Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/72/715d15-2810-4827-8dbd-0bee06126b1a/1/6E7TImm0ermSnlx3HS6W-WBhQcI.roa
File: 6E7TImm0ermSnlx3HS6W-WBhQcI.roa (raw, json)
Hash identifier: ZULaoMVUZmjqc5wcbDpQY1YwKP12VceTUkGcvx2daS8=
Subject key identifier: E8:4E:D3:22:69:B4:7A:B9:92:9E:5C:77:1D:2E:96:F9:60:61:41:C2
Certificate issuer: /CN=adf491488a7cd8448a420945871c0b99672dc66e
Certificate serial: 018C9B428969B2A50079DE8D990DEB0ED47B
Authority key identifier: AD:F4:91:48:8A:7C:D8:44:8A:42:09:45:87:1C:0B:99:67:2D:C6:6E
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/rfSRSIp82ESKQglFhxwLmWctxm4.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/72/715d15-2810-4827-8dbd-0bee06126b1a/1/6E7TImm0ermSnlx3HS6W-WBhQcI.roa
Signing time: Sun 24 Dec 2023 09:57:58 +0000
ROA not before: Sun 24 Dec 2023 09:57:58 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 205647
IP address blocks: 151.242.0.0/21 maxlen: 21
151.242.8.0/22 maxlen: 22
151.241.224.0/21 maxlen: 21
151.247.216.0/21 maxlen: 21
151.247.214.0/23 maxlen: 23
151.247.224.0/22 maxlen: 22
151.247.232.0/22 maxlen: 22
151.247.228.0/22 maxlen: 22
151.247.237.0/24 maxlen: 24
151.247.238.0/23 maxlen: 23
151.247.240.0/24 maxlen: 24
151.247.236.0/24 maxlen: 24
151.247.241.0/24 maxlen: 24
151.247.248.0/22 maxlen: 22
31.58.240.0/20 maxlen: 20
151.240.240.0/21 maxlen: 21
31.59.12.0/22 maxlen: 22
151.240.80.0/21 maxlen: 21
151.240.168.0/22 maxlen: 22
151.240.192.0/21 maxlen: 21
31.58.236.0/22 maxlen: 22
94.182.97.192/28 maxlen: 28
31.56.116.0/24 maxlen: 24
151.244.112.0/23 maxlen: 23
151.244.110.0/23 maxlen: 23
151.244.108.0/23 maxlen: 23
151.244.106.0/23 maxlen: 23
151.244.118.0/23 maxlen: 23
151.244.116.0/23 maxlen: 23
151.244.114.0/23 maxlen: 23
151.244.124.0/23 maxlen: 23
151.244.122.0/23 maxlen: 23
151.244.120.0/23 maxlen: 23
151.244.132.0/22 maxlen: 22
151.244.128.0/22 maxlen: 22
151.244.126.0/23 maxlen: 23
151.244.136.0/22 maxlen: 22
151.244.140.0/22 maxlen: 22
151.244.144.0/22 maxlen: 22
151.244.152.0/22 maxlen: 22
151.244.148.0/22 maxlen: 22
151.244.156.0/22 maxlen: 22
151.244.56.0/21 maxlen: 21
151.244.52.0/22 maxlen: 22
85.15.49.0/24 maxlen: 24
85.15.48.0/24 maxlen: 24
151.244.64.0/21 maxlen: 21
151.244.76.0/22 maxlen: 22
151.244.72.0/22 maxlen: 22
151.244.80.0/21 maxlen: 21
151.244.88.0/21 maxlen: 21
151.244.98.0/23 maxlen: 23
151.244.96.0/23 maxlen: 23
151.244.104.0/23 maxlen: 23
151.244.102.0/23 maxlen: 23
