Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/72/715d15-2810-4827-8dbd-0bee06126b1a/1/dr-F3GqEiMpClv7RqQU2xH1xU9s.roa
File: dr-F3GqEiMpClv7RqQU2xH1xU9s.roa (raw, json)
Hash identifier: Q/9IFOayYjIxiXEZh8eA0OwuautjydZmnb2l2i+k0vA=
Subject key identifier: 76:BF:85:DC:6A:84:88:CA:42:96:FE:D1:A9:05:36:C4:7D:71:53:DB
Certificate issuer: /CN=adf491488a7cd8448a420945871c0b99672dc66e
Certificate serial: 01938C28E2CE4B3AC7FAA92C7AF43DF7E154
Authority key identifier: AD:F4:91:48:8A:7C:D8:44:8A:42:09:45:87:1C:0B:99:67:2D:C6:6E
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/rfSRSIp82ESKQglFhxwLmWctxm4.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/72/715d15-2810-4827-8dbd-0bee06126b1a/1/dr-F3GqEiMpClv7RqQU2xH1xU9s.roa
Signing time: Tue 03 Dec 2024 10:55:09 +0000
ROA not before: Tue 03 Dec 2024 10:55:09 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 205647
IP address blocks: 37.202.128.0/21 maxlen: 21
37.202.136.0/21 maxlen: 21
37.202.144.0/21 maxlen: 21
37.202.144.0/22 maxlen: 22
37.202.148.0/23 maxlen: 23
37.202.150.0/23 maxlen: 23
37.202.152.0/21 maxlen: 21
37.202.160.0/21 maxlen: 21
37.202.168.0/21 maxlen: 21
37.202.176.0/22 maxlen: 22
37.202.180.0/22 maxlen: 22
85.15.48.0/24 maxlen: 24
85.15.49.0/24 maxlen: 24
94.182.0.0/18 maxlen: 18
94.182.8.0/23 maxlen: 23
94.182.12.0/23 maxlen: 23
94.182.14.0/24 maxlen: 24
94.182.17.0/24 maxlen: 24
94.182.30.0/23 maxlen: 23
94.182.41.0/24 maxlen: 24
94.182.48.0/24 maxlen: 24
94.182.56.0/22 maxlen: 24
94.182.60.0/22 maxlen: 24
94.182.64.0/18 maxlen: 18
94.182.64.0/20 maxlen: 20
94.182.72.0/21 maxlen: 21
94.182.80.0/20 maxlen: 20
94.182.82.0/24 maxlen: 24
94.182.96.0/20 maxlen: 20
94.182.97.192/28 maxlen: 28
94.182.112.0/20 maxlen: 20
94.182.114.0/23 maxlen: 23
94.182.116.0/22 maxlen: 22
94.182.120.0/21 maxlen: 21
94.182.128.0/18 maxlen: 18
94.182.128.0/20 maxlen: 20
94.182.144.0/20 maxlen: 20
94.182.160.0/20 maxlen: 20
94.182.176.0/20 maxlen: 20
94.182.192.0/18 maxlen: 18
94.182.196.0/24 maxlen: 24
94.182.199.0/24 maxlen: 24
94.182.204.0/22 maxlen: 22
94.182.204.0/24 maxlen: 24
94.182.205.0/24 maxlen: 24
94.182.206.0/24 maxlen: 24
94.182.207.0/24 maxlen: 24
94.182.208.0/24 maxlen: 24
94.182.212.0/23 maxlen: 23
94.182.217.0/24 maxlen: 24
94.182.222.0/23 maxlen: 23
94.182.226.0/24 maxlen: 24
94.182.228.0/22 maxlen: 22
94.182.232.0/23 maxlen: 24
94.182.234.0/23 maxlen: 23
94.182.238.0/24 maxlen: 24
94.182.240.0/23 maxlen: 24
94.182.244.0/22 maxlen: 24
94.182.244.0/23 maxlen: 23
94.182.248.0/22 maxlen: 24
94.182.248.0/23 maxlen: 23
94.182.252.0/24 maxlen: 24
94.182.254.0/24 maxlen: 24
94.183.0.0/18 maxlen: 18
94.183.64.0/18 maxlen: 18
94.183.128.0/18 maxlen: 18
94.183.192.0/18 maxlen: 18
