Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/72/715d15-2810-4827-8dbd-0bee06126b1a/1/IMDZ71W6rCkD5g2EgrtdhOSYll8.roa
File: IMDZ71W6rCkD5g2EgrtdhOSYll8.roa (raw, json)
Hash identifier: Z3z3sTcZyLfYkzcCRaqyZOYvmh7laReNxyWCcOK/OPs=
Subject key identifier: 20:C0:D9:EF:55:BA:AC:29:03:E6:0D:84:82:BB:5D:84:E4:98:96:5F
Certificate issuer: /CN=adf491488a7cd8448a420945871c0b99672dc66e
Certificate serial: 018EBCEDA36E1F5AF5B5E24219FFE19EB382
Authority key identifier: AD:F4:91:48:8A:7C:D8:44:8A:42:09:45:87:1C:0B:99:67:2D:C6:6E
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/rfSRSIp82ESKQglFhxwLmWctxm4.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/72/715d15-2810-4827-8dbd-0bee06126b1a/1/IMDZ71W6rCkD5g2EgrtdhOSYll8.roa
Signing time: Mon 08 Apr 2024 08:57:54 +0000
ROA not before: Mon 08 Apr 2024 08:57:54 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 31549
IP address blocks: 37.148.0.0/17 maxlen: 17
37.148.0.0/18 maxlen: 18
37.148.78.0/24 maxlen: 24
37.202.128.0/17 maxlen: 17
37.202.128.0/18 maxlen: 18
37.202.136.0/24 maxlen: 24
37.202.192.0/18 maxlen: 18
84.241.0.0/18 maxlen: 18
85.15.0.0/18 maxlen: 18
85.15.48.0/20 maxlen: 20
94.182.0.0/15 maxlen: 15
94.182.0.0/20 maxlen: 20
94.182.11.0/24 maxlen: 24
94.182.16.0/20 maxlen: 20
94.182.28.0/22 maxlen: 22
94.182.32.0/20 maxlen: 20
94.182.42.0/24 maxlen: 24
94.182.43.0/24 maxlen: 24
94.182.46.0/24 maxlen: 24
94.182.48.0/20 maxlen: 20
94.182.56.0/22 maxlen: 22
94.182.64.0/24 maxlen: 24
94.182.66.0/24 maxlen: 24
94.182.67.0/24 maxlen: 24
94.182.68.0/24 maxlen: 24
94.182.70.0/24 maxlen: 24
94.182.71.0/24 maxlen: 24
94.182.80.0/20 maxlen: 20
94.182.88.0/22 maxlen: 22
94.182.93.0/24 maxlen: 24
94.182.98.0/24 maxlen: 24
94.182.100.0/24 maxlen: 24
94.182.110.0/23 maxlen: 23
94.182.112.0/20 maxlen: 20
94.182.112.0/23 maxlen: 23
94.182.128.0/19 maxlen: 19
94.182.128.0/20 maxlen: 20
94.182.133.0/24 maxlen: 24
94.182.136.0/24 maxlen: 24
94.182.144.0/20 maxlen: 20
94.182.145.0/24 maxlen: 24
94.182.146.0/24 maxlen: 24
94.182.147.0/24 maxlen: 24
94.182.160.0/19 maxlen: 19
94.182.160.0/20 maxlen: 20
94.182.164.0/24 maxlen: 24
94.182.176.0/20 maxlen: 20
94.182.176.0/23 maxlen: 23
94.182.183.0/24 maxlen: 24
94.182.184.0/24 maxlen: 24
94.182.186.0/23 maxlen: 23
94.182.192.0/19 maxlen: 19
94.182.192.0/24 maxlen: 24
94.182.193.0/24 maxlen: 24
94.182.196.0/24 maxlen: 24
94.182.197.0/24 maxlen: 24
94.182.199.0/24 maxlen: 24
94.182.208.0/20 maxlen: 20
94.182.208.0/24 maxlen: 24
94.182.213.0/24 maxlen: 24
94.182.222.0/23 maxlen: 23
94.182.222.0/24 maxlen: 24
94.182.224.0/20 maxlen: 20
94.182.239.0/24 maxlen: 24
94.182.240.0/20 maxlen: 20
94.183.0.0/20 maxlen: 20
94.183.32.0/21 maxlen: 21
94.183.40.0/21 maxlen: 21
94.183.48.0/20 maxlen: 20
94.183.58.0/24 maxlen: 24
94.183.58.1/32 maxlen: 32
94.183.64.0/20 maxlen: 20
94.183.77.0/24 maxlen: 24
94.183.80.0/20 maxlen: 20
