Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/72/715d15-2810-4827-8dbd-0bee06126b1a/1/_cQDfe6XEVCnd9hmWkThH2vqBjc.roa
File: _cQDfe6XEVCnd9hmWkThH2vqBjc.roa (raw, json)
Hash identifier: Er/e0knSsml+/WYfk05/k6whjygmgGiIPGxW1XfNjjc=
Subject key identifier: FD:C4:03:7D:EE:97:11:50:A7:77:D8:66:5A:44:E1:1F:6B:EA:06:37
Certificate issuer: /CN=adf491488a7cd8448a420945871c0b99672dc66e
Certificate serial: 0197C61F316C456F67C175E11F279E3FD133
Authority key identifier: AD:F4:91:48:8A:7C:D8:44:8A:42:09:45:87:1C:0B:99:67:2D:C6:6E
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/rfSRSIp82ESKQglFhxwLmWctxm4.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/72/715d15-2810-4827-8dbd-0bee06126b1a/1/_cQDfe6XEVCnd9hmWkThH2vqBjc.roa
Signing time: Tue 01 Jul 2025 13:13:42 +0000
ROA not before: Tue 01 Jul 2025 13:13:42 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 31549
IP address blocks: 37.148.0.0/17 maxlen: 24
37.148.0.0/18 maxlen: 18
37.148.0.0/22 maxlen: 22
37.148.4.0/22 maxlen: 22
37.148.8.0/22 maxlen: 22
37.148.12.0/22 maxlen: 22
37.148.16.0/22 maxlen: 22
37.148.20.0/22 maxlen: 22
37.148.24.0/22 maxlen: 22
37.148.28.0/22 maxlen: 22
37.148.32.0/22 maxlen: 22
37.148.36.0/22 maxlen: 22
37.148.40.0/22 maxlen: 22
37.148.44.0/22 maxlen: 22
37.148.48.0/22 maxlen: 22
37.148.52.0/22 maxlen: 22
37.148.56.0/22 maxlen: 22
37.148.60.0/22 maxlen: 22
37.148.64.0/18 maxlen: 18
37.148.64.0/22 maxlen: 22
37.148.68.0/22 maxlen: 22
37.148.72.0/22 maxlen: 22
37.148.76.0/22 maxlen: 22
37.148.78.0/24 maxlen: 24
37.148.80.0/22 maxlen: 22
37.148.84.0/22 maxlen: 22
37.148.90.0/23 maxlen: 23
37.148.100.0/22 maxlen: 22
37.148.104.0/22 maxlen: 22
37.148.110.0/24 maxlen: 24
37.148.111.0/24 maxlen: 24
37.148.112.0/24 maxlen: 24
37.148.113.0/24 maxlen: 24
37.148.114.0/24 maxlen: 24
37.148.115.0/24 maxlen: 24
37.148.116.0/24 maxlen: 24
37.148.117.0/24 maxlen: 24
37.148.118.0/24 maxlen: 24
37.148.119.0/24 maxlen: 24
37.148.124.0/22 maxlen: 22
37.202.128.0/18 maxlen: 24
37.202.136.0/24 maxlen: 24
37.202.224.0/22 maxlen: 24
37.202.228.0/22 maxlen: 24
37.202.228.0/24 maxlen: 24
37.202.229.0/24 maxlen: 24
37.202.230.0/24 maxlen: 24
37.202.231.0/24 maxlen: 24
37.202.232.0/22 maxlen: 22
37.202.232.0/24 maxlen: 24
37.202.233.0/24 maxlen: 24
37.202.234.0/24 maxlen: 24
37.202.235.0/24 maxlen: 24
37.202.236.0/22 maxlen: 24
37.202.240.0/23 maxlen: 24
37.202.242.0/24 maxlen: 24
37.202.243.0/24 maxlen: 24
84.241.0.0/18 maxlen: 24
84.241.0.0/20 maxlen: 20
84.241.4.0/24 maxlen: 24
84.241.16.0/20 maxlen: 20
84.241.23.0/24 maxlen: 24
84.241.32.0/20 maxlen: 20
84.241.34.0/24 maxlen: 24
84.241.48.0/20 maxlen: 20
