Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/72/715d15-2810-4827-8dbd-0bee06126b1a/1/emPBy6iRnucE38X7Lk9ou9J5R0U.roa
File: emPBy6iRnucE38X7Lk9ou9J5R0U.roa (raw, json)
Hash identifier: LH0H9yem+Be6wzfSVfJ2B5d7dJqshj5O4Hu8rkDlk0Y=
Subject key identifier: 7A:63:C1:CB:A8:91:9E:E7:04:DF:C5:FB:2E:4F:68:BB:D2:79:47:45
Certificate issuer: /CN=adf491488a7cd8448a420945871c0b99672dc66e
Certificate serial: 01938C855C0B487C489A5FE10D615386F106
Authority key identifier: AD:F4:91:48:8A:7C:D8:44:8A:42:09:45:87:1C:0B:99:67:2D:C6:6E
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/rfSRSIp82ESKQglFhxwLmWctxm4.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/72/715d15-2810-4827-8dbd-0bee06126b1a/1/emPBy6iRnucE38X7Lk9ou9J5R0U.roa
Signing time: Tue 03 Dec 2024 12:36:10 +0000
ROA not before: Tue 03 Dec 2024 12:36:10 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 58224
IP address blocks: 37.202.128.0/22 maxlen: 22
37.202.132.0/22 maxlen: 22
37.202.136.0/22 maxlen: 22
37.202.140.0/22 maxlen: 22
37.202.152.0/22 maxlen: 22
37.202.156.0/22 maxlen: 22
37.202.160.0/22 maxlen: 22
37.202.164.0/22 maxlen: 22
37.202.188.0/22 maxlen: 22
37.202.232.0/22 maxlen: 22
37.202.236.0/22 maxlen: 22
37.202.240.0/22 maxlen: 22
37.202.244.0/22 maxlen: 22
37.202.248.0/22 maxlen: 22
37.202.252.0/22 maxlen: 22
94.182.10.0/24 maxlen: 24
94.182.204.0/24 maxlen: 24
94.182.205.0/24 maxlen: 24
94.182.206.0/24 maxlen: 24
94.182.207.0/24 maxlen: 24
151.243.128.0/18 maxlen: 18
151.243.128.0/21 maxlen: 21
151.243.136.0/22 maxlen: 22
151.243.140.0/22 maxlen: 22
151.243.144.0/22 maxlen: 22
151.243.148.0/22 maxlen: 22
151.243.152.0/21 maxlen: 21
151.243.160.0/20 maxlen: 20
151.243.176.0/22 maxlen: 22
151.243.180.0/22 maxlen: 22
151.243.192.0/23 maxlen: 23
151.243.194.0/23 maxlen: 23
151.243.200.0/23 maxlen: 23
151.243.202.0/23 maxlen: 23
151.243.214.0/23 maxlen: 23
151.243.220.0/23 maxlen: 23
151.243.222.0/23 maxlen: 23
151.243.224.0/22 maxlen: 22
151.243.228.0/22 maxlen: 22
151.243.232.0/22 maxlen: 22
151.243.236.0/22 maxlen: 22
151.243.240.0/23 maxlen: 23
151.243.242.0/23 maxlen: 23
151.243.244.0/23 maxlen: 23
151.243.246.0/24 maxlen: 24
151.243.248.0/23 maxlen: 23
151.243.250.0/23 maxlen: 23
151.244.16.0/22 maxlen: 22
151.244.20.0/22 maxlen: 22
151.244.24.0/22 maxlen: 22
151.244.28.0/22 maxlen: 22
151.244.36.0/22 maxlen: 22
151.244.228.0/22 maxlen: 22
151.244.232.0/21 maxlen: 21
151.244.240.0/22 maxlen: 22
151.244.244.0/23 maxlen: 23
151.244.246.0/23 maxlen: 23
151.244.248.0/23 maxlen: 23
