Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/72/715d15-2810-4827-8dbd-0bee06126b1a/1/5woCAlxLJT1ZirCnuCXD-g4CQps.roa
File: 5woCAlxLJT1ZirCnuCXD-g4CQps.roa (raw, json)
Hash identifier: xREdEjuD3l5x0Na+TwU+IX/xGFToHYhcPcOTXvLYqR0=
Subject key identifier: E7:0A:02:02:5C:4B:25:3D:59:8A:B0:A7:B8:25:C3:FA:0E:02:42:9B
Certificate issuer: /CN=adf491488a7cd8448a420945871c0b99672dc66e
Certificate serial: 0192C27C92CBBBDB696202C4C2F2C9A9EAC0
Authority key identifier: AD:F4:91:48:8A:7C:D8:44:8A:42:09:45:87:1C:0B:99:67:2D:C6:6E
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/rfSRSIp82ESKQglFhxwLmWctxm4.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/72/715d15-2810-4827-8dbd-0bee06126b1a/1/5woCAlxLJT1ZirCnuCXD-g4CQps.roa
Signing time: Fri 25 Oct 2024 07:03:16 +0000
ROA not before: Fri 25 Oct 2024 07:03:16 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 205647
IP address blocks: 85.15.48.0/24 maxlen: 24
85.15.49.0/24 maxlen: 24
94.182.0.0/18 maxlen: 18
94.182.8.0/23 maxlen: 23
94.182.12.0/23 maxlen: 23
94.182.17.0/24 maxlen: 24
94.182.41.0/24 maxlen: 24
94.182.48.0/24 maxlen: 24
94.182.56.0/22 maxlen: 24
94.182.60.0/22 maxlen: 24
94.182.64.0/18 maxlen: 18
94.182.64.0/20 maxlen: 20
94.182.72.0/21 maxlen: 21
94.182.80.0/20 maxlen: 20
94.182.82.0/24 maxlen: 24
94.182.96.0/20 maxlen: 20
94.182.97.192/28 maxlen: 28
94.182.112.0/20 maxlen: 20
94.182.114.0/23 maxlen: 23
94.182.116.0/22 maxlen: 22
94.182.120.0/21 maxlen: 21
94.182.128.0/18 maxlen: 18
94.182.128.0/20 maxlen: 20
94.182.144.0/20 maxlen: 20
94.182.160.0/20 maxlen: 20
94.182.176.0/20 maxlen: 20
94.182.192.0/18 maxlen: 18
94.182.196.0/24 maxlen: 24
94.182.199.0/24 maxlen: 24
94.182.204.0/22 maxlen: 22
94.182.204.0/24 maxlen: 24
94.182.205.0/24 maxlen: 24
94.182.206.0/24 maxlen: 24
94.182.207.0/24 maxlen: 24
94.182.208.0/24 maxlen: 24
94.182.217.0/24 maxlen: 24
94.182.222.0/23 maxlen: 23
94.182.226.0/24 maxlen: 24
94.182.228.0/22 maxlen: 22
94.182.232.0/23 maxlen: 24
94.182.234.0/23 maxlen: 23
94.182.238.0/24 maxlen: 24
94.182.240.0/23 maxlen: 24
94.182.244.0/22 maxlen: 24
94.182.244.0/23 maxlen: 23
94.182.248.0/22 maxlen: 22
94.182.248.0/23 maxlen: 23
94.182.252.0/24 maxlen: 24
94.182.254.0/24 maxlen: 24
94.183.0.0/18 maxlen: 18
94.183.64.0/18 maxlen: 18
94.183.128.0/18 maxlen: 18
94.183.192.0/18 maxlen: 18
151.240.80.0/21 maxlen: 21
151.240.168.0/22 maxlen: 22
