Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/72/715d15-2810-4827-8dbd-0bee06126b1a/1/GbhLVtifnCatrE2kiODnhyXIhjU.roa
File: GbhLVtifnCatrE2kiODnhyXIhjU.roa (raw, json)
Hash identifier: cCt/mr89E6xfBvFco8SFPEpOizj7wq3vir6YhDPc1lI=
Subject key identifier: 19:B8:4B:56:D8:9F:9C:26:AD:AC:4D:A4:88:E0:E7:87:25:C8:86:35
Certificate issuer: /CN=adf491488a7cd8448a420945871c0b99672dc66e
Certificate serial: 01907E46CD65E3922B78F5E58ADFC29A915A
Authority key identifier: AD:F4:91:48:8A:7C:D8:44:8A:42:09:45:87:1C:0B:99:67:2D:C6:6E
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/rfSRSIp82ESKQglFhxwLmWctxm4.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/72/715d15-2810-4827-8dbd-0bee06126b1a/1/GbhLVtifnCatrE2kiODnhyXIhjU.roa
Signing time: Thu 04 Jul 2024 15:04:47 +0000
ROA not before: Thu 04 Jul 2024 15:04:47 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 205647
IP address blocks: 85.15.48.0/24 maxlen: 24
85.15.49.0/24 maxlen: 24
94.182.0.0/18 maxlen: 18
94.182.8.0/23 maxlen: 23
94.182.12.0/23 maxlen: 23
94.182.17.0/24 maxlen: 24
94.182.41.0/24 maxlen: 24
94.182.48.0/24 maxlen: 24
94.182.56.0/22 maxlen: 22
94.182.60.0/22 maxlen: 22
94.182.64.0/18 maxlen: 18
94.182.64.0/20 maxlen: 20
94.182.72.0/21 maxlen: 21
94.182.80.0/20 maxlen: 20
94.182.82.0/24 maxlen: 24
94.182.96.0/20 maxlen: 20
94.182.97.192/28 maxlen: 28
94.182.112.0/20 maxlen: 20
94.182.114.0/23 maxlen: 23
94.182.116.0/22 maxlen: 22
94.182.120.0/21 maxlen: 21
94.182.128.0/18 maxlen: 18
94.182.128.0/20 maxlen: 20
94.182.144.0/20 maxlen: 20
94.182.160.0/20 maxlen: 20
94.182.176.0/20 maxlen: 20
94.182.192.0/18 maxlen: 18
94.182.204.0/22 maxlen: 22
94.182.204.0/24 maxlen: 24
94.182.205.0/24 maxlen: 24
94.182.206.0/24 maxlen: 24
94.182.207.0/24 maxlen: 24
94.182.217.0/24 maxlen: 24
94.182.222.0/23 maxlen: 23
94.182.226.0/24 maxlen: 24
94.182.228.0/22 maxlen: 22
94.182.232.0/23 maxlen: 23
94.182.234.0/23 maxlen: 23
94.182.238.0/24 maxlen: 24
94.182.240.0/23 maxlen: 23
94.182.244.0/22 maxlen: 22
94.182.244.0/23 maxlen: 23
94.182.248.0/22 maxlen: 22
94.182.248.0/23 maxlen: 23
94.182.252.0/24 maxlen: 24
94.182.254.0/24 maxlen: 24
94.183.0.0/18 maxlen: 18
94.183.64.0/18 maxlen: 18
94.183.128.0/18 maxlen: 18
94.183.192.0/18 maxlen: 18
151.240.80.0/21 maxlen: 21
151.240.168.0/22 maxlen: 22
151.240.192.0/21 maxlen: 21
151.240.240.0/21 maxlen: 21