151.240.80.0/21 maxlen: 21
151.240.168.0/22 maxlen: 22
151.240.192.0/21 maxlen: 21
151.240.240.0/21 maxlen: 21
151.240.240.0/23 maxlen: 23
151.240.242.0/23 maxlen: 23
151.240.244.0/23 maxlen: 23
151.241.216.0/23 maxlen: 23
151.241.218.0/23 maxlen: 23
151.241.220.0/22 maxlen: 22
151.241.224.0/21 maxlen: 21
151.242.0.0/21 maxlen: 21
151.242.8.0/22 maxlen: 22
151.244.48.0/21 maxlen: 21
151.244.48.0/22 maxlen: 22
151.244.52.0/22 maxlen: 22
151.244.56.0/21 maxlen: 21
151.244.64.0/21 maxlen: 21
151.244.72.0/22 maxlen: 22
151.244.76.0/22 maxlen: 22
151.244.80.0/21 maxlen: 21
151.244.88.0/21 maxlen: 21
151.244.96.0/23 maxlen: 23
151.244.98.0/23 maxlen: 23
151.244.100.0/23 maxlen: 23
151.244.102.0/23 maxlen: 23
151.244.104.0/23 maxlen: 23
151.244.106.0/23 maxlen: 23
151.244.108.0/23 maxlen: 23
151.244.110.0/23 maxlen: 23
151.244.112.0/23 maxlen: 23
151.244.114.0/23 maxlen: 23
151.244.116.0/23 maxlen: 23
151.244.118.0/23 maxlen: 23
151.244.120.0/23 maxlen: 23
151.244.122.0/23 maxlen: 23
151.244.124.0/23 maxlen: 23
151.244.126.0/23 maxlen: 23
151.244.128.0/22 maxlen: 22
151.244.132.0/22 maxlen: 22
151.244.136.0/22 maxlen: 22
151.244.140.0/22 maxlen: 22
151.244.144.0/22 maxlen: 22
151.244.148.0/22 maxlen: 22
151.244.152.0/22 maxlen: 22
151.244.156.0/22 maxlen: 22
151.244.160.0/22 maxlen: 22
151.244.164.0/22 maxlen: 22
151.244.168.0/22 maxlen: 22
151.244.172.0/22 maxlen: 22
151.244.176.0/22 maxlen: 22
151.244.180.0/22 maxlen: 22
151.244.184.0/22 maxlen: 22
151.244.188.0/22 maxlen: 22
151.244.192.0/22 maxlen: 22
151.244.196.0/22 maxlen: 22
151.244.200.0/22 maxlen: 22
151.244.204.0/22 maxlen: 22
151.244.208.0/22 maxlen: 22
151.244.212.0/22 maxlen: 22
151.244.216.0/23 maxlen: 23
151.244.218.0/23 maxlen: 23
151.244.220.0/23 maxlen: 23
151.244.222.0/23 maxlen: 23
151.244.224.0/23 maxlen: 23
151.244.226.0/23 maxlen: 23
151.246.0.0/18 maxlen: 18
151.246.64.0/18 maxlen: 18
151.246.128.0/18 maxlen: 18
151.246.192.0/18 maxlen: 18
151.246.248.0/22 maxlen: 22
151.247.0.0/20 maxlen: 24
151.247.16.0/22 maxlen: 24
151.247.214.0/23 maxlen: 23
151.247.216.0/21 maxlen: 21
151.247.224.0/22 maxlen: 22
151.247.228.0/22 maxlen: 24
151.247.232.0/22 maxlen: 22
151.247.236.0/22 maxlen: 24
151.247.236.0/24 maxlen: 24
151.247.237.0/24 maxlen: 24
151.247.238.0/23 maxlen: 23
151.247.240.0/24 maxlen: 24
151.247.241.0/24 maxlen: 24
151.247.248.0/22 maxlen: 22
Validation: Failed, RFC 3779 resource not subset of parent's resources
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:93:8c:28:e2:ce:4b:3a:c7:fa:a9:2c:7a:f4:3d:f7:e1:54
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=adf491488a7cd8448a420945871c0b99672dc66e
Validity
