Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/75/355efb-26b0-4112-b4b5-93c29640bbfe/1/SUUG2kKjexSvWz7hisQBB7MKXJ4.roa
File: SUUG2kKjexSvWz7hisQBB7MKXJ4.roa (raw, json)
Hash identifier: bTiVKxnx7l7XrKQSBNs5e26ay+4FQ9U506Q1Nlisl1M=
Subject key identifier: 49:45:06:DA:42:A3:7B:14:AF:5B:3E:E1:8A:C4:01:07:B3:0A:5C:9E
Certificate issuer: /CN=4dc871b5ddf0740b317d1e34e36b26810bb98026
Certificate serial: 0194274823B68555BEC2D189E9977159B77E
Authority key identifier: 4D:C8:71:B5:DD:F0:74:0B:31:7D:1E:34:E3:6B:26:81:0B:B9:80:26
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Tchxtd3wdAsxfR4042smgQu5gCY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/75/355efb-26b0-4112-b4b5-93c29640bbfe/1/SUUG2kKjexSvWz7hisQBB7MKXJ4.roa
Signing time: Thu 02 Jan 2025 13:50:26 +0000
ROA not before: Thu 02 Jan 2025 13:50:26 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 204368
IP address blocks: 185.250.88.0/24 maxlen: 24
185.250.89.0/24 maxlen: 24
185.250.90.0/24 maxlen: 24
185.250.91.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:27:48:23:b6:85:55:be:c2:d1:89:e9:97:71:59:b7:7e
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4dc871b5ddf0740b317d1e34e36b26810bb98026
Validity
Not Before: Jan 2 13:50:26 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=494506da42a37b14af5b3ee18ac40107b30a5c9e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8a:86:81:af:4f:44:10:5b:19:03:9a:3e:4e:26:
8e:74:85:25:7b:02:ab:11:92:8a:ff:c6:24:49:78:
4c:53:6b:da:e7:d3:18:26:14:a4:cf:b8:86:a1:be:
b9:81:c5:7e:91:bd:23:7e:8f:43:05:9d:95:12:fc:
aa:67:c6:3d:0b:99:24:b5:d5:ea:fe:e1:82:07:69:
c3:29:62:b3:e6:4e:11:1c:2e:85:57:a2:7b:1d:b4:
c3:f2:5e:4a:6a:cf:2d:3c:a5:89:0b:7d:17:ee:d4:
5e:42:56:bf:c3:cd:a6:92:7d:3f:d1:e4:d8:8d:77:
dd:c6:a6:a1:ce:00:d8:0a:43:c2:dc:1a:ea:a8:51:
f8:d5:53:1b:64:80:75:3b:8c:25:a8:c2:8d:76:31:
25:99:6d:27:7d:d3:00:4c:4a:5f:b4:f9:af:c3:96:
5d:4a:34:d4:a5:28:58:69:7c:09:de:ee:89:4e:0e:
66:70:01:f0:36:f7:86:42:76:95:82:f3:de:3e:d6:
fc:40:93:2c:d0:3a:f9:7f:8f:ea:40:f1:1b:cb:e7:
ce:5b:ea:67:b9:4e:b7:07:69:f1:d9:1d:19:d5:c2:
df:16:d0:eb:21:4e:61:3f:d9:cd:84:c9:5c:ed:f0:
34:b7:df:07:a8:1e:1b:a5:c1:7a:cb:26:59:47:5f:
0a:f5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
49:45:06:DA:42:A3:7B:14:AF:5B:3E:E1:8A:C4:01:07:B3:0A:5C:9E
X509v3 Authority Key Identifier:
keyid:4D:C8:71:B5:DD:F0:74:0B:31:7D:1E:34:E3:6B:26:81:0B:B9:80:26
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Tchxtd3wdAsxfR4042smgQu5gCY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/75/355efb-26b0-4112-b4b5-93c29640bbfe/1/SUUG2kKjexSvWz7hisQBB7MKXJ4.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/75/355efb-26b0-4112-b4b5-93c29640bbfe/1/Tchxtd3wdAsxfR4042smgQu5gCY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.250.88.0/22
Signature Algorithm: sha256WithRSAEncryption
28:5e:b1:9e:14:6f:5e:25:d0:9b:e3:b8:56:f8:a1:f1:bc:b7:
39:46:f1:5d:b7:16:8c:58:c8:c2:45:97:94:ea:c9:97:21:88:
56:17:4b:28:f3:2b:4b:2d:78:a5:6c:35:59:4d:3c:c4:e1:41:
f9:71:f8:20:22:d4:10:8a:c6:ad:13:f4:b9:39:aa:f7:39:5e:
dc:ab:db:e9:fd:8c:d7:fa:a2:b1:77:d1:1f:a2:d5:fc:a7:9f:
88:88:cb:02:bf:8f:6c:2b:8e:bf:89:94:5f:79:d7:12:a4:29:
34:9f:9f:63:b7:7e:e9:d1:29:c1:92:a5:08:a0:48:55:d1:42:
40:88:46:eb:41:4b:96:3d:52:97:84:cc:63:51:ac:4e:5c:ac:
12:fc:7b:d7:fd:a0:7c:f5:ab:92:cc:bb:0f:0a:4e:ba:40:bb:
d9:2a:56:fd:6e:9c:04:87:c9:d7:08:9a:fd:07:4c:d7:56:99:
1f:fb:2e:ee:fc:25:04:6c:43:75:c7:35:ae:a2:34:23:53:f5:
1f:d3:27:73:ed:d6:ee:e5:f3:c1:f0:93:28:0e:53:65:fd:fd:
9b:61:d6:b7:92:c8:a6:2d:90:a2:5c:3a:c0:98:87:53:af:f1:
cb:31:64:30:28:de:71:a8:fe:81:bb:cd:72:5a:36:20:74:3b:
9f:f0:df:66
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Feb 20 02:46:55 2025 by rpki-client