Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a8/c61092-734a-4eef-9d67-4905243bc828/1/YSC-WWVjOkNjNlagFarnsLw37sU.roa
File: YSC-WWVjOkNjNlagFarnsLw37sU.roa (raw, json)
Hash identifier: zDsNzvdeywa8U8M9ChUgLDYbnBvQ9uBmaqxrnGF7PNs=
Subject key identifier: 61:20:BE:59:65:63:3A:43:63:36:56:A0:15:AA:E7:B0:BC:37:EE:C5
Certificate issuer: /CN=05b1d13c2e26e12786246a5ec4c5bea69864b20f
Certificate serial: 0186F5276CDB1648A7758C953C1BD6490481
Authority key identifier: 05:B1:D1:3C:2E:26:E1:27:86:24:6A:5E:C4:C5:BE:A6:98:64:B2:0F
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/BbHRPC4m4SeGJGpexMW-pphksg8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/a8/c61092-734a-4eef-9d67-4905243bc828/1/YSC-WWVjOkNjNlagFarnsLw37sU.roa
Signing time: Sat 18 Mar 2023 14:37:27 +0000
ROA not before: Sat 18 Mar 2023 14:37:27 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 41789
IP address blocks: 31.129.17.0/24 maxlen: 24
31.129.16.0/24 maxlen: 24
31.129.18.0/24 maxlen: 24
31.129.20.0/24 maxlen: 24
31.129.19.0/24 maxlen: 24
31.129.24.0/24 maxlen: 24
31.129.23.0/24 maxlen: 24
31.129.29.0/24 maxlen: 24
31.129.28.0/24 maxlen: 24
31.129.27.0/24 maxlen: 24
31.129.26.0/24 maxlen: 24
31.129.31.0/24 maxlen: 24
31.129.25.0/24 maxlen: 24
141.98.233.0/24 maxlen: 24
141.98.234.0/24 maxlen: 24
46.16.12.0/24 maxlen: 24
46.16.15.0/24 maxlen: 24
46.16.14.0/24 maxlen: 24
31.129.0.0/20 maxlen: 24
45.95.235.0/24 maxlen: 24
45.80.129.0/24 maxlen: 24
45.80.130.0/23 maxlen: 23
37.220.80.0/22 maxlen: 22
185.166.196.0/23 maxlen: 24
94.198.216.0/22 maxlen: 24
94.198.220.0/23 maxlen: 24
81.200.144.0/21 maxlen: 24
81.200.152.0/22 maxlen: 24
81.200.156.0/23 maxlen: 24
46.19.64.0/22 maxlen: 24
109.236.58.0/24 maxlen: 24
Validation: Failed, RFC 3779 resource not subset of parent's resources
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:86:f5:27:6c:db:16:48:a7:75:8c:95:3c:1b:d6:49:04:81
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=05b1d13c2e26e12786246a5ec4c5bea69864b20f
Validity
Not Before: Mar 18 14:37:27 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=6120be5965633a43633656a015aae7b0bc37eec5
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:95:cb:56:e5:ba:75:3d:cb:53:21:cc:ff:04:80:
bb:52:3a:5c:c6:1c:11:90:21:ae:ed:b0:18:3a:47:
f8:ff:08:32:4e:1a:00:f6:a0:9e:2d:58:93:69:90:
81:94:1c:ff:91:f0:33:60:09:56:50:e3:73:8e:47:
0a:e9:b2:b1:35:69:d9:0e:e4:95:39:a7:75:0c:fe:
fe:21:cb:fe:e7:e9:3a:18:b4:63:88:11:fa:5d:2c:
93:19:ce:1f:32:09:fc:1c:3d:8e:80:e0:9d:94:cd:
07:7b:b4:6e:df:ba:29:11:e4:7d:ce:27:56:c2:7d:
bd:5e:70:fb:cc:60:55:27:2b:f0:6b:99:b6:f7:99:
26:d3:1a:72:b9:3c:02:cb:91:ea:a1:cb:af:e9:2e:
68:e9:55:85:e1:f1:f0:49:88:2b:7c:a7:9e:dd:2e:
aa:12:a0:e6:d1:5c:f1:21:0a:e8:e4:e0:07:ba:ff:
37:44:c4:23:82:ca:2b:53:17:04:25:17:ac:1c:d5:
13:f7:e9:bb:d7:d7:2a:5a:c3:ad:44:d6:1b:03:8b:
98:42:fb:7a:6d:0f:87:0d:ba:12:8d:20:ab:79:30:
56:bb:6e:e7:ee:8f:b4:63:d4:5c:d0:41:90:72:8f:
b7:5f:72:58:c4:f9:9d:cd:8d:53:d8:9c:81:e6:df:
21:09
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
61:20:BE:59:65:63:3A:43:63:36:56:A0:15:AA:E7:B0:BC:37:EE:C5
X509v3 Authority Key Identifier:
keyid:05:B1:D1:3C:2E:26:E1:27:86:24:6A:5E:C4:C5:BE:A6:98:64:B2:0F
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/BbHRPC4m4SeGJGpexMW-pphksg8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a8/c61092-734a-4eef-9d67-4905243bc828/1/YSC-WWVjOkNjNlagFarnsLw37sU.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/a8/c61092-734a-4eef-9d67-4905243bc828/1/BbHRPC4m4SeGJGpexMW-pphksg8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
31.129.0.0-31.129.20.255
31.129.23.0-31.129.29.255
31.129.31.0/24
37.220.80.0/22
45.80.129.0-45.80.131.255
45.95.235.0/24
46.16.12.0/24
46.16.14.0/23
46.19.64.0/22
81.200.144.0-81.200.157.255
94.198.216.0-94.198.221.255
109.236.58.0/24
141.98.233.0-141.98.234.255
185.166.196.0/23
Signature Algorithm: sha256WithRSAEncryption
3d:37:04:74:a0:58:13:bc:00:28:66:8f:61:a8:91:d1:bc:30:
de:89:3e:ec:4f:70:1e:2e:6e:b1:18:26:a3:f6:3c:ef:9a:d9:
9d:60:76:f3:bd:16:b5:24:75:22:b6:24:e5:f7:29:fa:bd:f2:
af:9c:2d:22:44:a7:a4:7e:0c:34:5b:73:19:ca:a7:73:8a:46:
3c:80:f1:db:80:6c:a2:f4:99:e7:a3:cb:b6:86:57:d1:f9:7c:
cc:2d:a3:4e:f8:00:17:ce:41:61:2c:10:0c:5b:d3:a1:8b:5e:
40:5b:f0:53:6a:f7:42:7d:09:96:ea:5c:db:85:a2:d8:c8:55:
05:9c:fe:58:d4:e8:dd:0c:1a:bd:86:05:d2:48:8e:c8:77:53:
f5:8d:e6:0a:24:9c:c5:96:f6:0d:c2:95:fe:f1:54:3f:27:65:
e4:d8:57:3a:97:07:fb:00:18:42:15:c9:95:bb:11:f9:d0:c3:
cf:59:36:43:48:4e:1d:45:70:0f:73:10:16:c6:25:bf:ba:65:
9a:ee:29:ba:d0:e6:a3:4e:b7:00:a1:21:18:7b:f8:c9:21:d6:
01:91:ab:38:10:0f:ed:4b:d1:a8:2a:b4:88:ed:64:71:d5:50:
45:41:f5:c3:9b:fe:e5:3d:5c:5b:4d:a5:b9:1b:08:73:9d:ab:
97:14:ce:9a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 28 07:20:10 2025 by rpki-client