Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/29/739b81-3cd3-469c-b954-3553b4ed6794/1/2sz49sEweGG5mIUQXyCi-NrTyFM.roa
File: 2sz49sEweGG5mIUQXyCi-NrTyFM.roa (raw, json)
Hash identifier: PQxRsnkKP2cOaQuEqE2X5juAyDRN1NNB0iv2viGuuN8=
Subject key identifier: DA:CC:F8:F6:C1:30:78:61:B9:98:85:10:5F:20:A2:F8:DA:D3:C8:53
Certificate issuer: /CN=50741158f3ed65bee1bde12f34f895afb0dd50d5
Certificate serial: 019425223970AEDDFDAE7872FFAC5E9C324E
Authority key identifier: 50:74:11:58:F3:ED:65:BE:E1:BD:E1:2F:34:F8:95:AF:B0:DD:50:D5
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/UHQRWPPtZb7hveEvNPiVr7DdUNU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/29/739b81-3cd3-469c-b954-3553b4ed6794/1/2sz49sEweGG5mIUQXyCi-NrTyFM.roa
Signing time: Thu 02 Jan 2025 03:49:47 +0000
ROA not before: Thu 02 Jan 2025 03:49:47 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 6810
IP address blocks: 147.235.0.0/16 maxlen: 24
147.235.28.0/24 maxlen: 24
147.235.31.0/24 maxlen: 24
147.235.59.0/24 maxlen: 24
147.235.70.0/23 maxlen: 23
147.235.70.0/24 maxlen: 24
147.235.71.0/24 maxlen: 24
147.235.96.0/22 maxlen: 22
147.235.96.0/23 maxlen: 23
147.235.96.0/24 maxlen: 24
147.235.97.0/24 maxlen: 24
147.235.98.0/23 maxlen: 23
147.235.98.0/24 maxlen: 24
147.235.99.0/24 maxlen: 24
147.235.111.0/24 maxlen: 24
147.235.144.0/21 maxlen: 24
147.235.154.0/24 maxlen: 24
147.235.182.0/23 maxlen: 23
147.235.182.0/24 maxlen: 24
147.235.183.0/24 maxlen: 24
147.235.192.0/19 maxlen: 24
147.235.192.0/22 maxlen: 22
147.235.192.0/24 maxlen: 24
147.235.193.0/24 maxlen: 24
147.235.194.0/23 maxlen: 24
147.235.194.0/24 maxlen: 24
147.235.195.0/24 maxlen: 24
147.235.196.0/22 maxlen: 22
147.235.196.0/23 maxlen: 24
147.235.196.0/24 maxlen: 24
147.235.197.0/24 maxlen: 24
147.235.198.0/23 maxlen: 24
147.235.198.0/24 maxlen: 24
147.235.199.0/24 maxlen: 24
147.235.200.0/21 maxlen: 21
147.235.200.0/22 maxlen: 22
147.235.200.0/23 maxlen: 24
147.235.200.0/24 maxlen: 24
147.235.201.0/24 maxlen: 24
147.235.202.0/23 maxlen: 24
147.235.202.0/24 maxlen: 24
147.235.203.0/24 maxlen: 24
147.235.204.0/22 maxlen: 22
147.235.204.0/23 maxlen: 24
147.235.204.0/24 maxlen: 24
147.235.205.0/24 maxlen: 24
147.235.206.0/23 maxlen: 24
147.235.206.0/24 maxlen: 24
147.235.207.0/24 maxlen: 24
147.235.208.0/22 maxlen: 23
147.235.208.0/24 maxlen: 24
147.235.209.0/24 maxlen: 24
147.235.210.0/24 maxlen: 24
147.235.211.0/24 maxlen: 24
147.235.212.0/22 maxlen: 23
147.235.212.0/23 maxlen: 23
147.235.212.0/24 maxlen: 24
147.235.213.0/24 maxlen: 24
147.235.214.0/24 maxlen: 24
147.235.215.0/24 maxlen: 24
147.235.216.0/21 maxlen: 21
147.235.216.0/22 maxlen: 23
147.235.216.0/24 maxlen: 24
147.235.217.0/24 maxlen: 24
147.235.218.0/23 maxlen: 23
147.235.218.0/24 maxlen: 24
147.235.219.0/24 maxlen: 24
147.235.220.0/22 maxlen: 22
147.235.220.0/23 maxlen: 23
147.235.220.0/24 maxlen: 24
147.235.221.0/24 maxlen: 24
147.235.222.0/23 maxlen: 23
147.235.222.0/24 maxlen: 24
147.235.223.0/24 maxlen: 24
147.235.226.0/24 maxlen: 24
147.235.228.0/22 maxlen: 24
