Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/35/aa58c3-e706-4a49-a7c5-0ae2e922a292/1/Scmfk1ssiQ3tB6T92FEDWesZTdU.roa
File: Scmfk1ssiQ3tB6T92FEDWesZTdU.roa (raw, json)
Hash identifier: 6Fb79XKVDIHQNs1Ms1WP+A1BXMgsZWoPg3Rg7ZJS8z0=
Subject key identifier: 49:C9:9F:93:5B:2C:89:0D:ED:07:A4:FD:D8:51:03:59:EB:19:4D:D5
Certificate issuer: /CN=368bfb8a5eee49082ea628df25a4a5d50f3aa9b3
Certificate serial: 01847B23A457B0817B100EDF65C992768C27
Authority key identifier: 36:8B:FB:8A:5E:EE:49:08:2E:A6:28:DF:25:A4:A5:D5:0F:3A:A9:B3
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Nov7il7uSQgupijfJaSl1Q86qbM.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/35/aa58c3-e706-4a49-a7c5-0ae2e922a292/1/Scmfk1ssiQ3tB6T92FEDWesZTdU.roa
Signing time: Tue 15 Nov 2022 11:54:04 +0000
ROA not before: Tue 15 Nov 2022 11:54:04 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 211585
IP address blocks: 185.108.206.0/24 maxlen: 24
Validation: Failed, RFC 3779 resource not subset of parent's resources
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:84:7b:23:a4:57:b0:81:7b:10:0e:df:65:c9:92:76:8c:27
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=368bfb8a5eee49082ea628df25a4a5d50f3aa9b3
Validity
Not Before: Nov 15 11:54:04 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=49c99f935b2c890ded07a4fdd8510359eb194dd5
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:82:56:3f:54:7f:fb:4b:75:14:47:0b:b3:3d:7a:
20:83:ad:6c:dc:ed:5e:3f:7f:7f:50:8a:52:6e:f8:
39:4e:67:8b:55:90:d5:c8:89:c5:67:d5:71:2a:97:
d2:c3:e6:1f:94:c2:95:6f:a3:2a:05:a3:c6:9a:f7:
2e:97:69:2e:67:74:9c:9b:6c:c8:02:5a:17:ed:11:
4b:5a:68:1d:ed:c8:5f:60:76:ba:b9:ce:58:0b:a3:
0c:d2:43:33:54:7a:2d:9d:84:af:76:97:36:16:ba:
c6:7c:63:52:95:f9:e0:87:ab:6e:f9:47:c3:16:39:
02:85:a8:8f:41:29:a1:db:a4:ac:66:8a:51:a6:95:
e9:8b:85:86:92:51:12:8c:8c:41:ab:73:d0:d2:fa:
0d:5d:63:aa:85:bd:4d:6a:28:23:b4:50:05:36:69:
1b:be:a0:82:a9:ca:d7:68:0c:11:4e:64:91:f2:20:
74:57:73:03:9c:f9:b1:2b:68:95:a1:5e:34:72:58:
c8:31:98:57:7b:60:72:ec:93:70:2a:ba:90:71:46:
2a:08:34:4e:af:b6:b1:62:41:78:66:26:59:2f:2a:
45:12:18:b7:6a:9e:c4:f7:8f:ad:a7:53:6d:fb:1f:
99:a7:57:13:74:d6:77:1e:ea:d5:16:db:ee:4f:93:
f9:e9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
49:C9:9F:93:5B:2C:89:0D:ED:07:A4:FD:D8:51:03:59:EB:19:4D:D5
X509v3 Authority Key Identifier:
keyid:36:8B:FB:8A:5E:EE:49:08:2E:A6:28:DF:25:A4:A5:D5:0F:3A:A9:B3
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Nov7il7uSQgupijfJaSl1Q86qbM.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/35/aa58c3-e706-4a49-a7c5-0ae2e922a292/1/Scmfk1ssiQ3tB6T92FEDWesZTdU.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/35/aa58c3-e706-4a49-a7c5-0ae2e922a292/1/Nov7il7uSQgupijfJaSl1Q86qbM.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.108.206.0/24
