Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/72/715d15-2810-4827-8dbd-0bee06126b1a/1/Lcn_ax5fqbmvAtCicR0Veskwzvs.roa
File: Lcn_ax5fqbmvAtCicR0Veskwzvs.roa (raw, json)
Hash identifier: zVQ22j/NAyINRuhQ1hlD4Nai/I5FHdqDxDdIA7HvFdA=
Subject key identifier: 2D:C9:FF:6B:1E:5F:A9:B9:AF:02:D0:A2:71:1D:15:7A:C9:30:CE:FB
Certificate issuer: /CN=adf491488a7cd8448a420945871c0b99672dc66e
Certificate serial: 0193342FD42F88220ADBCBDFE6E6BCAF19BC
Authority key identifier: AD:F4:91:48:8A:7C:D8:44:8A:42:09:45:87:1C:0B:99:67:2D:C6:6E
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/rfSRSIp82ESKQglFhxwLmWctxm4.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/72/715d15-2810-4827-8dbd-0bee06126b1a/1/Lcn_ax5fqbmvAtCicR0Veskwzvs.roa
Signing time: Sat 16 Nov 2024 08:56:09 +0000
ROA not before: Sat 16 Nov 2024 08:56:09 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 205647
IP address blocks: 85.15.48.0/24 maxlen: 24
85.15.49.0/24 maxlen: 24
94.182.0.0/18 maxlen: 18
94.182.8.0/23 maxlen: 23
94.182.12.0/23 maxlen: 23
94.182.14.0/24 maxlen: 24
94.182.17.0/24 maxlen: 24
94.182.30.0/23 maxlen: 23
94.182.41.0/24 maxlen: 24
94.182.48.0/24 maxlen: 24
94.182.56.0/22 maxlen: 24
94.182.60.0/22 maxlen: 24
94.182.64.0/18 maxlen: 18
94.182.64.0/20 maxlen: 20
94.182.72.0/21 maxlen: 21
94.182.80.0/20 maxlen: 20
94.182.82.0/24 maxlen: 24
94.182.96.0/20 maxlen: 20
94.182.97.192/28 maxlen: 28
94.182.112.0/20 maxlen: 20
94.182.114.0/23 maxlen: 23
94.182.116.0/22 maxlen: 22
94.182.120.0/21 maxlen: 21
94.182.128.0/18 maxlen: 18
94.182.128.0/20 maxlen: 20
94.182.144.0/20 maxlen: 20
94.182.160.0/20 maxlen: 20
94.182.176.0/20 maxlen: 20
94.182.192.0/18 maxlen: 18
94.182.196.0/24 maxlen: 24
94.182.199.0/24 maxlen: 24
94.182.204.0/22 maxlen: 22
94.182.204.0/24 maxlen: 24
94.182.205.0/24 maxlen: 24
94.182.206.0/24 maxlen: 24
94.182.207.0/24 maxlen: 24
94.182.208.0/24 maxlen: 24
94.182.212.0/23 maxlen: 23
94.182.217.0/24 maxlen: 24
94.182.222.0/23 maxlen: 23
94.182.226.0/24 maxlen: 24
94.182.228.0/22 maxlen: 22
94.182.232.0/23 maxlen: 24
94.182.234.0/23 maxlen: 23
94.182.238.0/24 maxlen: 24
94.182.240.0/23 maxlen: 24
94.182.244.0/22 maxlen: 24
94.182.244.0/23 maxlen: 23
94.182.248.0/22 maxlen: 22
94.182.248.0/23 maxlen: 23
94.182.252.0/24 maxlen: 24
94.182.254.0/24 maxlen: 24
94.183.0.0/18 maxlen: 18
94.183.64.0/18 maxlen: 18
94.183.128.0/18 maxlen: 18
94.183.192.0/18 maxlen: 18
151.240.80.0/21 maxlen: 21
151.240.168.0/22 maxlen: 22
151.240.192.0/21 maxlen: 21
151.240.240.0/21 maxlen: 21
151.240.240.0/23 maxlen: 23
151.240.242.0/23 maxlen: 23
151.240.244.0/23 maxlen: 23
