Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/8d/9755d5-7f0b-427f-afe0-d712d4738046/1/WlsL-d42T3YgMdIMxvLZ6__WOsY.roa
File: WlsL-d42T3YgMdIMxvLZ6__WOsY.roa (raw, json)
Hash identifier: 9jcZ4tYdWb9ZG3ZwuPD8/faTgaIZRdrH9gHu4j7CTd0=
Subject key identifier: 5A:5B:0B:F9:DE:36:4F:76:20:31:D2:0C:C6:F2:D9:EB:FF:D6:3A:C6
Certificate issuer: /CN=ca96218c20efd8fe53fca9990b725dd7963c885c
Certificate serial: 018D3B4C45F2BFB6EC3A2F77A2C6095A3F26
Authority key identifier: CA:96:21:8C:20:EF:D8:FE:53:FC:A9:99:0B:72:5D:D7:96:3C:88:5C
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/ypYhjCDv2P5T_KmZC3Jd15Y8iFw.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/8d/9755d5-7f0b-427f-afe0-d712d4738046/1/WlsL-d42T3YgMdIMxvLZ6__WOsY.roa
Signing time: Wed 24 Jan 2024 11:47:50 +0000
ROA not before: Wed 24 Jan 2024 11:47:50 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 25145
IP address blocks: 31.40.240.0/24 maxlen: 24
31.40.242.0/24 maxlen: 24
31.40.243.0/24 maxlen: 24
77.92.96.0/24 maxlen: 24
77.92.97.0/24 maxlen: 24
77.92.98.0/24 maxlen: 24
77.92.99.0/24 maxlen: 24
77.92.100.0/24 maxlen: 24
77.92.101.0/24 maxlen: 24
77.92.102.0/24 maxlen: 24
77.92.103.0/24 maxlen: 24
77.92.104.0/24 maxlen: 24
77.92.105.0/24 maxlen: 24
77.92.106.0/24 maxlen: 24
77.92.107.0/24 maxlen: 24
77.92.108.0/24 maxlen: 24
77.92.109.0/24 maxlen: 24
77.92.110.0/24 maxlen: 24
77.92.111.0/24 maxlen: 24
77.92.112.0/24 maxlen: 24
77.92.113.0/24 maxlen: 24
77.92.114.0/24 maxlen: 24
77.92.115.0/24 maxlen: 24
77.92.116.0/24 maxlen: 24
77.92.117.0/24 maxlen: 24
77.92.118.0/24 maxlen: 24
77.92.119.0/24 maxlen: 24
77.92.120.0/24 maxlen: 24
77.92.122.0/24 maxlen: 24
77.92.123.0/24 maxlen: 24
77.92.124.0/24 maxlen: 24
77.92.125.0/24 maxlen: 24
77.92.126.0/24 maxlen: 24
77.92.127.0/24 maxlen: 24
185.115.208.0/24 maxlen: 24
185.115.210.0/24 maxlen: 24
185.115.211.0/24 maxlen: 24
213.144.96.0/24 maxlen: 24
213.144.97.0/24 maxlen: 24
213.144.98.0/24 maxlen: 24
213.144.99.0/24 maxlen: 24
213.144.101.0/24 maxlen: 24
213.144.103.0/24 maxlen: 24
213.144.104.0/24 maxlen: 24
213.144.105.0/24 maxlen: 24
213.144.106.0/24 maxlen: 24
213.144.107.0/24 maxlen: 24
213.144.108.0/24 maxlen: 24
213.144.109.0/24 maxlen: 24
213.144.110.0/24 maxlen: 24
213.144.111.0/24 maxlen: 24
