Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/72/715d15-2810-4827-8dbd-0bee06126b1a/1/VlUM8CCDPH64cuoCWG4yzsdZl7o.roa
File: VlUM8CCDPH64cuoCWG4yzsdZl7o.roa (raw, json)
Hash identifier: N6V0dT8UxX6LyTwdy2mlx8Mr3YfaR4Hs1QjENe2t51s=
Subject key identifier: 56:55:0C:F0:20:83:3C:7E:B8:72:EA:02:58:6E:32:CE:C7:59:97:BA
Certificate issuer: /CN=adf491488a7cd8448a420945871c0b99672dc66e
Certificate serial: 0194DF47419EFCBF35B859259C312110A6DC
Authority key identifier: AD:F4:91:48:8A:7C:D8:44:8A:42:09:45:87:1C:0B:99:67:2D:C6:6E
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/rfSRSIp82ESKQglFhxwLmWctxm4.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/72/715d15-2810-4827-8dbd-0bee06126b1a/1/VlUM8CCDPH64cuoCWG4yzsdZl7o.roa
Signing time: Fri 07 Feb 2025 07:19:36 +0000
ROA not before: Fri 07 Feb 2025 07:19:36 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 205647
IP address blocks: 37.148.0.0/19 maxlen: 24
37.148.32.0/20 maxlen: 24
37.148.48.0/23 maxlen: 24
37.148.56.0/21 maxlen: 24
37.148.120.0/21 maxlen: 24
37.202.128.0/21 maxlen: 21
37.202.136.0/21 maxlen: 21
37.202.144.0/21 maxlen: 21
37.202.144.0/22 maxlen: 22
37.202.148.0/23 maxlen: 23
37.202.150.0/23 maxlen: 23
37.202.152.0/21 maxlen: 21
37.202.160.0/21 maxlen: 21
37.202.168.0/21 maxlen: 21
37.202.176.0/22 maxlen: 22
37.202.180.0/22 maxlen: 22
37.202.184.0/21 maxlen: 24
37.202.184.0/22 maxlen: 24
37.202.188.0/22 maxlen: 24
85.15.48.0/24 maxlen: 24
85.15.49.0/24 maxlen: 24
94.182.0.0/18 maxlen: 18
94.182.8.0/23 maxlen: 23
94.182.12.0/23 maxlen: 23
94.182.14.0/24 maxlen: 24
94.182.17.0/24 maxlen: 24
94.182.30.0/23 maxlen: 23
94.182.41.0/24 maxlen: 24
94.182.48.0/24 maxlen: 24
94.182.56.0/22 maxlen: 24
94.182.60.0/22 maxlen: 24
94.182.64.0/18 maxlen: 18
94.182.64.0/20 maxlen: 20
94.182.72.0/21 maxlen: 21
94.182.80.0/20 maxlen: 20
94.182.82.0/24 maxlen: 24
94.182.96.0/20 maxlen: 20
94.182.97.192/28 maxlen: 28
94.182.112.0/20 maxlen: 20
94.182.114.0/23 maxlen: 23
94.182.116.0/22 maxlen: 22
94.182.120.0/21 maxlen: 21
94.182.128.0/18 maxlen: 18
94.182.128.0/20 maxlen: 20
94.182.144.0/20 maxlen: 20
94.182.160.0/20 maxlen: 20
94.182.176.0/20 maxlen: 20
94.182.192.0/18 maxlen: 18
94.182.196.0/24 maxlen: 24
94.182.199.0/24 maxlen: 24
94.182.204.0/22 maxlen: 22
94.182.204.0/24 maxlen: 24
94.182.205.0/24 maxlen: 24
94.182.206.0/24 maxlen: 24
94.182.207.0/24 maxlen: 24
94.182.208.0/24 maxlen: 24
94.182.212.0/23 maxlen: 23
94.182.217.0/24 maxlen: 24
94.182.222.0/23 maxlen: 23
94.182.226.0/24 maxlen: 24
94.182.228.0/22 maxlen: 22
94.182.232.0/23 maxlen: 24
94.182.234.0/23 maxlen: 23
94.182.238.0/24 maxlen: 24
94.182.240.0/23 maxlen: 24
94.182.244.0/22 maxlen: 24
94.182.244.0/23 maxlen: 23
94.182.248.0/22 maxlen: 24
94.182.248.0/23 maxlen: 23
94.182.252.0/24 maxlen: 24
94.182.254.0/24 maxlen: 24
94.183.0.0/18 maxlen: 18
94.183.64.0/18 maxlen: 18
94.183.128.0/18 maxlen: 18
94.183.192.0/18 maxlen: 18
151.246.0.0/15 maxlen: 24
151.246.0.0/18 maxlen: 18
151.246.64.0/18 maxlen: 18
151.246.128.0/18 maxlen: 18
151.246.192.0/18 maxlen: 18
151.246.248.0/22 maxlen: 22
151.247.0.0/20 maxlen: 24
151.247.16.0/22 maxlen: 24
151.247.214.0/23 maxlen: 23