151.244.252.0/24 maxlen: 24
151.244.253.0/24 maxlen: 24
151.244.254.0/23 maxlen: 23
151.245.0.0/22 maxlen: 22
151.245.4.0/22 maxlen: 22
151.245.8.0/22 maxlen: 22
151.245.12.0/22 maxlen: 22
151.245.16.0/22 maxlen: 22
151.245.20.0/22 maxlen: 22
151.245.24.0/22 maxlen: 22
151.245.28.0/22 maxlen: 22
151.245.32.0/22 maxlen: 22
151.245.36.0/22 maxlen: 22
151.245.40.0/22 maxlen: 22
151.245.44.0/22 maxlen: 22
151.245.48.0/22 maxlen: 22
151.245.52.0/22 maxlen: 22
151.245.56.0/22 maxlen: 22
151.245.60.0/22 maxlen: 22
151.245.64.0/22 maxlen: 22
151.245.68.0/22 maxlen: 22
151.245.72.0/22 maxlen: 22
151.245.76.0/22 maxlen: 22
151.245.80.0/22 maxlen: 22
151.245.84.0/22 maxlen: 22
151.245.88.0/22 maxlen: 22
151.245.92.0/22 maxlen: 22
151.245.96.0/22 maxlen: 22
151.245.100.0/22 maxlen: 22
151.245.104.0/22 maxlen: 22
151.245.108.0/22 maxlen: 22
151.245.112.0/22 maxlen: 22
151.245.116.0/22 maxlen: 22
151.245.120.0/22 maxlen: 22
151.245.124.0/22 maxlen: 22
151.245.128.0/22 maxlen: 22
151.245.132.0/22 maxlen: 22
151.245.136.0/22 maxlen: 22
151.245.140.0/22 maxlen: 22
151.245.144.0/22 maxlen: 22
151.245.148.0/22 maxlen: 22
151.245.152.0/22 maxlen: 22
151.245.156.0/22 maxlen: 22
151.245.160.0/22 maxlen: 22
151.245.164.0/22 maxlen: 22
151.245.168.0/22 maxlen: 22
151.245.172.0/22 maxlen: 22
151.245.176.0/22 maxlen: 22
151.245.180.0/22 maxlen: 22
151.245.184.0/22 maxlen: 22
151.245.188.0/22 maxlen: 22
151.245.192.0/22 maxlen: 22
151.245.196.0/22 maxlen: 22
151.245.200.0/22 maxlen: 22
151.245.204.0/22 maxlen: 22
151.245.208.0/21 maxlen: 21
151.245.216.0/21 maxlen: 21
151.245.220.0/22 maxlen: 22
151.245.224.0/22 maxlen: 22
151.245.228.0/22 maxlen: 22
151.245.232.0/22 maxlen: 22
151.245.236.0/22 maxlen: 22
151.245.240.0/22 maxlen: 22
151.245.244.0/22 maxlen: 22
151.245.248.0/22 maxlen: 22
151.245.252.0/22 maxlen: 22
151.246.0.0/22 maxlen: 22
151.246.4.0/22 maxlen: 22
151.246.8.0/22 maxlen: 22
151.246.12.0/22 maxlen: 22
151.246.16.0/22 maxlen: 22
151.246.20.0/22 maxlen: 22
151.246.24.0/22 maxlen: 22
151.246.28.0/22 maxlen: 22
151.246.32.0/22 maxlen: 22
151.246.36.0/22 maxlen: 22
151.246.40.0/22 maxlen: 22
151.246.44.0/22 maxlen: 22
151.246.48.0/22 maxlen: 22
151.246.52.0/22 maxlen: 22
151.246.56.0/22 maxlen: 22
151.246.60.0/22 maxlen: 22
151.246.176.0/21 maxlen: 21
151.246.184.0/21 maxlen: 21
151.246.224.0/20 maxlen: 20
151.247.2.0/24 maxlen: 24
151.247.12.0/24 maxlen: 24
151.247.14.0/24 maxlen: 24
151.247.18.0/24 maxlen: 24
151.247.20.0/23 maxlen: 23
151.247.22.0/24 maxlen: 24