147.235.253.0/24 maxlen: 24
147.235.254.0/23 maxlen: 24
149.106.128.0/19 maxlen: 24
149.106.224.0/19 maxlen: 24
2a06:c700::/29 maxlen: 48
2a06:c700::/32 maxlen: 48
2a06:c700::/44 maxlen: 44
2a06:c700:2000::/36 maxlen: 36
2a06:c701::/32 maxlen: 32
2a06:c701:1000::/36 maxlen: 36
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:25:22:39:70:ae:dd:fd:ae:78:72:ff:ac:5e:9c:32:4e
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=50741158f3ed65bee1bde12f34f895afb0dd50d5
Validity
Not Before: Jan 2 03:49:47 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=daccf8f6c1307861b99885105f20a2f8dad3c853
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ce:be:a1:97:5e:7c:b3:e8:2d:56:e4:40:54:ad:
cb:44:0b:3a:30:47:aa:72:32:b4:db:4c:9b:e8:45:
08:ac:f4:76:e5:1e:33:9c:da:0b:c1:f4:2c:fd:4b:
7f:6d:20:41:0b:64:31:f1:4e:9e:5d:7b:6b:65:3d:
9f:ba:86:d6:94:63:3b:f5:92:bd:c9:2f:c1:ef:f4:
38:b4:bc:44:b9:43:90:6f:7a:ed:f9:07:ca:38:f8:
8b:c1:4e:6e:09:29:19:83:5b:18:61:57:52:d8:ff:
1f:f3:2b:e5:27:e9:54:98:e6:c7:ff:b0:cd:1b:9d:
d4:94:db:2f:7f:bb:cd:75:fa:1a:f9:d0:c5:f9:71:
04:c1:aa:f7:5b:1c:b6:6f:64:0c:5a:59:7b:b3:27:
76:bf:0d:21:22:39:04:ac:81:96:46:11:f2:fb:7d:
51:bb:ab:d1:00:a0:83:f9:19:db:66:a6:19:a7:6b:
f2:76:59:bf:2e:90:84:ae:d3:d4:cd:7c:ef:3f:da:
5e:e3:f7:14:40:b7:43:30:7d:4e:31:b3:ae:c1:6d:
a3:82:7d:8c:1f:5b:83:a4:6e:08:7c:56:44:57:da:
c3:79:55:fc:8d:36:a8:12:9a:d2:57:5f:2a:7b:b7:
e7:20:18:50:21:2f:72:31:19:5e:ef:a2:cb:25:47:
f5:e5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
DA:CC:F8:F6:C1:30:78:61:B9:98:85:10:5F:20:A2:F8:DA:D3:C8:53
X509v3 Authority Key Identifier:
keyid:50:74:11:58:F3:ED:65:BE:E1:BD:E1:2F:34:F8:95:AF:B0:DD:50:D5
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/UHQRWPPtZb7hveEvNPiVr7DdUNU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/29/739b81-3cd3-469c-b954-3553b4ed6794/1/2sz49sEweGG5mIUQXyCi-NrTyFM.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/29/739b81-3cd3-469c-b954-3553b4ed6794/1/UHQRWPPtZb7hveEvNPiVr7DdUNU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
147.235.0.0/16
149.106.128.0/19
149.106.224.0/19
IPv6:
2a06:c700::/29
Signature Algorithm: sha256WithRSAEncryption
62:f8:98:d9:04:3a:6c:91:5c:fb:93:77:d5:ea:3e:32:a3:c9:
57:46:7e:f2:d7:53:ca:37:73:a3:3f:fe:4f:d3:39:5f:84:2e:
1c:26:ea:4f:a9:72:78:dc:3c:41:ff:63:fe:df:d9:e7:a7:cb:
9b:28:39:20:82:60:ae:4e:a7:5e:63:61:83:5e:6f:36:4c:ac:
a5:18:3c:f2:8c:0d:7f:78:f9:a5:3a:cd:da:19:80:9a:bf:01:
16:f0:07:2a:cc:60:2a:1b:a7:1c:d7:1c:c3:5b:50:f9:18:bf:
85:fb:ea:0e:93:db:db:dc:09:f1:b3:b9:b5:9b:fd:c6:52:93:
f1:69:50:94:03:1b:bc:fe:11:d4:ad:b5:41:b9:00:e6:5d:ad:
c4:db:dc:b6:a8:b4:1a:93:bb:88:25:d4:a7:c1:b8:43:1e:58:
2f:b3:8c:dd:7e:44:c5:4c:10:70:9e:3f:a0:45:e8:1b:7d:7f:
3a:be:4b:a5:cd:4d:db:3c:04:de:0b:80:23:94:8f:78:60:b9:
8c:b0:48:d3:c9:63:d9:20:f2:3e:5a:03:3b:f4:9e:73:87:2b:
6e:06:fe:b0:ba:e6:ae:ff:d6:cc:c7:6c:6e:f0:c8:4a:9a:41:
c7:62:fc:f7:5c:ea:94:61:4f:3b:45:4b:d3:f3:7e:59:1b:e7:
21:8f:8b:9e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Feb 20 02:37:07 2025 by rpki-client