213.144.112.0/24 maxlen: 24
213.144.113.0/24 maxlen: 24
213.144.114.0/24 maxlen: 24
213.144.115.0/24 maxlen: 24
213.144.116.0/24 maxlen: 24
213.144.117.0/24 maxlen: 24
213.144.118.0/24 maxlen: 24
213.144.119.0/24 maxlen: 24
213.144.120.0/24 maxlen: 24
213.144.121.0/24 maxlen: 24
213.144.122.0/24 maxlen: 24
213.144.123.0/24 maxlen: 24
213.144.124.0/24 maxlen: 24
213.144.125.0/24 maxlen: 24
213.144.126.0/24 maxlen: 24
213.144.127.0/24 maxlen: 24
2a02:ac80::/29 maxlen: 29
2a02:ac80::/32 maxlen: 32
2a02:ac80:10::/48 maxlen: 48
2a02:ac80:20::/48 maxlen: 48
2a02:ac80:30::/48 maxlen: 48
2a02:ac80:40::/48 maxlen: 48
2a02:ac80:50::/48 maxlen: 48
2a02:ac80:60::/48 maxlen: 48
2a02:ac80:70::/48 maxlen: 48
2a02:ac80:a0::/48 maxlen: 48
2a02:ac80:b0::/48 maxlen: 48
2a02:ac80:c0::/48 maxlen: 48
2a02:ac80:d0::/48 maxlen: 48
2a02:ac80:e0::/48 maxlen: 48
2a02:ac80:f0::/48 maxlen: 48
2a02:ac80:100::/48 maxlen: 48
2a02:ac80:200::/48 maxlen: 48
2a02:ac80:300::/48 maxlen: 48
2a02:ac80:400::/48 maxlen: 48
2a02:ac80:500::/48 maxlen: 48
2a02:ac80:600::/48 maxlen: 48
2a02:ac80:700::/48 maxlen: 48
2a02:ac80:a00::/48 maxlen: 48
2a02:ac80:b00::/48 maxlen: 48
2a02:ac80:c00::/48 maxlen: 48
2a02:ac80:d00::/48 maxlen: 48
2a02:ac80:e00::/48 maxlen: 48
2a02:ac80:f00::/48 maxlen: 48
2a02:ac80:1000::/48 maxlen: 48
2a02:ac80:2000::/48 maxlen: 48
2a02:ac80:3000::/48 maxlen: 48
2a02:ac80:4000::/48 maxlen: 48
2a02:ac80:5000::/48 maxlen: 48
2a02:ac80:6000::/48 maxlen: 48
2a02:ac80:7000::/48 maxlen: 48
2a02:ac80:7370::/48 maxlen: 48
2a02:ac80:a000::/48 maxlen: 48
2a02:ac80:b000::/48 maxlen: 48
2a02:ac80:c000::/48 maxlen: 48
2a02:ac80:d000::/48 maxlen: 48
2a02:ac80:e000::/48 maxlen: 48
2a02:ac80:f000::/48 maxlen: 48
2a02:ac81::/32 maxlen: 32
2a02:ac82::/32 maxlen: 32
2a02:ac83::/32 maxlen: 32
2a02:ac84::/32 maxlen: 32
2a02:ac85::/32 maxlen: 32
2a02:ac86::/32 maxlen: 32
2a02:ac87::/32 maxlen: 32
2a02:ac87:5900::/48 maxlen: 48
2a02:ac87:59cb::/48 maxlen: 48
2a02:ac87:ac87::/48 maxlen: 48
Validation: Failed, RFC 3779 resource not subset of parent's resources
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8d:3b:4c:45:f2:bf:b6:ec:3a:2f:77:a2:c6:09:5a:3f:26
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=ca96218c20efd8fe53fca9990b725dd7963c885c