94.183.96.0/20 maxlen: 20
94.183.98.0/24 maxlen: 24
94.183.112.0/20 maxlen: 20
94.183.128.0/21 maxlen: 21
94.183.136.0/21 maxlen: 21
94.183.144.0/20 maxlen: 20
94.183.160.0/20 maxlen: 20
94.183.176.0/21 maxlen: 21
94.183.184.0/21 maxlen: 21
94.183.184.0/24 maxlen: 24
94.183.192.0/20 maxlen: 20
94.183.208.0/20 maxlen: 20
94.183.224.0/20 maxlen: 20
94.183.229.0/24 maxlen: 24
94.183.240.0/20 maxlen: 20
151.238.0.0/15 maxlen: 15
151.240.0.0/13 maxlen: 13
151.240.0.0/18 maxlen: 18
151.240.24.0/24 maxlen: 24
151.240.64.0/18 maxlen: 18
151.240.192.0/18 maxlen: 18
151.241.0.0/18 maxlen: 18
151.241.80.0/20 maxlen: 20
151.241.96.0/20 maxlen: 20
151.241.112.0/20 maxlen: 20
151.241.128.0/18 maxlen: 18
151.241.188.0/24 maxlen: 24
151.241.192.0/18 maxlen: 18
151.241.222.0/24 maxlen: 24
151.242.0.0/18 maxlen: 18
151.242.124.0/23 maxlen: 23
151.242.128.0/21 maxlen: 21
151.242.128.0/22 maxlen: 22
151.242.160.0/20 maxlen: 20
151.242.176.0/20 maxlen: 20
151.242.192.0/18 maxlen: 18
151.243.0.0/18 maxlen: 18
151.244.0.0/15 maxlen: 15
151.244.0.0/18 maxlen: 18
151.244.64.0/18 maxlen: 18
151.244.96.0/23 maxlen: 23
151.244.98.0/23 maxlen: 23
151.244.100.0/23 maxlen: 23
151.244.102.0/23 maxlen: 23
151.244.104.0/23 maxlen: 23
151.244.106.0/23 maxlen: 23
151.244.108.0/23 maxlen: 23
151.244.110.0/23 maxlen: 23
151.244.112.0/23 maxlen: 23
151.244.114.0/23 maxlen: 23
151.244.116.0/23 maxlen: 23
151.244.118.0/23 maxlen: 23
151.244.120.0/23 maxlen: 23
151.244.122.0/23 maxlen: 23
151.244.124.0/23 maxlen: 23
151.244.126.0/23 maxlen: 23
151.244.128.0/18 maxlen: 18
151.244.128.0/19 maxlen: 19
151.244.128.0/22 maxlen: 22
151.244.132.0/22 maxlen: 22
151.244.136.0/22 maxlen: 22
151.244.140.0/22 maxlen: 22
151.244.144.0/22 maxlen: 22
151.244.148.0/22 maxlen: 22
151.244.152.0/22 maxlen: 22
151.244.156.0/22 maxlen: 22
151.244.160.0/22 maxlen: 22
151.244.164.0/22 maxlen: 22
151.244.168.0/22 maxlen: 22
151.244.172.0/22 maxlen: 22
151.244.176.0/22 maxlen: 22
151.244.180.0/22 maxlen: 22
151.244.184.0/22 maxlen: 22
151.244.188.0/22 maxlen: 22
151.244.192.0/18 maxlen: 18
151.244.192.0/22 maxlen: 22
151.244.196.0/22 maxlen: 22
151.244.200.0/22 maxlen: 22
151.244.204.0/22 maxlen: 22
151.244.208.0/22 maxlen: 22
151.244.212.0/22 maxlen: 22
151.244.216.0/23 maxlen: 23
151.244.218.0/23 maxlen: 23
151.244.220.0/23 maxlen: 23
151.244.222.0/23 maxlen: 23
151.244.224.0/19 maxlen: 19
151.244.224.0/23 maxlen: 23
151.244.226.0/23 maxlen: 23
151.245.248.0/21 maxlen: 21
151.245.248.0/22 maxlen: 22
151.245.252.0/22 maxlen: 22
151.246.0.0/18 maxlen: 18
151.246.0.0/20 maxlen: 20
151.246.0.0/21 maxlen: 21
151.246.8.0/22 maxlen: 22
151.246.12.0/22 maxlen: 22
151.246.16.0/20 maxlen: 20
151.246.16.0/21 maxlen: 21
151.246.16.0/22 maxlen: 22
151.246.24.0/21 maxlen: 21
151.246.28.0/22 maxlen: 22
151.246.32.0/20 maxlen: 20
151.246.32.0/22 maxlen: 22
