Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/72/715d15-2810-4827-8dbd-0bee06126b1a/1/OAdFE2-ySeIZZ0fA0yAIG1W6s1s.roa
File: OAdFE2-ySeIZZ0fA0yAIG1W6s1s.roa (raw, json)
Hash identifier: IObxsoDZ5XVKs75z+bnRIST132HlFkte5nyTNoxmpfo=
Subject key identifier: 38:07:45:13:6F:B2:49:E2:19:67:47:C0:D3:20:08:1B:55:BA:B3:5B
Certificate issuer: /CN=adf491488a7cd8448a420945871c0b99672dc66e
Certificate serial: 0188A42E37EE6CA83285C797E9265A378657
Authority key identifier: AD:F4:91:48:8A:7C:D8:44:8A:42:09:45:87:1C:0B:99:67:2D:C6:6E
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/rfSRSIp82ESKQglFhxwLmWctxm4.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/72/715d15-2810-4827-8dbd-0bee06126b1a/1/OAdFE2-ySeIZZ0fA0yAIG1W6s1s.roa
Signing time: Sat 10 Jun 2023 07:21:12 +0000
ROA not before: Sat 10 Jun 2023 07:21:12 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 205647
IP address blocks: 151.242.0.0/21 maxlen: 21
31.56.116.0/24 maxlen: 24
151.241.224.0/21 maxlen: 21
151.247.214.0/23 maxlen: 23
151.247.216.0/21 maxlen: 21
151.247.224.0/22 maxlen: 22
151.247.232.0/22 maxlen: 22
151.247.228.0/22 maxlen: 22
151.247.238.0/23 maxlen: 23
151.247.237.0/24 maxlen: 24
151.247.240.0/24 maxlen: 24
151.247.236.0/24 maxlen: 24
151.247.241.0/24 maxlen: 24
151.247.248.0/22 maxlen: 22
31.58.240.0/20 maxlen: 20
85.15.49.0/24 maxlen: 24
85.15.48.0/24 maxlen: 24
151.240.240.0/21 maxlen: 21
31.59.12.0/22 maxlen: 22
94.183.192.0/18 maxlen: 18
31.56.64.0/19 maxlen: 19
31.56.96.0/20 maxlen: 20
31.56.0.0/18 maxlen: 18
94.183.0.0/18 maxlen: 18
151.240.80.0/21 maxlen: 21
94.182.192.0/18 maxlen: 18
94.182.204.0/24 maxlen: 24
94.182.205.0/24 maxlen: 24
94.182.206.0/24 maxlen: 24
94.182.204.0/22 maxlen: 22
94.182.207.0/24 maxlen: 24
94.182.217.0/24 maxlen: 24
94.182.226.0/24 maxlen: 24
94.182.228.0/22 maxlen: 22
151.240.168.0/22 maxlen: 22
151.240.192.0/21 maxlen: 21
94.183.128.0/18 maxlen: 18
31.58.236.0/22 maxlen: 22
94.183.64.0/18 maxlen: 18
94.182.41.0/24 maxlen: 24
94.182.56.0/22 maxlen: 22
94.182.60.0/22 maxlen: 22
94.182.64.0/18 maxlen: 18
94.182.72.0/21 maxlen: 21
94.182.97.192/28 maxlen: 28
94.182.0.0/18 maxlen: 18
94.182.8.0/23 maxlen: 23
94.182.12.0/23 maxlen: 23
94.182.82.0/24 maxlen: 24
94.182.116.0/22 maxlen: 22
94.182.114.0/23 maxlen: 23
94.182.120.0/21 maxlen: 21
94.182.128.0/18 maxlen: 18
Validation: Failed, RFC 3779 resource not subset of parent's resources
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:88:a4:2e:37:ee:6c:a8:32:85:c7:97:e9:26:5a:37:86:57
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=adf491488a7cd8448a420945871c0b99672dc66e
Validity
