Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/72/715d15-2810-4827-8dbd-0bee06126b1a/1/1EEmd2Xz-6KjbGmc4Br-hvMM0U0.roa
File: 1EEmd2Xz-6KjbGmc4Br-hvMM0U0.roa (raw, json)
Hash identifier: UwAc8mSYPaVbElTcUiKIjP5hFiSpdF3ohD/1bUViFt0=
Subject key identifier: D4:41:26:77:65:F3:FB:A2:A3:6C:69:9C:E0:1A:FE:86:F3:0C:D1:4D
Certificate issuer: /CN=adf491488a7cd8448a420945871c0b99672dc66e
Certificate serial: 018FE81D563022D36491C835A7B0C3DD6555
Authority key identifier: AD:F4:91:48:8A:7C:D8:44:8A:42:09:45:87:1C:0B:99:67:2D:C6:6E
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/rfSRSIp82ESKQglFhxwLmWctxm4.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/72/715d15-2810-4827-8dbd-0bee06126b1a/1/1EEmd2Xz-6KjbGmc4Br-hvMM0U0.roa
Signing time: Wed 05 Jun 2024 11:16:27 +0000
ROA not before: Wed 05 Jun 2024 11:16:27 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 58224
IP address blocks: 37.148.0.0/22 maxlen: 22
37.148.4.0/22 maxlen: 22
37.148.8.0/22 maxlen: 22
37.148.12.0/22 maxlen: 22
37.148.16.0/22 maxlen: 22
37.148.20.0/22 maxlen: 22
37.148.24.0/22 maxlen: 22
37.148.28.0/22 maxlen: 22
37.148.32.0/22 maxlen: 22
37.148.36.0/22 maxlen: 22
37.148.40.0/22 maxlen: 22
37.148.44.0/22 maxlen: 22
37.148.48.0/22 maxlen: 22
37.148.52.0/22 maxlen: 22
37.148.56.0/22 maxlen: 22
37.148.60.0/22 maxlen: 22
37.148.64.0/22 maxlen: 22
37.148.68.0/22 maxlen: 22
37.148.72.0/22 maxlen: 22
37.148.76.0/22 maxlen: 22
37.148.80.0/22 maxlen: 22
37.148.84.0/22 maxlen: 22
37.148.90.0/23 maxlen: 23
37.148.100.0/22 maxlen: 22
37.148.104.0/22 maxlen: 22
37.148.110.0/24 maxlen: 24
37.148.111.0/24 maxlen: 24
37.148.112.0/24 maxlen: 24
37.148.113.0/24 maxlen: 24
37.148.114.0/24 maxlen: 24
37.148.115.0/24 maxlen: 24
37.148.116.0/24 maxlen: 24
37.148.117.0/24 maxlen: 24
37.148.118.0/24 maxlen: 24
37.148.119.0/24 maxlen: 24
37.148.124.0/22 maxlen: 22
37.202.128.0/22 maxlen: 22
37.202.132.0/22 maxlen: 22
37.202.136.0/22 maxlen: 22
37.202.140.0/22 maxlen: 22
37.202.144.0/22 maxlen: 22
37.202.148.0/22 maxlen: 22
37.202.152.0/22 maxlen: 22
37.202.156.0/22 maxlen: 22
37.202.160.0/22 maxlen: 22
37.202.164.0/22 maxlen: 22
37.202.188.0/22 maxlen: 22
37.202.192.0/22 maxlen: 22
37.202.196.0/22 maxlen: 22
37.202.200.0/22 maxlen: 22
37.202.232.0/22 maxlen: 22
37.202.236.0/22 maxlen: 22
37.202.240.0/22 maxlen: 22
37.202.244.0/22 maxlen: 22
37.202.248.0/22 maxlen: 22
37.202.252.0/22 maxlen: 22
94.182.10.0/24 maxlen: 24
94.182.204.0/24 maxlen: 24
94.182.205.0/24 maxlen: 24