151.241.216.0/23 maxlen: 23
151.241.218.0/23 maxlen: 23
151.241.220.0/22 maxlen: 22
151.241.224.0/21 maxlen: 21
151.242.0.0/21 maxlen: 21
151.242.8.0/22 maxlen: 22
151.244.48.0/21 maxlen: 21
151.244.48.0/22 maxlen: 22
151.244.52.0/22 maxlen: 22
151.244.56.0/21 maxlen: 21
151.244.64.0/21 maxlen: 21
151.244.72.0/22 maxlen: 22
151.244.76.0/22 maxlen: 22
151.244.80.0/21 maxlen: 21
151.244.88.0/21 maxlen: 21
151.244.96.0/23 maxlen: 23
151.244.98.0/23 maxlen: 23
151.244.100.0/23 maxlen: 23
151.244.102.0/23 maxlen: 23
151.244.104.0/23 maxlen: 23
151.244.106.0/23 maxlen: 23
151.244.108.0/23 maxlen: 23
151.244.110.0/23 maxlen: 23
151.244.112.0/23 maxlen: 23
151.244.114.0/23 maxlen: 23
151.244.116.0/23 maxlen: 23
151.244.118.0/23 maxlen: 23
151.244.120.0/23 maxlen: 23
151.244.122.0/23 maxlen: 23
151.244.124.0/23 maxlen: 23
151.244.126.0/23 maxlen: 23
151.244.128.0/22 maxlen: 22
151.244.132.0/22 maxlen: 22
151.244.136.0/22 maxlen: 22
151.244.140.0/22 maxlen: 22
151.244.144.0/22 maxlen: 22
151.244.148.0/22 maxlen: 22
151.244.152.0/22 maxlen: 22
151.244.156.0/22 maxlen: 22
151.244.160.0/22 maxlen: 22
151.244.164.0/22 maxlen: 22
151.244.168.0/22 maxlen: 22
151.244.172.0/22 maxlen: 22
151.244.176.0/22 maxlen: 22
151.244.180.0/22 maxlen: 22
151.244.184.0/22 maxlen: 22
151.244.188.0/22 maxlen: 22
151.244.192.0/22 maxlen: 22
151.244.196.0/22 maxlen: 22
151.244.200.0/22 maxlen: 22
151.244.204.0/22 maxlen: 22
151.244.208.0/22 maxlen: 22
151.244.212.0/22 maxlen: 22
151.244.216.0/23 maxlen: 23
151.244.218.0/23 maxlen: 23
151.244.220.0/23 maxlen: 23
151.244.222.0/23 maxlen: 23
151.244.224.0/23 maxlen: 23
151.244.226.0/23 maxlen: 23
151.246.0.0/18 maxlen: 18
151.246.64.0/18 maxlen: 18
151.246.128.0/18 maxlen: 18
151.246.192.0/18 maxlen: 18
151.246.248.0/22 maxlen: 22
151.247.0.0/20 maxlen: 24
151.247.16.0/22 maxlen: 24
151.247.214.0/23 maxlen: 23
151.247.216.0/21 maxlen: 21
151.247.224.0/22 maxlen: 22
151.247.228.0/22 maxlen: 24
151.247.232.0/22 maxlen: 22
151.247.236.0/22 maxlen: 24
151.247.236.0/24 maxlen: 24
151.247.237.0/24 maxlen: 24
151.247.238.0/23 maxlen: 23
151.247.240.0/24 maxlen: 24
151.247.241.0/24 maxlen: 24
151.247.248.0/22 maxlen: 22
Validation: Failed, RFC 3779 resource not subset of parent's resources
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:93:34:2f:d4:2f:88:22:0a:db:cb:df:e6:e6:bc:af:19:bc
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=adf491488a7cd8448a420945871c0b99672dc66e
Validity
Not Before: Nov 16 08:56:09 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=2dc9ff6b1e5fa9b9af02d0a2711d157ac930cefb