Not Before: Dec 3 10:55:09 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=76bf85dc6a8488ca4296fed1a90536c47d7153db
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b7:91:47:12:04:b0:39:e2:d8:bb:56:0f:b8:a0:
75:1d:41:6e:f0:fe:ea:ae:56:d1:ec:c9:b7:17:5d:
b6:2d:ab:3d:13:51:6e:ae:b2:32:4b:7b:cb:ed:39:
50:7e:1d:ac:df:97:c8:6d:8a:8a:0d:f8:d7:64:f8:
3a:d7:07:2d:03:ec:fd:4c:a5:b0:5c:11:58:b7:54:
36:0c:c0:ce:9d:19:c9:f1:dc:68:4b:72:2c:d6:d6:
65:af:43:58:6d:46:c3:b3:a3:05:a5:13:f2:a0:09:
99:44:81:5a:e8:e8:5d:48:13:de:a5:f8:b8:d6:d0:
ca:2d:16:d2:e3:45:9a:59:7f:55:8f:a2:da:aa:e0:
c8:37:8d:00:eb:b4:1b:0b:b7:32:0d:54:e4:34:3b:
c3:ba:5a:9a:97:e2:78:29:a8:dd:ce:4d:42:de:bf:
01:d5:35:fe:0f:de:58:22:53:5a:af:06:8c:09:62:
0f:5a:d8:c6:12:4f:55:ad:43:b2:f7:3f:da:5e:29:
5a:91:b9:4d:4c:63:89:cb:b3:59:57:31:71:89:6c:
96:aa:8d:e0:c8:9f:db:ca:69:43:43:ae:e1:42:c3:
b0:be:c5:2f:a1:34:c2:12:d3:b7:21:f4:1e:39:62:
81:9a:1d:78:be:58:e3:aa:37:2a:9d:cb:78:f8:48:
40:d9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
76:BF:85:DC:6A:84:88:CA:42:96:FE:D1:A9:05:36:C4:7D:71:53:DB
X509v3 Authority Key Identifier:
keyid:AD:F4:91:48:8A:7C:D8:44:8A:42:09:45:87:1C:0B:99:67:2D:C6:6E
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/rfSRSIp82ESKQglFhxwLmWctxm4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/72/715d15-2810-4827-8dbd-0bee06126b1a/1/dr-F3GqEiMpClv7RqQU2xH1xU9s.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/72/715d15-2810-4827-8dbd-0bee06126b1a/1/rfSRSIp82ESKQglFhxwLmWctxm4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
37.202.128.0-37.202.183.255
85.15.48.0/23
94.182.0.0/15
151.240.80.0/21
151.240.168.0/22
151.240.192.0/21
151.240.240.0/21
151.241.216.0-151.241.231.255
151.242.0.0-151.242.11.255
151.244.48.0-151.244.227.255
151.246.0.0-151.247.19.255
151.247.214.0-151.247.241.255
151.247.248.0/22
Signature Algorithm: sha256WithRSAEncryption
43:1f:8a:f1:93:cb:4c:44:85:23:19:28:44:d1:3a:65:af:ef:
88:f6:68:61:d6:6e:29:9b:1d:c9:88:92:4d:e1:3a:b2:cf:70:
db:1f:4e:88:6c:87:79:30:d9:c4:ac:d0:7c:fe:e0:d4:3b:f1:
28:91:36:d6:9a:40:f0:4c:b1:f1:3d:21:59:f1:9f:ba:e0:b5:
d5:4a:85:6b:40:f1:3a:e7:b1:28:13:35:1c:e9:26:c0:7f:ce:
5c:5e:3d:7e:29:b9:91:07:56:e2:63:e5:81:7d:41:6c:80:7d:
52:53:26:68:f4:8c:c7:c3:1c:ce:84:15:55:e1:f2:bb:da:4f:
05:a4:89:7e:c4:fa:9f:13:09:87:05:31:b3:c2:91:65:bb:5b:
79:cc:b8:06:f5:5c:d3:a0:82:99:6c:9e:16:39:ec:e2:37:bf:
16:b3:e3:6c:42:2f:ae:cd:07:8f:93:df:d7:4f:09:00:8c:c6:
07:85:37:41:18:cc:74:e8:b5:6b:4d:48:63:56:ef:87:09:8a:
3d:e6:93:fc:a5:25:d6:fb:5d:a6:50:ed:8f:25:f2:50:5b:58:
71:2f:51:50:ae:a8:cb:ac:10:58:79:a5:94:13:c6:af:0b:26:
38:a1:a1:79:06:b7:a5:f0:3c:96:22:cf:6c:f8:f7:ce:08:a7:
0e:b2:71:ed
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Mar 14 12:08:49 2025 by rpki-client