Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/72/715d15-2810-4827-8dbd-0bee06126b1a/1/ig1UmEf0ijcGZe9HpJf4DGeubfE.roa
File: ig1UmEf0ijcGZe9HpJf4DGeubfE.roa (raw, json)
Hash identifier: 9YPMGKRHVZaCh7ub0MkvuJkX3hCGYmIly1eT57jTvqI=
Subject key identifier: 8A:0D:54:98:47:F4:8A:37:06:65:EF:47:A4:97:F8:0C:67:AE:6D:F1
Certificate issuer: /CN=adf491488a7cd8448a420945871c0b99672dc66e
Certificate serial: 019324FCD708333590EB6D18BA03AE12FA29
Authority key identifier: AD:F4:91:48:8A:7C:D8:44:8A:42:09:45:87:1C:0B:99:67:2D:C6:6E
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/rfSRSIp82ESKQglFhxwLmWctxm4.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/72/715d15-2810-4827-8dbd-0bee06126b1a/1/ig1UmEf0ijcGZe9HpJf4DGeubfE.roa
Signing time: Wed 13 Nov 2024 10:06:10 +0000
ROA not before: Wed 13 Nov 2024 10:06:10 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 58224
IP address blocks: 37.148.0.0/22 maxlen: 22
37.148.4.0/22 maxlen: 22
37.148.8.0/22 maxlen: 22
37.148.12.0/22 maxlen: 22
37.148.16.0/22 maxlen: 22
37.148.20.0/22 maxlen: 22
37.148.24.0/22 maxlen: 22
37.148.28.0/22 maxlen: 22
37.148.32.0/22 maxlen: 22
37.148.36.0/22 maxlen: 22
37.148.40.0/22 maxlen: 22
37.148.44.0/22 maxlen: 22
37.148.48.0/22 maxlen: 22
37.148.52.0/22 maxlen: 22
37.148.56.0/22 maxlen: 22
37.148.60.0/22 maxlen: 22
37.148.64.0/22 maxlen: 22
37.148.68.0/22 maxlen: 22
37.148.72.0/22 maxlen: 22
37.148.76.0/22 maxlen: 22
37.148.80.0/22 maxlen: 22
37.148.84.0/22 maxlen: 22
37.148.90.0/23 maxlen: 23
37.148.100.0/22 maxlen: 22
37.148.104.0/22 maxlen: 22
37.148.110.0/24 maxlen: 24
37.148.111.0/24 maxlen: 24
37.148.112.0/24 maxlen: 24
37.148.113.0/24 maxlen: 24
37.148.114.0/24 maxlen: 24
37.148.115.0/24 maxlen: 24
37.148.116.0/24 maxlen: 24
37.148.117.0/24 maxlen: 24
37.148.118.0/24 maxlen: 24
37.148.119.0/24 maxlen: 24
37.148.124.0/22 maxlen: 22
37.202.128.0/22 maxlen: 22
37.202.132.0/22 maxlen: 22
37.202.136.0/22 maxlen: 22
37.202.140.0/22 maxlen: 22
37.202.144.0/22 maxlen: 22
37.202.148.0/22 maxlen: 22
37.202.152.0/22 maxlen: 22
37.202.156.0/22 maxlen: 22
37.202.160.0/22 maxlen: 22
37.202.164.0/22 maxlen: 22
37.202.188.0/22 maxlen: 22
37.202.232.0/22 maxlen: 22
37.202.236.0/22 maxlen: 22
37.202.240.0/22 maxlen: 22
37.202.244.0/22 maxlen: 22
37.202.248.0/22 maxlen: 22
37.202.252.0/22 maxlen: 22
94.182.10.0/24 maxlen: 24
94.182.204.0/24 maxlen: 24
94.182.205.0/24 maxlen: 24
94.182.206.0/24 maxlen: 24
94.182.207.0/24 maxlen: 24
151.243.124.0/23 maxlen: 23
151.243.128.0/18 maxlen: 18
151.243.128.0/21 maxlen: 21
151.243.136.0/22 maxlen: 22
151.243.140.0/22 maxlen: 22
151.243.144.0/22 maxlen: 22
151.243.148.0/22 maxlen: 22
151.243.152.0/21 maxlen: 21
151.243.160.0/20 maxlen: 20
151.243.176.0/22 maxlen: 22
151.243.180.0/22 maxlen: 22
151.243.192.0/23 maxlen: 23