151.240.192.0/21 maxlen: 21
151.240.240.0/21 maxlen: 21
151.240.240.0/23 maxlen: 23
151.240.242.0/23 maxlen: 23
151.240.244.0/23 maxlen: 23
151.241.216.0/23 maxlen: 23
151.241.218.0/23 maxlen: 23
151.241.220.0/22 maxlen: 22
151.241.224.0/21 maxlen: 21
151.242.0.0/21 maxlen: 21
151.242.8.0/22 maxlen: 22
151.244.48.0/21 maxlen: 21
151.244.48.0/22 maxlen: 22
151.244.52.0/22 maxlen: 22
151.244.56.0/21 maxlen: 21
151.244.64.0/21 maxlen: 21
151.244.72.0/22 maxlen: 22
151.244.76.0/22 maxlen: 22
151.244.80.0/21 maxlen: 21
151.244.88.0/21 maxlen: 21
151.244.96.0/23 maxlen: 23
151.244.98.0/23 maxlen: 23
151.244.100.0/23 maxlen: 23
151.244.102.0/23 maxlen: 23
151.244.104.0/23 maxlen: 23
151.244.106.0/23 maxlen: 23
151.244.108.0/23 maxlen: 23
151.244.110.0/23 maxlen: 23
151.244.112.0/23 maxlen: 23
151.244.114.0/23 maxlen: 23
151.244.116.0/23 maxlen: 23
151.244.118.0/23 maxlen: 23
151.244.120.0/23 maxlen: 23
151.244.122.0/23 maxlen: 23
151.244.124.0/23 maxlen: 23
151.244.126.0/23 maxlen: 23
151.244.128.0/22 maxlen: 22
151.244.132.0/22 maxlen: 22
151.244.136.0/22 maxlen: 22
151.244.140.0/22 maxlen: 22
151.244.144.0/22 maxlen: 22
151.244.148.0/22 maxlen: 22
151.244.152.0/22 maxlen: 22
151.244.156.0/22 maxlen: 22
151.244.160.0/22 maxlen: 22
151.244.164.0/22 maxlen: 22
151.244.168.0/22 maxlen: 22
151.244.172.0/22 maxlen: 22
151.244.176.0/22 maxlen: 22
151.244.180.0/22 maxlen: 22
151.244.184.0/22 maxlen: 22
151.244.188.0/22 maxlen: 22
151.244.192.0/22 maxlen: 22
151.244.196.0/22 maxlen: 22
151.244.200.0/22 maxlen: 22
151.244.204.0/22 maxlen: 22
151.244.208.0/22 maxlen: 22
151.244.212.0/22 maxlen: 22
151.244.216.0/23 maxlen: 23
151.244.218.0/23 maxlen: 23
151.244.220.0/23 maxlen: 23
151.244.222.0/23 maxlen: 23
151.244.224.0/23 maxlen: 23
151.244.226.0/23 maxlen: 23
151.246.0.0/18 maxlen: 18
151.246.64.0/18 maxlen: 18
151.246.128.0/18 maxlen: 18
151.246.192.0/18 maxlen: 18
151.246.248.0/22 maxlen: 22
151.247.0.0/20 maxlen: 24
151.247.16.0/22 maxlen: 24
151.247.214.0/23 maxlen: 23
151.247.216.0/21 maxlen: 21
151.247.224.0/22 maxlen: 22
151.247.228.0/22 maxlen: 24
151.247.232.0/22 maxlen: 22
151.247.236.0/22 maxlen: 24
151.247.236.0/24 maxlen: 24
151.247.237.0/24 maxlen: 24
151.247.238.0/23 maxlen: 23
151.247.240.0/24 maxlen: 24
151.247.241.0/24 maxlen: 24
151.247.248.0/22 maxlen: 22
Validation: Failed, RFC 3779 resource not subset of parent's resources
