Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/2d/cdf5f6-2f18-42c7-930e-dc06dd805960/1/yIyWnl3cvTDId_6ZmTKY5jJakPE.roa
File: yIyWnl3cvTDId_6ZmTKY5jJakPE.roa (raw, json)
Hash identifier: +1tONpNtNdDr07avb/OWCH56FfRCHMRObDGwSselHQE=
Subject key identifier: C8:8C:96:9E:5D:DC:BD:30:C8:77:FE:99:99:32:98:E6:32:5A:90:F1
Certificate issuer: /CN=349cbbd5c2cf4195cc6ec7f21f607581a0224daa
Certificate serial: 0195F1D569CE80329D54352A5BB19B9DBC23
Authority key identifier: 34:9C:BB:D5:C2:CF:41:95:CC:6E:C7:F2:1F:60:75:81:A0:22:4D:AA
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/NJy71cLPQZXMbsfyH2B1gaAiTao.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/2d/cdf5f6-2f18-42c7-930e-dc06dd805960/1/yIyWnl3cvTDId_6ZmTKY5jJakPE.roa
Signing time: Tue 01 Apr 2025 14:50:50 +0000
ROA not before: Tue 01 Apr 2025 14:50:50 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 3561
IP address blocks: 46.151.36.0/22 maxlen: 24
77.36.124.0/22 maxlen: 22
81.161.4.0/22 maxlen: 24
91.237.44.0/22 maxlen: 24
93.120.96.0/22 maxlen: 22
194.33.100.0/22 maxlen: 24
194.33.100.0/23 maxlen: 24
194.33.102.0/23 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:95:f1:d5:69:ce:80:32:9d:54:35:2a:5b:b1:9b:9d:bc:23
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=349cbbd5c2cf4195cc6ec7f21f607581a0224daa
Validity
Not Before: Apr 1 14:50:50 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=c88c969e5ddcbd30c877fe99993298e6325a90f1
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bb:55:ac:aa:0b:74:72:e9:b9:6c:7c:4e:37:31:
fb:f7:54:10:7a:d9:80:c1:97:3a:e8:dc:34:23:b4:
dd:4d:25:50:6b:26:76:50:4b:f3:2c:fa:ed:11:ab:
dd:f7:c3:aa:90:01:cb:02:aa:d9:13:35:97:2a:3a:
f1:0c:0c:08:b4:81:da:d5:20:44:72:a4:2e:13:49:
5c:ff:72:d5:e1:63:6e:f9:5c:3b:62:ad:25:be:31:
c2:f2:57:9e:41:ba:f1:3f:fe:0d:89:ac:d0:f0:bf:
db:c8:1c:7e:b0:b8:de:22:f7:f3:9d:0a:a8:e8:42:
52:c1:6d:9b:7e:29:b1:eb:c0:7c:dc:86:3b:da:b9:
92:0d:ca:1f:86:bd:a5:f9:d0:d3:5f:cf:2b:26:d5:
18:d6:a0:2a:a9:63:7d:ea:e7:b5:fd:67:df:a4:76:
31:c7:a0:84:79:5e:ab:41:68:6d:ec:00:74:b1:22:
71:52:58:07:2e:a1:06:00:f1:3e:97:9e:d3:97:69:
b9:eb:bf:aa:19:c4:a4:6f:97:43:37:32:81:f3:30:
4d:2a:95:01:aa:57:f2:98:d3:55:09:cc:c9:9a:4e:
c8:fd:f7:f4:dc:29:c9:60:26:d2:7b:dc:b9:c2:4f:
44:a0:e9:eb:af:ed:99:f0:a0:4a:b0:19:4a:d1:aa:
57:31
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C8:8C:96:9E:5D:DC:BD:30:C8:77:FE:99:99:32:98:E6:32:5A:90:F1
X509v3 Authority Key Identifier:
keyid:34:9C:BB:D5:C2:CF:41:95:CC:6E:C7:F2:1F:60:75:81:A0:22:4D:AA
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/NJy71cLPQZXMbsfyH2B1gaAiTao.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/2d/cdf5f6-2f18-42c7-930e-dc06dd805960/1/yIyWnl3cvTDId_6ZmTKY5jJakPE.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/2d/cdf5f6-2f18-42c7-930e-dc06dd805960/1/NJy71cLPQZXMbsfyH2B1gaAiTao.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
