Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/72/715d15-2810-4827-8dbd-0bee06126b1a/1/YlCZZr_CDM7vFxHMdw-gcygT1Zk.roa
File: YlCZZr_CDM7vFxHMdw-gcygT1Zk.roa (raw, json)
Hash identifier: et77sqEfDtBqucJ0TErOYEDfmcSSOKIauaEdDSa+daI=
Subject key identifier: 62:50:99:66:BF:C2:0C:CE:EF:17:11:CC:77:0F:A0:73:28:13:D5:99
Certificate issuer: /CN=adf491488a7cd8448a420945871c0b99672dc66e
Certificate serial: 0193248EF9976B061B9F0AA8644BE51ADA79
Authority key identifier: AD:F4:91:48:8A:7C:D8:44:8A:42:09:45:87:1C:0B:99:67:2D:C6:6E
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/rfSRSIp82ESKQglFhxwLmWctxm4.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/72/715d15-2810-4827-8dbd-0bee06126b1a/1/YlCZZr_CDM7vFxHMdw-gcygT1Zk.roa
Signing time: Wed 13 Nov 2024 08:06:10 +0000
ROA not before: Wed 13 Nov 2024 08:06:10 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 58224
IP address blocks: 37.148.0.0/22 maxlen: 22
37.148.4.0/22 maxlen: 22
37.148.8.0/22 maxlen: 22
37.148.12.0/22 maxlen: 22
37.148.16.0/22 maxlen: 22
37.148.20.0/22 maxlen: 22
37.148.24.0/22 maxlen: 22
37.148.28.0/22 maxlen: 22
37.148.32.0/22 maxlen: 22
37.148.36.0/22 maxlen: 22
37.148.40.0/22 maxlen: 22
37.148.44.0/22 maxlen: 22
37.148.48.0/22 maxlen: 22
37.148.52.0/22 maxlen: 22
37.148.56.0/22 maxlen: 22
37.148.60.0/22 maxlen: 22
37.148.64.0/22 maxlen: 22
37.148.68.0/22 maxlen: 22
37.148.72.0/22 maxlen: 22
37.148.76.0/22 maxlen: 22
37.148.80.0/22 maxlen: 22
37.148.84.0/22 maxlen: 22
37.148.90.0/23 maxlen: 23
37.148.100.0/22 maxlen: 22
37.148.104.0/22 maxlen: 22
37.148.110.0/24 maxlen: 24
37.148.111.0/24 maxlen: 24
37.148.112.0/24 maxlen: 24
37.148.113.0/24 maxlen: 24
37.148.114.0/24 maxlen: 24
37.148.115.0/24 maxlen: 24
37.148.116.0/24 maxlen: 24
37.148.117.0/24 maxlen: 24
37.148.118.0/24 maxlen: 24
37.148.119.0/24 maxlen: 24
37.148.124.0/22 maxlen: 22
37.202.128.0/22 maxlen: 22
37.202.132.0/22 maxlen: 22
37.202.136.0/22 maxlen: 22
37.202.140.0/22 maxlen: 22
37.202.144.0/22 maxlen: 22
37.202.148.0/22 maxlen: 22
37.202.152.0/22 maxlen: 22
37.202.156.0/22 maxlen: 22
37.202.160.0/22 maxlen: 22
37.202.164.0/22 maxlen: 22
37.202.188.0/22 maxlen: 22
37.202.232.0/22 maxlen: 22
37.202.236.0/22 maxlen: 22
37.202.240.0/22 maxlen: 22
37.202.244.0/22 maxlen: 22
37.202.248.0/22 maxlen: 22
37.202.252.0/22 maxlen: 22
94.182.10.0/24 maxlen: 24
94.182.204.0/24 maxlen: 24
94.182.205.0/24 maxlen: 24
94.182.206.0/24 maxlen: 24
94.182.207.0/24 maxlen: 24
151.243.124.0/23 maxlen: 23
151.243.128.0/18 maxlen: 18
151.243.128.0/21 maxlen: 21
151.243.136.0/22 maxlen: 22
151.243.140.0/22 maxlen: 22
151.243.144.0/22 maxlen: 22
151.243.148.0/22 maxlen: 22
151.243.152.0/21 maxlen: 21
151.243.160.0/20 maxlen: 20
151.243.176.0/22 maxlen: 22
151.243.180.0/22 maxlen: 22
151.243.192.0/23 maxlen: 23