84.241.48.0/24 maxlen: 24
85.15.0.0/18 maxlen: 24
85.15.0.0/20 maxlen: 24
85.15.1.0/24 maxlen: 24
85.15.5.0/24 maxlen: 24
85.15.6.0/24 maxlen: 24
85.15.7.0/24 maxlen: 24
85.15.11.0/24 maxlen: 24
85.15.12.0/24 maxlen: 24
85.15.16.0/20 maxlen: 24
85.15.25.0/24 maxlen: 24
85.15.32.0/20 maxlen: 20
85.15.48.0/20 maxlen: 20
85.15.48.0/24 maxlen: 24
85.15.49.0/24 maxlen: 24
94.182.0.0/16 maxlen: 24
94.182.0.0/20 maxlen: 20
94.182.8.0/23 maxlen: 23
94.182.11.0/24 maxlen: 24
94.182.12.0/23 maxlen: 23
94.182.14.0/24 maxlen: 24
94.182.16.0/20 maxlen: 20
94.182.17.0/24 maxlen: 24
94.182.28.0/22 maxlen: 22
94.182.28.0/23 maxlen: 23
94.182.28.0/24 maxlen: 24
94.182.32.0/20 maxlen: 20
94.182.42.0/24 maxlen: 24
94.182.43.0/24 maxlen: 24
94.182.46.0/24 maxlen: 24
94.182.48.0/20 maxlen: 20
94.182.56.0/22 maxlen: 22
94.182.64.0/24 maxlen: 24
94.182.65.0/24 maxlen: 24
94.182.66.0/24 maxlen: 24
94.182.67.0/24 maxlen: 24
94.182.68.0/24 maxlen: 24
94.182.69.0/24 maxlen: 24
94.182.70.0/24 maxlen: 24
94.182.71.0/24 maxlen: 24
94.182.80.0/20 maxlen: 20
94.182.82.0/24 maxlen: 24
94.182.85.0/24 maxlen: 24
94.182.88.0/22 maxlen: 24
94.182.93.0/24 maxlen: 24
94.182.96.0/24 maxlen: 24
94.182.98.0/24 maxlen: 24
94.182.99.0/24 maxlen: 24
94.182.100.0/24 maxlen: 24
94.182.101.0/24 maxlen: 24
94.182.104.0/22 maxlen: 24
94.182.108.0/24 maxlen: 24
94.182.110.0/23 maxlen: 23
94.182.112.0/20 maxlen: 20
94.182.112.0/23 maxlen: 23
94.182.128.0/19 maxlen: 19
94.182.128.0/20 maxlen: 20
94.182.128.0/24 maxlen: 24
94.182.129.0/24 maxlen: 24
94.182.130.0/23 maxlen: 23
94.182.130.0/24 maxlen: 24
94.182.131.0/24 maxlen: 24
94.182.132.0/24 maxlen: 24
94.182.133.0/24 maxlen: 24
94.182.134.0/24 maxlen: 24
94.182.136.0/24 maxlen: 24
94.182.137.0/24 maxlen: 24
94.182.138.0/23 maxlen: 24
94.182.139.0/24 maxlen: 24
94.182.141.0/24 maxlen: 24
94.182.143.0/24 maxlen: 24
94.182.144.0/20 maxlen: 20
94.182.145.0/24 maxlen: 24
94.182.146.0/23 maxlen: 24
94.182.146.0/24 maxlen: 24
94.182.147.0/24 maxlen: 24
94.182.148.0/24 maxlen: 24
94.182.149.0/24 maxlen: 24
94.182.150.0/24 maxlen: 24
94.182.151.0/24 maxlen: 24
94.182.152.0/24 maxlen: 24
94.182.153.0/24 maxlen: 24
94.182.154.0/24 maxlen: 24
94.182.155.0/24 maxlen: 24
94.182.157.0/24 maxlen: 24
94.182.159.0/24 maxlen: 24
94.182.160.0/19 maxlen: 19
94.182.160.0/20 maxlen: 20
94.182.162.0/23 maxlen: 23
94.182.163.0/24 maxlen: 24
94.182.164.0/24 maxlen: 24
94.182.168.0/24 maxlen: 24
94.182.169.0/24 maxlen: 24
94.182.172.0/24 maxlen: 24
94.182.174.0/24 maxlen: 24
94.182.176.0/20 maxlen: 20
94.182.176.0/23 maxlen: 24
94.182.176.0/24 maxlen: 24
94.182.177.0/24 maxlen: 24
94.182.178.0/23 maxlen: 23
