Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/72/715d15-2810-4827-8dbd-0bee06126b1a/1/SCiHbMnfktBEbHyDo8uvAzpxFuk.roa
File: SCiHbMnfktBEbHyDo8uvAzpxFuk.roa (raw, json)
Hash identifier: E0RTs+LOyMv2cRUl62CNqA4o+IjbHEaFqLhg9eauJE0=
Subject key identifier: 48:28:87:6C:C9:DF:92:D0:44:6C:7C:83:A3:CB:AF:03:3A:71:16:E9
Certificate issuer: /CN=adf491488a7cd8448a420945871c0b99672dc66e
Certificate serial: 019421B1F19E2D9A4E9E383F696731AED41C
Authority key identifier: AD:F4:91:48:8A:7C:D8:44:8A:42:09:45:87:1C:0B:99:67:2D:C6:6E
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/rfSRSIp82ESKQglFhxwLmWctxm4.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/72/715d15-2810-4827-8dbd-0bee06126b1a/1/SCiHbMnfktBEbHyDo8uvAzpxFuk.roa
Signing time: Wed 01 Jan 2025 11:48:17 +0000
ROA not before: Wed 01 Jan 2025 11:48:17 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 58224
IP address blocks: 37.202.128.0/22 maxlen: 22
37.202.132.0/22 maxlen: 22
37.202.136.0/22 maxlen: 22
37.202.140.0/22 maxlen: 22
37.202.152.0/22 maxlen: 22
37.202.156.0/22 maxlen: 22
37.202.160.0/22 maxlen: 22
37.202.164.0/22 maxlen: 22
37.202.188.0/22 maxlen: 22
37.202.232.0/22 maxlen: 22
37.202.236.0/22 maxlen: 22
37.202.240.0/22 maxlen: 22
37.202.244.0/22 maxlen: 22
37.202.248.0/22 maxlen: 22
37.202.252.0/22 maxlen: 22
94.182.10.0/24 maxlen: 24
94.182.204.0/24 maxlen: 24
94.182.205.0/24 maxlen: 24
94.182.206.0/24 maxlen: 24
94.182.207.0/24 maxlen: 24
151.244.16.0/22 maxlen: 22
151.244.20.0/22 maxlen: 22
151.244.24.0/22 maxlen: 22
151.244.28.0/22 maxlen: 22
151.244.36.0/22 maxlen: 22
151.244.228.0/22 maxlen: 22
151.244.232.0/21 maxlen: 21
151.244.240.0/22 maxlen: 22
151.244.244.0/23 maxlen: 23
151.244.246.0/23 maxlen: 23
151.244.248.0/23 maxlen: 23
151.244.252.0/24 maxlen: 24
151.244.253.0/24 maxlen: 24
151.244.254.0/23 maxlen: 23
151.245.0.0/22 maxlen: 22
151.245.4.0/22 maxlen: 22
151.245.8.0/22 maxlen: 22
151.245.12.0/22 maxlen: 22
151.245.16.0/22 maxlen: 22
151.245.20.0/22 maxlen: 22
151.245.24.0/22 maxlen: 22
151.245.28.0/22 maxlen: 22
151.245.32.0/22 maxlen: 22
151.245.36.0/22 maxlen: 22
151.245.40.0/22 maxlen: 22
151.245.44.0/22 maxlen: 22
151.245.48.0/22 maxlen: 22
151.245.52.0/22 maxlen: 22
151.245.56.0/22 maxlen: 22
151.245.60.0/22 maxlen: 22
151.245.64.0/22 maxlen: 22
151.245.68.0/22 maxlen: 22
151.245.72.0/22 maxlen: 22
151.245.76.0/22 maxlen: 22
151.245.80.0/22 maxlen: 22
151.245.84.0/22 maxlen: 22
151.245.88.0/22 maxlen: 22
151.245.92.0/22 maxlen: 22
151.245.96.0/22 maxlen: 22
151.245.100.0/22 maxlen: 22
151.245.104.0/22 maxlen: 22
151.245.108.0/22 maxlen: 22
151.245.112.0/22 maxlen: 22
151.245.116.0/22 maxlen: 22
151.245.120.0/22 maxlen: 22
151.245.124.0/22 maxlen: 22
151.245.128.0/22 maxlen: 22
151.245.132.0/22 maxlen: 22