151.243.194.0/23 maxlen: 23
151.243.200.0/23 maxlen: 23
151.243.202.0/23 maxlen: 23
151.243.214.0/23 maxlen: 23
151.243.220.0/23 maxlen: 23
151.243.222.0/23 maxlen: 23
151.243.224.0/22 maxlen: 22
151.243.228.0/22 maxlen: 22
151.243.232.0/22 maxlen: 22
151.243.236.0/22 maxlen: 22
151.243.240.0/23 maxlen: 23
151.243.242.0/23 maxlen: 23
151.243.244.0/23 maxlen: 23
151.243.246.0/24 maxlen: 24
151.243.248.0/23 maxlen: 23
151.243.250.0/23 maxlen: 23
151.244.16.0/22 maxlen: 22
151.244.20.0/22 maxlen: 22
151.244.24.0/22 maxlen: 22
151.244.28.0/22 maxlen: 22
151.244.228.0/22 maxlen: 22
151.244.232.0/21 maxlen: 21
151.244.240.0/22 maxlen: 22
151.244.244.0/23 maxlen: 23
151.244.246.0/23 maxlen: 23
151.244.252.0/24 maxlen: 24
151.245.0.0/22 maxlen: 22
151.245.4.0/22 maxlen: 22
151.245.8.0/22 maxlen: 22
151.245.12.0/22 maxlen: 22
151.245.16.0/22 maxlen: 22
151.245.20.0/22 maxlen: 22
151.245.24.0/22 maxlen: 22
151.245.28.0/22 maxlen: 22
151.245.32.0/22 maxlen: 22
151.245.36.0/22 maxlen: 22
151.245.40.0/22 maxlen: 22
151.245.44.0/22 maxlen: 22
151.245.48.0/22 maxlen: 22
151.245.52.0/22 maxlen: 22
151.245.56.0/22 maxlen: 22
151.245.60.0/22 maxlen: 22
151.245.64.0/22 maxlen: 22
151.245.68.0/22 maxlen: 22
151.245.72.0/22 maxlen: 22
151.245.76.0/22 maxlen: 22
151.245.80.0/22 maxlen: 22
151.245.84.0/22 maxlen: 22
151.245.88.0/22 maxlen: 22
151.245.92.0/22 maxlen: 22
151.245.96.0/22 maxlen: 22
151.245.100.0/22 maxlen: 22
151.245.104.0/22 maxlen: 22
151.245.108.0/22 maxlen: 22
151.245.112.0/22 maxlen: 22
151.245.116.0/22 maxlen: 22
151.245.120.0/22 maxlen: 22
151.245.124.0/22 maxlen: 22
151.245.128.0/22 maxlen: 22
151.245.132.0/22 maxlen: 22
151.245.136.0/22 maxlen: 22
151.245.140.0/22 maxlen: 22
151.245.144.0/22 maxlen: 22
151.245.148.0/22 maxlen: 22
151.245.152.0/22 maxlen: 22
151.245.156.0/22 maxlen: 22
151.245.160.0/22 maxlen: 22
151.245.164.0/22 maxlen: 22
151.245.168.0/22 maxlen: 22
151.245.172.0/22 maxlen: 22
151.245.176.0/22 maxlen: 22
151.245.180.0/22 maxlen: 22
151.245.184.0/22 maxlen: 22
151.245.188.0/22 maxlen: 22
151.245.192.0/22 maxlen: 22
151.245.196.0/22 maxlen: 22
151.245.200.0/22 maxlen: 22
151.245.204.0/22 maxlen: 22
151.245.208.0/21 maxlen: 21
151.245.216.0/21 maxlen: 21
151.245.220.0/22 maxlen: 22
151.245.224.0/22 maxlen: 22
151.245.228.0/22 maxlen: 22
151.245.232.0/22 maxlen: 22
151.245.236.0/22 maxlen: 22
151.245.240.0/22 maxlen: 22
151.245.244.0/22 maxlen: 22
151.245.248.0/22 maxlen: 22
151.245.252.0/22 maxlen: 22
151.246.0.0/22 maxlen: 22
151.246.4.0/22 maxlen: 22
151.246.8.0/22 maxlen: 22
151.246.12.0/22 maxlen: 22
151.246.16.0/22 maxlen: 22
151.246.20.0/22 maxlen: 22
151.246.24.0/22 maxlen: 22
151.246.28.0/22 maxlen: 22
151.246.32.0/22 maxlen: 22
151.246.36.0/22 maxlen: 22
151.246.40.0/22 maxlen: 22
151.246.44.0/22 maxlen: 22
151.246.48.0/22 maxlen: 22
