Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/df/4615be-e566-4253-83ef-f6626b63383e/1/yJYbHGhXGVf1w3HrRjQrrLv-OQs.roa
File: yJYbHGhXGVf1w3HrRjQrrLv-OQs.roa (raw, json)
Hash identifier: 0nPIe+PuAC3wGIl6hpm7ooh4F0z4t61APbQVe5nxPLI=
Subject key identifier: C8:96:1B:1C:68:57:19:57:F5:C3:71:EB:46:34:2B:AC:BB:FE:39:0B
Certificate issuer: /CN=ad109dee6fbdc256df911460ccc915d066a8ff8b
Certificate serial: 0BB0183B
Authority key identifier: AD:10:9D:EE:6F:BD:C2:56:DF:91:14:60:CC:C9:15:D0:66:A8:FF:8B
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/rRCd7m-9wlbfkRRgzMkV0Gao_4s.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/df/4615be-e566-4253-83ef-f6626b63383e/1/yJYbHGhXGVf1w3HrRjQrrLv-OQs.roa
Signing time: Sat 01 Jan 2022 11:03:07 +0000
ROA not before: Sat 01 Jan 2022 11:03:07 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 33924
IP address blocks: 31.222.44.0/24 maxlen: 24
31.222.44.0/22 maxlen: 22
31.222.40.0/22 maxlen: 22
31.222.40.0/21 maxlen: 21
31.222.40.0/24 maxlen: 24
31.222.41.0/24 maxlen: 24
31.222.42.0/24 maxlen: 24
31.222.43.0/24 maxlen: 24
31.222.45.0/24 maxlen: 24
31.222.46.0/24 maxlen: 24
31.222.47.0/24 maxlen: 24
185.55.44.0/22 maxlen: 22
185.55.44.0/24 maxlen: 24
185.55.44.0/23 maxlen: 23
185.55.45.0/24 maxlen: 24
185.55.46.0/24 maxlen: 24
185.55.47.0/24 maxlen: 24
84.20.64.0/19 maxlen: 19
84.20.64.0/20 maxlen: 20
84.20.64.0/24 maxlen: 24
84.20.64.0/22 maxlen: 22
84.20.64.0/21 maxlen: 21
84.20.65.0/24 maxlen: 24
84.20.66.0/24 maxlen: 24
84.20.67.0/24 maxlen: 24
84.20.68.0/24 maxlen: 24
84.20.68.0/22 maxlen: 22
84.20.69.0/24 maxlen: 24
84.20.70.0/24 maxlen: 24
84.20.71.0/24 maxlen: 24
84.20.78.0/24 maxlen: 24
84.20.72.0/24 maxlen: 24
84.20.72.0/22 maxlen: 22
84.20.78.0/23 maxlen: 23
84.20.73.0/24 maxlen: 24
84.20.74.0/24 maxlen: 24
84.20.75.0/24 maxlen: 24
84.20.76.0/23 maxlen: 23
84.20.76.0/24 maxlen: 24
84.20.76.0/22 maxlen: 22
84.20.77.0/24 maxlen: 24
84.20.85.0/24 maxlen: 24
84.20.83.0/24 maxlen: 24
84.20.82.0/24 maxlen: 24
84.20.84.0/24 maxlen: 24
84.20.84.0/22 maxlen: 22
84.20.79.0/24 maxlen: 24
84.20.80.0/22 maxlen: 22
84.20.80.0/24 maxlen: 24
84.20.80.0/21 maxlen: 21
84.20.81.0/24 maxlen: 24
84.20.86.0/24 maxlen: 24
84.20.87.0/24 maxlen: 24
84.20.88.0/23 maxlen: 23
84.20.88.0/24 maxlen: 24
84.20.88.0/22 maxlen: 22
84.20.89.0/24 maxlen: 24
84.20.90.0/24 maxlen: 24
84.20.91.0/24 maxlen: 24
84.20.94.0/24 maxlen: 24
84.20.94.0/23 maxlen: 23
84.20.95.0/24 maxlen: 24
84.20.92.0/24 maxlen: 24
Validation: Failed, RFC 3779 resource not subset of parent's resources
