Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/6f/b11a40-48e9-4e06-bf11-92c81f22e712/1/FJERd9vUT0Kg_8tCO27uUpQBaGo.roa
File: FJERd9vUT0Kg_8tCO27uUpQBaGo.roa (raw, json)
Hash identifier: 12MUnTHhtFQGoQwHqPv1crFdaIeFV1soA/yVgXeNaTs=
Subject key identifier: 14:91:11:77:DB:D4:4F:42:A0:FF:CB:42:3B:6E:EE:52:94:01:68:6A
Certificate issuer: /CN=1b2c219f3c297b775880c3b651a2003f9be6de5e
Certificate serial: 0195F15ABA507927C4C20FBF974326D2359A
Authority key identifier: 1B:2C:21:9F:3C:29:7B:77:58:80:C3:B6:51:A2:00:3F:9B:E6:DE:5E
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Gywhnzwpe3dYgMO2UaIAP5vm3l4.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/6f/b11a40-48e9-4e06-bf11-92c81f22e712/1/FJERd9vUT0Kg_8tCO27uUpQBaGo.roa
Signing time: Tue 01 Apr 2025 12:36:49 +0000
ROA not before: Tue 01 Apr 2025 12:36:49 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 9123
IP address blocks: 46.149.66.0/24 maxlen: 24
46.149.67.0/24 maxlen: 24
46.149.68.0/24 maxlen: 24
46.149.69.0/24 maxlen: 24
46.149.70.0/24 maxlen: 24
46.149.71.0/24 maxlen: 24
176.98.176.0/24 maxlen: 24
176.98.177.0/24 maxlen: 24
176.98.178.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:95:f1:5a:ba:50:79:27:c4:c2:0f:bf:97:43:26:d2:35:9a
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=1b2c219f3c297b775880c3b651a2003f9be6de5e
Validity
Not Before: Apr 1 12:36:49 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=14911177dbd44f42a0ffcb423b6eee529401686a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:be:f0:70:04:79:73:4d:ef:b5:a9:35:cb:cf:68:
9f:3c:dc:8f:04:85:4e:8e:22:56:4c:90:15:d6:d8:
b9:f0:5f:cd:33:dc:bf:c3:0b:70:f0:2d:0f:f5:8a:
4c:cc:d5:a1:79:c7:f5:8d:84:e7:a1:f9:fe:48:76:
9a:e6:72:7c:bd:f9:7d:ef:95:de:f6:bb:3e:49:cc:
30:23:23:9a:f3:96:7b:61:65:bc:d5:78:9e:7e:e2:
70:e5:57:88:d6:63:1d:27:4b:6c:88:77:41:57:a0:
75:0e:d4:10:b2:05:15:b4:2a:0d:27:f2:a2:1b:1c:
3b:e4:34:a3:4a:6b:8b:bb:01:fc:0c:d8:9f:51:cb:
6c:6f:10:b9:29:c7:55:80:78:7b:3c:dc:c9:7b:23:
15:29:a6:1f:ca:10:fb:59:fd:07:0e:63:13:99:05:
03:ab:9d:62:8d:00:5f:2c:4b:3a:29:5b:90:eb:83:
96:4c:47:46:f7:04:55:7f:f5:e4:66:ab:8e:e2:14:
ec:e6:c1:2f:86:6d:b0:54:eb:93:5f:50:6e:b7:27:
29:dd:35:09:9e:aa:18:fb:1a:d9:4c:7d:60:61:fd:
7d:94:1c:b3:71:b1:84:66:1a:ea:60:3f:b3:c4:31:
c1:91:00:75:05:75:59:64:43:f8:dc:01:88:ed:bd:
df:e1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
14:91:11:77:DB:D4:4F:42:A0:FF:CB:42:3B:6E:EE:52:94:01:68:6A
X509v3 Authority Key Identifier:
keyid:1B:2C:21:9F:3C:29:7B:77:58:80:C3:B6:51:A2:00:3F:9B:E6:DE:5E
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Gywhnzwpe3dYgMO2UaIAP5vm3l4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/6f/b11a40-48e9-4e06-bf11-92c81f22e712/1/FJERd9vUT0Kg_8tCO27uUpQBaGo.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/6f/b11a40-48e9-4e06-bf11-92c81f22e712/1/Gywhnzwpe3dYgMO2UaIAP5vm3l4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