151.246.36.0/22 maxlen: 22
151.246.40.0/21 maxlen: 21
151.246.48.0/21 maxlen: 21
151.246.56.0/22 maxlen: 22
151.246.60.0/22 maxlen: 22
151.246.64.0/18 maxlen: 18
151.246.64.0/21 maxlen: 21
151.246.72.0/21 maxlen: 21
151.246.80.0/22 maxlen: 22
151.246.84.0/22 maxlen: 22
151.246.88.0/21 maxlen: 21
151.246.96.0/21 maxlen: 21
151.246.104.0/22 maxlen: 22
151.246.108.0/22 maxlen: 22
151.246.112.0/21 maxlen: 21
151.246.120.0/21 maxlen: 21
151.246.128.0/22 maxlen: 22
151.246.132.0/22 maxlen: 22
151.246.136.0/21 maxlen: 21
151.246.144.0/21 maxlen: 21
151.246.152.0/22 maxlen: 22
151.246.156.0/22 maxlen: 22
151.246.160.0/21 maxlen: 21
151.246.168.0/21 maxlen: 21
151.246.176.0/22 maxlen: 22
151.246.180.0/22 maxlen: 22
151.246.192.0/18 maxlen: 18
151.246.192.0/21 maxlen: 21
151.246.200.0/22 maxlen: 22
151.246.204.0/22 maxlen: 22
151.246.208.0/21 maxlen: 21
151.246.208.0/22 maxlen: 22
151.246.212.0/22 maxlen: 22
151.246.216.0/21 maxlen: 21
151.246.220.0/22 maxlen: 22
151.246.224.0/22 maxlen: 22
151.246.228.0/22 maxlen: 22
151.246.236.0/22 maxlen: 22
151.246.240.0/22 maxlen: 22
151.246.244.0/22 maxlen: 22
151.246.248.0/22 maxlen: 22
151.246.252.0/22 maxlen: 22
151.247.64.0/18 maxlen: 18
151.247.244.0/22 maxlen: 22
185.73.0.0/22 maxlen: 22
185.73.0.0/23 maxlen: 23
185.73.2.0/23 maxlen: 23
185.73.2.0/24 maxlen: 24
185.73.3.0/24 maxlen: 24
217.60.0.0/16 maxlen: 16
217.60.0.0/18 maxlen: 18
217.60.0.0/19 maxlen: 19
217.60.24.0/21 maxlen: 21
217.60.32.0/20 maxlen: 20
217.60.32.0/22 maxlen: 22
217.60.36.0/22 maxlen: 22
217.60.36.0/23 maxlen: 23
217.60.38.0/23 maxlen: 23
217.60.40.0/21 maxlen: 21
217.60.48.0/20 maxlen: 20
217.60.64.0/18 maxlen: 18
217.60.64.0/20 maxlen: 20
217.60.80.0/20 maxlen: 20
217.60.96.0/21 maxlen: 21
217.60.104.0/22 maxlen: 22
217.60.108.0/22 maxlen: 22
217.60.128.0/18 maxlen: 18
217.60.128.0/19 maxlen: 19
217.60.150.0/24 maxlen: 24
217.60.160.0/19 maxlen: 19
217.60.160.0/20 maxlen: 20
217.60.160.0/21 maxlen: 21
217.60.161.0/24 maxlen: 24
217.60.168.0/23 maxlen: 23
217.60.170.0/24 maxlen: 24
217.60.171.0/24 maxlen: 24
217.60.176.0/21 maxlen: 21
217.60.176.0/24 maxlen: 24
217.60.184.0/22 maxlen: 22
217.60.188.0/22 maxlen: 22
217.60.192.0/18 maxlen: 18
217.60.192.0/20 maxlen: 20
217.60.192.0/22 maxlen: 22
217.60.196.0/22 maxlen: 22
217.60.200.0/22 maxlen: 22
217.60.207.0/24 maxlen: 24
217.60.208.0/20 maxlen: 20
217.60.208.0/23 maxlen: 23
217.60.209.0/24 maxlen: 24
217.60.212.0/22 maxlen: 22
217.60.216.0/21 maxlen: 21
217.60.219.0/24 maxlen: 24
217.60.224.0/20 maxlen: 20
217.60.230.0/24 maxlen: 24
217.60.231.0/24 maxlen: 24
217.60.240.0/20 maxlen: 20
2a0e::/26 maxlen: 26
2a0e:0:1::/52 maxlen: 52
2a0e:0:1:1000::/52 maxlen: 52
2a0e:0:1:2000::/52 maxlen: 52
2a0e:0:1:3000::/52 maxlen: 52
Validation: Failed, RFC 3779 resource not subset of parent's resources