151.245.136.0/22 maxlen: 22
151.245.140.0/22 maxlen: 22
151.245.144.0/22 maxlen: 22
151.245.148.0/22 maxlen: 22
151.245.152.0/22 maxlen: 22
151.245.156.0/22 maxlen: 22
151.245.160.0/22 maxlen: 22
151.245.164.0/22 maxlen: 22
151.245.168.0/22 maxlen: 22
151.245.172.0/22 maxlen: 22
151.245.176.0/22 maxlen: 22
151.245.180.0/22 maxlen: 22
151.245.184.0/22 maxlen: 22
151.245.188.0/22 maxlen: 22
151.245.192.0/22 maxlen: 22
151.245.196.0/22 maxlen: 22
151.245.200.0/22 maxlen: 22
151.245.204.0/22 maxlen: 22
151.245.208.0/21 maxlen: 21
151.245.216.0/21 maxlen: 21
151.245.220.0/22 maxlen: 22
151.245.224.0/22 maxlen: 22
151.245.228.0/22 maxlen: 22
151.245.232.0/22 maxlen: 22
151.245.236.0/22 maxlen: 22
151.245.240.0/22 maxlen: 22
151.245.244.0/22 maxlen: 22
151.245.248.0/22 maxlen: 22
151.245.252.0/22 maxlen: 22
151.246.0.0/22 maxlen: 22
151.246.4.0/22 maxlen: 22
151.246.8.0/22 maxlen: 22
151.246.12.0/22 maxlen: 22
151.246.16.0/22 maxlen: 22
151.246.20.0/22 maxlen: 22
151.246.24.0/22 maxlen: 22
151.246.28.0/22 maxlen: 22
151.246.32.0/22 maxlen: 22
151.246.36.0/22 maxlen: 22
151.246.40.0/22 maxlen: 22
151.246.44.0/22 maxlen: 22
151.246.48.0/22 maxlen: 22
151.246.52.0/22 maxlen: 22
151.246.56.0/22 maxlen: 22
151.246.60.0/22 maxlen: 22
151.246.176.0/21 maxlen: 21
151.246.184.0/21 maxlen: 21
151.246.224.0/20 maxlen: 20
151.247.2.0/24 maxlen: 24
151.247.12.0/24 maxlen: 24
151.247.14.0/24 maxlen: 24
151.247.18.0/24 maxlen: 24
151.247.20.0/23 maxlen: 23
151.247.22.0/24 maxlen: 24
151.247.23.0/24 maxlen: 24
151.247.24.0/22 maxlen: 22
151.247.28.0/22 maxlen: 22
151.247.32.0/22 maxlen: 22
151.247.36.0/22 maxlen: 22
151.247.40.0/22 maxlen: 22
151.247.44.0/22 maxlen: 22
151.247.48.0/22 maxlen: 22
151.247.52.0/22 maxlen: 22
151.247.56.0/22 maxlen: 22
151.247.60.0/22 maxlen: 22
151.247.64.0/23 maxlen: 23
151.247.66.0/23 maxlen: 23
151.247.68.0/23 maxlen: 23
151.247.70.0/23 maxlen: 23
151.247.72.0/22 maxlen: 22
151.247.76.0/23 maxlen: 23
151.247.78.0/23 maxlen: 23
151.247.80.0/23 maxlen: 23
151.247.82.0/23 maxlen: 23
151.247.84.0/23 maxlen: 23
151.247.86.0/23 maxlen: 23
151.247.88.0/22 maxlen: 22
151.247.92.0/22 maxlen: 22
151.247.96.0/22 maxlen: 22
151.247.100.0/22 maxlen: 22
151.247.104.0/22 maxlen: 22
151.247.108.0/22 maxlen: 22
151.247.112.0/22 maxlen: 22
151.247.116.0/22 maxlen: 22
151.247.120.0/22 maxlen: 22
151.247.124.0/22 maxlen: 22
151.247.128.0/22 maxlen: 22
151.247.132.0/22 maxlen: 22
151.247.136.0/22 maxlen: 22
151.247.140.0/22 maxlen: 22
151.247.144.0/22 maxlen: 22
151.247.148.0/22 maxlen: 22
151.247.148.0/23 maxlen: 23
151.247.150.0/23 maxlen: 23
151.247.152.0/22 maxlen: 22
151.247.156.0/22 maxlen: 22
151.247.160.0/22 maxlen: 22
151.247.164.0/22 maxlen: 22
151.247.168.0/22 maxlen: 22
151.247.172.0/22 maxlen: 22
151.247.176.0/22 maxlen: 22