46.149.66.0-46.149.71.255
176.98.176.0-176.98.178.255
Signature Algorithm: sha256WithRSAEncryption
6d:08:08:82:8f:b5:f3:63:dd:25:52:60:62:24:3b:f7:bf:78:
0d:73:e5:4e:c4:36:b3:5e:a4:75:d7:81:1e:b3:b1:a2:19:89:
90:a7:0e:4c:c2:5d:9f:fc:91:c9:f3:49:53:fc:1f:bd:d8:29:
45:94:15:6d:35:39:94:8d:6d:3c:c1:c5:77:bb:fd:19:94:7d:
7b:c3:73:81:a8:8c:c3:7b:1d:8c:90:34:73:af:74:b4:d3:40:
f2:07:c7:59:b2:37:9d:02:fb:21:a1:b3:02:01:a4:46:9c:c0:
4e:7d:fb:5a:a4:24:16:c5:2f:74:96:1d:1a:23:98:c2:3b:52:
83:0d:d5:24:d6:93:8a:9a:8c:fa:cb:f4:56:4e:4c:dd:d6:7a:
27:6a:4c:a8:b9:9a:02:8f:75:27:71:62:ed:f5:a0:55:b5:aa:
7e:b5:cd:8d:cf:4f:0d:c1:88:dc:5d:46:12:b2:0f:35:4b:95:
b8:6c:80:ac:ba:30:1c:f1:8b:76:32:3a:dc:34:10:f9:17:c8:
cb:69:0c:64:60:bb:92:ee:d7:df:21:dc:cd:36:c9:dd:6d:68:
c8:da:c4:06:76:bf:3a:f1:3d:6e:0b:7d:ff:2f:51:ba:d3:d2:
7d:3b:4f:1d:59:2a:a8:44:89:07:1b:ab:64:5b:11:3e:c7:ba:
43:54:15:32
-----BEGIN CERTIFICATE-----
MIIFEzCCA/ugAwIBAgISAZXxWrpQeSfEwg+/l0Mm0jWaMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDFiMmMyMTlmM2MyOTdiNzc1ODgwYzNiNjUxYTIwMDNmOWJl
NmRlNWUwHhcNMjUwNDAxMTIzNjQ5WhcNMjYwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EygxNDkxMTE3N2RiZDQ0ZjQyYTBmZmNiNDIzYjZlZWU1Mjk0MDE2ODZhMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAvvBwBHlzTe+1qTXLz2ifPNyPBIVO
jiJWTJAV1ti58F/NM9y/wwtw8C0P9YpMzNWhecf1jYTnofn+SHaa5nJ8vfl975Xe
9rs+ScwwIyOa85Z7YWW81XiefuJw5VeI1mMdJ0tsiHdBV6B1DtQQsgUVtCoNJ/Ki
Gxw75DSjSmuLuwH8DNifUctsbxC5KcdVgHh7PNzJeyMVKaYfyhD7Wf0HDmMTmQUD
q51ijQBfLEs6KVuQ64OWTEdG9wRVf/XkZquO4hTs5sEvhm2wVOuTX1Butycp3TUJ
nqoY+xrZTH1gYf19lByzcbGEZhrqYD+zxDHBkQB1BXVZZEP43AGI7b3f4QIDAQAB
o4ICHzCCAhswHQYDVR0OBBYEFBSREXfb1E9CoP/LQjtu7lKUAWhqMB8GA1UdIwQY
MBaAFBssIZ88KXt3WIDDtlGiAD+b5t5eMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvR3l3aG56d3BlM2RZZ01PMlVhSUFQNXZtM2w0LmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC82Zi9iMTFhNDAtNDhlOS00ZTA2LWJmMTEt
OTJjODFmMjJlNzEyLzEvRkpFUmQ5dlVUMEtnXzh0Q08yN3VVcFFCYUdvLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC82Zi9iMTFhNDAtNDhlOS00ZTA2LWJmMTEtOTJjODFmMjJlNzEy
LzEvR3l3aG56d3BlM2RZZ01PMlVhSUFQNXZtM2w0LmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMDUGCCsGAQUFBwEHAQH/BCYwJDAiBAIAATAcMAwDBAEulUID
BAMulUAwDAMEBLBisAMEALBisjANBgkqhkiG9w0BAQsFAAOCAQEAbQgIgo+182Pd
JVJgYiQ79794DXPlTsQ2s16kddeBHrOxohmJkKcOTMJdn/yRyfNJU/wfvdgpRZQV
bTU5lI1tPMHFd7v9GZR9e8NzgaiMw3sdjJA0c690tNNA8gfHWbI3nQL7IaGzAgGk
RpzATn37WqQkFsUvdJYdGiOYwjtSgw3VJNaTipqM+sv0Vk5M3dZ6J2pMqLmaAo91
J3Fi7fWgVbWqfrXNjc9PDcGI3F1GErIPNUuVuGyArLowHPGLdjI63DQQ+RfIy2kM
ZGC7ku7X3yHczTbJ3W1oyNrEBna/OvE9bgt9/y9RutPSfTtPHVkqqESJBxurZFsR
Pse6Q1QVMg==
-----END CERTIFICATE-----
Generated at Mon Apr 14 20:28:47 2025 by rpki-client on console.sobornost.net