151.246.52.0/22 maxlen: 22
151.246.56.0/22 maxlen: 22
151.246.60.0/22 maxlen: 22
151.246.176.0/21 maxlen: 21
151.246.184.0/21 maxlen: 21
151.246.224.0/20 maxlen: 20
151.247.0.0/23 maxlen: 23
151.247.2.0/24 maxlen: 24
151.247.12.0/24 maxlen: 24
151.247.14.0/24 maxlen: 24
151.247.18.0/24 maxlen: 24
151.247.20.0/23 maxlen: 23
151.247.22.0/24 maxlen: 24
151.247.23.0/24 maxlen: 24
151.247.24.0/22 maxlen: 22
151.247.28.0/22 maxlen: 22
151.247.32.0/22 maxlen: 22
151.247.36.0/22 maxlen: 22
151.247.40.0/22 maxlen: 22
151.247.44.0/22 maxlen: 22
151.247.48.0/22 maxlen: 22
151.247.52.0/22 maxlen: 22
151.247.56.0/22 maxlen: 22
151.247.60.0/22 maxlen: 22
151.247.64.0/23 maxlen: 23
151.247.66.0/23 maxlen: 23
151.247.68.0/23 maxlen: 23
151.247.70.0/23 maxlen: 23
151.247.72.0/22 maxlen: 22
151.247.76.0/23 maxlen: 23
151.247.78.0/23 maxlen: 23
151.247.80.0/23 maxlen: 23
151.247.82.0/23 maxlen: 23
151.247.84.0/23 maxlen: 23
151.247.86.0/23 maxlen: 23
151.247.88.0/22 maxlen: 22
151.247.92.0/22 maxlen: 22
151.247.96.0/22 maxlen: 22
151.247.100.0/22 maxlen: 22
151.247.104.0/22 maxlen: 22
151.247.108.0/22 maxlen: 22
151.247.112.0/22 maxlen: 22
151.247.116.0/22 maxlen: 22
151.247.120.0/22 maxlen: 22
151.247.124.0/22 maxlen: 22
151.247.128.0/22 maxlen: 22
151.247.132.0/22 maxlen: 22
151.247.136.0/22 maxlen: 22
151.247.140.0/22 maxlen: 22
151.247.144.0/22 maxlen: 22
151.247.148.0/22 maxlen: 22
151.247.148.0/23 maxlen: 23
151.247.150.0/23 maxlen: 23
151.247.152.0/22 maxlen: 22
151.247.156.0/22 maxlen: 22
151.247.160.0/22 maxlen: 22
151.247.164.0/22 maxlen: 22
151.247.168.0/22 maxlen: 22
151.247.172.0/22 maxlen: 22
151.247.176.0/22 maxlen: 22
151.247.180.0/22 maxlen: 22
151.247.184.0/22 maxlen: 22
151.247.188.0/22 maxlen: 22
151.247.192.0/22 maxlen: 22
151.247.196.0/22 maxlen: 22
151.247.200.0/22 maxlen: 22
151.247.204.0/22 maxlen: 22
151.247.204.0/23 maxlen: 23
151.247.206.0/24 maxlen: 24
151.247.207.0/24 maxlen: 24
151.247.208.0/22 maxlen: 22
151.247.212.0/23 maxlen: 23
151.247.230.0/24 maxlen: 24
151.247.232.0/22 maxlen: 22
151.247.236.0/23 maxlen: 23
151.247.239.0/24 maxlen: 24
151.247.243.0/24 maxlen: 24
151.247.252.0/22 maxlen: 22
Validation: Failed, RFC 3779 resource not subset of parent's resources
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:93:24:8e:f9:97:6b:06:1b:9f:0a:a8:64:4b:e5:1a:da:79
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=adf491488a7cd8448a420945871c0b99672dc66e
Validity
Not Before: Nov 13 08:06:10 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=62509966bfc20cceef1711cc770fa0732813d599
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a5:74:b4:7a:c7:f9:59:eb:41:7c:4f:91:c7:2e:
f8:6d:d2:00:b7:77:e8:a7:d0:e1:b1:86:88:ca:8d:
2d:6d:8d:34:a6:24:b8:cc:89:7f:0f:5a:e0:7b:7d:
be:21:7e:bf:c3:eb:c5:e3:44:72:fc:b9:78:3f:ec:
8d:a2:ee:43:75:12:f1:77:34:22:13:59:19:1e:b0:
6b:d0:8c:09:8b:e4:32:d7:3f:5a:19:ff:5f:1c:d0:
f9:63:66:81:66:f0:c2:4c:93:f5:22:5d:c3:5f:50:
a8:a7:ba:50:87:1a:5e:0e:ad:38:81:5f:c6:f5:bc:
8b:e0:3e:bb:5d:01:54:2c:03:3a:5f:00:fd:30:9c:
de:86:c3:6a:95:79:58:2c:b0:93:98:12:c3:87:e0:
eb:02:f9:f6:16:dc:5c:b8:96:c0:05:5b:cc:a6:bb:
51:83:73:9a:34:3c:6d:2f:c5:23:1d:ab:26:01:90:
04:e2:c2:6b:94:5b:6a:da:40:ea:c7:3b:cd:c1:e4:
bb:64:25:4b:ed:1d:6d:f0:09:3d:93:fd:8d:ba:99:
31:b7:f3:5c:1a:02:c0:cc:1b:a6:78:e6:a4:fc:51:
1f:1d:0e:50:d9:db:31:43:6b:fc:08:bc:2f:e0:77:
58:70:62:3a:f4:da:ee:a4:9e:e9:f0:8a:14:b2:a2:
2b:77
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
62:50:99:66:BF:C2:0C:CE:EF:17:11:CC:77:0F:A0:73:28:13:D5:99
X509v3 Authority Key Identifier:
keyid:AD:F4:91:48:8A:7C:D8:44:8A:42:09:45:87:1C:0B:99:67:2D:C6:6E
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/rfSRSIp82ESKQglFhxwLmWctxm4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/72/715d15-2810-4827-8dbd-0bee06126b1a/1/YlCZZr_CDM7vFxHMdw-gcygT1Zk.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/72/715d15-2810-4827-8dbd-0bee06126b1a/1/rfSRSIp82ESKQglFhxwLmWctxm4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
37.148.0.0-37.148.87.255
37.148.90.0/23
37.148.100.0-37.148.107.255
37.148.110.0-37.148.119.255
37.148.124.0/22
37.202.128.0-37.202.167.255
37.202.188.0/22
37.202.232.0-37.202.255.255
94.182.10.0/24
94.182.204.0/22
151.243.124.0/23
151.243.128.0-151.243.195.255
151.243.200.0/22
151.243.214.0/23
151.243.220.0-151.243.246.255
151.243.248.0/22
151.244.16.0/20
151.244.228.0-151.244.247.255
151.244.252.0/24
151.245.0.0-151.246.63.255
151.246.176.0/20
151.246.224.0/20
151.247.0.0-151.247.2.255
151.247.12.0/24
151.247.14.0/24
151.247.18.0/24
151.247.20.0-151.247.213.255
151.247.230.0/24
151.247.232.0-151.247.237.255
151.247.239.0/24
151.247.243.0/24
151.247.252.0/22
Signature Algorithm: sha256WithRSAEncryption
05:5c:bd:f2:bf:18:b1:a0:f5:a9:ff:9f:90:3f:2a:02:c1:31:
2e:13:ce:f3:c3:d7:b6:7b:4b:7c:f0:63:5d:55:6a:6d:f3:7c:
35:d2:ae:30:8e:8c:29:ea:79:0a:12:ec:b4:37:f0:c8:79:9d:
17:d4:e5:61:55:e2:fc:2c:4d:a7:ff:98:9f:ec:13:c0:57:66:
f6:e2:23:25:cf:41:88:14:4f:48:46:20:78:27:2b:2a:62:9c:
66:f9:1e:7a:20:11:70:b4:ec:bd:31:10:ae:3b:9f:df:07:be:
21:0a:54:2b:89:f2:0b:62:90:73:37:6f:98:60:dc:cc:38:98:
95:9a:28:e2:d4:52:2d:8b:af:b2:85:f1:2e:80:56:64:bd:90:
0a:09:ca:24:fb:1f:01:88:e4:0c:12:64:4e:99:a9:f8:c9:bc:
8c:56:df:a7:89:03:c8:65:57:34:86:19:6c:68:d7:a9:21:13:
84:23:a3:33:cf:a7:a7:d5:51:b4:bc:a1:1f:9c:f0:78:63:fb:
79:6e:cb:3f:e6:d4:ca:32:78:cb:75:19:94:f7:6c:d2:eb:2a:
1e:47:15:1f:59:ad:b9:ba:e9:df:93:cd:60:92:6f:01:d1:9a:
c3:0c:64:ca:2e:d7:f8:05:bc:b5:bf:9f:17:81:90:73:03:3c:
1d:dd:aa:58
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun May 11 04:24:10 2025 by rpki-client