Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/72/715d15-2810-4827-8dbd-0bee06126b1a/1/mLMNkFk5Y7x7D29LBuw5IZ_ApF4.roa
File: mLMNkFk5Y7x7D29LBuw5IZ_ApF4.roa (raw, json)
Hash identifier: +57psDZY+vrrrBgi2NXg1PMecc3n6t8c2r0LmMJcmZI=
Subject key identifier: 98:B3:0D:90:59:39:63:BC:7B:0F:6F:4B:06:EC:39:21:9F:C0:A4:5E
Certificate issuer: /CN=adf491488a7cd8448a420945871c0b99672dc66e
Certificate serial: 0191EEB4AEA50475A86B12159CF00923C236
Authority key identifier: AD:F4:91:48:8A:7C:D8:44:8A:42:09:45:87:1C:0B:99:67:2D:C6:6E
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/rfSRSIp82ESKQglFhxwLmWctxm4.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/72/715d15-2810-4827-8dbd-0bee06126b1a/1/mLMNkFk5Y7x7D29LBuw5IZ_ApF4.roa
Signing time: Sat 14 Sep 2024 04:05:04 +0000
ROA not before: Sat 14 Sep 2024 04:05:04 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 205647
IP address blocks: 85.15.48.0/24 maxlen: 24
85.15.49.0/24 maxlen: 24
94.182.0.0/18 maxlen: 18
94.182.8.0/23 maxlen: 23
94.182.12.0/23 maxlen: 23
94.182.17.0/24 maxlen: 24
94.182.41.0/24 maxlen: 24
94.182.48.0/24 maxlen: 24
94.182.56.0/22 maxlen: 24
94.182.60.0/22 maxlen: 24
94.182.64.0/18 maxlen: 18
94.182.64.0/20 maxlen: 20
94.182.72.0/21 maxlen: 21
94.182.80.0/20 maxlen: 20
94.182.82.0/24 maxlen: 24
94.182.96.0/20 maxlen: 20
94.182.97.192/28 maxlen: 28
94.182.112.0/20 maxlen: 20
94.182.114.0/23 maxlen: 23
94.182.116.0/22 maxlen: 22
94.182.120.0/21 maxlen: 21
94.182.128.0/18 maxlen: 18
94.182.128.0/20 maxlen: 20
94.182.144.0/20 maxlen: 20
94.182.160.0/20 maxlen: 20
94.182.176.0/20 maxlen: 20
94.182.192.0/18 maxlen: 18
94.182.196.0/24 maxlen: 24
94.182.199.0/24 maxlen: 24
94.182.204.0/22 maxlen: 22
94.182.204.0/24 maxlen: 24
94.182.205.0/24 maxlen: 24
94.182.206.0/24 maxlen: 24
94.182.207.0/24 maxlen: 24
94.182.217.0/24 maxlen: 24
94.182.222.0/23 maxlen: 23
94.182.226.0/24 maxlen: 24
94.182.228.0/22 maxlen: 22
94.182.232.0/23 maxlen: 24
94.182.234.0/23 maxlen: 23
94.182.238.0/24 maxlen: 24
94.182.240.0/23 maxlen: 24
94.182.244.0/22 maxlen: 24
94.182.244.0/23 maxlen: 23
94.182.248.0/22 maxlen: 22
94.182.248.0/23 maxlen: 23
94.182.252.0/24 maxlen: 24
94.182.254.0/24 maxlen: 24
94.183.0.0/18 maxlen: 18
94.183.64.0/18 maxlen: 18
94.183.128.0/18 maxlen: 18
94.183.192.0/18 maxlen: 18
151.240.80.0/21 maxlen: 21
151.240.168.0/22 maxlen: 22
151.240.192.0/21 maxlen: 21
151.240.240.0/21 maxlen: 21
151.240.240.0/23 maxlen: 23
151.240.242.0/23 maxlen: 23
151.240.244.0/23 maxlen: 23
151.241.216.0/23 maxlen: 23
151.241.218.0/23 maxlen: 23
