Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/72/715d15-2810-4827-8dbd-0bee06126b1a/1/Dwb6IW7ghwJYQbhyI3JEwquqccI.roa
File: Dwb6IW7ghwJYQbhyI3JEwquqccI.roa (raw, json)
Hash identifier: Rxl2GUmPhEdnsb9ir599jtGReWSBczLkLXTNALlNB2M=
Subject key identifier: 0F:06:FA:21:6E:E0:87:02:58:41:B8:72:23:72:44:C2:AB:AA:71:C2
Certificate issuer: /CN=adf491488a7cd8448a420945871c0b99672dc66e
Certificate serial: 0191D6C5BCA55A2DB93980A08F8F152BEB64
Authority key identifier: AD:F4:91:48:8A:7C:D8:44:8A:42:09:45:87:1C:0B:99:67:2D:C6:6E
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/rfSRSIp82ESKQglFhxwLmWctxm4.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/72/715d15-2810-4827-8dbd-0bee06126b1a/1/Dwb6IW7ghwJYQbhyI3JEwquqccI.roa
Signing time: Mon 09 Sep 2024 12:32:48 +0000
ROA not before: Mon 09 Sep 2024 12:32:48 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 205647
IP address blocks: 85.15.48.0/24 maxlen: 24
85.15.49.0/24 maxlen: 24
94.182.0.0/18 maxlen: 18
94.182.8.0/23 maxlen: 23
94.182.12.0/23 maxlen: 23
94.182.17.0/24 maxlen: 24
94.182.41.0/24 maxlen: 24
94.182.48.0/24 maxlen: 24
94.182.56.0/22 maxlen: 24
94.182.60.0/22 maxlen: 24
94.182.64.0/18 maxlen: 18
94.182.64.0/20 maxlen: 20
94.182.72.0/21 maxlen: 21
94.182.80.0/20 maxlen: 20
94.182.82.0/24 maxlen: 24
94.182.96.0/20 maxlen: 20
94.182.97.192/28 maxlen: 28
94.182.112.0/20 maxlen: 20
94.182.114.0/23 maxlen: 23
94.182.116.0/22 maxlen: 22
94.182.120.0/21 maxlen: 21
94.182.128.0/18 maxlen: 18
94.182.128.0/20 maxlen: 20
94.182.144.0/20 maxlen: 20
94.182.160.0/20 maxlen: 20
94.182.176.0/20 maxlen: 20
94.182.192.0/18 maxlen: 18
94.182.196.0/24 maxlen: 24
94.182.199.0/24 maxlen: 24
94.182.204.0/22 maxlen: 22
94.182.204.0/24 maxlen: 24
94.182.205.0/24 maxlen: 24
94.182.206.0/24 maxlen: 24
94.182.207.0/24 maxlen: 24
94.182.217.0/24 maxlen: 24
94.182.222.0/23 maxlen: 23
94.182.226.0/24 maxlen: 24
94.182.228.0/22 maxlen: 22
94.182.232.0/23 maxlen: 24
94.182.234.0/23 maxlen: 23
94.182.238.0/24 maxlen: 24
94.182.240.0/23 maxlen: 24
94.182.244.0/22 maxlen: 22
94.182.244.0/23 maxlen: 23
94.182.248.0/22 maxlen: 22
94.182.248.0/23 maxlen: 23
94.182.252.0/24 maxlen: 24
94.182.254.0/24 maxlen: 24
94.183.0.0/18 maxlen: 18
94.183.64.0/18 maxlen: 18
94.183.128.0/18 maxlen: 18
94.183.192.0/18 maxlen: 18
151.240.80.0/21 maxlen: 21
151.240.168.0/22 maxlen: 22
151.240.192.0/21 maxlen: 21