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8e:bc:ed:a3:6e:1f:5a:f5:b5:e2:42:19:ff:e1:9e:b3:82
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=adf491488a7cd8448a420945871c0b99672dc66e
Validity
Not Before: Apr 8 08:57:54 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=20c0d9ef55baac2903e60d8482bb5d84e498965f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:96:32:77:9d:6b:7e:15:18:70:6e:0e:90:66:68:
da:dc:e6:8d:f8:e3:de:32:c6:4e:95:93:07:aa:8e:
63:73:ad:f6:3d:9d:28:f3:12:bc:d8:82:67:98:2b:
b8:50:89:c0:a7:0e:51:cf:5e:5d:06:9f:42:85:53:
10:c9:31:bf:20:9f:c1:db:98:57:c7:31:50:51:ad:
b2:b7:8b:b4:89:08:eb:d7:ff:04:d7:e4:22:12:16:
64:20:5b:8e:fd:b6:df:2a:5a:48:35:00:1b:9b:95:
56:10:e6:07:a7:eb:4e:db:07:53:27:58:ae:7c:9c:
d6:40:fd:30:da:95:a0:3c:fc:8d:bd:1b:f6:33:98:
9a:9d:87:50:31:ed:e6:12:6a:9a:e1:df:e6:2c:af:
c1:29:c0:a7:1b:9c:1f:5c:ba:3a:31:7c:21:81:29:
e7:a8:8c:18:f5:aa:01:e5:b4:11:f4:a6:4c:68:fe:
61:68:38:cb:28:fc:b0:6c:f6:4c:e2:72:e3:8b:04:
bc:b2:0e:24:bb:34:18:86:1b:7a:b2:8b:43:4f:71:
54:ee:c1:d5:be:92:07:c4:a9:99:a3:19:86:61:dd:
47:a4:20:1e:ad:cf:d5:ef:46:d3:5b:9b:4b:05:60:
35:bf:50:6a:c6:b0:d7:9b:80:61:75:00:50:e9:9a:
d3:95
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
20:C0:D9:EF:55:BA:AC:29:03:E6:0D:84:82:BB:5D:84:E4:98:96:5F
X509v3 Authority Key Identifier:
keyid:AD:F4:91:48:8A:7C:D8:44:8A:42:09:45:87:1C:0B:99:67:2D:C6:6E
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/rfSRSIp82ESKQglFhxwLmWctxm4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/72/715d15-2810-4827-8dbd-0bee06126b1a/1/IMDZ71W6rCkD5g2EgrtdhOSYll8.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/72/715d15-2810-4827-8dbd-0bee06126b1a/1/rfSRSIp82ESKQglFhxwLmWctxm4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
37.148.0.0/17
37.202.128.0/17
84.241.0.0/18
85.15.0.0/18
94.182.0.0/15
151.238.0.0-151.247.255.255
185.73.0.0/22
217.60.0.0/16
IPv6:
2a0e::/26
Signature Algorithm: sha256WithRSAEncryption
21:b6:c9:ba:5b:2e:f4:1a:a8:9b:8a:e1:30:bd:da:59:e1:ff:
62:67:4c:53:ec:ef:fb:0f:bd:41:6f:92:b2:bc:70:6b:f9:90:
e4:51:63:d0:91:0c:26:6b:19:fd:3f:8a:42:9c:16:6a:30:b2:
7e:c6:e5:a6:99:5f:fe:b8:a1:7d:c6:12:a1:e2:29:e1:2e:23:
ae:bc:5d:c0:30:03:e8:c8:87:54:a1:99:fd:b5:dc:12:63:77:
ab:c7:6c:8d:22:1f:f7:49:25:a7:13:08:5b:d4:64:16:31:5a:
73:66:10:cd:5b:81:11:b2:fc:6e:3a:a9:f2:62:f8:f7:66:9e:
c8:4d:4d:b9:83:6d:f5:64:82:22:b8:fa:43:b7:30:00:27:d7:
dc:82:67:7a:98:1c:02:ff:77:3d:fe:47:ee:bd:57:a4:54:22:
97:9d:68:ca:88:fe:e8:03:30:11:1e:be:34:c7:95:11:d8:65:
2a:cf:e5:17:5d:56:1b:8a:8b:a7:10:42:7a:eb:6e:41:04:ca:
28:ac:89:0e:a0:82:18:96:ed:17:db:e5:45:15:dd:b0:40:53:
3e:08:78:ab:cb:ff:63:c6:cc:3c:19:d0:6f:cc:3f:2c:bf:6b:
26:a5:41:48:66:d1:d9:72:67:1b:b5:63:52:df:fc:5c:e2:7a:
94:ea:f9:12
-----BEGIN CERTIFICATE-----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==
-----END CERTIFICATE-----
Generated at Sun May 11 09:25:43 2025 by rpki-client