151.240.240.0/23 maxlen: 23
151.240.242.0/23 maxlen: 23
151.240.244.0/23 maxlen: 23
151.241.216.0/23 maxlen: 23
151.241.218.0/23 maxlen: 23
151.241.220.0/22 maxlen: 22
151.241.224.0/21 maxlen: 21
151.242.0.0/21 maxlen: 21
151.242.8.0/22 maxlen: 22
151.244.48.0/21 maxlen: 21
151.244.48.0/22 maxlen: 22
151.244.52.0/22 maxlen: 22
151.244.56.0/21 maxlen: 21
151.244.64.0/21 maxlen: 21
151.244.72.0/22 maxlen: 22
151.244.76.0/22 maxlen: 22
151.244.80.0/21 maxlen: 21
151.244.88.0/21 maxlen: 21
151.244.96.0/23 maxlen: 23
151.244.98.0/23 maxlen: 23
151.244.100.0/23 maxlen: 23
151.244.102.0/23 maxlen: 23
151.244.104.0/23 maxlen: 23
151.244.106.0/23 maxlen: 23
151.244.108.0/23 maxlen: 23
151.244.110.0/23 maxlen: 23
151.244.112.0/23 maxlen: 23
151.244.114.0/23 maxlen: 23
151.244.116.0/23 maxlen: 23
151.244.118.0/23 maxlen: 23
151.244.120.0/23 maxlen: 23
151.244.122.0/23 maxlen: 23
151.244.124.0/23 maxlen: 23
151.244.126.0/23 maxlen: 23
151.244.128.0/22 maxlen: 22
151.244.132.0/22 maxlen: 22
151.244.136.0/22 maxlen: 22
151.244.140.0/22 maxlen: 22
151.244.144.0/22 maxlen: 22
151.244.148.0/22 maxlen: 22
151.244.152.0/22 maxlen: 22
151.244.156.0/22 maxlen: 22
151.244.160.0/22 maxlen: 22
151.244.164.0/22 maxlen: 22
151.244.168.0/22 maxlen: 22
151.244.172.0/22 maxlen: 22
151.244.176.0/22 maxlen: 22
151.244.180.0/22 maxlen: 22
151.244.184.0/22 maxlen: 22
151.244.188.0/22 maxlen: 22
151.244.192.0/22 maxlen: 22
151.244.196.0/22 maxlen: 22
151.244.200.0/22 maxlen: 22
151.244.204.0/22 maxlen: 22
151.244.208.0/22 maxlen: 22
151.244.212.0/22 maxlen: 22
151.244.216.0/23 maxlen: 23
151.244.218.0/23 maxlen: 23
151.244.220.0/23 maxlen: 23
151.244.222.0/23 maxlen: 23
151.244.224.0/23 maxlen: 23
151.244.226.0/23 maxlen: 23
151.246.0.0/18 maxlen: 18
151.246.64.0/18 maxlen: 18
151.246.128.0/18 maxlen: 18
151.246.192.0/18 maxlen: 18
151.246.248.0/22 maxlen: 22
151.247.0.0/20 maxlen: 20
151.247.16.0/22 maxlen: 22
151.247.214.0/23 maxlen: 23
151.247.216.0/21 maxlen: 21
151.247.224.0/22 maxlen: 22
151.247.228.0/22 maxlen: 22
151.247.232.0/22 maxlen: 22
151.247.236.0/22 maxlen: 22
151.247.236.0/24 maxlen: 24
151.247.237.0/24 maxlen: 24
151.247.238.0/23 maxlen: 23
151.247.240.0/24 maxlen: 24
151.247.241.0/24 maxlen: 24
151.247.248.0/22 maxlen: 22
Validation: Failed, RFC 3779 resource not subset of parent's resources