151.247.180.0/22 maxlen: 22
151.247.184.0/22 maxlen: 22
151.247.192.0/22 maxlen: 22
151.247.196.0/22 maxlen: 22
151.247.200.0/22 maxlen: 22
151.247.204.0/22 maxlen: 22
151.247.204.0/23 maxlen: 23
151.247.206.0/24 maxlen: 24
151.247.207.0/24 maxlen: 24
151.247.208.0/22 maxlen: 22
151.247.212.0/23 maxlen: 23
151.247.232.0/22 maxlen: 22
151.247.239.0/24 maxlen: 24
151.247.243.0/24 maxlen: 24
151.247.252.0/22 maxlen: 22
Validation: Failed, RFC 3779 resource not subset of parent's resources
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:21:b1:f1:9e:2d:9a:4e:9e:38:3f:69:67:31:ae:d4:1c
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=adf491488a7cd8448a420945871c0b99672dc66e
Validity
Not Before: Jan 1 11:48:17 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=4828876cc9df92d0446c7c83a3cbaf033a7116e9
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b5:c0:46:57:ff:09:e6:51:ca:01:22:40:97:fc:
04:57:0e:bb:93:0a:4f:41:b5:02:3d:2f:c0:5f:9b:
53:dd:6b:b3:91:62:53:4f:17:cc:b1:3e:ba:b3:c4:
ee:9b:37:35:45:67:ea:98:3b:3f:5c:a8:e5:4e:9b:
29:13:d7:86:46:47:d0:9a:c3:47:88:f7:7e:47:51:
57:56:94:a3:15:23:a1:e6:a3:ee:09:03:95:ac:c4:
1e:51:a2:20:e7:11:fd:49:a9:56:48:b6:d4:00:04:
4a:47:c6:77:04:2d:0b:25:33:71:eb:77:db:f4:a5:
3c:4e:86:19:d6:cf:10:36:ae:c3:2a:08:da:0a:f2:
dc:47:f2:a1:4e:b0:c0:6b:01:f8:e1:8e:c9:a1:2e:
52:77:99:1e:ec:d9:b5:66:01:a4:c9:e2:0c:c7:66:
ce:86:eb:70:92:6f:f5:0b:03:d6:35:cf:4a:d7:1c:
af:35:96:00:3e:29:a7:34:0e:c3:21:2e:08:c9:27:
26:38:a7:df:bb:3d:4b:97:11:01:f4:f4:97:36:8d:
62:83:d4:a3:76:95:9d:fa:52:89:a2:a3:3c:a0:84:
ed:54:88:d6:96:a2:c8:09:a4:fc:39:f6:9b:76:bb:
e5:07:f0:3c:9d:14:fa:ee:c5:94:35:14:e8:0c:a9:
d4:6b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
48:28:87:6C:C9:DF:92:D0:44:6C:7C:83:A3:CB:AF:03:3A:71:16:E9
X509v3 Authority Key Identifier:
keyid:AD:F4:91:48:8A:7C:D8:44:8A:42:09:45:87:1C:0B:99:67:2D:C6:6E
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/rfSRSIp82ESKQglFhxwLmWctxm4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/72/715d15-2810-4827-8dbd-0bee06126b1a/1/SCiHbMnfktBEbHyDo8uvAzpxFuk.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/72/715d15-2810-4827-8dbd-0bee06126b1a/1/rfSRSIp82ESKQglFhxwLmWctxm4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
37.202.128.0/20
37.202.152.0-37.202.167.255
37.202.188.0/22
37.202.232.0-37.202.255.255
94.182.10.0/24
94.182.204.0/22
151.244.16.0/20
151.244.36.0/22
151.244.228.0-151.244.249.255
151.244.252.0-151.246.63.255
151.246.176.0/20
151.246.224.0/20
151.247.2.0/24
151.247.12.0/24
151.247.14.0/24
151.247.18.0/24
151.247.20.0-151.247.187.255
151.247.192.0-151.247.213.255
151.247.232.0/22
151.247.239.0/24
151.247.243.0/24
151.247.252.0/22
Signature Algorithm: sha256WithRSAEncryption