Not Before: Jun 10 07:21:12 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=380745136fb249e2196747c0d320081b55bab35b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:83:25:fc:10:84:3c:3c:26:65:34:f1:da:83:fb:
5a:7b:25:58:0b:31:f7:31:61:3d:fe:6f:f0:e2:60:
a4:ba:58:9c:01:32:f1:e0:b5:46:12:34:21:44:0d:
cf:cc:37:ea:d7:89:ad:b8:a1:29:ce:c3:81:bc:de:
e6:6c:cb:3e:c3:2d:aa:c9:3a:8d:f6:a7:3d:b4:45:
b4:9e:fc:de:30:53:4d:b9:22:67:a3:66:15:b2:e5:
2c:e5:af:07:1b:6a:89:00:05:af:79:91:3f:61:c0:
7e:eb:b6:89:b4:d2:1d:dd:03:c8:f8:cc:17:85:e6:
c4:06:28:6c:96:c2:38:f3:b0:11:9c:12:3b:de:ce:
34:26:5e:f8:22:48:47:26:f4:a9:40:03:3d:47:6d:
e0:51:42:02:b9:d3:b5:6c:05:23:36:c3:54:6b:00:
5e:91:f0:bb:ac:ec:cc:a3:57:00:4a:b1:9f:c0:11:
6f:6c:82:0c:cc:6c:8d:ef:30:ad:d5:66:cd:55:3d:
64:35:da:5c:08:9a:47:9b:bd:a0:89:91:df:e8:1d:
2a:5b:1a:c4:a9:c0:34:f7:34:e3:3f:db:6d:07:e8:
6a:ac:25:da:39:92:81:ff:00:e3:f4:75:f0:38:9f:
02:72:18:f2:fb:ef:9b:5e:94:64:d8:fa:82:61:9f:
f4:c3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
38:07:45:13:6F:B2:49:E2:19:67:47:C0:D3:20:08:1B:55:BA:B3:5B
X509v3 Authority Key Identifier:
keyid:AD:F4:91:48:8A:7C:D8:44:8A:42:09:45:87:1C:0B:99:67:2D:C6:6E
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/rfSRSIp82ESKQglFhxwLmWctxm4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/72/715d15-2810-4827-8dbd-0bee06126b1a/1/OAdFE2-ySeIZZ0fA0yAIG1W6s1s.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/72/715d15-2810-4827-8dbd-0bee06126b1a/1/rfSRSIp82ESKQglFhxwLmWctxm4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
31.56.0.0-31.56.111.255
31.56.116.0/24
31.58.236.0-31.58.255.255
31.59.12.0/22
85.15.48.0/23
94.182.0.0/15
151.240.80.0/21
151.240.168.0/22
151.240.192.0/21
151.240.240.0/21
151.241.224.0/21
151.242.0.0/21
151.247.214.0-151.247.241.255
151.247.248.0/22
Signature Algorithm: sha256WithRSAEncryption
48:65:1d:3c:a2:c6:a4:c6:1b:b8:a7:67:4d:e8:75:ff:b8:7e:
c4:32:aa:bf:ee:cd:1a:ac:33:6e:ac:58:90:82:50:cc:a7:4a:
22:5e:6b:2d:33:38:a3:d3:65:c8:d1:62:37:5e:e4:8f:3b:38:
01:fd:23:d5:db:78:70:b9:2e:a0:16:28:bf:36:56:4f:e2:5a:
3c:59:42:60:8c:5c:55:e5:61:23:0a:8c:96:dd:4d:2a:7a:7a:
14:d4:b3:d2:ce:72:e2:64:3b:ea:b0:64:b0:22:05:7c:b2:1a:
ae:03:d0:f1:24:45:2a:23:28:b4:4f:8e:b1:35:73:63:06:11:
48:44:9d:b5:cd:f9:1c:54:cf:80:ed:17:bf:f6:1c:25:14:fd:
c4:ce:6b:d8:98:71:de:52:71:d7:50:3e:f5:f1:67:2e:c7:83:
10:5e:a7:97:63:b5:b4:7d:4a:5e:32:df:9c:a9:86:74:77:dd:
43:0c:61:00:b4:12:6d:b0:a9:01:39:1d:25:69:50:68:c3:16:
f6:07:4c:c3:27:03:84:d3:88:f1:60:9f:d2:c6:10:9b:79:2c:
4c:0c:66:92:d3:a1:02:54:f0:bd:9e:81:a5:d9:ec:29:62:7d:
31:1a:93:15:1c:51:da:c0:23:8f:d5:e0:70:b8:0b:c9:87:3a:
79:b6:fb:86
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat May 10 23:21:20 2025 by rpki-client