151.240.240.0/21 maxlen: 21
151.240.240.0/23 maxlen: 23
151.240.242.0/23 maxlen: 23
151.240.244.0/23 maxlen: 23
151.241.216.0/23 maxlen: 23
151.241.218.0/23 maxlen: 23
151.241.220.0/22 maxlen: 22
151.241.224.0/21 maxlen: 21
151.242.0.0/21 maxlen: 21
151.242.8.0/22 maxlen: 22
151.244.48.0/21 maxlen: 21
151.244.48.0/22 maxlen: 22
151.244.52.0/22 maxlen: 22
151.244.56.0/21 maxlen: 21
151.244.64.0/21 maxlen: 21
151.244.72.0/22 maxlen: 22
151.244.76.0/22 maxlen: 22
151.244.80.0/21 maxlen: 21
151.244.88.0/21 maxlen: 21
151.244.96.0/23 maxlen: 23
151.244.98.0/23 maxlen: 23
151.244.100.0/23 maxlen: 23
151.244.102.0/23 maxlen: 23
151.244.104.0/23 maxlen: 23
151.244.106.0/23 maxlen: 23
151.244.108.0/23 maxlen: 23
151.244.110.0/23 maxlen: 23
151.244.112.0/23 maxlen: 23
151.244.114.0/23 maxlen: 23
151.244.116.0/23 maxlen: 23
151.244.118.0/23 maxlen: 23
151.244.120.0/23 maxlen: 23
151.244.122.0/23 maxlen: 23
151.244.124.0/23 maxlen: 23
151.244.126.0/23 maxlen: 23
151.244.128.0/22 maxlen: 22
151.244.132.0/22 maxlen: 22
151.244.136.0/22 maxlen: 22
151.244.140.0/22 maxlen: 22
151.244.144.0/22 maxlen: 22
151.244.148.0/22 maxlen: 22
151.244.152.0/22 maxlen: 22
151.244.156.0/22 maxlen: 22
151.244.160.0/22 maxlen: 22
151.244.164.0/22 maxlen: 22
151.244.168.0/22 maxlen: 22
151.244.172.0/22 maxlen: 22
151.244.176.0/22 maxlen: 22
151.244.180.0/22 maxlen: 22
151.244.184.0/22 maxlen: 22
151.244.188.0/22 maxlen: 22
151.244.192.0/22 maxlen: 22
151.244.196.0/22 maxlen: 22
151.244.200.0/22 maxlen: 22
151.244.204.0/22 maxlen: 22
151.244.208.0/22 maxlen: 22
151.244.212.0/22 maxlen: 22
151.244.216.0/23 maxlen: 23
151.244.218.0/23 maxlen: 23
151.244.220.0/23 maxlen: 23
151.244.222.0/23 maxlen: 23
151.244.224.0/23 maxlen: 23
151.244.226.0/23 maxlen: 23
151.246.0.0/18 maxlen: 18
151.246.64.0/18 maxlen: 18
151.246.128.0/18 maxlen: 18
151.246.192.0/18 maxlen: 18
151.246.248.0/22 maxlen: 22
151.247.0.0/20 maxlen: 24
151.247.16.0/22 maxlen: 24
151.247.214.0/23 maxlen: 23
151.247.216.0/21 maxlen: 21
151.247.224.0/22 maxlen: 22
151.247.228.0/22 maxlen: 24
151.247.232.0/22 maxlen: 22
151.247.236.0/22 maxlen: 24
151.247.236.0/24 maxlen: 24
151.247.237.0/24 maxlen: 24
151.247.238.0/23 maxlen: 23
151.247.240.0/24 maxlen: 24
151.247.241.0/24 maxlen: 24
151.247.248.0/22 maxlen: 22
Validation: Failed, RFC 3779 resource not subset of parent's resources
