Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/72/715d15-2810-4827-8dbd-0bee06126b1a/1/9-q0Xy4Gznk0h_Qpa9Rc6wkKhfw.roa
File: 9-q0Xy4Gznk0h_Qpa9Rc6wkKhfw.roa (raw, json)
Hash identifier: 3Abw/iAB5odPnn4pDku5FlpTVOjbLlV8woW+9Dr+IYc=
Subject key identifier: F7:EA:B4:5F:2E:06:CE:79:34:87:F4:29:6B:D4:5C:EB:09:0A:85:FC
Certificate issuer: /CN=adf491488a7cd8448a420945871c0b99672dc66e
Certificate serial: 01945FB259891D694C74D56E82A269E574E4
Authority key identifier: AD:F4:91:48:8A:7C:D8:44:8A:42:09:45:87:1C:0B:99:67:2D:C6:6E
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/rfSRSIp82ESKQglFhxwLmWctxm4.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/72/715d15-2810-4827-8dbd-0bee06126b1a/1/9-q0Xy4Gznk0h_Qpa9Rc6wkKhfw.roa
Signing time: Mon 13 Jan 2025 12:45:11 +0000
ROA not before: Mon 13 Jan 2025 12:45:11 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 58224
IP address blocks: 37.202.128.0/22 maxlen: 22
37.202.132.0/22 maxlen: 22
37.202.136.0/22 maxlen: 22
37.202.140.0/22 maxlen: 22
37.202.152.0/22 maxlen: 22
37.202.156.0/22 maxlen: 22
37.202.160.0/22 maxlen: 22
37.202.164.0/22 maxlen: 22
37.202.188.0/22 maxlen: 22
37.202.232.0/22 maxlen: 22
37.202.236.0/22 maxlen: 22
37.202.240.0/24 maxlen: 24
37.202.241.0/24 maxlen: 24
37.202.242.0/24 maxlen: 24
37.202.244.0/22 maxlen: 22
37.202.248.0/22 maxlen: 22
37.202.252.0/22 maxlen: 22
94.182.10.0/24 maxlen: 24
94.182.204.0/24 maxlen: 24
94.182.205.0/24 maxlen: 24
94.182.206.0/24 maxlen: 24
94.182.207.0/24 maxlen: 24
151.244.16.0/22 maxlen: 22
151.244.20.0/22 maxlen: 22
151.244.24.0/22 maxlen: 22
151.244.28.0/22 maxlen: 22
151.244.36.0/22 maxlen: 22
151.244.228.0/22 maxlen: 22
151.244.232.0/21 maxlen: 21
151.244.240.0/22 maxlen: 22
151.244.244.0/23 maxlen: 23
151.244.246.0/23 maxlen: 23
151.244.248.0/23 maxlen: 23
151.244.252.0/24 maxlen: 24
151.244.253.0/24 maxlen: 24
151.244.254.0/23 maxlen: 23
151.245.0.0/22 maxlen: 22
151.245.4.0/22 maxlen: 22
151.245.8.0/22 maxlen: 22
151.245.12.0/22 maxlen: 22
151.245.16.0/22 maxlen: 22
151.245.20.0/22 maxlen: 22
151.245.24.0/22 maxlen: 22
151.245.28.0/22 maxlen: 22
151.245.32.0/22 maxlen: 22
151.245.36.0/22 maxlen: 22
151.245.40.0/22 maxlen: 22
151.245.44.0/22 maxlen: 22
151.245.48.0/22 maxlen: 22
151.245.52.0/22 maxlen: 22
151.245.56.0/22 maxlen: 22
151.245.60.0/22 maxlen: 22
151.245.64.0/22 maxlen: 22
151.245.68.0/22 maxlen: 22
151.245.72.0/22 maxlen: 22
151.245.76.0/22 maxlen: 22
151.245.80.0/22 maxlen: 22
151.245.84.0/22 maxlen: 22
151.245.88.0/22 maxlen: 22
151.245.92.0/22 maxlen: 22
151.245.96.0/22 maxlen: 22
151.245.100.0/22 maxlen: 22
151.245.104.0/22 maxlen: 22
151.245.108.0/22 maxlen: 22
151.245.112.0/22 maxlen: 22
151.245.116.0/22 maxlen: 22
151.245.120.0/22 maxlen: 22
151.245.124.0/22 maxlen: 22
151.245.128.0/22 maxlen: 22
151.245.132.0/22 maxlen: 22
151.245.136.0/22 maxlen: 22
151.245.140.0/22 maxlen: 22
151.245.144.0/22 maxlen: 22
151.245.148.0/22 maxlen: 22
151.245.152.0/22 maxlen: 22
151.245.156.0/22 maxlen: 22
151.245.160.0/22 maxlen: 22
151.245.164.0/22 maxlen: 22
151.245.168.0/22 maxlen: 22
