Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/72/715d15-2810-4827-8dbd-0bee06126b1a/1/OUBVT457tgj26KegCL65U2qzS5A.roa
File: OUBVT457tgj26KegCL65U2qzS5A.roa (raw, json)
Hash identifier: Repjo9SqpkBsLkP/pKpBV8UM1HRUZFYrexZLj9FdlZg=
Subject key identifier: 39:40:55:4F:8E:7B:B6:08:F6:E8:A7:A0:08:BE:B9:53:6A:B3:4B:90
Certificate issuer: /CN=adf491488a7cd8448a420945871c0b99672dc66e
Certificate serial: 019146EB8D47B51E37592B6620426D61B1A1
Authority key identifier: AD:F4:91:48:8A:7C:D8:44:8A:42:09:45:87:1C:0B:99:67:2D:C6:6E
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/rfSRSIp82ESKQglFhxwLmWctxm4.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/72/715d15-2810-4827-8dbd-0bee06126b1a/1/OUBVT457tgj26KegCL65U2qzS5A.roa
Signing time: Mon 12 Aug 2024 14:08:47 +0000
ROA not before: Mon 12 Aug 2024 14:08:47 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 205647
IP address blocks: 85.15.48.0/24 maxlen: 24
85.15.49.0/24 maxlen: 24
94.182.0.0/18 maxlen: 18
94.182.8.0/23 maxlen: 23
94.182.12.0/23 maxlen: 23
94.182.17.0/24 maxlen: 24
94.182.41.0/24 maxlen: 24
94.182.48.0/24 maxlen: 24
94.182.56.0/22 maxlen: 22
94.182.60.0/22 maxlen: 22
94.182.64.0/18 maxlen: 18
94.182.64.0/20 maxlen: 20
94.182.72.0/21 maxlen: 21
94.182.80.0/20 maxlen: 20
94.182.82.0/24 maxlen: 24
94.182.96.0/20 maxlen: 20
94.182.97.192/28 maxlen: 28
94.182.112.0/20 maxlen: 20
94.182.114.0/23 maxlen: 23
94.182.116.0/22 maxlen: 22
94.182.120.0/21 maxlen: 21
94.182.128.0/18 maxlen: 18
94.182.128.0/20 maxlen: 20
94.182.144.0/20 maxlen: 20
94.182.160.0/20 maxlen: 20
94.182.176.0/20 maxlen: 20
94.182.192.0/18 maxlen: 18
94.182.199.0/24 maxlen: 24
94.182.204.0/22 maxlen: 22
94.182.204.0/24 maxlen: 24
94.182.205.0/24 maxlen: 24
94.182.206.0/24 maxlen: 24
94.182.207.0/24 maxlen: 24
94.182.217.0/24 maxlen: 24
94.182.222.0/23 maxlen: 23
94.182.226.0/24 maxlen: 24
94.182.228.0/22 maxlen: 22
94.182.232.0/23 maxlen: 23
94.182.234.0/23 maxlen: 23
94.182.238.0/24 maxlen: 24
94.182.240.0/23 maxlen: 23
94.182.244.0/22 maxlen: 22
94.182.244.0/23 maxlen: 23
94.182.248.0/22 maxlen: 22
94.182.248.0/23 maxlen: 23
94.182.252.0/24 maxlen: 24
94.182.254.0/24 maxlen: 24
94.183.0.0/18 maxlen: 18
94.183.64.0/18 maxlen: 18
94.183.128.0/18 maxlen: 18
94.183.192.0/18 maxlen: 18
151.240.80.0/21 maxlen: 21
151.240.168.0/22 maxlen: 22
151.240.192.0/21 maxlen: 21
151.240.240.0/21 maxlen: 21
151.240.240.0/23 maxlen: 23
151.240.242.0/23 maxlen: 23
151.240.244.0/23 maxlen: 23
151.241.216.0/23 maxlen: 23
151.241.218.0/23 maxlen: 23
151.241.220.0/22 maxlen: 22