151.247.23.0/24 maxlen: 24
151.247.24.0/22 maxlen: 22
151.247.28.0/22 maxlen: 22
151.247.32.0/22 maxlen: 22
151.247.36.0/22 maxlen: 22
151.247.40.0/22 maxlen: 22
151.247.44.0/22 maxlen: 22
151.247.48.0/22 maxlen: 22
151.247.52.0/22 maxlen: 22
151.247.56.0/22 maxlen: 22
151.247.60.0/22 maxlen: 22
151.247.64.0/23 maxlen: 23
151.247.66.0/23 maxlen: 23
151.247.68.0/23 maxlen: 23
151.247.70.0/23 maxlen: 23
151.247.72.0/22 maxlen: 22
151.247.76.0/23 maxlen: 23
151.247.78.0/23 maxlen: 23
151.247.80.0/23 maxlen: 23
151.247.82.0/23 maxlen: 23
151.247.84.0/23 maxlen: 23
151.247.86.0/23 maxlen: 23
151.247.88.0/22 maxlen: 22
151.247.92.0/22 maxlen: 22
151.247.96.0/22 maxlen: 22
151.247.100.0/22 maxlen: 22
151.247.104.0/22 maxlen: 22
151.247.108.0/22 maxlen: 22
151.247.112.0/22 maxlen: 22
151.247.116.0/22 maxlen: 22
151.247.120.0/22 maxlen: 22
151.247.124.0/22 maxlen: 22
151.247.128.0/22 maxlen: 22
151.247.132.0/22 maxlen: 22
151.247.136.0/22 maxlen: 22
151.247.140.0/22 maxlen: 22
151.247.144.0/22 maxlen: 22
151.247.148.0/22 maxlen: 22
151.247.148.0/23 maxlen: 23
151.247.150.0/23 maxlen: 23
151.247.152.0/22 maxlen: 22
151.247.156.0/22 maxlen: 22
151.247.160.0/22 maxlen: 22
151.247.164.0/22 maxlen: 22
151.247.168.0/22 maxlen: 22
151.247.172.0/22 maxlen: 22
151.247.176.0/22 maxlen: 22
151.247.180.0/22 maxlen: 22
151.247.184.0/22 maxlen: 22
151.247.192.0/22 maxlen: 22
151.247.196.0/22 maxlen: 22
151.247.200.0/22 maxlen: 22
151.247.204.0/22 maxlen: 22
151.247.204.0/23 maxlen: 23
151.247.206.0/24 maxlen: 24
151.247.207.0/24 maxlen: 24
151.247.208.0/22 maxlen: 22
151.247.212.0/23 maxlen: 23
151.247.232.0/22 maxlen: 22
151.247.239.0/24 maxlen: 24
151.247.243.0/24 maxlen: 24
151.247.252.0/22 maxlen: 22
Validation: Failed, RFC 3779 resource not subset of parent's resources
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:93:8c:85:5c:0b:48:7c:48:9a:5f:e1:0d:61:53:86:f1:06
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=adf491488a7cd8448a420945871c0b99672dc66e
Validity
Not Before: Dec 3 12:36:10 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=7a63c1cba8919ee704dfc5fb2e4f68bbd2794745
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ec:d8:01:3e:3b:4a:53:c1:a4:4c:da:6e:04:4f:
ac:96:c1:21:e5:67:65:01:2b:19:1c:ec:da:29:5d:
d3:d2:80:55:de:07:83:2a:00:b4:fe:16:a7:5a:d7:
39:48:db:29:0a:20:c7:c9:e9:20:2b:fb:0b:77:d7:
46:9b:e3:fb:fb:8a:ee:a5:00:83:39:79:06:bf:7a:
73:5b:0e:99:66:2c:09:d0:44:b5:a9:56:ef:27:66:
e6:24:2e:5f:52:c0:45:4d:35:ae:0b:a1:95:80:9e:
ff:1d:d6:27:27:f9:16:16:f0:2b:73:63:8f:5e:79:
88:d0:76:3f:25:5f:95:77:59:32:1d:e5:5a:95:cc:
b0:54:96:02:b1:48:1d:6f:83:be:3c:c7:7d:62:d3:
6e:ed:67:69:de:44:64:92:91:e1:7e:17:13:a4:26:
49:b8:d0:bf:30:be:e3:60:65:d2:b3:77:35:6b:15:
ce:3a:d6:44:1b:7f:06:4f:35:c4:e7:cd:2a:7f:85:
c9:d5:42:6b:68:ad:60:76:67:39:da:ea:7c:26:28:
96:14:8f:a4:ec:d3:c8:3b:3c:39:2e:4b:28:8b:84:
9c:0a:2d:ea:ac:93:24:e0:ea:06:3a:70:9a:d0:91:
2e:a9:25:ec:48:de:1e:cf:38:ef:f4:da:06:d5:a4:
8f:a3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
7A:63:C1:CB:A8:91:9E:E7:04:DF:C5:FB:2E:4F:68:BB:D2:79:47:45
X509v3 Authority Key Identifier:
keyid:AD:F4:91:48:8A:7C:D8:44:8A:42:09:45:87:1C:0B:99:67:2D:C6:6E
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/rfSRSIp82ESKQglFhxwLmWctxm4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/72/715d15-2810-4827-8dbd-0bee06126b1a/1/emPBy6iRnucE38X7Lk9ou9J5R0U.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/72/715d15-2810-4827-8dbd-0bee06126b1a/1/rfSRSIp82ESKQglFhxwLmWctxm4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
37.202.128.0/20
37.202.152.0-37.202.167.255
37.202.188.0/22
37.202.232.0-37.202.255.255
94.182.10.0/24
94.182.204.0/22
151.243.128.0-151.243.195.255
151.243.200.0/22
151.243.214.0/23
151.243.220.0-151.243.246.255
151.243.248.0/22
151.244.16.0/20
151.244.36.0/22
151.244.228.0-151.244.249.255
151.244.252.0-151.246.63.255
151.246.176.0/20
151.246.224.0/20
151.247.2.0/24
151.247.12.0/24
151.247.14.0/24
151.247.18.0/24
151.247.20.0-151.247.187.255
151.247.192.0-151.247.213.255
151.247.232.0/22
151.247.239.0/24
151.247.243.0/24
151.247.252.0/22
Signature Algorithm: sha256WithRSAEncryption
69:c3:e8:91:10:85:f5:90:6d:fb:1e:df:92:a9:aa:8d:ef:76:
ba:85:db:56:66:1f:94:13:da:a2:e1:6d:f5:48:05:36:c1:ba:
e9:fc:27:26:0d:97:71:db:0a:7d:78:bd:a4:a4:c8:69:0c:23:
e1:7c:ff:26:9a:d1:d3:ce:a6:22:10:7a:2a:2f:81:cb:8c:e7:
18:82:46:96:46:fb:98:62:e4:9b:9e:43:f7:21:ab:ba:9c:07:
68:b0:df:75:bd:2b:e4:cc:b2:a3:04:ef:d7:e9:6c:ec:6f:33:
72:b3:ce:e6:87:e0:46:51:15:6a:12:b7:cb:12:4c:05:62:f6:
52:41:32:a4:37:f6:3f:b6:46:b3:1e:02:74:5c:fd:58:ab:03:
4d:94:46:8f:5b:61:72:18:60:c6:b2:19:4e:e3:f8:70:df:b0:
d2:db:5a:24:04:fc:6a:67:a1:9f:ec:f0:32:f9:16:3d:90:f2:
22:c0:53:16:34:76:9e:64:c2:d4:c1:c7:6b:3f:93:29:d9:9e:
62:9a:81:0e:e2:ad:f7:9f:8c:db:b0:b8:56:6b:c2:f7:a6:95:
99:3f:fc:c4:bf:58:b4:6e:6c:d9:77:1a:95:70:40:37:97:fb:
a0:b6:d8:4b:ea:3b:ae:b1:58:a4:a7:93:76:27:f5:ee:70:13:
3d:a6:fd:f6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 13 08:15:15 2025 by rpki-client