151.241.220.0/22 maxlen: 22
151.241.224.0/21 maxlen: 21
151.242.0.0/21 maxlen: 21
151.242.8.0/22 maxlen: 22
151.244.48.0/21 maxlen: 21
151.244.48.0/22 maxlen: 22
151.244.52.0/22 maxlen: 22
151.244.56.0/21 maxlen: 21
151.244.64.0/21 maxlen: 21
151.244.72.0/22 maxlen: 22
151.244.76.0/22 maxlen: 22
151.244.80.0/21 maxlen: 21
151.244.88.0/21 maxlen: 21
151.244.96.0/23 maxlen: 23
151.244.98.0/23 maxlen: 23
151.244.100.0/23 maxlen: 23
151.244.102.0/23 maxlen: 23
151.244.104.0/23 maxlen: 23
151.244.106.0/23 maxlen: 23
151.244.108.0/23 maxlen: 23
151.244.110.0/23 maxlen: 23
151.244.112.0/23 maxlen: 23
151.244.114.0/23 maxlen: 23
151.244.116.0/23 maxlen: 23
151.244.118.0/23 maxlen: 23
151.244.120.0/23 maxlen: 23
151.244.122.0/23 maxlen: 23
151.244.124.0/23 maxlen: 23
151.244.126.0/23 maxlen: 23
151.244.128.0/22 maxlen: 22
151.244.132.0/22 maxlen: 22
151.244.136.0/22 maxlen: 22
151.244.140.0/22 maxlen: 22
151.244.144.0/22 maxlen: 22
151.244.148.0/22 maxlen: 22
151.244.152.0/22 maxlen: 22
151.244.156.0/22 maxlen: 22
151.244.160.0/22 maxlen: 22
151.244.164.0/22 maxlen: 22
151.244.168.0/22 maxlen: 22
151.244.172.0/22 maxlen: 22
151.244.176.0/22 maxlen: 22
151.244.180.0/22 maxlen: 22
151.244.184.0/22 maxlen: 22
151.244.188.0/22 maxlen: 22
151.244.192.0/22 maxlen: 22
151.244.196.0/22 maxlen: 22
151.244.200.0/22 maxlen: 22
151.244.204.0/22 maxlen: 22
151.244.208.0/22 maxlen: 22
151.244.212.0/22 maxlen: 22
151.244.216.0/23 maxlen: 23
151.244.218.0/23 maxlen: 23
151.244.220.0/23 maxlen: 23
151.244.222.0/23 maxlen: 23
151.244.224.0/23 maxlen: 23
151.244.226.0/23 maxlen: 23
151.246.0.0/18 maxlen: 18
151.246.64.0/18 maxlen: 18
151.246.128.0/18 maxlen: 18
151.246.192.0/18 maxlen: 18
151.246.248.0/22 maxlen: 22
151.247.0.0/20 maxlen: 24
151.247.16.0/22 maxlen: 24
151.247.214.0/23 maxlen: 23
151.247.216.0/21 maxlen: 21
151.247.224.0/22 maxlen: 22
151.247.228.0/22 maxlen: 24
151.247.232.0/22 maxlen: 22
151.247.236.0/22 maxlen: 24
151.247.236.0/24 maxlen: 24
151.247.237.0/24 maxlen: 24
151.247.238.0/23 maxlen: 23
151.247.240.0/24 maxlen: 24
151.247.241.0/24 maxlen: 24
151.247.248.0/22 maxlen: 22
Validation: Failed, RFC 3779 resource not subset of parent's resources
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:91:ee:b4:ae:a5:04:75:a8:6b:12:15:9c:f0:09:23:c2:36
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=adf491488a7cd8448a420945871c0b99672dc66e
Validity
Not Before: Sep 14 04:05:04 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=98b30d90593963bc7b0f6f4b06ec39219fc0a45e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d7:fc:35:41:19:dc:0f:36:18:f3:c9:99:7c:11:
ec:e9:46:7b:93:9f:b4:95:eb:64:18:78:85:42:d2:
4a:2d:01:49:9e:13:be:89:03:a9:4c:21:32:8a:e6:
5e:07:c2:e0:b6:65:62:63:4c:5d:0c:3b:40:3d:9f:
2c:47:ac:1d:bd:69:1a:dd:5b:31:8e:5f:a6:81:d6:
85:92:78:71:1f:87:c2:63:a5:66:1f:28:e4:0a:7e:
d9:d3:99:60:25:fe:d8:f5:80:3d:05:64:d8:a6:61:
21:4a:b8:a8:13:56:aa:a0:d4:c7:a3:28:44:9c:48:
b7:4a:36:b6:d8:df:d0:7d:3b:37:48:8d:ad:2c:1b:
2e:40:59:7e:c1:2b:43:72:45:6d:82:b5:db:ad:fd:
a3:a6:54:c7:40:51:7b:e8:8b:af:f0:aa:a1:44:68:
ab:f6:e0:ac:0a:be:fe:f7:4f:24:e1:59:7b:52:4f:
8f:b0:d1:e6:f2:06:d9:e6:e2:bd:76:dd:d8:ba:78:
21:e4:6f:9f:b0:21:9b:f5:ce:e9:af:df:ac:f0:80:
3f:76:e4:b3:95:5d:00:de:39:13:18:c5:19:67:66:
3b:73:cc:c1:09:64:2a:b3:e0:87:e7:54:94:bc:0a:
ee:09:41:da:6f:37:e6:df:0e:d0:7b:03:14:32:77:
fc:31
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
98:B3:0D:90:59:39:63:BC:7B:0F:6F:4B:06:EC:39:21:9F:C0:A4:5E
X509v3 Authority Key Identifier:
keyid:AD:F4:91:48:8A:7C:D8:44:8A:42:09:45:87:1C:0B:99:67:2D:C6:6E
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/rfSRSIp82ESKQglFhxwLmWctxm4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/72/715d15-2810-4827-8dbd-0bee06126b1a/1/mLMNkFk5Y7x7D29LBuw5IZ_ApF4.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/72/715d15-2810-4827-8dbd-0bee06126b1a/1/rfSRSIp82ESKQglFhxwLmWctxm4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
85.15.48.0/23
94.182.0.0/15
151.240.80.0/21
151.240.168.0/22
151.240.192.0/21
151.240.240.0/21
151.241.216.0-151.241.231.255
151.242.0.0-151.242.11.255
151.244.48.0-151.244.227.255
151.246.0.0-151.247.19.255
151.247.214.0-151.247.241.255
151.247.248.0/22
Signature Algorithm: sha256WithRSAEncryption
3b:67:1a:57:ad:26:ee:dc:2d:8a:0b:f1:3b:dd:9a:30:8d:cc:
09:b2:d2:9e:3b:1e:b3:28:23:ed:6b:f3:cf:94:47:44:36:06:
c2:23:5f:b4:9d:7d:a3:e3:5f:e4:1d:22:85:73:b7:02:5f:bd:
d3:06:71:57:7a:a8:26:d1:c0:54:c1:cf:bb:05:40:c3:92:b8:
a2:95:fc:36:dd:47:f1:de:a9:2a:5c:7a:30:1d:56:d7:78:69:
1f:78:70:96:61:f8:53:a9:fd:d7:1e:d6:74:62:34:39:61:f5:
20:dd:ae:6f:d2:6c:d3:45:d3:68:18:62:d8:32:c5:ca:87:a3:
97:ce:94:82:d0:ea:6a:5b:7a:61:3f:2d:02:b0:92:b7:2b:98:
82:53:13:33:ca:7f:9c:4b:c3:83:39:99:8b:5f:73:b9:8d:fc:
e2:e4:63:df:b6:19:16:64:6f:3e:07:ec:80:13:32:5e:54:56:
e6:cb:93:f6:39:72:68:ec:c9:c7:96:6c:53:6f:38:81:22:6c:
0a:ba:a4:90:11:77:dc:8f:f9:27:b2:74:f0:7b:30:62:a6:c5:
b0:36:6d:7c:53:bd:5b:87:a6:96:89:9a:e0:79:6a:a9:39:9c:
c7:48:df:88:b8:eb:93:97:56:63:5d:f3:63:b4:17:be:a5:31:
3a:84:25:ff
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Mar 14 12:04:42 2025 by rpki-client