151.245.172.0/22 maxlen: 22
151.245.176.0/22 maxlen: 22
151.245.180.0/22 maxlen: 22
151.245.184.0/22 maxlen: 22
151.245.188.0/22 maxlen: 22
151.245.192.0/22 maxlen: 22
151.245.196.0/22 maxlen: 22
151.245.200.0/22 maxlen: 22
151.245.204.0/22 maxlen: 22
151.245.208.0/21 maxlen: 21
151.245.216.0/21 maxlen: 21
151.245.220.0/22 maxlen: 22
151.245.224.0/22 maxlen: 22
151.245.228.0/22 maxlen: 22
151.245.232.0/22 maxlen: 22
151.245.236.0/22 maxlen: 22
151.245.240.0/22 maxlen: 22
151.245.244.0/22 maxlen: 22
151.245.248.0/22 maxlen: 22
151.245.252.0/22 maxlen: 22
151.246.0.0/22 maxlen: 22
151.246.4.0/22 maxlen: 22
151.246.8.0/22 maxlen: 22
151.246.12.0/22 maxlen: 22
151.246.16.0/22 maxlen: 22
151.246.20.0/22 maxlen: 22
151.246.24.0/22 maxlen: 22
151.246.28.0/22 maxlen: 22
151.246.32.0/22 maxlen: 22
151.246.36.0/22 maxlen: 22
151.246.40.0/22 maxlen: 22
151.246.44.0/22 maxlen: 22
151.246.48.0/22 maxlen: 22
151.246.52.0/22 maxlen: 22
151.246.56.0/22 maxlen: 22
151.246.60.0/22 maxlen: 22
151.246.176.0/21 maxlen: 21
151.246.184.0/21 maxlen: 21
151.246.224.0/20 maxlen: 20
151.247.2.0/24 maxlen: 24
151.247.12.0/24 maxlen: 24
151.247.14.0/24 maxlen: 24
151.247.18.0/24 maxlen: 24
151.247.20.0/23 maxlen: 23
151.247.22.0/24 maxlen: 24
151.247.23.0/24 maxlen: 24
151.247.24.0/22 maxlen: 22
151.247.28.0/22 maxlen: 22
151.247.32.0/22 maxlen: 22
151.247.36.0/22 maxlen: 22
151.247.40.0/22 maxlen: 22
151.247.44.0/22 maxlen: 22
151.247.48.0/22 maxlen: 22
151.247.52.0/22 maxlen: 22
151.247.56.0/22 maxlen: 22
151.247.60.0/22 maxlen: 22
151.247.64.0/23 maxlen: 23
151.247.66.0/23 maxlen: 23
151.247.68.0/23 maxlen: 23
151.247.70.0/23 maxlen: 23
151.247.72.0/22 maxlen: 22
151.247.76.0/23 maxlen: 23
151.247.78.0/23 maxlen: 23
151.247.80.0/23 maxlen: 23
151.247.82.0/23 maxlen: 23
151.247.84.0/23 maxlen: 23
151.247.86.0/23 maxlen: 23
151.247.88.0/22 maxlen: 22
151.247.92.0/22 maxlen: 22
151.247.96.0/22 maxlen: 22
151.247.100.0/22 maxlen: 22
151.247.104.0/22 maxlen: 22
151.247.108.0/22 maxlen: 22
151.247.112.0/22 maxlen: 22
151.247.116.0/22 maxlen: 22
151.247.120.0/22 maxlen: 22
151.247.124.0/22 maxlen: 22
151.247.128.0/22 maxlen: 22
151.247.132.0/22 maxlen: 22
151.247.136.0/22 maxlen: 22
151.247.140.0/22 maxlen: 22
151.247.144.0/22 maxlen: 22
151.247.148.0/22 maxlen: 22
151.247.148.0/23 maxlen: 23
151.247.150.0/23 maxlen: 23
151.247.152.0/22 maxlen: 22
151.247.156.0/22 maxlen: 22
151.247.160.0/22 maxlen: 22
151.247.164.0/22 maxlen: 22
151.247.168.0/22 maxlen: 22
151.247.172.0/22 maxlen: 22
151.247.176.0/22 maxlen: 22
151.247.180.0/22 maxlen: 22
151.247.184.0/22 maxlen: 22
151.247.192.0/22 maxlen: 22
151.247.196.0/22 maxlen: 22
151.247.200.0/22 maxlen: 22
151.247.204.0/22 maxlen: 22
151.247.204.0/23 maxlen: 23
151.247.206.0/24 maxlen: 24
151.247.207.0/24 maxlen: 24
151.247.208.0/22 maxlen: 22
151.247.212.0/23 maxlen: 23
151.247.232.0/22 maxlen: 22
151.247.239.0/24 maxlen: 24
151.247.243.0/24 maxlen: 24
151.247.252.0/22 maxlen: 22
Validation: Failed, RFC 3779 resource not subset of parent's resources
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:5f:b2:59:89:1d:69:4c:74:d5:6e:82:a2:69:e5:74:e4
