Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5b/eba226-6766-4c56-9e3e-7b44e0a15ba0/1/4HGP5_Atly362ltpVWnT7X4r6Jo.roa
File: 4HGP5_Atly362ltpVWnT7X4r6Jo.roa (raw, json)
Hash identifier: SfLf19aMSy7qHdL6R0k0eaaiEIAvEDmplX9GloqeBUg=
Subject key identifier: E0:71:8F:E7:F0:2D:97:2D:FA:DA:5B:69:55:69:D3:ED:7E:2B:E8:9A
Certificate issuer: /CN=49eb8ab4e3d79de27dd1fd692196e2e39e1a3ba3
Certificate serial: 0194F0E3AE5FFBE8D1B82300D1C320B1D8BE
Authority key identifier: 49:EB:8A:B4:E3:D7:9D:E2:7D:D1:FD:69:21:96:E2:E3:9E:1A:3B:A3
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/SeuKtOPXneJ90f1pIZbi454aO6M.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/5b/eba226-6766-4c56-9e3e-7b44e0a15ba0/1/4HGP5_Atly362ltpVWnT7X4r6Jo.roa
Signing time: Mon 10 Feb 2025 17:24:00 +0000
ROA not before: Mon 10 Feb 2025 17:24:00 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 50064
IP address blocks: 45.146.236.0/22 maxlen: 22
45.146.237.0/24 maxlen: 24
45.146.238.0/24 maxlen: 24
45.146.239.0/24 maxlen: 24
46.167.56.0/21 maxlen: 21
46.167.56.0/24 maxlen: 24
46.167.57.0/24 maxlen: 24
46.167.58.0/24 maxlen: 24
46.167.59.0/24 maxlen: 24
46.167.60.0/24 maxlen: 24
46.167.61.0/24 maxlen: 24
46.167.62.0/24 maxlen: 24
46.167.63.0/24 maxlen: 24
185.51.84.0/22 maxlen: 22
185.51.85.0/24 maxlen: 24
185.51.86.0/24 maxlen: 24
185.51.87.0/24 maxlen: 24
2a01:b160::/32 maxlen: 32
2a0f:4800::/29 maxlen: 29
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:f0:e3:ae:5f:fb:e8:d1:b8:23:00:d1:c3:20:b1:d8:be
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=49eb8ab4e3d79de27dd1fd692196e2e39e1a3ba3
Validity
Not Before: Feb 10 17:24:00 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=e0718fe7f02d972dfada5b695569d3ed7e2be89a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e5:b3:21:0a:36:e8:af:99:61:c6:e8:a1:99:0b:
9e:b3:11:49:3d:24:6d:39:68:f6:61:84:25:3b:3b:
a5:8a:f6:f9:eb:e4:2c:cf:02:8c:bf:49:81:04:27:
0f:44:94:88:da:4a:61:5a:9a:b2:6a:64:37:4d:59:
30:e8:f0:9d:f2:a3:22:81:2e:1f:01:43:a8:4b:3c:
07:6f:c1:5d:8d:c8:39:1e:6b:31:a6:63:32:01:94:
97:c3:eb:94:9c:ef:59:e7:31:81:7a:e3:12:8f:bb:
fa:bd:27:83:3c:b1:1b:79:e6:1b:08:f6:69:c2:19:
2c:aa:2b:67:61:06:13:e4:ba:82:6a:62:5b:a0:aa:
26:b1:09:29:0e:f5:b2:5e:70:93:00:0a:23:a3:ea:
48:f0:93:7c:c5:ed:7a:0a:ea:e1:9d:f1:91:55:53:
0a:c8:39:5e:91:d2:a8:aa:ee:80:cb:78:81:64:90:
53:8a:af:ea:73:1d:85:8c:16:37:d4:95:3f:0f:40:
85:ce:54:4b:b9:7c:6b:ee:8e:1c:2a:ab:4d:85:24:
d9:58:92:65:e6:f2:04:13:ec:4e:6d:6a:fb:70:c0:
a0:d3:26:a8:30:87:e4:1d:8d:d4:42:7b:fb:36:74:
7d:eb:b4:52:d8:ab:27:60:6a:c3:4a:9a:f3:4e:aa:
dc:3d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E0:71:8F:E7:F0:2D:97:2D:FA:DA:5B:69:55:69:D3:ED:7E:2B:E8:9A
X509v3 Authority Key Identifier:
keyid:49:EB:8A:B4:E3:D7:9D:E2:7D:D1:FD:69:21:96:E2:E3:9E:1A:3B:A3
