Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/09/541c05-8d7d-42b8-ab00-7fbbae6f9437/1/92g48qPxQOmLFfO4NiBlOgkcUko.roa
File: 92g48qPxQOmLFfO4NiBlOgkcUko.roa (raw, json)
Hash identifier: LU5JcmvxpAhqyaqQFQrQoxqIes524CHlxd+HDNMGFFE=
Subject key identifier: F7:68:38:F2:A3:F1:40:E9:8B:15:F3:B8:36:20:65:3A:09:1C:52:4A
Certificate issuer: /CN=0548cedf17029ed98a108113c6c109ecaccd82ec
Certificate serial: 019615E2926279DDB697166533D7B977BECE
Authority key identifier: 05:48:CE:DF:17:02:9E:D9:8A:10:81:13:C6:C1:09:EC:AC:CD:82:EC
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/BUjO3xcCntmKEIETxsEJ7KzNguw.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/09/541c05-8d7d-42b8-ab00-7fbbae6f9437/1/92g48qPxQOmLFfO4NiBlOgkcUko.roa
Signing time: Tue 08 Apr 2025 14:51:32 +0000
ROA not before: Tue 08 Apr 2025 14:51:32 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 197897
IP address blocks: 88.203.248.0/22 maxlen: 22
88.203.250.0/24 maxlen: 24
88.203.251.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:15:e2:92:62:79:dd:b6:97:16:65:33:d7:b9:77:be:ce
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=0548cedf17029ed98a108113c6c109ecaccd82ec
Validity
Not Before: Apr 8 14:51:32 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=f76838f2a3f140e98b15f3b83620653a091c524a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d1:16:73:9a:73:a4:c0:68:95:13:18:d6:5b:97:
2d:df:e1:49:97:cc:1e:0f:c6:92:54:df:d7:08:a4:
b2:77:06:7b:44:13:09:5d:06:7f:0f:b5:c9:70:25:
ff:d6:93:f5:0a:4f:a1:65:8b:d4:92:da:4a:3a:20:
d0:9d:e8:b7:76:70:d0:31:d2:7d:e7:d9:5a:ff:f5:
21:2a:a8:80:46:92:c6:ea:48:72:69:f3:14:79:6c:
2a:9c:c1:57:35:2a:b8:d3:fb:23:6b:0a:52:84:f5:
c0:50:46:b0:e4:e1:95:11:c3:81:69:e8:db:90:b4:
c4:84:b8:10:31:85:1c:1b:59:af:b9:29:56:03:fe:
2c:81:83:1c:0b:f2:46:b0:bb:f5:03:23:41:14:0c:
08:04:15:54:79:e7:a5:90:65:f9:42:60:25:54:fe:
93:b4:a4:2b:ec:39:66:9e:ca:f8:cb:c8:1f:90:9e:
c5:53:35:dc:29:5b:3b:a9:90:05:6e:fc:b7:75:d5:
fa:0f:d9:66:55:93:b9:32:59:8b:e6:72:35:84:0c:
49:fa:0f:52:44:fa:e5:74:dd:25:85:90:ba:e9:75:
63:99:e9:b1:50:de:67:34:a0:cd:b0:14:8b:65:30:
2b:0d:5b:08:95:2d:5f:5a:42:eb:f2:a7:78:9b:a4:
8e:45
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F7:68:38:F2:A3:F1:40:E9:8B:15:F3:B8:36:20:65:3A:09:1C:52:4A
X509v3 Authority Key Identifier:
keyid:05:48:CE:DF:17:02:9E:D9:8A:10:81:13:C6:C1:09:EC:AC:CD:82:EC
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/BUjO3xcCntmKEIETxsEJ7KzNguw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/09/541c05-8d7d-42b8-ab00-7fbbae6f9437/1/92g48qPxQOmLFfO4NiBlOgkcUko.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/09/541c05-8d7d-42b8-ab00-7fbbae6f9437/1/BUjO3xcCntmKEIETxsEJ7KzNguw.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
88.203.248.0/22
Signature Algorithm: sha256WithRSAEncryption
0d:ee:4b:7a:d5:ef:8e:fa:b1:05:78:41:31:98:73:83:27:ea:
3a:10:a9:41:57:9f:46:79:de:99:cb:23:54:7b:f0:70:72:e3:
0d:e8:b1:41:86:cc:39:2f:a9:e3:44:36:12:aa:80:a9:9a:89:
8f:a8:eb:e6:78:66:08:c1:5a:a9:aa:ab:fb:16:38:d5:74:33:
a4:59:02:28:ed:ab:54:9a:93:cf:e6:f5:9e:f5:ce:cc:5c:76:
0c:e6:a2:98:97:02:74:2d:ca:97:6b:d6:91:9a:19:03:ae:46:
91:d3:ee:a7:13:95:f9:6c:d0:5d:6f:05:e1:39:36:1e:8a:f8:
c0:6b:71:94:fb:99:ac:bf:ed:be:51:b3:17:99:d8:09:d0:4b:
6f:a9:f7:dc:9a:b9:69:61:9e:88:55:fc:c4:1e:ba:15:a2:33:
b3:59:1a:96:ca:9e:76:6e:d4:e9:36:13:0f:9e:39:02:6e:8b:
95:12:8a:c2:cd:50:d2:e5:18:05:f3:42:4b:9f:ce:a8:93:eb:
b5:8b:b4:9c:55:5e:3b:81:96:24:67:4f:46:40:63:0c:bd:1e:
91:d5:70:fc:8f:7e:57:7a:62:44:c1:47:97:62:32:02:08:46:
ea:93:f1:29:95:4d:99:d1:88:b8:07:39:81:a2:8f:59:5d:18:
00:2a:f3:17
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 14 20:26:47 2025 by rpki-client on console.sobornost.net