151.244.100.0/23 maxlen: 23
94.183.192.0/18 maxlen: 18
151.244.216.0/23 maxlen: 23
151.244.218.0/23 maxlen: 23
151.244.222.0/23 maxlen: 23
151.244.220.0/23 maxlen: 23
151.244.226.0/23 maxlen: 23
151.244.224.0/23 maxlen: 23
31.56.64.0/19 maxlen: 19
31.56.96.0/20 maxlen: 20
151.244.160.0/22 maxlen: 22
151.244.164.0/22 maxlen: 22
31.56.0.0/18 maxlen: 18
151.244.172.0/22 maxlen: 22
151.244.168.0/22 maxlen: 22
151.244.176.0/22 maxlen: 22
151.244.180.0/22 maxlen: 22
151.244.184.0/22 maxlen: 22
151.244.188.0/22 maxlen: 22
151.244.192.0/22 maxlen: 22
151.244.196.0/22 maxlen: 22
151.244.200.0/22 maxlen: 22
151.244.204.0/22 maxlen: 22
151.244.208.0/22 maxlen: 22
151.244.212.0/22 maxlen: 22
94.182.244.0/23 maxlen: 23
94.182.248.0/23 maxlen: 23
94.183.0.0/18 maxlen: 18
94.182.192.0/18 maxlen: 18
94.182.206.0/24 maxlen: 24
94.182.204.0/24 maxlen: 24
94.182.204.0/22 maxlen: 22
94.182.205.0/24 maxlen: 24
94.182.207.0/24 maxlen: 24
94.182.217.0/24 maxlen: 24
94.182.226.0/24 maxlen: 24
94.182.222.0/23 maxlen: 23
94.182.232.0/23 maxlen: 23
94.182.228.0/22 maxlen: 22
94.182.240.0/23 maxlen: 23
94.182.234.0/23 maxlen: 23
94.183.128.0/18 maxlen: 18
151.244.48.0/22 maxlen: 22
94.183.64.0/18 maxlen: 18
94.182.41.0/24 maxlen: 24
94.182.56.0/22 maxlen: 22
94.182.64.0/20 maxlen: 20
94.182.60.0/22 maxlen: 22
94.182.64.0/18 maxlen: 18
94.182.72.0/21 maxlen: 21
94.182.0.0/18 maxlen: 18
94.182.8.0/23 maxlen: 23
94.182.12.0/23 maxlen: 23
94.182.144.0/20 maxlen: 20
94.182.160.0/20 maxlen: 20
94.182.176.0/20 maxlen: 20
94.182.80.0/20 maxlen: 20
94.182.82.0/24 maxlen: 24
94.182.96.0/20 maxlen: 20
94.182.112.0/20 maxlen: 20
94.182.116.0/22 maxlen: 22
94.182.114.0/23 maxlen: 23
94.182.120.0/21 maxlen: 21
94.182.128.0/20 maxlen: 20
94.182.128.0/18 maxlen: 18
Validation: Failed, RFC 3779 resource not subset of parent's resources
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8c:9b:42:89:69:b2:a5:00:79:de:8d:99:0d:eb:0e:d4:7b
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=adf491488a7cd8448a420945871c0b99672dc66e
Validity
Not Before: Dec 24 09:57:58 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=e84ed32269b47ab9929e5c771d2e96f9606141c2
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:85:a6:b7:70:fa:ee:4b:51:e4:22:82:a2:ea:05:
94:57:e9:48:ac:5e:f1:6e:c0:5d:87:b4:1b:0f:46:
8d:bb:20:cc:bc:37:8b:38:cf:85:69:a7:27:ee:63:
1e:7b:3b:0c:fd:5f:d5:06:93:61:e1:0a:4c:1a:3b:
bd:38:99:d4:65:6e:75:45:d3:cc:70:cb:d0:ee:98:
56:4d:27:e4:a4:0c:10:2e:92:32:19:da:d2:be:77:
62:c0:34:e9:aa:89:e0:e6:a7:22:43:5a:e9:f8:2c:
4f:08:e9:79:58:76:e2:0e:1c:e9:56:86:01:7b:b3:
98:8c:a6:4d:77:1d:11:1b:6a:a0:c7:a5:a4:45:da:
7c:bb:ee:c8:84:56:e1:45:6e:11:15:8e:f9:92:89:
a5:12:62:fd:4b:6d:98:dd:ce:c9:92:52:a7:65:59:
66:3e:eb:e3:04:2f:83:5a:d7:a0:01:ac:51:d3:69:
d3:ad:50:76:36:bd:0b:dc:bf:90:e9:f0:a9:ca:39:
2e:3b:b0:5e:ec:4c:39:17:61:de:0e:42:9d:9e:cf:
4d:b1:df:8b:ca:63:98:8c:25:b9:61:d4:84:02:51:
53:2b:1b:0b:7c:c6:f3:ba:3e:0c:5b:fe:3a:94:f9:
4c:08:2a:e5:a4:0d:2c:d7:b8:b0:0f:e0:88:8b:0c:
33:bf
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E8:4E:D3:22:69:B4:7A:B9:92:9E:5C:77:1D:2E:96:F9:60:61:41:C2
X509v3 Authority Key Identifier:
keyid:AD:F4:91:48:8A:7C:D8:44:8A:42:09:45:87:1C:0B:99:67:2D:C6:6E
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/rfSRSIp82ESKQglFhxwLmWctxm4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/72/715d15-2810-4827-8dbd-0bee06126b1a/1/6E7TImm0ermSnlx3HS6W-WBhQcI.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/72/715d15-2810-4827-8dbd-0bee06126b1a/1/rfSRSIp82ESKQglFhxwLmWctxm4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
31.56.0.0-31.56.111.255
31.56.116.0/24
31.58.236.0-31.58.255.255
31.59.12.0/22
85.15.48.0/23
94.182.0.0/15
151.240.80.0/21
151.240.168.0/22
151.240.192.0/21
151.240.240.0/21
151.241.224.0/21
151.242.0.0-151.242.11.255
151.244.48.0-151.244.227.255
151.247.214.0-151.247.241.255
151.247.248.0/22
Signature Algorithm: sha256WithRSAEncryption
74:b9:0f:4a:be:39:6c:5a:cf:42:03:0d:d6:ea:da:f2:d1:ed:
c3:30:2d:26:96:92:8b:a1:3c:7c:42:0b:28:85:9a:1f:3b:c0:
0d:68:71:08:56:d5:46:b1:bf:b7:fe:32:d0:64:78:f1:41:70:
a4:31:0d:3a:be:3a:e7:30:84:c9:33:ed:5b:18:8d:a1:99:e0:
e1:09:4e:d3:9f:68:9b:c3:c8:4a:6c:68:e9:d4:d6:8c:92:28:
ed:74:69:96:38:fd:05:51:ff:5d:dd:51:0e:86:91:09:aa:0a:
80:c6:36:7d:aa:cc:ad:0c:d2:da:a6:25:ef:ca:fe:1f:c9:b8:
4e:bc:41:49:13:1d:93:33:e1:56:ff:55:d1:af:c8:13:d8:e5:
90:8d:cc:de:16:d2:b8:60:cc:04:ae:1b:85:1d:c1:42:ae:2a:
87:ee:a7:fd:bc:c7:4d:20:be:9e:2f:b9:f1:65:4e:2e:23:09:
51:0a:ee:0c:bf:3c:bf:35:45:13:1e:cd:be:67:27:1a:39:62:
b4:55:6b:76:df:90:02:36:22:40:f7:c9:28:26:63:09:f1:45:
a5:d2:0b:8e:fe:40:17:aa:e7:d4:01:38:5c:31:03:ba:72:6a:
f2:b9:c6:30:ee:13:ee:ec:fd:f4:2f:c3:3c:82:a1:b3:be:05:
94:1c:14:3e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Mar 14 12:05:30 2025 by rpki-client