94.182.180.0/23 maxlen: 23
94.182.182.0/23 maxlen: 23
94.182.182.0/24 maxlen: 24
94.182.183.0/24 maxlen: 24
94.182.184.0/22 maxlen: 22
94.182.184.0/23 maxlen: 23
94.182.184.0/24 maxlen: 24
94.182.186.0/23 maxlen: 23
94.182.188.0/23 maxlen: 23
94.182.188.0/24 maxlen: 24
94.182.189.0/24 maxlen: 24
94.182.190.0/24 maxlen: 24
94.182.191.0/24 maxlen: 24
94.182.192.0/19 maxlen: 19
94.182.192.0/24 maxlen: 24
94.182.193.0/24 maxlen: 24
94.182.196.0/24 maxlen: 24
94.182.197.0/24 maxlen: 24
94.182.199.0/24 maxlen: 24
94.182.204.0/22 maxlen: 22
94.182.208.0/20 maxlen: 20
94.182.208.0/24 maxlen: 24
94.182.213.0/24 maxlen: 24
94.182.222.0/23 maxlen: 23
94.182.222.0/24 maxlen: 24
94.182.224.0/20 maxlen: 20
94.182.226.0/24 maxlen: 24
94.182.228.0/22 maxlen: 22
94.182.238.0/24 maxlen: 24
94.182.239.0/24 maxlen: 24
94.182.240.0/20 maxlen: 20
94.182.240.0/23 maxlen: 23
94.182.244.0/22 maxlen: 22
94.182.248.0/22 maxlen: 22
94.182.252.0/24 maxlen: 24
94.182.254.0/24 maxlen: 24
94.183.0.0/17 maxlen: 24
94.183.0.0/20 maxlen: 20
94.183.16.0/20 maxlen: 20
94.183.22.0/23 maxlen: 23
94.183.24.0/24 maxlen: 24
94.183.32.0/21 maxlen: 21
94.183.40.0/21 maxlen: 21
94.183.48.0/20 maxlen: 20
94.183.58.0/24 maxlen: 24
94.183.58.1/32 maxlen: 32
94.183.62.0/24 maxlen: 24
94.183.64.0/20 maxlen: 20
94.183.77.0/24 maxlen: 24
94.183.80.0/20 maxlen: 20
94.183.96.0/20 maxlen: 20
94.183.98.0/24 maxlen: 24
94.183.112.0/20 maxlen: 20
94.183.128.0/20 maxlen: 24
94.183.128.0/21 maxlen: 21
94.183.136.0/21 maxlen: 21
94.183.144.0/20 maxlen: 20
94.183.144.0/22 maxlen: 24
94.183.148.0/24 maxlen: 24
151.238.0.0/15 maxlen: 24
151.238.0.0/18 maxlen: 24
151.239.128.0/17 maxlen: 24
151.239.128.0/18 maxlen: 24
151.239.128.0/19 maxlen: 24
151.239.160.0/19 maxlen: 24
151.239.192.0/18 maxlen: 24
151.239.192.0/19 maxlen: 24
151.239.224.0/19 maxlen: 24
185.73.0.0/22 maxlen: 24
185.73.0.0/23 maxlen: 23
185.73.0.0/24 maxlen: 24
185.73.1.0/24 maxlen: 24
185.73.2.0/23 maxlen: 23
185.73.2.0/24 maxlen: 24
185.73.3.0/24 maxlen: 24
2a0e::/26 maxlen: 26
2a0e:0:1::/48 maxlen: 48
2a0e:0:1::/52 maxlen: 52
2a0e:0:1:1000::/52 maxlen: 52
2a0e:0:1:2000::/52 maxlen: 52
2a0e:0:1:3000::/52 maxlen: 52
2a0e:0:2::/47 maxlen: 47
2a0e:0:4::/46 maxlen: 46
2a0e:0:40::/42 maxlen: 42
2a0e:0:80::/41 maxlen: 41
2a0e:0:100::/41 maxlen: 41
2a0e:0:180::/43 maxlen: 43
2a0e:0:1a0::/43 maxlen: 43
2a0e:4::/30 maxlen: 30
Validation: Failed, RFC 3779 resource not subset of parent's resources
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:c6:1f:31:6c:45:6f:67:c1:75:e1:1f:27:9e:3f:d1:33
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=adf491488a7cd8448a420945871c0b99672dc66e
Validity