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:92:c2:7c:92:cb:bb:db:69:62:02:c4:c2:f2:c9:a9:ea:c0
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=adf491488a7cd8448a420945871c0b99672dc66e
Validity
Not Before: Oct 25 07:03:16 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=e70a02025c4b253d598ab0a7b825c3fa0e02429b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:f3:44:a3:09:c1:c3:f7:e4:e2:61:50:15:79:f7:
d2:9a:e8:76:cb:39:21:a4:32:1d:24:1c:6b:92:e1:
a2:48:84:cd:94:2b:20:e4:c1:9a:f8:0b:ed:00:06:
0c:2e:9b:c3:aa:12:23:f3:9f:73:64:8b:20:d7:8f:
78:15:70:9c:18:fe:45:5d:1c:02:28:af:ac:d2:79:
a4:ec:51:85:ad:94:2e:5e:cb:8b:21:ee:40:3b:36:
33:91:8d:93:24:46:02:e2:e3:9b:16:7c:ba:77:d4:
5d:f7:73:59:5f:75:fa:4f:de:ac:05:a1:50:aa:e6:
b3:0c:be:a9:31:cb:7c:2e:ec:62:17:cd:aa:dc:2a:
7a:f7:96:87:e9:d4:3b:a0:22:0c:21:61:2b:a3:27:
3d:fb:05:6c:5c:a6:34:61:60:0a:c3:0e:77:de:29:
45:b3:16:ec:51:a6:a7:2b:94:d6:74:74:5f:36:57:
55:a2:d0:9d:4c:9b:c4:2f:2e:34:e4:21:b0:b1:da:
50:1d:9d:31:a0:e1:c4:9f:b3:87:eb:6f:aa:a7:09:
98:c6:9f:41:cf:96:9a:7a:6c:61:4b:e6:b5:dc:b4:
9c:8c:b7:ca:a0:42:1e:4e:64:ad:69:a0:71:7c:0b:
d4:94:2b:a4:11:66:27:ce:f0:01:ae:e0:60:f1:72:
1e:75
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E7:0A:02:02:5C:4B:25:3D:59:8A:B0:A7:B8:25:C3:FA:0E:02:42:9B
X509v3 Authority Key Identifier:
keyid:AD:F4:91:48:8A:7C:D8:44:8A:42:09:45:87:1C:0B:99:67:2D:C6:6E
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/rfSRSIp82ESKQglFhxwLmWctxm4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/72/715d15-2810-4827-8dbd-0bee06126b1a/1/5woCAlxLJT1ZirCnuCXD-g4CQps.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/72/715d15-2810-4827-8dbd-0bee06126b1a/1/rfSRSIp82ESKQglFhxwLmWctxm4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
85.15.48.0/23
94.182.0.0/15
151.240.80.0/21
151.240.168.0/22
151.240.192.0/21
151.240.240.0/21
151.241.216.0-151.241.231.255
151.242.0.0-151.242.11.255
151.244.48.0-151.244.227.255
151.246.0.0-151.247.19.255
151.247.214.0-151.247.241.255
151.247.248.0/22
Signature Algorithm: sha256WithRSAEncryption
ad:1f:67:6d:9e:3c:aa:ed:3d:18:ef:7e:1b:64:9e:cb:2c:e1:
f1:a4:58:1d:84:0d:b7:67:cb:40:e3:10:5a:9d:48:ad:ba:89:
96:20:40:dc:77:79:bb:ea:2a:ae:e5:ad:2e:48:a0:68:ec:68:
cb:d1:fc:05:6e:97:c6:fe:9c:3b:09:0c:6f:93:03:ad:57:16:
f6:c2:51:9e:f3:a8:9b:ef:3a:64:15:72:4b:4f:33:12:91:f7:
b9:fe:fa:1c:68:44:68:3d:4c:87:c5:6d:ed:60:09:5d:d5:9b:
48:0f:cd:ec:94:84:3c:d4:f0:4f:7b:32:26:a5:03:d9:41:c0:
5a:df:ab:61:3b:31:6e:94:08:f4:8d:00:bc:3f:fb:ba:3d:ed:
57:5f:db:52:39:0b:25:31:80:43:b8:4b:e1:77:76:28:9c:f3:
b8:2c:13:59:84:ce:32:d0:2c:9b:ab:c8:5f:c5:1a:fa:3e:5f:
10:3e:94:30:81:14:0a:eb:c3:82:cb:c2:de:31:73:f3:e0:00:
81:58:c0:89:2f:6e:03:cf:1d:ff:4d:dc:14:5c:c8:4e:e5:a0:
87:46:c9:62:b4:73:82:60:48:9a:3c:9a:8a:5c:a6:0b:a8:a4:
72:ea:a5:1a:86:dc:18:65:d7:ab:ee:de:25:1f:9c:d2:0a:83:
91:8e:18:9a
-----BEGIN CERTIFICATE-----
MIIFZTCCBE2gAwIBAgISAZLCfJLLu9tpYgLEwvLJqerAMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGFkZjQ5MTQ4OGE3Y2Q4NDQ4YTQyMDk0NTg3MWMwYjk5Njcy
ZGM2NmUwHhcNMjQxMDI1MDcwMzE2WhcNMjUwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EyhlNzBhMDIwMjVjNGIyNTNkNTk4YWIwYTdiODI1YzNmYTBlMDI0MjliMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA80SjCcHD9+TiYVAVeffSmuh2yzkh
pDIdJBxrkuGiSITNlCsg5MGa+AvtAAYMLpvDqhIj859zZIsg1494FXCcGP5FXRwC
KK+s0nmk7FGFrZQuXsuLIe5AOzYzkY2TJEYC4uObFny6d9Rd93NZX3X6T96sBaFQ
quazDL6pMct8LuxiF82q3Cp695aH6dQ7oCIMIWEroyc9+wVsXKY0YWAKww533ilF
sxbsUaanK5TWdHRfNldVotCdTJvELy405CGwsdpQHZ0xoOHEn7OH62+qpwmYxp9B
z5aaemxhS+a13LScjLfKoEIeTmStaaBxfAvUlCukEWYnzvABruBg8XIedQIDAQAB
o4ICcTCCAm0wHQYDVR0OBBYEFOcKAgJcSyU9WYqwp7glw/oOAkKbMB8GA1UdIwQY
MBaAFK30kUiKfNhEikIJRYccC5lnLcZuMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvcmZTUlNJcDgyRVNLUWdsRmh4d0xtV2N0eG00LmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC83Mi83MTVkMTUtMjgxMC00ODI3LThkYmQt
MGJlZTA2MTI2YjFhLzEvNXdvQ0FseExKVDFaaXJDbnVDWEQtZzRDUXBzLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC83Mi83MTVkMTUtMjgxMC00ODI3LThkYmQtMGJlZTA2MTI2YjFh
LzEvcmZTUlNJcDgyRVNLUWdsRmh4d0xtV2N0eG00LmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMIGGBggrBgEFBQcBBwEB/wR3MHUwcwQCAAEwbQMEAVUPMAMD
AV62AwQDl/BQAwQCl/CoAwQDl/DAAwQDl/DwMAwDBAOX8dgDBAOX8eAwCwMDAZfy
AwQCl/IIMAwDBASX9DADBAKX9OAwCwMDAZf2AwQCl/cQMAwDBAGX99YDBAGX9/AD
BAKX9/gwDQYJKoZIhvcNAQELBQADggEBAK0fZ22ePKrtPRjvfhtknsss4fGkWB2E
Dbdny0DjEFqdSK26iZYgQNx3ebvqKq7lrS5IoGjsaMvR/AVul8b+nDsJDG+TA61X
FvbCUZ7zqJvvOmQVcktPMxKR97n++hxoRGg9TIfFbe1gCV3Vm0gPzeyUhDzU8E97
MialA9lBwFrfq2E7MW6UCPSNALw/+7o97Vdf21I5CyUxgEO4S+F3diic87gsE1mE
zjLQLJuryF/FGvo+XxA+lDCBFArrw4LLwt4xc/PgAIFYwIkvbgPPHf9N3BRcyE7l
oIdGyWK0c4JgSJo8mopcpguopHLqpRqG3Bhl16vu3iUfnNIKg5GOGJo=
-----END CERTIFICATE-----
Generated at Fri Mar 14 12:08:36 2025 by rpki-client