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:90:7e:46:cd:65:e3:92:2b:78:f5:e5:8a:df:c2:9a:91:5a
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=adf491488a7cd8448a420945871c0b99672dc66e
Validity
Not Before: Jul 4 15:04:47 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=19b84b56d89f9c26adac4da488e0e78725c88635
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a8:57:44:2b:2e:af:fe:d4:90:93:fc:73:cf:7f:
7b:4a:76:a4:53:81:6f:b0:ac:54:e6:47:1c:93:f3:
2b:e9:86:7f:bd:54:29:53:40:f5:36:c9:c1:7e:ca:
56:5b:56:c2:19:e6:b4:65:ec:62:9c:ad:4e:33:f0:
4c:9d:95:da:37:f7:77:1d:70:62:15:55:89:11:39:
9f:d1:f7:bb:1f:08:a6:42:9c:b4:5c:01:96:95:4a:
ca:21:da:0c:82:66:3e:0e:bf:d6:de:8f:dc:26:bf:
a9:c0:0c:f3:38:bc:ed:61:94:b7:79:e9:9e:df:60:
8a:05:64:f0:0e:b8:c5:c3:74:64:57:23:34:65:24:
89:7a:17:e2:70:2f:66:35:47:b5:67:55:d0:9a:e3:
e3:aa:82:27:31:36:dd:0c:23:19:7f:f6:9e:d2:6e:
b9:aa:d9:76:5d:e0:a6:f4:97:70:00:ef:fd:59:06:
3a:ab:2c:19:87:9d:e1:82:cd:77:34:26:72:6a:a9:
54:21:b8:06:e7:0a:a6:61:8c:25:42:71:11:24:3b:
2c:03:93:92:3d:2f:2e:e7:42:ee:34:e6:29:81:8e:
39:ab:b2:11:8b:27:b2:df:58:27:da:d8:1d:73:91:
53:3e:d7:74:8d:45:36:39:00:88:0a:76:15:89:21:
2d:57
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
19:B8:4B:56:D8:9F:9C:26:AD:AC:4D:A4:88:E0:E7:87:25:C8:86:35
X509v3 Authority Key Identifier:
keyid:AD:F4:91:48:8A:7C:D8:44:8A:42:09:45:87:1C:0B:99:67:2D:C6:6E
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/rfSRSIp82ESKQglFhxwLmWctxm4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/72/715d15-2810-4827-8dbd-0bee06126b1a/1/GbhLVtifnCatrE2kiODnhyXIhjU.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/72/715d15-2810-4827-8dbd-0bee06126b1a/1/rfSRSIp82ESKQglFhxwLmWctxm4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
85.15.48.0/23
94.182.0.0/15
151.240.80.0/21
151.240.168.0/22
151.240.192.0/21
151.240.240.0/21
151.241.216.0-151.241.231.255
151.242.0.0-151.242.11.255
151.244.48.0-151.244.227.255
151.246.0.0-151.247.19.255
151.247.214.0-151.247.241.255
151.247.248.0/22
Signature Algorithm: sha256WithRSAEncryption
66:0f:ff:aa:a7:9e:6b:06:0b:54:78:74:05:af:6d:de:ac:ea:
4d:c5:d4:85:14:0f:39:d4:3e:c0:9c:bd:a2:e6:d4:e7:12:5b:
53:c9:c2:5c:53:b4:f7:50:eb:8d:a2:71:3e:c4:97:d9:85:fb:
b6:70:4a:42:3e:11:55:07:5c:cb:6b:8f:8f:3b:ab:e6:66:18:
c6:90:f0:d4:56:64:69:a7:94:62:8c:05:fb:5e:71:a5:56:54:
35:79:99:2a:d5:b8:c5:21:0f:be:13:5f:4d:9b:96:f3:aa:59:
6a:5c:27:fa:49:bb:dc:b8:f5:8e:d7:66:24:2a:f7:45:18:de:
43:e9:bc:80:20:3e:6a:45:45:e3:e4:d3:c7:7b:b6:c7:69:d0:
af:61:c1:b7:52:52:c4:a2:a5:bb:93:cc:8c:1a:5e:66:6e:61:
93:08:57:16:ec:d7:23:69:4a:10:c1:f7:a9:b6:a1:9d:9f:2f:
0e:a8:34:6a:26:f2:95:89:fe:a9:02:30:0a:b6:db:a7:8c:a5:
04:3a:8d:da:ec:86:ac:2e:42:53:00:61:fd:93:75:02:4f:4e:
c7:cc:c4:62:97:66:43:e8:bb:c9:d7:c6:98:62:fd:f2:32:a3:
2f:88:01:08:65:e5:cb:59:00:35:a1:0e:5f:7d:f2:b9:da:5a:
28:c1:c4:5b
-----BEGIN CERTIFICATE-----
MIIFZTCCBE2gAwIBAgISAZB+Rs1l45IrePXlit/CmpFaMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGFkZjQ5MTQ4OGE3Y2Q4NDQ4YTQyMDk0NTg3MWMwYjk5Njcy
ZGM2NmUwHhcNMjQwNzA0MTUwNDQ3WhcNMjUwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EygxOWI4NGI1NmQ4OWY5YzI2YWRhYzRkYTQ4OGUwZTc4NzI1Yzg4NjM1MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAqFdEKy6v/tSQk/xzz397SnakU4Fv
sKxU5kcck/Mr6YZ/vVQpU0D1NsnBfspWW1bCGea0ZexinK1OM/BMnZXaN/d3HXBi
FVWJETmf0fe7HwimQpy0XAGWlUrKIdoMgmY+Dr/W3o/cJr+pwAzzOLztYZS3eeme
32CKBWTwDrjFw3RkVyM0ZSSJehficC9mNUe1Z1XQmuPjqoInMTbdDCMZf/ae0m65
qtl2XeCm9JdwAO/9WQY6qywZh53hgs13NCZyaqlUIbgG5wqmYYwlQnERJDssA5OS
PS8u50LuNOYpgY45q7IRiyey31gn2tgdc5FTPtd0jUU2OQCICnYViSEtVwIDAQAB
o4ICcTCCAm0wHQYDVR0OBBYEFBm4S1bYn5wmraxNpIjg54clyIY1MB8GA1UdIwQY
MBaAFK30kUiKfNhEikIJRYccC5lnLcZuMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvcmZTUlNJcDgyRVNLUWdsRmh4d0xtV2N0eG00LmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC83Mi83MTVkMTUtMjgxMC00ODI3LThkYmQt
MGJlZTA2MTI2YjFhLzEvR2JoTFZ0aWZuQ2F0ckUya2lPRG5oeVhJaGpVLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC83Mi83MTVkMTUtMjgxMC00ODI3LThkYmQtMGJlZTA2MTI2YjFh
LzEvcmZTUlNJcDgyRVNLUWdsRmh4d0xtV2N0eG00LmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMIGGBggrBgEFBQcBBwEB/wR3MHUwcwQCAAEwbQMEAVUPMAMD
AV62AwQDl/BQAwQCl/CoAwQDl/DAAwQDl/DwMAwDBAOX8dgDBAOX8eAwCwMDAZfy
AwQCl/IIMAwDBASX9DADBAKX9OAwCwMDAZf2AwQCl/cQMAwDBAGX99YDBAGX9/AD
BAKX9/gwDQYJKoZIhvcNAQELBQADggEBAGYP/6qnnmsGC1R4dAWvbd6s6k3F1IUU
DznUPsCcvaLm1OcSW1PJwlxTtPdQ642icT7El9mF+7ZwSkI+EVUHXMtrj487q+Zm
GMaQ8NRWZGmnlGKMBftecaVWVDV5mSrVuMUhD74TX02blvOqWWpcJ/pJu9y49Y7X
ZiQq90UY3kPpvIAgPmpFRePk08d7tsdp0K9hwbdSUsSipbuTzIwaXmZuYZMIVxbs
1yNpShDB96m2oZ2fLw6oNGom8pWJ/qkCMAq226eMpQQ6jdrshqwuQlMAYf2TdQJP
TsfMxGKXZkPou8nXxphi/fIyoy+IAQhl5ctZADWhDl998rnaWijBxFs=
-----END CERTIFICATE-----
Generated at Tue May 13 08:18:22 2025 by rpki-client