Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/72/715d15-2810-4827-8dbd-0bee06126b1a/1/EFsj8cE_xvdMPK-CZIvpgVRHvrI.roa
File: EFsj8cE_xvdMPK-CZIvpgVRHvrI.roa (raw, json)
Hash identifier: t/VVaiOB9IdkafH5TptTpoivswvakZ79zPEnst5VI4c=
Subject key identifier: 10:5B:23:F1:C1:3F:C6:F7:4C:3C:AF:82:64:8B:E9:81:54:47:BE:B2
Certificate issuer: /CN=adf491488a7cd8448a420945871c0b99672dc66e
Certificate serial: 0181E137C166D93E76ABE9A72F0D594EDB39
Authority key identifier: AD:F4:91:48:8A:7C:D8:44:8A:42:09:45:87:1C:0B:99:67:2D:C6:6E
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/rfSRSIp82ESKQglFhxwLmWctxm4.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/72/715d15-2810-4827-8dbd-0bee06126b1a/1/EFsj8cE_xvdMPK-CZIvpgVRHvrI.roa
Signing time: Sat 09 Jul 2022 04:28:56 +0000
ROA not before: Sat 09 Jul 2022 04:28:56 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 43395
IP address blocks: 151.238.136.0/21 maxlen: 21
151.238.144.0/23 maxlen: 23
151.247.232.0/22 maxlen: 22
151.247.228.0/22 maxlen: 22
151.247.239.0/24 maxlen: 24
151.247.236.0/22 maxlen: 22
151.247.238.0/24 maxlen: 24
151.247.240.0/24 maxlen: 24
151.247.241.0/24 maxlen: 24
31.58.246.0/24 maxlen: 24
31.58.242.0/24 maxlen: 24
31.58.244.0/24 maxlen: 24
31.58.245.0/24 maxlen: 24
31.58.241.0/24 maxlen: 24
31.58.243.0/24 maxlen: 24
31.58.252.0/24 maxlen: 24
31.58.248.0/24 maxlen: 24
31.58.250.0/24 maxlen: 24
31.58.247.0/24 maxlen: 24
31.58.253.0/24 maxlen: 24
31.58.249.0/24 maxlen: 24
31.58.251.0/24 maxlen: 24
31.59.3.0/24 maxlen: 24
31.58.255.0/24 maxlen: 24
31.59.0.0/23 maxlen: 23
31.58.254.0/24 maxlen: 24
31.59.4.0/24 maxlen: 24
31.59.5.0/24 maxlen: 24
31.59.9.0/24 maxlen: 24
31.59.8.0/24 maxlen: 24
31.59.13.0/24 maxlen: 24
31.59.15.0/24 maxlen: 24
31.59.14.0/24 maxlen: 24
31.59.12.0/24 maxlen: 24
31.58.238.0/24 maxlen: 24
31.58.240.0/24 maxlen: 24
31.58.236.0/24 maxlen: 24
31.58.239.0/24 maxlen: 24
31.58.237.0/24 maxlen: 24
94.182.57.0/24 maxlen: 24
94.182.56.0/22 maxlen: 22
94.182.56.0/24 maxlen: 24
94.182.58.0/24 maxlen: 24
94.182.59.0/24 maxlen: 24
94.182.61.0/24 maxlen: 24
94.182.63.0/24 maxlen: 24
94.182.62.0/24 maxlen: 24
94.182.60.0/22 maxlen: 22
94.182.60.0/24 maxlen: 24
Validation: Failed, RFC 3779 resource not subset of parent's resources
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:81:e1:37:c1:66:d9:3e:76:ab:e9:a7:2f:0d:59:4e:db:39
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=adf491488a7cd8448a420945871c0b99672dc66e
Validity
Not Before: Jul 9 04:28:56 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=105b23f1c13fc6f74c3caf82648be9815447beb2