Signature Algorithm: sha256WithRSAEncryption
cf:2c:4f:d6:7c:41:06:d9:8b:d4:b6:e5:2f:e0:f7:0a:88:0a:
1d:e4:ac:c2:f1:ca:45:cb:b0:d3:c8:da:fa:dd:f3:9b:a5:45:
95:0b:13:69:aa:1c:2a:8a:4f:bb:3e:63:cc:af:ed:ce:90:ef:
29:cd:40:f5:24:de:89:17:bf:d4:e5:17:90:02:0d:25:3e:16:
ad:b5:7b:8c:18:43:04:83:31:f9:cc:0f:e8:aa:f6:89:5f:2e:
16:01:21:c6:5f:b2:09:fb:f7:5c:bf:05:e9:73:83:69:10:49:
e2:c8:56:57:06:ee:e6:2b:75:bf:ee:82:96:11:b0:7a:07:58:
5a:e6:0f:df:87:ff:51:8f:38:c5:68:4c:a8:dd:3e:41:f3:4f:
b8:82:90:00:f4:a5:78:0e:cf:16:49:28:76:e7:e4:09:94:41:
a9:11:8c:45:23:dd:ea:b2:f0:f6:59:ff:8b:a9:e0:4d:8d:15:
ec:5e:79:5d:e8:7f:99:91:0d:80:8f:2d:30:07:7c:0e:f1:14:
8e:fe:85:6f:69:ad:2d:00:8f:f9:d2:e7:30:04:fe:dd:b8:86:
26:80:bc:11:a4:a0:e2:f5:fa:ef:4f:02:28:c5:cf:e9:15:6c:
75:ad:75:c3:01:a5:05:41:81:c0:7e:7c:3b:a5:01:32:92:48:
13:03:8c:32
-----BEGIN CERTIFICATE-----
MIIE/TCCA+WgAwIBAgISAYR7I6RXsIF7EA7fZcmSdownMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDM2OGJmYjhhNWVlZTQ5MDgyZWE2MjhkZjI1YTRhNWQ1MGYz
YWE5YjMwHhcNMjIxMTE1MTE1NDA0WhcNMjMwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
Eyg0OWM5OWY5MzViMmM4OTBkZWQwN2E0ZmRkODUxMDM1OWViMTk0ZGQ1MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAglY/VH/7S3UURwuzPXogg61s3O1e
P39/UIpSbvg5TmeLVZDVyInFZ9VxKpfSw+YflMKVb6MqBaPGmvcul2kuZ3Scm2zI
AloX7RFLWmgd7chfYHa6uc5YC6MM0kMzVHotnYSvdpc2FrrGfGNSlfngh6tu+UfD
FjkChaiPQSmh26SsZopRppXpi4WGklESjIxBq3PQ0voNXWOqhb1NaigjtFAFNmkb
vqCCqcrXaAwRTmSR8iB0V3MDnPmxK2iVoV40cljIMZhXe2By7JNwKrqQcUYqCDRO
r7axYkF4ZiZZLypFEhi3ap7E94+tp1Nt+x+Zp1cTdNZ3HurVFtvuT5P56QIDAQAB
o4ICCTCCAgUwHQYDVR0OBBYEFEnJn5NbLIkN7Qek/dhRA1nrGU3VMB8GA1UdIwQY
MBaAFDaL+4pe7kkILqYo3yWkpdUPOqmzMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvTm92N2lsN3VTUWd1cGlqZkphU2wxUTg2cWJNLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8zNS9hYTU4YzMtZTcwNi00YTQ5LWE3YzUt
MGFlMmU5MjJhMjkyLzEvU2NtZmsxc3NpUTN0QjZUOTJGRURXZXNaVGRVLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8zNS9hYTU4YzMtZTcwNi00YTQ5LWE3YzUtMGFlMmU5MjJhMjky
LzEvTm92N2lsN3VTUWd1cGlqZkphU2wxUTg2cWJNLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAuWzOMA0G
CSqGSIb3DQEBCwUAA4IBAQDPLE/WfEEG2YvUtuUv4PcKiAod5KzC8cpFy7DTyNr6
3fObpUWVCxNpqhwqik+7PmPMr+3OkO8pzUD1JN6JF7/U5ReQAg0lPhattXuMGEME
gzH5zA/oqvaJXy4WASHGX7IJ+/dcvwXpc4NpEEniyFZXBu7mK3W/7oKWEbB6B1ha
5g/fh/9RjzjFaEyo3T5B80+4gpAA9KV4Ds8WSSh25+QJlEGpEYxFI93qsvD2Wf+L
qeBNjRXsXnld6H+ZkQ2Ajy0wB3wO8RSO/oVvaa0tAI/50ucwBP7duIYmgLwRpKDi
9frvTwIoxc/pFWx1rXXDAaUFQYHAfnw7pQEykkgTA4wy
-----END CERTIFICATE-----
Generated at Thu Jun 6 19:02:35 2024 by rpki-client on console-ams.rpki-client.org