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 196089915 (0xbb0183b)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=ad109dee6fbdc256df911460ccc915d066a8ff8b
Validity
Not Before: Jan 1 11:03:07 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=c8961b1c68571957f5c371eb46342bacbbfe390b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8c:c4:90:2b:68:ba:89:5c:6b:7a:0a:59:1f:58:
53:db:e0:e2:3e:8b:40:35:2c:0b:39:26:9b:35:0a:
2b:db:39:c1:fc:a3:b9:4b:af:98:b7:a5:83:1a:b0:
44:d8:a4:c7:c0:e2:ac:cf:11:d3:d9:0d:2e:1f:e4:
f9:b6:8b:81:88:3e:3c:77:71:00:ce:dc:b0:86:6e:
31:4b:0f:9b:a1:47:b4:88:9f:7e:d0:68:2f:87:47:
b2:32:d3:b4:c8:c2:90:80:75:a4:f9:33:ee:e2:ad:
26:68:7c:5e:a4:89:e3:0d:9e:59:08:35:de:a4:5d:
64:62:b5:31:a1:98:be:eb:3d:ad:64:8b:7d:13:cf:
2b:f3:d6:2e:3d:db:6f:8a:d2:aa:e6:c0:15:07:65:
dc:62:c9:96:22:c6:cb:be:da:7f:06:97:f0:b0:20:
d4:7c:8a:6b:b1:5a:93:7b:c5:d5:7f:33:78:0d:07:
fe:4e:1c:dc:f1:c3:16:5a:ce:a9:fa:02:12:dc:1e:
83:2c:0e:20:82:7e:2d:59:d9:a1:b7:af:97:a9:2e:
f6:22:79:2f:72:aa:16:7f:d6:ba:41:2e:46:fd:7b:
43:58:38:65:63:20:33:49:8a:3a:2b:cd:2c:7b:f0:
ae:0b:22:2e:4b:d5:12:53:99:8e:76:36:3a:b3:f8:
af:a1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C8:96:1B:1C:68:57:19:57:F5:C3:71:EB:46:34:2B:AC:BB:FE:39:0B
X509v3 Authority Key Identifier:
keyid:AD:10:9D:EE:6F:BD:C2:56:DF:91:14:60:CC:C9:15:D0:66:A8:FF:8B
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/rRCd7m-9wlbfkRRgzMkV0Gao_4s.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/df/4615be-e566-4253-83ef-f6626b63383e/1/yJYbHGhXGVf1w3HrRjQrrLv-OQs.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/df/4615be-e566-4253-83ef-f6626b63383e/1/rRCd7m-9wlbfkRRgzMkV0Gao_4s.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
31.222.40.0/21
84.20.64.0/19
185.55.44.0/22
Signature Algorithm: sha256WithRSAEncryption
ac:42:bd:f1:53:f2:03:34:30:36:3e:b3:4d:83:11:f1:79:42:
e3:98:bc:2d:ee:08:91:f9:0f:da:79:b4:68:e2:5e:36:63:f8:
19:37:5f:26:b1:f5:70:fb:e9:0a:90:b1:aa:c0:46:26:f5:4a:
e3:78:9c:98:9b:0d:13:01:4e:85:97:6e:63:bb:64:9a:48:f9:
49:94:bf:27:99:52:5d:3b:94:ec:83:96:31:5c:b6:28:96:22:
fc:c4:69:a5:52:40:dc:63:2c:3d:0a:3e:63:cc:64:63:b9:e7:
88:f4:ba:57:b7:86:0c:d3:85:a6:5a:d8:8f:a7:24:91:08:37:
4e:35:bc:ec:ec:b9:68:30:bd:4f:bf:0f:40:ed:ca:53:7b:df:
f8:08:70:6a:e4:5b:91:3e:31:b0:bf:8d:67:4b:f3:18:cc:e2:
fb:80:c7:ee:09:5e:ff:bd:92:16:1b:04:73:1b:ba:4f:54:9e:
57:cb:9e:82:3e:69:73:df:62:e1:1c:fc:e2:89:76:fd:b4:42:
41:77:16:09:fe:c7:5d:19:b3:8c:49:93:31:52:e7:db:13:cd:
4f:40:e5:95:a6:88:da:38:3b:48:de:81:c5:80:23:a4:70:fa:
49:34:e8:1f:09:b0:80:49:8e:db:85:18:43:58:f5:a1:7b:c2:
0d:79:73:a4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Feb 17 07:47:24 2025 by rpki-client