94.182.206.0/24 maxlen: 24
94.182.207.0/24 maxlen: 24
151.243.124.0/23 maxlen: 23
151.243.128.0/18 maxlen: 18
151.243.192.0/23 maxlen: 23
151.243.200.0/23 maxlen: 23
151.243.202.0/23 maxlen: 23
151.243.214.0/23 maxlen: 23
151.243.220.0/23 maxlen: 23
151.243.222.0/23 maxlen: 23
151.243.224.0/22 maxlen: 22
151.243.228.0/22 maxlen: 22
151.243.232.0/22 maxlen: 22
151.243.236.0/22 maxlen: 22
151.243.240.0/23 maxlen: 23
151.243.242.0/23 maxlen: 23
151.243.244.0/23 maxlen: 23
151.243.246.0/24 maxlen: 24
151.243.248.0/23 maxlen: 23
151.243.250.0/23 maxlen: 23
151.244.16.0/22 maxlen: 22
151.244.20.0/22 maxlen: 22
151.244.24.0/22 maxlen: 22
151.244.28.0/22 maxlen: 22
151.245.0.0/22 maxlen: 22
151.245.4.0/22 maxlen: 22
151.245.8.0/22 maxlen: 22
151.245.12.0/22 maxlen: 22
151.245.16.0/22 maxlen: 22
151.245.20.0/22 maxlen: 22
151.245.24.0/22 maxlen: 22
151.245.28.0/22 maxlen: 22
151.245.32.0/22 maxlen: 22
151.245.36.0/22 maxlen: 22
151.245.40.0/22 maxlen: 22
151.245.44.0/22 maxlen: 22
151.245.48.0/22 maxlen: 22
151.245.52.0/22 maxlen: 22
151.245.56.0/22 maxlen: 22
151.245.60.0/22 maxlen: 22
151.245.64.0/22 maxlen: 22
151.245.68.0/22 maxlen: 22
151.245.72.0/22 maxlen: 22
151.245.76.0/22 maxlen: 22
151.245.80.0/22 maxlen: 22
151.245.84.0/22 maxlen: 22
151.245.88.0/22 maxlen: 22
151.245.92.0/22 maxlen: 22
151.245.96.0/22 maxlen: 22
151.245.100.0/22 maxlen: 22
151.245.104.0/22 maxlen: 22
151.245.108.0/22 maxlen: 22
151.245.112.0/22 maxlen: 22
151.245.116.0/22 maxlen: 22
151.245.120.0/22 maxlen: 22
151.245.124.0/22 maxlen: 22
151.245.128.0/22 maxlen: 22
151.245.132.0/22 maxlen: 22
151.245.136.0/22 maxlen: 22
151.245.140.0/22 maxlen: 22
151.245.144.0/22 maxlen: 22
151.245.148.0/22 maxlen: 22
151.245.152.0/22 maxlen: 22
151.245.156.0/22 maxlen: 22
151.245.160.0/22 maxlen: 22
151.245.164.0/22 maxlen: 22
151.245.168.0/22 maxlen: 22
151.245.172.0/22 maxlen: 22
151.245.176.0/22 maxlen: 22
151.245.180.0/22 maxlen: 22
151.245.184.0/22 maxlen: 22
151.245.188.0/22 maxlen: 22
151.245.192.0/22 maxlen: 22
151.245.196.0/22 maxlen: 22
151.245.200.0/22 maxlen: 22
151.245.204.0/22 maxlen: 22
151.245.208.0/21 maxlen: 21
151.245.216.0/21 maxlen: 21
151.245.220.0/22 maxlen: 22
151.245.224.0/22 maxlen: 22
151.245.228.0/22 maxlen: 22
151.245.232.0/22 maxlen: 22
151.245.236.0/22 maxlen: 22
151.245.240.0/22 maxlen: 22
151.245.244.0/22 maxlen: 22
151.245.248.0/22 maxlen: 22
151.245.252.0/22 maxlen: 22
151.247.22.0/24 maxlen: 24
151.247.23.0/24 maxlen: 24
151.247.24.0/22 maxlen: 22