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e3:24:ba:12:b5:23:c8:25:6a:4a:bf:61:2b:d5:
10:d7:3e:f5:83:03:4a:72:ee:ce:af:d5:71:3d:05:
4f:08:c8:26:a1:c8:ac:c7:31:5d:57:e2:f9:a9:65:
93:ba:b4:6a:86:6c:ea:5e:9e:c6:9e:51:7d:f8:cf:
77:1b:4a:8e:e2:76:8a:1e:29:9a:b5:94:e8:2e:c7:
a8:70:7e:2c:7e:bb:3e:f6:b2:0f:23:81:49:09:b8:
49:7d:51:23:98:c6:5c:27:d6:51:fd:8a:f8:dd:43:
fc:60:33:fd:42:33:4c:2f:f0:d3:65:30:86:be:83:
39:87:85:da:0a:64:89:2e:99:70:0b:38:25:f2:d3:
eb:ab:f5:40:a9:3e:d7:23:5c:a7:fe:c2:a2:fd:d7:
d1:9d:17:b0:b0:e5:c8:49:57:2c:be:42:d4:03:55:
b3:29:67:df:65:3f:0a:06:19:8e:af:aa:6f:0a:66:
05:57:89:ff:fe:6d:db:1b:22:26:0e:07:7e:bc:e3:
bf:d8:9e:99:73:1f:47:bd:be:63:65:42:0a:73:73:
61:d1:03:9f:5a:d8:12:28:7d:93:97:f2:45:e9:cc:
ba:3c:be:40:29:2d:c0:2e:b1:ac:61:6e:48:35:09:
25:c0:c8:8f:31:e9:c0:89:82:be:76:bd:0f:a4:ef:
99:01
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
2D:C9:FF:6B:1E:5F:A9:B9:AF:02:D0:A2:71:1D:15:7A:C9:30:CE:FB
X509v3 Authority Key Identifier:
keyid:AD:F4:91:48:8A:7C:D8:44:8A:42:09:45:87:1C:0B:99:67:2D:C6:6E
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/rfSRSIp82ESKQglFhxwLmWctxm4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/72/715d15-2810-4827-8dbd-0bee06126b1a/1/Lcn_ax5fqbmvAtCicR0Veskwzvs.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/72/715d15-2810-4827-8dbd-0bee06126b1a/1/rfSRSIp82ESKQglFhxwLmWctxm4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
85.15.48.0/23
94.182.0.0/15
151.240.80.0/21
151.240.168.0/22
151.240.192.0/21
151.240.240.0/21
151.241.216.0-151.241.231.255
151.242.0.0-151.242.11.255
151.244.48.0-151.244.227.255
151.246.0.0-151.247.19.255
151.247.214.0-151.247.241.255
151.247.248.0/22
Signature Algorithm: sha256WithRSAEncryption
a9:49:63:be:fe:bc:b2:de:b9:38:22:a2:ab:9c:e3:17:3b:69:
89:2d:10:d7:f1:36:bf:0e:5f:ec:1b:59:38:f9:7b:93:ed:82:
48:ac:61:a1:c3:36:db:a5:29:5e:f1:1f:5c:6d:15:5c:0d:b0:
2b:6d:a4:bc:b3:c2:13:88:c4:6d:a4:35:c1:37:e1:70:f0:73:
e9:1c:49:6b:7e:c2:cc:52:d6:46:78:df:31:df:75:36:59:a1:
0a:2e:9c:30:25:85:3c:00:0d:ef:82:1c:48:ec:37:56:22:42:
eb:ba:ee:fc:b0:a4:ca:1b:b0:1a:1d:12:95:5e:36:54:21:82:
54:c1:a1:e9:c7:96:9b:9b:3d:7d:84:09:7e:96:e7:e5:81:aa:
bb:a4:5c:f7:1d:6d:7a:35:54:14:14:84:c7:1c:0a:28:ab:ed:
7a:5b:bf:dd:ab:ea:52:fb:d2:b5:f8:8f:01:8f:10:94:59:4b:
ed:87:82:d8:69:fd:c4:43:7f:54:5d:56:b3:f7:c5:f8:b1:d0:
99:a2:5f:0e:2e:1c:86:e0:e6:94:3b:1e:84:27:30:93:1e:39:
5f:46:16:0c:cf:fd:e2:38:de:c3:3b:1b:58:2a:fa:96:e3:32:
23:cf:17:ee:29:a7:1d:4a:ce:b2:de:7b:66:39:03:7b:fd:cc:
e8:75:74:a5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 13 02:25:07 2025 by rpki-client