75:fb:41:59:aa:85:66:87:e9:5a:84:31:71:79:dd:ae:3b:07:
0b:30:34:42:47:91:b7:8f:68:50:53:f8:03:27:aa:73:bd:4c:
65:95:00:31:9a:26:1d:87:f3:f0:7e:7b:98:8f:01:9a:a5:3e:
0e:47:e9:c9:73:d3:cb:37:8c:66:19:41:f3:c0:72:55:91:b2:
b7:92:10:bc:ef:55:04:40:c1:c4:7a:71:60:f2:ec:df:c6:b9:
aa:9b:44:80:ae:99:85:22:02:5b:bf:af:49:01:5b:5f:05:18:
99:99:ce:47:dd:22:b7:82:dd:b8:ab:f9:a2:ee:9c:ca:a1:fe:
c9:d8:be:fa:be:6a:87:37:88:7c:04:bb:99:80:5e:26:20:5c:
2c:c5:f0:9a:78:94:ef:3b:41:ab:e6:6b:60:7a:f2:b6:2e:3d:
cc:a6:9c:8c:0b:39:a4:36:ac:7e:df:27:97:b5:2d:38:32:7a:
d3:be:26:49:42:11:5a:60:c0:86:f4:19:f3:3c:02:88:ef:a3:
17:ba:9f:5f:68:e7:99:ae:e1:c5:8f:2e:fa:87:bd:02:58:b7:
06:7b:e9:4c:71:ef:2d:94:d8:2d:c5:15:55:ea:49:37:4c:d4:
bf:b5:00:7a:23:1f:0a:05:77:95:90:d3:06:41:ce:c3:d7:da:
fd:b1:05:84
-----BEGIN CERTIFICATE-----
MIIFrzCCBJegAwIBAgISAZQhsfGeLZpOnjg/aWcxrtQcMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGFkZjQ5MTQ4OGE3Y2Q4NDQ4YTQyMDk0NTg3MWMwYjk5Njcy
ZGM2NmUwHhcNMjUwMTAxMTE0ODE3WhcNMjYwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
Eyg0ODI4ODc2Y2M5ZGY5MmQwNDQ2YzdjODNhM2NiYWYwMzNhNzExNmU5MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAtcBGV/8J5lHKASJAl/wEVw67kwpP
QbUCPS/AX5tT3WuzkWJTTxfMsT66s8Tumzc1RWfqmDs/XKjlTpspE9eGRkfQmsNH
iPd+R1FXVpSjFSOh5qPuCQOVrMQeUaIg5xH9SalWSLbUAARKR8Z3BC0LJTNx63fb
9KU8ToYZ1s8QNq7DKgjaCvLcR/KhTrDAawH44Y7JoS5Sd5ke7Nm1ZgGkyeIMx2bO
hutwkm/1CwPWNc9K1xyvNZYAPimnNA7DIS4IyScmOKffuz1LlxEB9PSXNo1ig9Sj
dpWd+lKJoqM8oITtVIjWlqLICaT8OfabdrvlB/A8nRT67sWUNRToDKnUawIDAQAB
o4ICuzCCArcwHQYDVR0OBBYEFEgoh2zJ35LQRGx8g6PLrwM6cRbpMB8GA1UdIwQY
MBaAFK30kUiKfNhEikIJRYccC5lnLcZuMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvcmZTUlNJcDgyRVNLUWdsRmh4d0xtV2N0eG00LmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC83Mi83MTVkMTUtMjgxMC00ODI3LThkYmQt
MGJlZTA2MTI2YjFhLzEvU0NpSGJNbmZrdEJFYkh5RG84dXZBenB4RnVrLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC83Mi83MTVkMTUtMjgxMC00ODI3LThkYmQtMGJlZTA2MTI2YjFh
LzEvcmZTUlNJcDgyRVNLUWdsRmh4d0xtV2N0eG00LmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMIHQBggrBgEFBQcBBwEB/wSBwDCBvTCBugQCAAEwgbMDBAQl
yoAwDAMEAyXKmAMEAyXKoAMEAiXKvDALAwQDJcroAwMAJcoDBABetgoDBAJetswD
BASX9BADBAKX9CQwDAMEApf05AMEAZf0+DAMAwQCl/T8AwQGl/YAAwQEl/awAwQE
l/bgAwQAl/cCAwQAl/cMAwQAl/cOAwQAl/cSMAwDBAKX9xQDBAKX97gwDAMEBpf3
wAMEAZf31AMEApf36AMEAJf37wMEAJf38wMEApf3/DANBgkqhkiG9w0BAQsFAAOC
AQEAdftBWaqFZofpWoQxcXndrjsHCzA0QkeRt49oUFP4Ayeqc71MZZUAMZomHYfz
8H57mI8BmqU+DkfpyXPTyzeMZhlB88ByVZGyt5IQvO9VBEDBxHpxYPLs38a5qptE
gK6ZhSICW7+vSQFbXwUYmZnOR90it4LduKv5ou6cyqH+ydi++r5qhzeIfAS7mYBe
JiBcLMXwmniU7ztBq+ZrYHryti49zKacjAs5pDasft8nl7UtODJ6074mSUIRWmDA
hvQZ8zwCiO+jF7qfX2jnma7hxY8u+oe9Ali3BnvpTHHvLZTYLcUVVepJN0zUv7UA
eiMfCgV3lZDTBkHOw9fa/bEFhA==
-----END CERTIFICATE-----
Generated at Sat May 10 23:06:59 2025 by rpki-client