151.241.224.0/21 maxlen: 21
151.242.0.0/21 maxlen: 21
151.242.8.0/22 maxlen: 22
151.244.48.0/21 maxlen: 21
151.244.48.0/22 maxlen: 22
151.244.52.0/22 maxlen: 22
151.244.56.0/21 maxlen: 21
151.244.64.0/21 maxlen: 21
151.244.72.0/22 maxlen: 22
151.244.76.0/22 maxlen: 22
151.244.80.0/21 maxlen: 21
151.244.88.0/21 maxlen: 21
151.244.96.0/23 maxlen: 23
151.244.98.0/23 maxlen: 23
151.244.100.0/23 maxlen: 23
151.244.102.0/23 maxlen: 23
151.244.104.0/23 maxlen: 23
151.244.106.0/23 maxlen: 23
151.244.108.0/23 maxlen: 23
151.244.110.0/23 maxlen: 23
151.244.112.0/23 maxlen: 23
151.244.114.0/23 maxlen: 23
151.244.116.0/23 maxlen: 23
151.244.118.0/23 maxlen: 23
151.244.120.0/23 maxlen: 23
151.244.122.0/23 maxlen: 23
151.244.124.0/23 maxlen: 23
151.244.126.0/23 maxlen: 23
151.244.128.0/22 maxlen: 22
151.244.132.0/22 maxlen: 22
151.244.136.0/22 maxlen: 22
151.244.140.0/22 maxlen: 22
151.244.144.0/22 maxlen: 22
151.244.148.0/22 maxlen: 22
151.244.152.0/22 maxlen: 22
151.244.156.0/22 maxlen: 22
151.244.160.0/22 maxlen: 22
151.244.164.0/22 maxlen: 22
151.244.168.0/22 maxlen: 22
151.244.172.0/22 maxlen: 22
151.244.176.0/22 maxlen: 22
151.244.180.0/22 maxlen: 22
151.244.184.0/22 maxlen: 22
151.244.188.0/22 maxlen: 22
151.244.192.0/22 maxlen: 22
151.244.196.0/22 maxlen: 22
151.244.200.0/22 maxlen: 22
151.244.204.0/22 maxlen: 22
151.244.208.0/22 maxlen: 22
151.244.212.0/22 maxlen: 22
151.244.216.0/23 maxlen: 23
151.244.218.0/23 maxlen: 23
151.244.220.0/23 maxlen: 23
151.244.222.0/23 maxlen: 23
151.244.224.0/23 maxlen: 23
151.244.226.0/23 maxlen: 23
151.246.0.0/18 maxlen: 18
151.246.64.0/18 maxlen: 18
151.246.128.0/18 maxlen: 18
151.246.192.0/18 maxlen: 18
151.246.248.0/22 maxlen: 22
151.247.0.0/20 maxlen: 20
151.247.16.0/22 maxlen: 22
151.247.214.0/23 maxlen: 23
151.247.216.0/21 maxlen: 21
151.247.224.0/22 maxlen: 22
151.247.228.0/22 maxlen: 22
151.247.232.0/22 maxlen: 22
151.247.236.0/22 maxlen: 22
151.247.236.0/24 maxlen: 24
151.247.237.0/24 maxlen: 24
151.247.238.0/23 maxlen: 23
151.247.240.0/24 maxlen: 24
151.247.241.0/24 maxlen: 24
151.247.248.0/22 maxlen: 22
Validation: Failed, RFC 3779 resource not subset of parent's resources
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:91:46:eb:8d:47:b5:1e:37:59:2b:66:20:42:6d:61:b1:a1
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=adf491488a7cd8448a420945871c0b99672dc66e
Validity
Not Before: Aug 12 14:08:47 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=3940554f8e7bb608f6e8a7a008beb9536ab34b90
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e8:38:7d:57:09:3c:f1:b9:51:d6:02:1f:a5:2a:
11:49:0e:4d:a5:b1:77:32:af:ec:e8:51:9b:c7:4f:
1f:66:32:9e:1a:c1:6f:55:42:79:e8:16:63:14:17:
af:f0:c1:c0:59:90:1d:54:59:8a:f4:5b:44:bc:ca:
50:50:b5:e2:d8:3f:d4:89:db:c5:ef:b1:e9:62:18:
c5:e5:dd:ff:37:bd:ed:27:72:1f:96:b6:0b:42:9d:
31:36:26:0d:c3:e9:6a:47:46:82:a4:16:0b:84:7f:
14:ce:52:2d:65:2e:cc:c4:89:cf:9f:eb:c6:59:47:
23:91:9b:84:c2:0b:a3:67:0c:cc:a8:db:fe:9d:56:
52:7d:0f:0a:be:44:2f:1c:40:54:9f:d8:2a:3e:f8:
e3:db:43:44:39:ba:a5:e9:d0:f0:61:e9:f0:69:9f:
e3:d2:25:c5:b1:45:00:17:71:92:5a:bd:87:2a:b4:
fd:f5:79:8f:ff:0e:dc:03:dc:5a:6a:74:11:04:ef:
c8:66:b9:7c:d9:06:1e:91:5c:ac:a5:6e:be:4a:7d:
36:d2:b7:af:83:fa:1c:32:40:55:69:bc:3a:2e:ae:
72:84:0b:48:e9:74:65:19:d0:17:83:d8:40:3a:05:
fe:08:3b:d8:7a:22:ea:ce:9d:4a:7c:78:19:71:9d:
bb:65
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
39:40:55:4F:8E:7B:B6:08:F6:E8:A7:A0:08:BE:B9:53:6A:B3:4B:90
X509v3 Authority Key Identifier:
keyid:AD:F4:91:48:8A:7C:D8:44:8A:42:09:45:87:1C:0B:99:67:2D:C6:6E
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/rfSRSIp82ESKQglFhxwLmWctxm4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/72/715d15-2810-4827-8dbd-0bee06126b1a/1/OUBVT457tgj26KegCL65U2qzS5A.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/72/715d15-2810-4827-8dbd-0bee06126b1a/1/rfSRSIp82ESKQglFhxwLmWctxm4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
85.15.48.0/23
94.182.0.0/15
151.240.80.0/21
151.240.168.0/22
151.240.192.0/21
151.240.240.0/21
151.241.216.0-151.241.231.255
151.242.0.0-151.242.11.255
151.244.48.0-151.244.227.255
151.246.0.0-151.247.19.255
151.247.214.0-151.247.241.255
151.247.248.0/22
Signature Algorithm: sha256WithRSAEncryption
34:09:d9:df:71:6a:b5:1f:af:9b:31:ee:8e:53:55:21:fe:08:
a0:22:ad:fc:e3:87:9e:81:6e:e4:b7:c9:3d:46:3c:8d:88:85:
f7:4c:85:92:32:8a:30:49:aa:a9:69:db:ba:20:af:23:f7:38:
87:82:bb:53:aa:aa:d7:53:98:40:5f:d7:fa:c4:85:79:87:65:
46:ca:fb:ca:3b:48:da:e4:76:6d:37:ba:1f:40:73:ab:61:df:
82:4e:c9:1d:4b:97:f1:0c:57:8c:26:31:67:8d:30:96:a2:6c:
ee:ab:2f:00:f9:64:93:6b:53:e5:b1:db:71:a6:a7:9a:95:29:
f2:09:39:3a:e2:59:00:7b:44:38:5a:8f:78:8b:fa:50:f7:8d:
18:32:7d:ec:54:47:46:ec:90:c5:46:65:49:a9:93:e8:43:1b:
2c:f0:61:0d:30:d2:3b:a4:a7:33:2b:64:bd:a2:5c:e3:6f:67:
c2:1e:50:38:72:92:87:d9:4f:6e:25:d7:5b:0b:23:b7:6a:e1:
f4:87:99:45:9b:01:88:d0:7e:b5:3f:a4:89:a2:d7:8d:f4:30:
c0:fc:2e:7a:3e:1a:d3:74:ca:f7:41:59:f7:70:c2:5f:1b:28:
4e:ea:98:f2:a5:de:1b:af:05:f9:bd:a0:92:18:d9:b3:5c:c2:
2e:38:5a:cc
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat May 10 23:31:39 2025 by rpki-client