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:91:d6:c5:bc:a5:5a:2d:b9:39:80:a0:8f:8f:15:2b:eb:64
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=adf491488a7cd8448a420945871c0b99672dc66e
Validity
Not Before: Sep 9 12:32:48 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=0f06fa216ee087025841b872237244c2abaa71c2
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a7:48:56:68:dc:89:11:0b:f7:e5:3d:0a:1a:be:
60:dc:f5:29:a2:6c:5f:ba:04:47:c9:ee:9d:7b:88:
f7:9e:40:21:eb:7a:f4:d3:a9:87:3c:e3:bf:c5:fc:
97:20:c4:81:ba:d8:2a:ec:a9:cc:91:e0:6c:65:4e:
a2:6c:b1:d2:d7:a7:08:5a:fd:55:f6:23:ba:18:37:
94:4e:55:0e:61:0c:a8:a1:51:18:0f:df:88:29:33:
e3:5a:f1:1d:f8:a6:13:66:0b:09:8d:ce:36:b7:19:
0f:3c:4c:7d:65:4a:54:a7:72:ea:5d:1d:12:b8:02:
4c:70:1c:0d:54:7b:f0:ce:3e:7f:6d:d5:6b:1a:80:
5d:7a:a8:ef:a2:75:c1:8a:a1:01:90:93:2d:5d:d6:
5f:28:3a:b7:7d:e6:98:a4:d6:97:90:d8:8a:6b:c2:
1e:9e:62:ab:45:79:50:96:45:84:8a:5d:c4:df:fb:
e7:d4:40:c1:be:9b:fa:8d:26:54:5d:38:0c:a2:32:
72:fe:14:d7:db:44:52:09:ec:8a:a1:09:9c:82:29:
df:c6:ab:27:1a:07:c2:00:df:77:85:ab:fd:9e:28:
86:de:ff:ba:6f:8a:07:a5:a7:e4:5b:7b:a0:04:bf:
34:66:4e:cb:0b:5c:87:7e:71:c0:bd:8a:b0:c4:5d:
0d:31
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
0F:06:FA:21:6E:E0:87:02:58:41:B8:72:23:72:44:C2:AB:AA:71:C2
X509v3 Authority Key Identifier:
keyid:AD:F4:91:48:8A:7C:D8:44:8A:42:09:45:87:1C:0B:99:67:2D:C6:6E
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/rfSRSIp82ESKQglFhxwLmWctxm4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/72/715d15-2810-4827-8dbd-0bee06126b1a/1/Dwb6IW7ghwJYQbhyI3JEwquqccI.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/72/715d15-2810-4827-8dbd-0bee06126b1a/1/rfSRSIp82ESKQglFhxwLmWctxm4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
85.15.48.0/23
94.182.0.0/15
151.240.80.0/21
151.240.168.0/22
151.240.192.0/21
151.240.240.0/21
151.241.216.0-151.241.231.255
151.242.0.0-151.242.11.255
151.244.48.0-151.244.227.255
151.246.0.0-151.247.19.255
151.247.214.0-151.247.241.255
151.247.248.0/22
Signature Algorithm: sha256WithRSAEncryption
89:f8:90:07:c3:d9:7a:d7:3b:04:4d:ae:8c:76:b6:bf:6b:32:
42:01:1c:56:05:ea:af:cc:e9:2c:b8:92:d8:b0:b0:35:a8:06:
f5:1e:71:03:19:65:c5:61:a8:10:c6:af:5b:63:be:9b:0a:50:
63:24:74:d8:0b:e4:a8:35:62:15:60:1d:32:35:07:e2:4f:25:
94:c7:85:55:1e:2c:89:04:a2:55:65:60:75:e8:59:fb:2e:db:
42:9b:85:ac:59:49:e2:01:41:48:53:e7:9a:1c:78:a9:01:59:
a8:3a:b7:bd:0d:d5:1c:69:4b:17:db:4f:b7:e7:a5:3e:f2:1e:
42:97:ec:30:1b:09:63:9f:21:ce:ea:74:5a:61:14:7b:19:5c:
cb:e6:19:18:61:e0:d0:00:4e:1e:00:09:a6:bc:e8:45:02:62:
91:0e:a4:d4:0e:85:b6:04:36:34:28:1e:99:24:76:fb:75:a3:
62:61:7e:19:8f:89:31:e6:4b:e3:de:e1:d1:73:f5:9a:af:9c:
2e:a7:78:8b:0c:c5:8e:9a:72:e5:8f:ab:2a:b7:5f:27:bb:16:
38:08:97:ae:51:75:d7:98:d5:25:a5:de:f7:a3:23:15:f9:cf:
37:84:b1:ad:83:e0:ce:0b:c6:27:67:39:2e:15:2d:ac:29:d0:
9e:ec:43:70
-----BEGIN CERTIFICATE-----
MIIFZTCCBE2gAwIBAgISAZHWxbylWi25OYCgj48VK+tkMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGFkZjQ5MTQ4OGE3Y2Q4NDQ4YTQyMDk0NTg3MWMwYjk5Njcy
ZGM2NmUwHhcNMjQwOTA5MTIzMjQ4WhcNMjUwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EygwZjA2ZmEyMTZlZTA4NzAyNTg0MWI4NzIyMzcyNDRjMmFiYWE3MWMyMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAp0hWaNyJEQv35T0KGr5g3PUpomxf
ugRHye6de4j3nkAh63r006mHPOO/xfyXIMSButgq7KnMkeBsZU6ibLHS16cIWv1V
9iO6GDeUTlUOYQyooVEYD9+IKTPjWvEd+KYTZgsJjc42txkPPEx9ZUpUp3LqXR0S
uAJMcBwNVHvwzj5/bdVrGoBdeqjvonXBiqEBkJMtXdZfKDq3feaYpNaXkNiKa8Ie
nmKrRXlQlkWEil3E3/vn1EDBvpv6jSZUXTgMojJy/hTX20RSCeyKoQmcginfxqsn
GgfCAN93hav9niiG3v+6b4oHpafkW3ugBL80Zk7LC1yHfnHAvYqwxF0NMQIDAQAB
o4ICcTCCAm0wHQYDVR0OBBYEFA8G+iFu4IcCWEG4ciNyRMKrqnHCMB8GA1UdIwQY
MBaAFK30kUiKfNhEikIJRYccC5lnLcZuMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvcmZTUlNJcDgyRVNLUWdsRmh4d0xtV2N0eG00LmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC83Mi83MTVkMTUtMjgxMC00ODI3LThkYmQt
MGJlZTA2MTI2YjFhLzEvRHdiNklXN2dod0pZUWJoeUkzSkV3cXVxY2NJLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC83Mi83MTVkMTUtMjgxMC00ODI3LThkYmQtMGJlZTA2MTI2YjFh
LzEvcmZTUlNJcDgyRVNLUWdsRmh4d0xtV2N0eG00LmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMIGGBggrBgEFBQcBBwEB/wR3MHUwcwQCAAEwbQMEAVUPMAMD
AV62AwQDl/BQAwQCl/CoAwQDl/DAAwQDl/DwMAwDBAOX8dgDBAOX8eAwCwMDAZfy
AwQCl/IIMAwDBASX9DADBAKX9OAwCwMDAZf2AwQCl/cQMAwDBAGX99YDBAGX9/AD
BAKX9/gwDQYJKoZIhvcNAQELBQADggEBAIn4kAfD2XrXOwRNrox2tr9rMkIBHFYF
6q/M6Sy4ktiwsDWoBvUecQMZZcVhqBDGr1tjvpsKUGMkdNgL5Kg1YhVgHTI1B+JP
JZTHhVUeLIkEolVlYHXoWfsu20KbhaxZSeIBQUhT55oceKkBWag6t70N1RxpSxfb
T7fnpT7yHkKX7DAbCWOfIc7qdFphFHsZXMvmGRhh4NAATh4ACaa86EUCYpEOpNQO
hbYENjQoHpkkdvt1o2JhfhmPiTHmS+Pe4dFz9ZqvnC6neIsMxY6acuWPqyq3Xye7
FjgIl65RddeY1SWl3vejIxX5zzeEsa2D4M4LxidnOS4VLawp0J7sQ3A=
-----END CERTIFICATE-----
Generated at Wed May 14 17:20:35 2025 by rpki-client