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/SeuKtOPXneJ90f1pIZbi454aO6M.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5b/eba226-6766-4c56-9e3e-7b44e0a15ba0/1/4HGP5_Atly362ltpVWnT7X4r6Jo.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/5b/eba226-6766-4c56-9e3e-7b44e0a15ba0/1/SeuKtOPXneJ90f1pIZbi454aO6M.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
45.146.236.0/22
46.167.56.0/21
185.51.84.0/22
IPv6:
2a01:b160::/32
2a0f:4800::/29
Signature Algorithm: sha256WithRSAEncryption
6e:87:10:e9:b8:56:4a:eb:e2:fb:ab:2c:96:37:aa:6e:03:3e:
c3:5f:3f:7f:08:e4:a6:3a:85:42:97:92:c5:21:f6:b0:bb:59:
91:cf:fe:29:db:3e:72:5d:ee:20:3b:ea:1f:b6:c9:3b:09:1f:
96:e1:95:98:8a:59:92:01:75:a2:a8:b3:0b:c2:c1:07:8c:4c:
31:7c:d5:06:8d:c5:18:19:8e:d4:24:88:74:ed:47:18:8a:9f:
c0:a6:9d:6a:25:73:d3:c5:de:44:fb:db:5b:f4:0e:ce:e7:6f:
f7:21:ec:6e:1d:4e:b5:20:59:a3:34:b7:b8:7a:2a:e4:47:e8:
70:9f:9d:4c:de:76:1e:4a:bc:5c:56:1e:39:79:51:03:5e:93:
ca:46:55:be:bc:9a:11:c2:09:10:bd:6c:a4:22:b7:87:76:17:
15:c3:88:69:7d:55:3d:fd:e5:b2:e2:77:95:0c:79:c1:08:e8:
b3:76:73:e3:82:bd:a9:ff:85:6a:c8:45:29:81:91:e3:cd:3a:
89:79:1d:41:ea:11:6d:82:ff:b2:d3:4e:b4:29:f9:a6:75:e1:
b8:e9:a0:7f:a1:b4:d5:17:c8:1e:fe:cc:fa:31:25:8a:51:07:
ac:ca:5d:82:98:08:6b:fa:df:33:f4:90:b3:56:1c:2d:f8:31:
a0:a2:41:3c
-----BEGIN CERTIFICATE-----
MIIFHzCCBAegAwIBAgISAZTw465f++jRuCMA0cMgsdi+MA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDQ5ZWI4YWI0ZTNkNzlkZTI3ZGQxZmQ2OTIxOTZlMmUzOWUx
YTNiYTMwHhcNMjUwMjEwMTcyNDAwWhcNMjYwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EyhlMDcxOGZlN2YwMmQ5NzJkZmFkYTViNjk1NTY5ZDNlZDdlMmJlODlhMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA5bMhCjbor5lhxuihmQuesxFJPSRt
OWj2YYQlOzulivb56+QszwKMv0mBBCcPRJSI2kphWpqyamQ3TVkw6PCd8qMigS4f
AUOoSzwHb8Fdjcg5HmsxpmMyAZSXw+uUnO9Z5zGBeuMSj7v6vSeDPLEbeeYbCPZp
whksqitnYQYT5LqCamJboKomsQkpDvWyXnCTAAojo+pI8JN8xe16CurhnfGRVVMK
yDlekdKoqu6Ay3iBZJBTiq/qcx2FjBY31JU/D0CFzlRLuXxr7o4cKqtNhSTZWJJl
5vIEE+xObWr7cMCg0yaoMIfkHY3UQnv7NnR967RS2KsnYGrDSprzTqrcPQIDAQAB
o4ICKzCCAicwHQYDVR0OBBYEFOBxj+fwLZct+tpbaVVp0+1+K+iaMB8GA1UdIwQY
MBaAFEnrirTj153ifdH9aSGW4uOeGjujMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvU2V1S3RPUFhuZUo5MGYxcElaYmk0NTRhTzZNLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC81Yi9lYmEyMjYtNjc2Ni00YzU2LTllM2Ut
N2I0NGUwYTE1YmEwLzEvNEhHUDVfQXRseTM2Mmx0cFZXblQ3WDRyNkpvLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC81Yi9lYmEyMjYtNjc2Ni00YzU2LTllM2UtN2I0NGUwYTE1YmEw
LzEvU2V1S3RPUFhuZUo5MGYxcElaYmk0NTRhTzZNLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMEEGCCsGAQUFBwEHAQH/BDIwMDAYBAIAATASAwQCLZLsAwQD
Lqc4AwQCuTNUMBQEAgACMA4DBQAqAbFgAwUDKg9IADANBgkqhkiG9w0BAQsFAAOC
AQEAbocQ6bhWSuvi+6ssljeqbgM+w18/fwjkpjqFQpeSxSH2sLtZkc/+Kds+cl3u
IDvqH7bJOwkfluGVmIpZkgF1oqizC8LBB4xMMXzVBo3FGBmO1CSIdO1HGIqfwKad
aiVz08XeRPvbW/QOzudv9yHsbh1OtSBZozS3uHoq5EfocJ+dTN52Hkq8XFYeOXlR
A16TykZVvryaEcIJEL1spCK3h3YXFcOIaX1VPf3lsuJ3lQx5wQjos3Zz44K9qf+F
ashFKYGR4806iXkdQeoRbYL/stNOtCn5pnXhuOmgf6G01RfIHv7M+jElilEHrMpd
gpgIa/rfM/SQs1YcLfgxoKJBPA==
-----END CERTIFICATE-----
Generated at Mon Apr 14 20:28:30 2025 by rpki-client on console.sobornost.net