151.247.28.0/22 maxlen: 22
151.247.32.0/22 maxlen: 22
151.247.36.0/22 maxlen: 22
151.247.40.0/22 maxlen: 22
151.247.44.0/22 maxlen: 22
151.247.48.0/22 maxlen: 22
151.247.52.0/22 maxlen: 22
151.247.56.0/22 maxlen: 22
151.247.60.0/22 maxlen: 22
151.247.64.0/23 maxlen: 23
151.247.66.0/23 maxlen: 23
151.247.68.0/23 maxlen: 23
151.247.70.0/23 maxlen: 23
151.247.72.0/22 maxlen: 22
151.247.76.0/23 maxlen: 23
151.247.78.0/23 maxlen: 23
151.247.80.0/23 maxlen: 23
151.247.82.0/23 maxlen: 23
151.247.84.0/23 maxlen: 23
151.247.86.0/23 maxlen: 23
151.247.88.0/22 maxlen: 22
151.247.92.0/22 maxlen: 22
151.247.96.0/22 maxlen: 22
151.247.100.0/22 maxlen: 22
151.247.112.0/22 maxlen: 22
151.247.116.0/22 maxlen: 22
151.247.120.0/22 maxlen: 22
151.247.124.0/22 maxlen: 22
151.247.128.0/22 maxlen: 22
151.247.132.0/22 maxlen: 22
151.247.136.0/22 maxlen: 22
151.247.140.0/22 maxlen: 22
151.247.144.0/22 maxlen: 22
151.247.148.0/22 maxlen: 22
151.247.148.0/23 maxlen: 23
151.247.150.0/23 maxlen: 23
151.247.152.0/22 maxlen: 22
151.247.156.0/22 maxlen: 22
151.247.160.0/22 maxlen: 22
151.247.164.0/22 maxlen: 22
151.247.168.0/22 maxlen: 22
151.247.172.0/22 maxlen: 22
151.247.184.0/22 maxlen: 22
151.247.188.0/22 maxlen: 22
151.247.192.0/22 maxlen: 22
151.247.196.0/22 maxlen: 22
151.247.200.0/22 maxlen: 22
151.247.204.0/22 maxlen: 22
151.247.208.0/22 maxlen: 22
151.247.243.0/24 maxlen: 24
151.247.252.0/22 maxlen: 22
217.60.0.0/22 maxlen: 22
217.60.84.0/24 maxlen: 24
217.60.85.0/24 maxlen: 24
217.60.86.0/24 maxlen: 24
217.60.87.0/24 maxlen: 24
217.60.88.0/24 maxlen: 24
217.60.89.0/24 maxlen: 24
217.60.90.0/24 maxlen: 24
217.60.91.0/24 maxlen: 24
217.60.207.0/24 maxlen: 24
Validation: Failed, RFC 3779 resource not subset of parent's resources
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8f:e8:1d:56:30:22:d3:64:91:c8:35:a7:b0:c3:dd:65:55
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=adf491488a7cd8448a420945871c0b99672dc66e
Validity
Not Before: Jun 5 11:16:27 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=d441267765f3fba2a36c699ce01afe86f30cd14d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c9:48:04:ea:7e:56:53:9a:63:25:f3:0f:f7:bd:
66:2e:f6:5e:9c:8c:14:71:f9:09:fe:cc:0a:d9:37:
8e:a4:fc:e6:30:c4:92:aa:c4:47:d5:49:cb:a2:2a:
6a:7c:72:9c:71:67:c7:dd:fd:f0:1c:5a:47:bb:dd:
9a:69:7e:98:84:22:c2:15:e5:a2:84:45:83:25:b5:
ea:e4:af:8b:c4:ec:81:06:33:de:41:ee:4a:f2:06:
e5:1c:04:ea:fb:c0:32:85:99:f4:56:9a:a0:68:2d:
71:c1:5b:41:eb:f8:59:34:03:47:92:46:72:9f:59:
b3:11:d8:9a:8a:68:68:f6:f7:95:e5:7e:06:bd:c9:
bb:62:d4:70:3e:b6:30:ad:9c:1c:0e:4a:4c:91:30:
a9:79:95:0a:28:79:2a:5e:87:78:06:07:83:54:34:
35:98:f9:9e:2b:df:76:e6:8b:61:24:42:e1:d9:9f:
a4:15:d7:bf:85:3e:a6:5f:94:09:95:b8:b2:c0:39:
d2:33:ce:34:bd:35:37:fc:fe:52:60:1c:35:a9:7b:
c1:3e:92:e3:bd:e8:c9:54:0d:93:4a:84:e7:d3:98:
bb:7e:a6:f4:53:f2:7b:19:88:81:f7:db:0a:2b:73:
3f:37:3c:7c:e9:6b:9d:ac:18:84:9a:49:40:13:da:
82:bf
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D4:41:26:77:65:F3:FB:A2:A3:6C:69:9C:E0:1A:FE:86:F3:0C:D1:4D
X509v3 Authority Key Identifier:
keyid:AD:F4:91:48:8A:7C:D8:44:8A:42:09:45:87:1C:0B:99:67:2D:C6:6E
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/rfSRSIp82ESKQglFhxwLmWctxm4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/72/715d15-2810-4827-8dbd-0bee06126b1a/1/1EEmd2Xz-6KjbGmc4Br-hvMM0U0.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/72/715d15-2810-4827-8dbd-0bee06126b1a/1/rfSRSIp82ESKQglFhxwLmWctxm4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
37.148.0.0-37.148.87.255
37.148.90.0/23
37.148.100.0-37.148.107.255
37.148.110.0-37.148.119.255
37.148.124.0/22
37.202.128.0-37.202.167.255
37.202.188.0-37.202.203.255
37.202.232.0-37.202.255.255
94.182.10.0/24
94.182.204.0/22
151.243.124.0/23
151.243.128.0-151.243.193.255
151.243.200.0/22
151.243.214.0/23
151.243.220.0-151.243.246.255
151.243.248.0/22
151.244.16.0/20
151.245.0.0/16
151.247.22.0-151.247.103.255
151.247.112.0-151.247.175.255
151.247.184.0-151.247.211.255
151.247.243.0/24
151.247.252.0/22
217.60.0.0/22
217.60.84.0-217.60.91.255
217.60.207.0/24
Signature Algorithm: sha256WithRSAEncryption
20:92:7a:56:fb:8a:59:e6:e3:6b:0a:3e:af:29:c5:c4:93:89:
c4:d0:63:48:42:37:6a:cf:95:5e:16:ab:0e:d1:8f:1e:d0:b3:
5d:93:e3:59:17:93:6f:d9:5d:aa:f3:c6:60:d2:29:cc:70:7e:
84:52:d4:22:b8:68:de:a7:cb:54:6f:92:2a:37:28:1e:82:8b:
70:13:35:ae:d8:e9:bc:e1:0d:82:91:f8:7b:3b:74:81:ed:ee:
c0:ff:73:16:b7:a5:36:3a:da:b3:8e:c3:53:8d:a1:af:5a:1a:
ff:15:24:59:0a:a4:e0:2f:2e:e8:cd:ed:a3:98:e1:a0:17:37:
62:eb:d6:f2:80:0e:f1:a9:39:de:f5:7d:1a:51:fe:c8:da:43:
66:d4:05:4f:6d:4b:ec:aa:e5:07:f5:5f:f5:c2:df:48:64:0c:
66:a1:e8:9f:4f:db:10:b9:a0:50:04:0c:fa:b4:4c:92:0a:50:
7d:41:e9:72:0e:b3:eb:89:5b:4f:59:72:9d:41:89:5c:17:a1:
2e:e0:20:2d:17:c4:51:0c:f2:4d:cc:e5:14:9f:9b:00:6a:1e:
86:9c:29:a1:ac:c9:14:89:2c:63:aa:96:c5:17:77:97:f2:8d:
a6:60:26:60:dd:99:2e:88:3d:16:f7:f3:ec:5f:8f:0d:47:5b:
81:79:12:63
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Mar 14 12:07:02 2025 by rpki-client