Validity
Not Before: Jan 24 11:47:50 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=5a5b0bf9de364f762031d20cc6f2d9ebffd63ac6
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:87:b1:cf:c7:3d:5a:16:38:16:03:ac:82:66:f4:
50:80:41:4a:c2:bd:e7:c9:b0:52:31:e6:5e:7e:9b:
b6:e3:6e:65:4c:65:19:c5:9f:e6:b1:b8:58:c9:26:
62:a0:22:e4:0a:85:60:f0:31:f4:50:26:53:b6:c5:
71:fa:c2:27:0c:05:8f:6a:cf:e0:5d:ae:9c:de:77:
a0:df:fa:94:2b:c6:13:2c:60:e2:80:3a:60:e9:a3:
49:f1:5f:e0:f4:7d:f6:c0:26:d0:2f:47:4b:a5:b9:
97:11:18:78:73:f9:8b:2b:9b:f6:bc:c7:e4:52:48:
02:d0:97:6b:b0:ba:19:7f:67:a6:fb:4f:5f:e0:6c:
d6:a9:7a:6e:06:e9:64:ae:d6:45:cc:ea:d0:49:a7:
a3:ee:ad:2b:cf:68:dc:d2:76:a2:46:ac:53:84:44:
9a:5c:e0:db:97:55:2d:a9:84:e9:84:49:f4:65:ae:
c7:d1:3e:91:be:f3:5e:da:c4:70:c6:47:f4:19:02:
ee:f2:d0:81:4f:59:0e:2a:1b:f1:42:08:bd:a2:77:
3b:c6:04:45:a4:a2:0f:db:d7:ff:01:79:de:1b:ea:
85:d0:10:df:f2:6c:ef:81:dd:1b:31:60:bb:0b:06:
14:bc:1e:b3:9b:e0:86:c7:dd:f5:b9:de:0a:d4:e9:
a2:2f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
5A:5B:0B:F9:DE:36:4F:76:20:31:D2:0C:C6:F2:D9:EB:FF:D6:3A:C6
X509v3 Authority Key Identifier:
keyid:CA:96:21:8C:20:EF:D8:FE:53:FC:A9:99:0B:72:5D:D7:96:3C:88:5C
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ypYhjCDv2P5T_KmZC3Jd15Y8iFw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/8d/9755d5-7f0b-427f-afe0-d712d4738046/1/WlsL-d42T3YgMdIMxvLZ6__WOsY.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/8d/9755d5-7f0b-427f-afe0-d712d4738046/1/ypYhjCDv2P5T_KmZC3Jd15Y8iFw.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
31.40.240.0/24
31.40.242.0/23
77.92.96.0-77.92.120.255
77.92.122.0-77.92.127.255
185.115.208.0/24
185.115.210.0/23
213.144.96.0/22
213.144.101.0/24
213.144.103.0-213.144.127.255
IPv6:
2a02:ac80::/29
Signature Algorithm: sha256WithRSAEncryption
b7:38:e2:91:13:14:41:2f:d4:ff:61:18:52:c0:8c:be:7d:0a:
83:e1:46:4c:39:bd:d4:a0:b9:f5:3d:16:64:f3:8b:83:8a:b4:
19:d7:c3:40:93:67:a9:5b:45:02:65:9b:6a:35:75:1a:ce:49:
d5:9e:d5:36:f5:a9:66:91:4c:fa:b9:6a:3d:f8:f9:3d:95:5a:
9c:bc:87:34:1e:e8:55:e9:7a:3c:ec:31:d1:20:52:e4:74:2f:
3f:1a:49:4d:aa:ec:e5:50:e4:97:4f:60:39:4a:3c:6a:50:19:
95:43:24:47:e1:8f:59:11:d8:ea:86:00:46:f5:10:c2:47:1e:
89:69:d2:f3:53:da:98:c0:2d:12:99:f3:29:4f:7e:00:bb:12:
bb:6c:ae:9d:76:d1:1e:7e:bb:b9:e8:f2:a8:cc:5a:d9:a7:36:
b6:68:d5:ff:aa:9e:ce:e0:57:63:45:d2:d4:bb:a5:70:6b:67:
84:e4:b9:5d:6e:b7:78:82:ee:0a:77:f7:49:ff:e2:3f:ad:17:
db:57:f6:64:82:d9:73:16:98:a4:64:05:ab:db:89:a2:ba:32:
3f:4a:16:68:82:3f:96:56:34:ca:ef:a3:d7:d2:e3:00:95:61:
10:60:99:10:d3:ef:d6:ca:7a:e2:74:dd:53:d8:9f:96:79:ae:
66:08:58:d2
-----BEGIN CERTIFICATE-----
MIIFVDCCBDygAwIBAgISAY07TEXyv7bsOi93osYJWj8mMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGNhOTYyMThjMjBlZmQ4ZmU1M2ZjYTk5OTBiNzI1ZGQ3OTYz
Yzg4NWMwHhcNMjQwMTI0MTE0NzUwWhcNMjUwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
Eyg1YTViMGJmOWRlMzY0Zjc2MjAzMWQyMGNjNmYyZDllYmZmZDYzYWM2MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAh7HPxz1aFjgWA6yCZvRQgEFKwr3n
ybBSMeZefpu2425lTGUZxZ/msbhYySZioCLkCoVg8DH0UCZTtsVx+sInDAWPas/g
Xa6c3neg3/qUK8YTLGDigDpg6aNJ8V/g9H32wCbQL0dLpbmXERh4c/mLK5v2vMfk
UkgC0JdrsLoZf2em+09f4GzWqXpuBulkrtZFzOrQSaej7q0rz2jc0naiRqxThESa
XODbl1UtqYTphEn0Za7H0T6RvvNe2sRwxkf0GQLu8tCBT1kOKhvxQgi9onc7xgRF
pKIP29f/AXneG+qF0BDf8mzvgd0bMWC7CwYUvB6zm+CGx931ud4K1OmiLwIDAQAB
o4ICYDCCAlwwHQYDVR0OBBYEFFpbC/neNk92IDHSDMby2ev/1jrGMB8GA1UdIwQY
MBaAFMqWIYwg79j+U/ypmQtyXdeWPIhcMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQveXBZaGpDRHYyUDVUX0ttWkMzSmQxNVk4aUZ3LmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC84ZC85NzU1ZDUtN2YwYi00MjdmLWFmZTAt
ZDcxMmQ0NzM4MDQ2LzEvV2xzTC1kNDJUM1lnTWRJTXh2TFo2X19XT3NZLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC84ZC85NzU1ZDUtN2YwYi00MjdmLWFmZTAtZDcxMmQ0NzM4MDQ2
LzEveXBZaGpDRHYyUDVUX0ttWkMzSmQxNVk4aUZ3LmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMHYGCCsGAQUFBwEHAQH/BGcwZTBUBAIAATBOAwQAHyjwAwQB
HyjyMAwDBAVNXGADBABNXHgwDAMEAU1cegMEB01cAAMEALlz0AMEAblz0gMEAtWQ
YAMEANWQZTAMAwQA1ZBnAwQH1ZAAMA0EAgACMAcDBQMqAqyAMA0GCSqGSIb3DQEB
CwUAA4IBAQC3OOKRExRBL9T/YRhSwIy+fQqD4UZMOb3UoLn1PRZk84uDirQZ18NA
k2epW0UCZZtqNXUazknVntU29almkUz6uWo9+Pk9lVqcvIc0HuhV6Xo87DHRIFLk
dC8/GklNquzlUOSXT2A5SjxqUBmVQyRH4Y9ZEdjqhgBG9RDCRx6JadLzU9qYwC0S
mfMpT34AuxK7bK6ddtEefru56PKozFrZpza2aNX/qp7O4FdjRdLUu6Vwa2eE5Lld
brd4gu4Kd/dJ/+I/rRfbV/ZkgtlzFpikZAWr24miujI/ShZogj+WVjTK76PX0uMA
lWEQYJkQ0+/WynridN1T2J+Wea5mCFjS
-----END CERTIFICATE-----
Generated at Tue Apr 22 21:05:13 2025 by rpki-client