46.151.36.0/22
77.36.124.0/22
81.161.4.0/22
91.237.44.0/22
93.120.96.0/22
194.33.100.0/22
Signature Algorithm: sha256WithRSAEncryption
1c:ea:cb:2f:6d:df:d4:0a:b7:ca:59:de:5f:22:2e:e6:a5:e5:
be:6a:47:a1:bb:58:fe:2e:eb:59:e5:ca:a5:fa:5a:b4:55:99:
16:da:37:29:e2:0b:ca:8c:e9:7d:74:ba:8e:7b:f2:01:7f:70:
4c:dc:15:2d:31:78:ad:93:a0:31:ad:42:d1:50:a7:37:72:73:
9d:79:26:dc:aa:be:de:7b:5f:a4:71:af:a5:18:4f:12:79:0d:
30:81:50:6c:63:17:9e:bf:b3:11:57:fd:3f:53:90:9f:27:ed:
34:79:fb:fc:e5:b9:0f:96:15:35:3b:a3:a8:17:fd:bc:0c:a7:
8f:6c:64:31:27:80:43:cf:ec:b2:f6:10:79:01:28:8a:ca:73:
54:f6:17:26:71:4a:7b:61:d8:82:00:61:63:23:3e:c9:3b:31:
0a:ec:68:61:17:30:a5:b9:36:67:49:4f:d5:83:9c:11:67:5f:
ef:8e:bb:d8:8c:5f:12:60:0f:8b:86:06:2a:02:91:9d:e4:65:
ca:3b:f4:cb:57:e0:87:7f:bc:1f:de:91:d6:43:89:61:1c:cf:
f7:c2:77:6f:0e:f3:88:95:d0:ab:8e:f2:b7:6c:45:7b:9b:ad:
26:12:a0:7e:d8:96:6d:0a:ba:47:3b:42:51:3e:7e:96:42:d6:
ee:1a:3e:23
-----BEGIN CERTIFICATE-----
MIIFGzCCBAOgAwIBAgISAZXx1WnOgDKdVDUqW7GbnbwjMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDM0OWNiYmQ1YzJjZjQxOTVjYzZlYzdmMjFmNjA3NTgxYTAy
MjRkYWEwHhcNMjUwNDAxMTQ1MDUwWhcNMjYwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EyhjODhjOTY5ZTVkZGNiZDMwYzg3N2ZlOTk5OTMyOThlNjMyNWE5MGYxMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAu1Wsqgt0cum5bHxONzH791QQetmA
wZc66Nw0I7TdTSVQayZ2UEvzLPrtEavd98OqkAHLAqrZEzWXKjrxDAwItIHa1SBE
cqQuE0lc/3LV4WNu+Vw7Yq0lvjHC8leeQbrxP/4NiazQ8L/byBx+sLjeIvfznQqo
6EJSwW2bfimx68B83IY72rmSDcofhr2l+dDTX88rJtUY1qAqqWN96ue1/WffpHYx
x6CEeV6rQWht7AB0sSJxUlgHLqEGAPE+l57Tl2m567+qGcSkb5dDNzKB8zBNKpUB
qlfymNNVCczJmk7I/ff03CnJYCbSe9y5wk9EoOnrr+2Z8KBKsBlK0apXMQIDAQAB
o4ICJzCCAiMwHQYDVR0OBBYEFMiMlp5d3L0wyHf+mZkymOYyWpDxMB8GA1UdIwQY
MBaAFDScu9XCz0GVzG7H8h9gdYGgIk2qMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvTkp5NzFjTFBRWlhNYnNmeUgyQjFnYUFpVGFvLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8yZC9jZGY1ZjYtMmYxOC00MmM3LTkzMGUt
ZGMwNmRkODA1OTYwLzEveUl5V25sM2N2VERJZF82Wm1US1k1akpha1BFLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8yZC9jZGY1ZjYtMmYxOC00MmM3LTkzMGUtZGMwNmRkODA1OTYw
LzEvTkp5NzFjTFBRWlhNYnNmeUgyQjFnYUFpVGFvLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMD0GCCsGAQUFBwEHAQH/BC4wLDAqBAIAATAkAwQCLpckAwQC
TSR8AwQCUaEEAwQCW+0sAwQCXXhgAwQCwiFkMA0GCSqGSIb3DQEBCwUAA4IBAQAc
6ssvbd/UCrfKWd5fIi7mpeW+akehu1j+LutZ5cql+lq0VZkW2jcp4gvKjOl9dLqO
e/IBf3BM3BUtMXitk6AxrULRUKc3cnOdeSbcqr7ee1+kca+lGE8SeQ0wgVBsYxee
v7MRV/0/U5CfJ+00efv85bkPlhU1O6OoF/28DKePbGQxJ4BDz+yy9hB5ASiKynNU
9hcmcUp7YdiCAGFjIz7JOzEK7GhhFzCluTZnSU/Vg5wRZ1/vjrvYjF8SYA+LhgYq
ApGd5GXKO/TLV+CHf7wf3pHWQ4lhHM/3wndvDvOIldCrjvK3bEV7m60mEqB+2JZt
CrpHO0JRPn6WQtbuGj4j
-----END CERTIFICATE-----
Generated at Mon Apr 14 20:27:31 2025 by rpki-client on console.sobornost.net