Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/34/40c548-5cc6-47c3-9e8f-bddb29f85fb8/1/SuMbqKGSv1qKom1gMOOpsF5R60A.roa
File: SuMbqKGSv1qKom1gMOOpsF5R60A.roa (raw, json)
Hash identifier: HQDAgM/9d4KyNdepm39greMFmuo/Jazn0GZwtBbpXbw=
Subject key identifier: 4A:E3:1B:A8:A1:92:BF:5A:8A:A2:6D:60:30:E3:A9:B0:5E:51:EB:40
Certificate issuer: /CN=903ec4c502a42c5bbfdb70ea9f440ca1500acc50
Certificate serial: 0194228E3E9E7B46B2A81F101DC6EED10740
Authority key identifier: 90:3E:C4:C5:02:A4:2C:5B:BF:DB:70:EA:9F:44:0C:A1:50:0A:CC:50
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/kD7ExQKkLFu_23Dqn0QMoVAKzFA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/34/40c548-5cc6-47c3-9e8f-bddb29f85fb8/1/SuMbqKGSv1qKom1gMOOpsF5R60A.roa
Signing time: Wed 01 Jan 2025 15:48:55 +0000
ROA not before: Wed 01 Jan 2025 15:48:55 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 15595
IP address blocks: 81.25.224.0/20 maxlen: 20
81.25.224.0/24 maxlen: 24
81.25.225.0/24 maxlen: 24
81.25.226.0/24 maxlen: 24
81.25.227.0/24 maxlen: 24
81.25.228.0/24 maxlen: 24
81.25.229.0/24 maxlen: 24
81.25.230.0/24 maxlen: 24
81.25.231.0/24 maxlen: 24
81.25.232.0/24 maxlen: 24
81.25.233.0/24 maxlen: 24
81.25.234.0/24 maxlen: 24
81.25.235.0/24 maxlen: 24
81.25.236.0/24 maxlen: 24
81.25.237.0/24 maxlen: 24
81.25.238.0/24 maxlen: 24
81.25.239.0/24 maxlen: 24
2a02:d300::/29 maxlen: 48
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:22:8e:3e:9e:7b:46:b2:a8:1f:10:1d:c6:ee:d1:07:40
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=903ec4c502a42c5bbfdb70ea9f440ca1500acc50
Validity
Not Before: Jan 1 15:48:55 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=4ae31ba8a192bf5a8aa26d6030e3a9b05e51eb40
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a7:b3:ce:a1:59:2e:0d:43:75:0d:c4:72:71:0b:
49:15:87:37:b3:84:a2:3c:f8:41:d8:c0:c1:23:7c:
ff:2c:01:26:bb:65:70:09:c0:56:1e:97:56:2e:96:
50:d9:11:c8:70:01:09:b7:0d:6c:d7:15:8f:3c:7d:
03:3e:16:2c:6a:52:68:64:e1:4f:db:36:a1:e5:ba:
fa:3d:e7:6d:eb:c4:42:a1:a0:d1:90:6a:98:d9:8c:
a9:8e:4c:da:72:be:24:71:41:04:c7:8e:04:d8:c6:
6f:2a:22:7a:24:91:94:27:6d:cd:bf:72:0a:36:3e:
9c:e9:07:b6:30:43:fd:00:e8:22:df:ea:83:cc:59:
67:4f:4d:2e:83:3b:f3:08:77:9b:88:8a:1f:94:56:
12:6e:38:09:b6:a7:b4:81:05:d7:6c:04:6a:c4:0a:
60:4c:d3:f5:c2:2f:48:28:1c:7b:ce:1a:cd:de:5e:
f7:4d:6e:51:a8:ef:79:72:d0:a4:d3:51:1c:e9:a9:
19:1c:12:38:aa:34:06:5e:3b:1f:37:2b:21:b1:a7:
31:c7:f1:b5:c1:13:65:c9:02:7b:ef:f7:21:71:88:
dc:47:2d:a8:18:9a:7d:cb:14:81:5f:09:22:cf:9e:
90:df:78:22:1d:7a:52:ca:7f:fb:b1:11:df:c3:76:
c7:bd
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
4A:E3:1B:A8:A1:92:BF:5A:8A:A2:6D:60:30:E3:A9:B0:5E:51:EB:40
X509v3 Authority Key Identifier:
keyid:90:3E:C4:C5:02:A4:2C:5B:BF:DB:70:EA:9F:44:0C:A1:50:0A:CC:50
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/kD7ExQKkLFu_23Dqn0QMoVAKzFA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/34/40c548-5cc6-47c3-9e8f-bddb29f85fb8/1/SuMbqKGSv1qKom1gMOOpsF5R60A.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/34/40c548-5cc6-47c3-9e8f-bddb29f85fb8/1/kD7ExQKkLFu_23Dqn0QMoVAKzFA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
81.25.224.0/20
IPv6:
2a02:d300::/29
Signature Algorithm: sha256WithRSAEncryption
0b:aa:74:4a:e7:26:a2:89:f5:a4:c9:ac:96:22:ac:3a:3e:55:
d7:b3:41:24:a4:c8:e3:95:1c:cd:79:ef:36:21:b6:45:55:a9:
a0:a5:ce:7d:92:26:ac:eb:2a:1a:9c:c6:31:98:9a:5a:ba:70:
09:90:b1:96:3b:29:44:f0:70:66:40:27:91:65:08:87:2a:4b:
b6:be:4f:88:29:a8:82:bd:b8:fa:ad:1b:42:d5:2a:82:01:50:
ca:ea:09:c8:a8:9d:ff:33:a1:7b:fa:c0:8b:f4:4c:7c:6d:e7:
c2:10:42:63:4e:b0:bb:ae:35:74:e6:02:23:9e:58:08:81:c6:
67:53:31:cf:15:14:e1:d7:bb:0a:21:ca:d9:67:9b:23:ea:24:
8b:70:7e:72:a8:bd:61:98:62:4b:17:9c:60:04:c9:22:7e:d2:
ab:4b:11:f9:47:a6:5a:26:87:9c:36:29:45:d3:c0:0a:2d:22:
79:3a:75:a8:ff:d4:70:46:d4:1a:be:22:29:9c:54:21:18:ff:
b1:5a:86:ee:f9:79:13:c9:97:78:7a:e8:9f:16:45:f1:f1:7a:
3a:6c:b9:93:4a:41:80:d5:31:c4:54:a6:01:ac:c9:3a:d0:a9:
a6:3a:0f:45:2d:a8:d1:58:35:ed:b0:b2:e2:f0:43:b3:61:ee:
c8:71:98:1d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 25 08:30:37 2025 by rpki-client