Not Before: Jul 1 13:13:42 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=fdc4037dee971150a777d8665a44e11f6bea0637
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:97:66:d1:35:a2:9e:03:66:a1:54:2a:e5:29:dc:
99:39:64:94:ad:f4:5e:d0:ba:d5:5e:76:30:f5:ab:
6e:c9:71:24:82:8a:fb:b3:a4:01:fc:8a:a0:79:2d:
00:a2:8a:2f:eb:66:9f:f2:78:f6:d5:06:23:39:37:
b0:3a:d3:33:1d:0c:6a:ac:2f:ad:5c:a0:fd:32:aa:
77:19:a8:c8:ce:6f:ee:70:92:2e:11:58:d5:5f:dd:
c8:a9:5a:52:4c:8a:05:ec:c4:3b:c5:07:1e:f6:89:
b0:95:fb:e5:e6:6d:d0:98:e1:cc:1e:18:f9:c5:20:
d4:1e:ae:af:80:ee:5c:d0:2e:68:0b:9d:d4:dd:dc:
e5:3f:e2:c3:24:3e:71:f5:ba:24:34:7c:fe:0c:a1:
88:0c:4b:c3:bf:a8:1b:fe:55:99:d7:3c:50:6d:65:
4a:2d:9a:04:c8:7a:b8:3a:6d:3c:75:63:2a:fa:d1:
9a:40:a8:c3:a4:84:ca:db:ba:36:b7:73:13:e6:62:
2a:11:ef:d7:5f:c4:f7:a3:1f:6c:83:55:cb:86:0f:
a4:75:ad:92:f3:d5:bc:8d:2f:80:c8:4b:38:ac:0a:
13:41:50:ab:7f:72:fb:9b:d3:20:9e:55:eb:13:50:
6e:ec:01:10:08:38:49:6d:8d:5c:e1:67:a8:5a:ee:
b7:91
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
FD:C4:03:7D:EE:97:11:50:A7:77:D8:66:5A:44:E1:1F:6B:EA:06:37
X509v3 Authority Key Identifier:
keyid:AD:F4:91:48:8A:7C:D8:44:8A:42:09:45:87:1C:0B:99:67:2D:C6:6E
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/rfSRSIp82ESKQglFhxwLmWctxm4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/72/715d15-2810-4827-8dbd-0bee06126b1a/1/_cQDfe6XEVCnd9hmWkThH2vqBjc.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/72/715d15-2810-4827-8dbd-0bee06126b1a/1/rfSRSIp82ESKQglFhxwLmWctxm4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
37.148.0.0/17
37.202.128.0/18
37.202.224.0-37.202.243.255
84.241.0.0/18
85.15.0.0/18
94.182.0.0-94.183.159.255
151.238.0.0/15
185.73.0.0/22
IPv6:
2a0e::/26
Signature Algorithm: sha256WithRSAEncryption
2a:5d:4c:f0:93:4e:96:8c:36:b2:80:ba:bb:22:51:72:dc:d1:
b9:27:46:d1:65:5f:f3:a7:6a:c8:5a:b8:75:d9:a8:df:aa:06:
69:03:79:75:bd:4e:28:c0:ba:14:1e:9f:08:61:12:cd:5b:a1:
f3:fb:49:84:82:3c:05:9b:e7:e3:9c:18:aa:30:e3:64:4f:4a:
96:ec:7e:86:b6:4a:f2:ea:24:45:6b:7d:3c:81:a4:21:2b:58:
8a:91:f3:67:b7:fd:0a:d4:17:88:5f:89:40:5f:d9:a2:40:56:
2a:56:36:2e:ad:11:f2:f3:78:2e:20:a0:a7:71:d4:8e:0e:7a:
44:3e:e1:eb:56:fc:48:c1:35:fe:15:56:4a:02:1d:63:1c:8a:
16:82:a6:ec:2d:fb:e3:0f:df:f8:fb:19:7c:52:00:27:26:9c:
aa:c4:53:b0:4a:02:32:14:0d:4d:13:ed:a6:4d:3b:a5:7a:aa:
13:b7:6e:5b:61:46:38:29:6b:23:23:26:f2:f4:8b:e6:b4:98:
8f:10:2d:32:17:2d:c4:ce:c8:7a:0f:70:65:b8:0b:70:5c:59:
e9:11:a5:55:9e:93:e7:80:d5:1e:b7:6e:8a:fd:14:c5:04:53:
1f:8e:82:0f:26:e9:36:5f:de:e3:92:65:02:bb:6d:05:1a:da:
f8:ea:91:31
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jul 25 00:19:15 2025 by rpki-client