151.243.194.0/23 maxlen: 23
151.243.200.0/23 maxlen: 23
151.243.202.0/23 maxlen: 23
151.243.214.0/23 maxlen: 23
151.243.220.0/23 maxlen: 23
151.243.222.0/23 maxlen: 23
151.243.224.0/22 maxlen: 22
151.243.228.0/22 maxlen: 22
151.243.232.0/22 maxlen: 22
151.243.236.0/22 maxlen: 22
151.243.240.0/23 maxlen: 23
151.243.242.0/23 maxlen: 23
151.243.244.0/23 maxlen: 23
151.243.246.0/24 maxlen: 24
151.243.248.0/23 maxlen: 23
151.243.250.0/23 maxlen: 23
151.244.16.0/22 maxlen: 22
151.244.20.0/22 maxlen: 22
151.244.24.0/22 maxlen: 22
151.244.28.0/22 maxlen: 22
151.244.36.0/22 maxlen: 22
151.244.228.0/22 maxlen: 22
151.244.232.0/21 maxlen: 21
151.244.240.0/22 maxlen: 22
151.244.244.0/23 maxlen: 23
151.244.246.0/23 maxlen: 23
151.244.248.0/23 maxlen: 23
151.244.252.0/24 maxlen: 24
151.244.253.0/24 maxlen: 24
151.244.254.0/23 maxlen: 23
151.245.0.0/22 maxlen: 22
151.245.4.0/22 maxlen: 22
151.245.8.0/22 maxlen: 22
151.245.12.0/22 maxlen: 22
151.245.16.0/22 maxlen: 22
151.245.20.0/22 maxlen: 22
151.245.24.0/22 maxlen: 22
151.245.28.0/22 maxlen: 22
151.245.32.0/22 maxlen: 22
151.245.36.0/22 maxlen: 22
151.245.40.0/22 maxlen: 22
151.245.44.0/22 maxlen: 22
151.245.48.0/22 maxlen: 22
151.245.52.0/22 maxlen: 22
151.245.56.0/22 maxlen: 22
151.245.60.0/22 maxlen: 22
151.245.64.0/22 maxlen: 22
151.245.68.0/22 maxlen: 22
151.245.72.0/22 maxlen: 22
151.245.76.0/22 maxlen: 22
151.245.80.0/22 maxlen: 22
151.245.84.0/22 maxlen: 22
151.245.88.0/22 maxlen: 22
151.245.92.0/22 maxlen: 22
151.245.96.0/22 maxlen: 22
151.245.100.0/22 maxlen: 22
151.245.104.0/22 maxlen: 22
151.245.108.0/22 maxlen: 22
151.245.112.0/22 maxlen: 22
151.245.116.0/22 maxlen: 22
151.245.120.0/22 maxlen: 22
151.245.124.0/22 maxlen: 22
151.245.128.0/22 maxlen: 22
151.245.132.0/22 maxlen: 22
151.245.136.0/22 maxlen: 22
151.245.140.0/22 maxlen: 22
151.245.144.0/22 maxlen: 22
151.245.148.0/22 maxlen: 22
151.245.152.0/22 maxlen: 22
151.245.156.0/22 maxlen: 22
151.245.160.0/22 maxlen: 22
151.245.164.0/22 maxlen: 22
151.245.168.0/22 maxlen: 22
151.245.172.0/22 maxlen: 22
151.245.176.0/22 maxlen: 22
151.245.180.0/22 maxlen: 22
151.245.184.0/22 maxlen: 22
151.245.188.0/22 maxlen: 22
151.245.192.0/22 maxlen: 22
151.245.196.0/22 maxlen: 22
151.245.200.0/22 maxlen: 22
151.245.204.0/22 maxlen: 22
151.245.208.0/21 maxlen: 21
151.245.216.0/21 maxlen: 21
151.245.220.0/22 maxlen: 22
151.245.224.0/22 maxlen: 22
151.245.228.0/22 maxlen: 22
151.245.232.0/22 maxlen: 22
151.245.236.0/22 maxlen: 22
151.245.240.0/22 maxlen: 22
151.245.244.0/22 maxlen: 22
151.245.248.0/22 maxlen: 22
151.245.252.0/22 maxlen: 22
151.246.0.0/22 maxlen: 22
151.246.4.0/22 maxlen: 22
151.246.8.0/22 maxlen: 22
151.246.12.0/22 maxlen: 22
151.246.16.0/22 maxlen: 22
151.246.20.0/22 maxlen: 22
151.246.24.0/22 maxlen: 22
151.246.28.0/22 maxlen: 22