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8d:d7:3c:0a:11:c6:c3:ca:95:40:f5:1d:de:0b:
c5:d0:bc:21:ff:16:5a:c3:b5:7b:a2:62:03:93:8c:
27:3b:b1:c4:85:12:f0:69:d7:54:f1:9f:03:1e:38:
c9:32:5d:8e:a2:f6:9c:92:2e:8f:d5:84:c9:8a:be:
11:0c:c4:34:0c:5b:f5:0d:33:0d:c7:a5:c3:5f:b1:
19:b4:17:02:55:87:0f:ed:6b:fd:b3:aa:8e:63:5e:
79:cf:eb:39:28:76:b9:86:16:c0:da:14:27:87:f6:
dd:77:c3:eb:f4:27:19:10:96:82:a5:fa:0a:b2:c0:
b4:06:04:60:33:63:74:88:c7:72:47:61:a4:82:2a:
9b:32:15:12:24:10:d7:a9:c0:0f:1c:74:0d:79:69:
6b:38:8f:87:66:fe:13:c3:73:87:3a:df:ba:ea:4b:
9d:29:6b:7c:39:d4:6b:7b:b4:fb:72:cb:31:d3:af:
03:58:c9:29:f7:8d:88:c8:5c:1a:30:11:75:14:ba:
40:56:f6:ce:44:86:46:a1:e4:5c:5e:1e:16:35:9e:
de:a0:0c:0f:71:3c:35:67:03:cc:38:56:0c:13:80:
06:62:87:af:86:cf:ea:cb:70:6b:0f:2e:99:4e:41:
ce:79:3e:49:c0:37:b5:3f:e6:70:05:a3:aa:0b:f6:
f2:77
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
10:5B:23:F1:C1:3F:C6:F7:4C:3C:AF:82:64:8B:E9:81:54:47:BE:B2
X509v3 Authority Key Identifier:
keyid:AD:F4:91:48:8A:7C:D8:44:8A:42:09:45:87:1C:0B:99:67:2D:C6:6E
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/rfSRSIp82ESKQglFhxwLmWctxm4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/72/715d15-2810-4827-8dbd-0bee06126b1a/1/EFsj8cE_xvdMPK-CZIvpgVRHvrI.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/72/715d15-2810-4827-8dbd-0bee06126b1a/1/rfSRSIp82ESKQglFhxwLmWctxm4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
31.58.236.0-31.59.1.255
31.59.3.0-31.59.5.255
31.59.8.0/23
31.59.12.0/22
94.182.56.0/21
151.238.136.0-151.238.145.255
151.247.228.0-151.247.241.255
Signature Algorithm: sha256WithRSAEncryption
14:31:d0:bf:be:f6:14:96:6b:a4:5b:c2:bb:b3:a3:47:d4:12:
39:02:3b:aa:cb:44:cc:07:4d:3b:8b:d4:f9:b2:9b:79:83:6d:
01:f0:7c:fe:b9:8e:b2:a1:c0:a8:62:f2:76:fc:39:f0:b6:7e:
b9:64:e9:e6:43:72:e4:b2:f8:4c:86:3c:6f:f1:e9:33:ba:3a:
62:57:d5:b3:b4:82:20:77:94:65:23:49:de:cc:60:dd:b4:ee:
1e:06:19:30:77:37:61:dc:5e:ab:b8:35:97:0e:29:34:06:9f:
12:3f:48:e3:0b:44:c5:32:ea:6c:88:41:01:dc:48:0a:38:42:
8a:88:8b:08:22:ab:e8:3b:16:b1:66:2c:96:e5:bb:75:07:cd:
16:b9:6e:03:9d:54:fb:9c:dc:18:01:26:a5:05:f6:38:3e:ec:
b3:2b:16:91:0f:26:f5:b2:28:c9:0a:d3:de:31:eb:d8:cd:84:
98:79:7f:ed:fb:82:57:fd:4f:0d:f3:42:75:d3:ea:f2:2a:71:
e3:5e:a5:a5:44:4c:35:9d:9c:9a:f9:22:36:06:5a:46:d6:ec:
80:e0:00:88:18:a4:08:4c:76:58:b6:ba:7c:a8:2e:a0:b5:39:
f6:01:ed:8f:e1:d6:9b:e9:31:ce:60:a7:07:ac:58:3b:68:72:
26:46:7f:c0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun May 11 02:47:28 2025 by rpki-client