151.247.216.0/21 maxlen: 21
151.247.224.0/22 maxlen: 22
151.247.228.0/22 maxlen: 24
151.247.232.0/22 maxlen: 22
151.247.236.0/22 maxlen: 24
151.247.236.0/24 maxlen: 24
151.247.237.0/24 maxlen: 24
151.247.238.0/23 maxlen: 23
151.247.240.0/24 maxlen: 24
151.247.241.0/24 maxlen: 24
151.247.248.0/22 maxlen: 22
Validation: Failed, RFC 3779 resource not subset of parent's resources
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:df:47:41:9e:fc:bf:35:b8:59:25:9c:31:21:10:a6:dc
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=adf491488a7cd8448a420945871c0b99672dc66e
Validity
Not Before: Feb 7 07:19:36 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=56550cf020833c7eb872ea02586e32cec75997ba
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:99:f6:d3:5b:d1:e4:bb:ea:dc:9b:5b:d7:0a:f7:
b8:47:5c:d1:c5:03:35:35:b0:a5:30:9b:17:36:ae:
c3:b9:d2:1c:b0:56:dc:1a:41:2b:b0:f2:52:18:66:
21:f0:58:17:93:f7:fa:90:80:89:0b:80:21:69:09:
ed:c8:13:01:26:fa:69:49:46:4f:37:bf:32:af:a0:
5e:94:ea:47:24:c7:c3:fd:99:fc:48:22:00:82:3d:
86:6c:fa:9c:79:5b:24:4c:56:c8:bd:f1:cb:2a:c9:
93:a2:b9:cb:72:4c:66:20:ef:43:2c:ed:29:6a:76:
d8:45:ea:f9:c9:75:09:ff:e4:7e:47:02:68:7b:3e:
3d:49:3f:3a:11:b7:19:28:9f:78:b1:9c:a4:d9:a3:
2b:22:be:54:79:bb:b4:6a:d6:f1:52:58:1f:ef:c0:
ed:20:02:ec:b0:03:6d:0c:5a:93:ba:62:6d:f7:41:
c2:28:53:ac:b6:72:c7:79:51:f6:6d:8e:a2:95:88:
0f:c1:5e:6b:0e:70:6e:bd:a2:95:86:39:1f:98:46:
7e:c1:50:8e:b5:97:2a:32:14:ad:9f:1a:36:74:4c:
74:b3:20:30:54:4a:d7:d9:79:aa:fd:63:d6:91:d3:
1d:15:82:06:8f:17:c6:64:83:33:51:c7:cb:5f:60:
9c:bb
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
56:55:0C:F0:20:83:3C:7E:B8:72:EA:02:58:6E:32:CE:C7:59:97:BA
X509v3 Authority Key Identifier:
keyid:AD:F4:91:48:8A:7C:D8:44:8A:42:09:45:87:1C:0B:99:67:2D:C6:6E
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/rfSRSIp82ESKQglFhxwLmWctxm4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/72/715d15-2810-4827-8dbd-0bee06126b1a/1/VlUM8CCDPH64cuoCWG4yzsdZl7o.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/72/715d15-2810-4827-8dbd-0bee06126b1a/1/rfSRSIp82ESKQglFhxwLmWctxm4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
37.148.0.0-37.148.49.255
37.148.56.0/21
37.148.120.0/21
37.202.128.0/18
85.15.48.0/23
94.182.0.0/15
151.246.0.0/15
Signature Algorithm: sha256WithRSAEncryption
36:43:11:47:0b:8a:75:e8:05:83:6c:a3:18:0c:2b:d6:96:f7:
3b:10:4d:f3:ee:72:85:99:73:c3:60:77:e8:e8:3c:58:11:c4:
81:d6:6e:05:77:63:73:0c:67:56:9c:63:dc:0d:c5:3e:26:25:
5a:12:6a:32:70:9d:1f:e5:6d:32:af:21:e6:eb:76:26:3d:7c:
c0:29:ee:3a:87:96:f8:07:ea:85:39:7a:ad:c5:01:fe:6f:bf:
1c:96:fd:d6:28:7d:05:90:80:d2:de:53:77:a3:28:8a:39:34:
b3:60:2d:e1:77:99:02:73:3b:62:e4:e7:96:fa:93:9e:3a:f6:
db:9e:44:5b:30:e3:b5:11:47:90:16:f8:6b:71:9d:eb:16:32:
9c:70:21:8b:9b:e3:6f:dd:79:1c:70:c9:b6:42:57:73:14:cc:
aa:78:ef:75:d0:b5:fe:bb:a2:ec:7a:2c:b1:5c:77:fd:70:33:
3e:27:42:a8:c9:c9:13:63:6c:70:f1:86:7d:ab:24:d4:f4:bb:
09:75:24:38:01:2e:a5:30:e3:af:a5:99:89:22:4e:31:cc:7b:
06:30:92:60:2e:57:a1:4d:b0:6d:01:24:05:e5:07:30:7d:c4:
72:a7:9f:ba:86:34:d8:04:cd:48:c1:21:fc:b4:d9:8c:8f:73:
f7:84:32:c3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun May 11 00:09:31 2025 by rpki-client