51:10:ef:bb:25:6c:93:6b:f1:28:08:f1:8b:fb:05:87:c9:
d8:22:36:da:82:ee:1f:e1:b6:63:7d:3b:73:7e:1b:16:43:de:
1b:6a:29:b9:f3:b9:68:53:5e:34:65:30:e5:20:55:f8:13:4d:
42:9d:21:29:50:dc:a6:34:f2:37:2f:7d:cd:9b:24:a9:f7:ac:
ff:23:89:08
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 19:37:15 2024 by rpki-client on console-ams.rpki-client.org