151.246.32.0/22 maxlen: 22
151.246.36.0/22 maxlen: 22
151.246.40.0/22 maxlen: 22
151.246.44.0/22 maxlen: 22
151.246.48.0/22 maxlen: 22
151.246.52.0/22 maxlen: 22
151.246.56.0/22 maxlen: 22
151.246.60.0/22 maxlen: 22
151.246.176.0/21 maxlen: 21
151.246.184.0/21 maxlen: 21
151.246.224.0/20 maxlen: 20
151.247.2.0/24 maxlen: 24
151.247.12.0/24 maxlen: 24
151.247.14.0/24 maxlen: 24
151.247.18.0/24 maxlen: 24
151.247.20.0/23 maxlen: 23
151.247.22.0/24 maxlen: 24
151.247.23.0/24 maxlen: 24
151.247.24.0/22 maxlen: 22
151.247.28.0/22 maxlen: 22
151.247.32.0/22 maxlen: 22
151.247.36.0/22 maxlen: 22
151.247.40.0/22 maxlen: 22
151.247.44.0/22 maxlen: 22
151.247.48.0/22 maxlen: 22
151.247.52.0/22 maxlen: 22
151.247.56.0/22 maxlen: 22
151.247.60.0/22 maxlen: 22
151.247.64.0/23 maxlen: 23
151.247.66.0/23 maxlen: 23
151.247.68.0/23 maxlen: 23
151.247.70.0/23 maxlen: 23
151.247.72.0/22 maxlen: 22
151.247.76.0/23 maxlen: 23
151.247.78.0/23 maxlen: 23
151.247.80.0/23 maxlen: 23
151.247.82.0/23 maxlen: 23
151.247.84.0/23 maxlen: 23
151.247.86.0/23 maxlen: 23
151.247.88.0/22 maxlen: 22
151.247.92.0/22 maxlen: 22
151.247.96.0/22 maxlen: 22
151.247.100.0/22 maxlen: 22
151.247.104.0/22 maxlen: 22
151.247.108.0/22 maxlen: 22
151.247.112.0/22 maxlen: 22
151.247.116.0/22 maxlen: 22
151.247.120.0/22 maxlen: 22
151.247.124.0/22 maxlen: 22
151.247.128.0/22 maxlen: 22
151.247.132.0/22 maxlen: 22
151.247.136.0/22 maxlen: 22
151.247.140.0/22 maxlen: 22
151.247.144.0/22 maxlen: 22
151.247.148.0/22 maxlen: 22
151.247.148.0/23 maxlen: 23
151.247.150.0/23 maxlen: 23
151.247.152.0/22 maxlen: 22
151.247.156.0/22 maxlen: 22
151.247.160.0/22 maxlen: 22
151.247.164.0/22 maxlen: 22
151.247.168.0/22 maxlen: 22
151.247.172.0/22 maxlen: 22
151.247.176.0/22 maxlen: 22
151.247.180.0/22 maxlen: 22
151.247.184.0/22 maxlen: 22
151.247.192.0/22 maxlen: 22
151.247.196.0/22 maxlen: 22
151.247.200.0/22 maxlen: 22
151.247.204.0/22 maxlen: 22
151.247.204.0/23 maxlen: 23
151.247.206.0/24 maxlen: 24
151.247.207.0/24 maxlen: 24
151.247.208.0/22 maxlen: 22
151.247.212.0/23 maxlen: 23
151.247.232.0/22 maxlen: 22
151.247.239.0/24 maxlen: 24
151.247.243.0/24 maxlen: 24
151.247.252.0/22 maxlen: 22
Validation: Failed, RFC 3779 resource not subset of parent's resources
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:93:24:fc:d7:08:33:35:90:eb:6d:18:ba:03:ae:12:fa:29
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=adf491488a7cd8448a420945871c0b99672dc66e
Validity
Not Before: Nov 13 10:06:10 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=8a0d549847f48a370665ef47a497f80c67ae6df1
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b7:63:54:44:4e:5a:b5:ef:1f:88:a3:99:4b:28:
58:87:b6:0f:4a:5e:88:e3:85:01:b6:9d:b6:4e:c0:
ad:31:bd:8c:aa:45:77:86:de:ec:d3:fd:3c:4e:c2:
81:e8:20:a8:33:79:e7:ae:98:37:a9:14:57:a8:c4:
4e:0e:6b:2c:b6:60:7b:ce:66:00:b6:a3:62:ef:23:
af:87:73:df:ae:51:14:0b:d5:06:fe:a7:7a:99:72:
ae:02:07:4b:2a:92:34:3a:eb:32:62:95:ec:dd:24:
0a:2f:0d:66:f6:d6:42:1d:74:b8:a7:d6:73:9b:4e:
09:44:1e:de:d5:80:3d:2f:3a:31:d6:e3:c7:96:9e:
b5:46:4d:18:59:cf:b2:2a:82:75:27:b7:6e:ca:d6:
69:66:f0:de:c1:83:d4:05:8c:da:08:ee:54:35:d4:
41:d4:50:e6:f6:ba:1b:6e:c8:87:d9:f1:b3:6d:64:
e3:c5:de:c0:e8:99:e9:66:ce:d0:0a:e2:d2:9e:85:
72:51:fd:ee:02:31:3b:17:1f:f9:2f:3e:03:44:9c:
bf:ae:b6:83:11:c2:09:da:e9:9a:1a:85:09:0a:42:
fc:1a:ad:10:20:2c:e8:8b:93:8e:31:67:18:1b:1e:
be:d5:f3:6b:68:6d:ad:4f:30:d0:f3:25:2f:29:ae:
18:11
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
8A:0D:54:98:47:F4:8A:37:06:65:EF:47:A4:97:F8:0C:67:AE:6D:F1
X509v3 Authority Key Identifier:
keyid:AD:F4:91:48:8A:7C:D8:44:8A:42:09:45:87:1C:0B:99:67:2D:C6:6E
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/rfSRSIp82ESKQglFhxwLmWctxm4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/72/715d15-2810-4827-8dbd-0bee06126b1a/1/ig1UmEf0ijcGZe9HpJf4DGeubfE.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/72/715d15-2810-4827-8dbd-0bee06126b1a/1/rfSRSIp82ESKQglFhxwLmWctxm4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
37.148.0.0-37.148.87.255
37.148.90.0/23
37.148.100.0-37.148.107.255
37.148.110.0-37.148.119.255
37.148.124.0/22
37.202.128.0-37.202.167.255
37.202.188.0/22
37.202.232.0-37.202.255.255
94.182.10.0/24
94.182.204.0/22
151.243.124.0/23
151.243.128.0-151.243.195.255
151.243.200.0/22
151.243.214.0/23
151.243.220.0-151.243.246.255
151.243.248.0/22
151.244.16.0/20
151.244.36.0/22
151.244.228.0-151.244.249.255
151.244.252.0-151.246.63.255
151.246.176.0/20
151.246.224.0/20
151.247.2.0/24
151.247.12.0/24
151.247.14.0/24
151.247.18.0/24
151.247.20.0-151.247.187.255
151.247.192.0-151.247.213.255
151.247.232.0/22
151.247.239.0/24
151.247.243.0/24
151.247.252.0/22
Signature Algorithm: sha256WithRSAEncryption
a4:42:e3:75:2e:af:51:b7:e5:da:a5:d8:8a:9e:8c:95:00:1c:
dc:4c:10:22:d2:54:3e:8f:40:6c:76:e5:b9:b1:9e:30:b5:1c:
ee:7b:ff:d9:cb:7e:94:3a:8f:f1:6e:ca:98:73:5f:df:2f:fb:
57:c2:6c:2b:e8:b6:00:15:91:ef:19:23:5a:cd:49:fe:21:b1:
dc:a1:be:6f:70:2d:c3:ba:e4:4b:36:a7:f3:c5:3f:fb:e6:64:
9f:e6:91:44:02:94:99:1b:41:ed:c8:aa:cb:dc:ec:b8:dc:43:
fa:96:f2:d3:7e:11:63:ad:c9:3b:db:17:14:c4:cc:20:b0:38:
30:f2:ef:96:a5:05:76:e1:86:bb:67:bc:ca:a6:cf:53:df:9e:
6b:84:f2:b9:38:6b:d7:31:bd:86:77:c2:cf:df:db:03:bd:be:
05:2b:ae:5b:f2:ee:e5:ab:14:5b:5d:80:16:f2:1d:8b:bc:d8:
cb:12:fd:bf:e8:4e:3b:22:fb:39:e6:2b:07:7c:6a:cc:26:e2:
fd:45:61:9a:2f:3c:3a:22:a6:02:db:0f:c7:a5:88:73:f1:b5:
a4:dd:dc:75:a2:39:f1:e3:0b:87:92:fe:c7:c3:8e:1b:d9:e0:
38:b4:25:43:11:58:b3:63:72:7c:88:03:36:5e:44:89:11:e9:
f4:04:f5:b8
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Mar 14 12:11:04 2025 by rpki-client