Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/56/81bc95-1444-408a-92f1-392e05a84277/1/2SchzzJaAzexW7ZHgOgzy2lmxNs.roa
File: 2SchzzJaAzexW7ZHgOgzy2lmxNs.roa (raw, json)
Hash identifier: RiHYijJvu/N31/d02O4Q6+rMxWrRtxzNnGoQBv8G2nQ=
Subject key identifier: D9:27:21:CF:32:5A:03:37:B1:5B:B6:47:80:E8:33:CB:69:66:C4:DB
Certificate issuer: /CN=1f739d213a438f678b322a8f8f84e2d8c7814aca
Certificate serial: 01941FFA254CD5124DA21A4DEB26A5E0E929
Authority key identifier: 1F:73:9D:21:3A:43:8F:67:8B:32:2A:8F:8F:84:E2:D8:C7:81:4A:CA
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/H3OdITpDj2eLMiqPj4Ti2MeBSso.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/56/81bc95-1444-408a-92f1-392e05a84277/1/2SchzzJaAzexW7ZHgOgzy2lmxNs.roa
Signing time: Wed 01 Jan 2025 03:47:54 +0000
ROA not before: Wed 01 Jan 2025 03:47:54 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 12350
IP address blocks: 185.133.28.0/22 maxlen: 22
194.38.64.0/19 maxlen: 19
194.38.160.0/19 maxlen: 19
194.148.4.0/22 maxlen: 22
194.148.8.0/21 maxlen: 21
194.148.16.0/20 maxlen: 20
194.148.32.0/20 maxlen: 20
194.148.48.0/22 maxlen: 22
194.148.60.0/22 maxlen: 22
194.148.96.0/19 maxlen: 19
195.15.0.0/17 maxlen: 17
212.28.128.0/19 maxlen: 19
212.40.0.0/19 maxlen: 19
212.109.64.0/19 maxlen: 19
212.147.0.0/17 maxlen: 17
212.147.79.0/24 maxlen: 24
212.232.128.0/17 maxlen: 17
212.254.0.0/16 maxlen: 16
213.5.152.0/21 maxlen: 21
213.162.0.0/19 maxlen: 19
2001:4c78::/32 maxlen: 32
2a03:a360::/32 maxlen: 32
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:1f:fa:25:4c:d5:12:4d:a2:1a:4d:eb:26:a5:e0:e9:29
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=1f739d213a438f678b322a8f8f84e2d8c7814aca
Validity
Not Before: Jan 1 03:47:54 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=d92721cf325a0337b15bb64780e833cb6966c4db
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ac:b5:37:c8:02:f6:0e:24:a4:78:9b:4c:4c:bd:
1a:25:ec:04:70:0f:3f:ac:32:34:3b:eb:0d:3a:43:
53:87:6e:d8:a5:5a:cb:a1:b9:ce:76:25:96:77:9f:
32:92:a9:8c:87:3c:28:ed:24:0f:a8:4b:7b:69:e0:
9c:a4:d5:e4:9c:65:17:12:3b:52:1b:9b:64:dc:97:
23:b0:59:60:14:3f:58:ac:8f:92:8d:40:b8:97:16:
f3:29:3a:a3:ec:45:c8:8b:71:db:28:36:9a:48:f5:
97:2e:fb:44:cf:54:00:d4:08:c8:84:66:a1:f5:26:
36:0a:e8:d6:d7:6b:65:de:cd:3a:ca:77:76:a0:0a:
8b:56:e1:a3:62:81:00:ca:c8:b7:55:40:d4:24:24:
e7:17:01:77:49:e0:68:1e:01:e3:41:08:5e:78:53:
2e:34:ca:ca:a5:12:02:2e:eb:53:14:c4:a2:ab:b0:
d1:a9:c6:f3:d0:0c:7f:85:5e:9e:ee:b4:97:5e:fa:
c0:1a:0e:ed:05:b3:56:6b:cd:6e:75:18:5b:2b:5a:
8e:14:12:41:30:c7:96:11:ff:f5:65:3a:d2:29:24:
cb:a1:13:a8:e0:a2:59:5c:9d:a3:50:c2:70:06:3e:
b4:ec:3c:22:8a:36:8a:24:8c:94:49:f3:6e:61:0f:
26:cf
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D9:27:21:CF:32:5A:03:37:B1:5B:B6:47:80:E8:33:CB:69:66:C4:DB
X509v3 Authority Key Identifier:
keyid:1F:73:9D:21:3A:43:8F:67:8B:32:2A:8F:8F:84:E2:D8:C7:81:4A:CA
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/H3OdITpDj2eLMiqPj4Ti2MeBSso.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/56/81bc95-1444-408a-92f1-392e05a84277/1/2SchzzJaAzexW7ZHgOgzy2lmxNs.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/56/81bc95-1444-408a-92f1-392e05a84277/1/H3OdITpDj2eLMiqPj4Ti2MeBSso.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.133.28.0/22
194.38.64.0/19
194.38.160.0/19
194.148.4.0-194.148.51.255
194.148.60.0/22
194.148.96.0/19
195.15.0.0/17
212.28.128.0/19
212.40.0.0/19
212.109.64.0/19
212.147.0.0/17
212.232.128.0/17
212.254.0.0/16
213.5.152.0/21
213.162.0.0/19
IPv6:
2001:4c78::/32
2a03:a360::/32
Signature Algorithm: sha256WithRSAEncryption
73:30:6e:a5:fa:7b:07:90:dd:8a:32:95:12:89:a1:81:c8:35:
81:1f:f2:65:61:a1:4d:2b:c9:42:14:37:58:3b:85:bf:a6:16:
66:1d:6e:7e:c3:82:86:88:f6:30:e5:79:dd:2e:7d:e8:79:0a:
13:3e:91:b6:42:a5:5f:68:9e:22:30:fc:aa:73:98:46:a2:8e:
00:bf:19:ee:19:74:b1:60:ef:fa:1d:58:d1:3a:2e:ba:49:82:
fc:34:ee:78:9d:d2:ae:23:ae:f3:c7:38:95:14:16:97:ca:42:
a7:5f:e5:dc:e2:f1:e5:fc:14:bd:9f:cd:33:10:c3:8f:d0:87:
36:8d:4d:b0:1a:15:4a:48:4f:1e:cd:02:7b:88:e5:7a:77:b7:
da:16:7f:00:95:dd:39:03:5b:d3:65:95:4b:a9:0e:75:2c:90:
f4:d2:7c:54:af:45:39:43:25:a0:01:7f:e9:e4:e6:cf:83:e5:
4a:71:3a:dd:32:bc:b6:5a:e0:4f:88:25:5e:e1:a0:f6:9b:24:
e9:1e:fb:44:aa:63:86:ff:bd:d1:0b:3f:2e:50:bb:7e:76:b9:
0e:f7:ee:aa:b8:23:ef:2d:61:cf:b6:5b:0b:26:63:95:58:4e:
e3:d6:22:01:37:10:f2:34:12:92:71:1f:34:4a:3b:8d:c2:00:
bc:8d:d1:1a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Feb 20 02:57:57 2025 by rpki-client