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=adf491488a7cd8448a420945871c0b99672dc66e
Validity
Not Before: Jan 13 12:45:11 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=f7eab45f2e06ce793487f4296bd45ceb090a85fc
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bd:3d:b0:8e:fa:cd:55:64:ea:79:06:3a:5c:f1:
2e:cf:63:ee:cb:95:cd:20:f2:e1:d1:b1:29:c6:66:
01:7a:6a:e2:8e:7a:2e:f7:1d:81:3b:2c:73:4b:d0:
44:b7:43:f2:13:de:ce:81:a5:c0:59:d4:26:2b:47:
2b:1c:7c:05:8d:f7:3a:88:b0:72:6d:40:05:5c:67:
eb:36:ae:9e:52:78:13:d5:98:c2:9e:5f:af:2f:cc:
ae:0d:e1:0a:a3:13:00:b1:c2:cd:3d:87:13:e8:99:
e5:31:b9:36:91:ae:cd:b3:22:4e:45:68:85:ab:73:
1b:a4:fc:dd:9b:69:b9:d4:52:20:c7:f9:51:ed:5c:
60:65:4c:33:d1:ab:60:8c:2e:87:65:72:2b:57:ac:
b8:ab:db:3b:93:4b:28:1e:ef:8c:fa:a9:13:0d:c5:
bf:43:ee:ee:c3:6c:7f:dc:5d:53:82:ab:65:80:c2:
29:79:f3:62:33:8f:2f:a2:8b:76:e0:1b:df:e4:41:
fc:ba:e9:84:d1:ac:cd:f6:ca:1b:69:93:83:97:03:
0b:ff:86:1a:68:bb:7d:a7:dd:11:8c:68:74:1b:95:
c2:7a:a9:68:30:26:fb:c0:50:4c:09:b5:1a:be:c8:
06:19:71:63:3b:46:b0:6a:1b:71:7a:61:bd:65:08:
26:63
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F7:EA:B4:5F:2E:06:CE:79:34:87:F4:29:6B:D4:5C:EB:09:0A:85:FC
X509v3 Authority Key Identifier:
keyid:AD:F4:91:48:8A:7C:D8:44:8A:42:09:45:87:1C:0B:99:67:2D:C6:6E
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/rfSRSIp82ESKQglFhxwLmWctxm4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/72/715d15-2810-4827-8dbd-0bee06126b1a/1/9-q0Xy4Gznk0h_Qpa9Rc6wkKhfw.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/72/715d15-2810-4827-8dbd-0bee06126b1a/1/rfSRSIp82ESKQglFhxwLmWctxm4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
37.202.128.0/20
37.202.152.0-37.202.167.255
37.202.188.0/22
37.202.232.0-37.202.242.255
37.202.244.0-37.202.255.255
94.182.10.0/24
94.182.204.0/22
151.244.16.0/20
151.244.36.0/22
151.244.228.0-151.244.249.255
151.244.252.0-151.246.63.255
151.246.176.0/20
151.246.224.0/20
151.247.2.0/24
151.247.12.0/24
151.247.14.0/24
151.247.18.0/24
151.247.20.0-151.247.187.255
151.247.192.0-151.247.213.255
151.247.232.0/22
151.247.239.0/24
151.247.243.0/24
151.247.252.0/22
Signature Algorithm: sha256WithRSAEncryption
b9:b9:33:c3:52:51:a5:a7:2b:36:d8:3d:b1:49:4d:36:13:16:
5b:79:77:d8:47:86:03:90:35:8f:83:65:de:b1:72:40:57:9f:
88:30:4a:c0:24:05:b1:ff:d4:04:62:13:61:13:40:18:d5:d5:
41:fb:2e:61:bb:b8:9d:62:8c:7c:d3:e7:d9:6d:2a:19:36:04:
cd:28:13:14:aa:28:45:e0:98:e9:b7:11:d0:ba:2e:ed:f2:4d:
6b:a0:c0:40:2f:b2:e7:e4:21:11:84:0c:b5:7a:48:35:8a:cd:
04:22:a4:40:db:5e:d0:0f:6a:0e:9b:27:56:70:86:6c:c6:3a:
a9:bb:7e:1a:b8:f8:30:b2:30:80:f5:97:a1:42:43:a2:13:43:
6c:fc:7b:c5:cc:9b:b9:d5:ca:e3:33:a4:c1:42:ad:33:f7:87:
25:d2:cd:aa:1a:27:e0:29:4c:eb:f5:d7:a3:ec:65:a0:75:64:
8c:46:25:65:b7:05:bb:fa:87:24:e3:bf:7a:a4:34:46:37:b3:
04:9b:bd:67:17:7e:e6:b5:70:03:80:59:65:7a:b7:14:89:0b:
ff:a6:c3:7e:9d:1e:b5:cb:28:61:80:1e:e8:3b:e3:90:d1:24:
28:df:6f:c4:61:9c:54:73:a0:7e:66:71:6a:cd:b2:6f:b7:f5:
9d:0a:64:a4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 13 07:57:23 2025 by rpki-client