Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/09/541c05-8d7d-42b8-ab00-7fbbae6f9437/1/hLW81KBW8mgz4Kgop0fBisxyRL8.roa
File: hLW81KBW8mgz4Kgop0fBisxyRL8.roa (raw, json)
Hash identifier: 74FDNihxxjhJAT8MiIfeFg7ufq0GpXCXlUXqfbaDI0k=
Subject key identifier: 84:B5:BC:D4:A0:56:F2:68:33:E0:A8:28:A7:47:C1:8A:CC:72:44:BF
Certificate issuer: /CN=0548cedf17029ed98a108113c6c109ecaccd82ec
Certificate serial: 019428281C00DDD89D566B60F86A9FC72750
Authority key identifier: 05:48:CE:DF:17:02:9E:D9:8A:10:81:13:C6:C1:09:EC:AC:CD:82:EC
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/BUjO3xcCntmKEIETxsEJ7KzNguw.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/09/541c05-8d7d-42b8-ab00-7fbbae6f9437/1/hLW81KBW8mgz4Kgop0fBisxyRL8.roa
Signing time: Thu 02 Jan 2025 17:55:04 +0000
ROA not before: Thu 02 Jan 2025 17:55:04 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 51374
IP address blocks: 88.203.187.0/24 maxlen: 24
88.203.188.0/24 maxlen: 24
88.203.189.0/24 maxlen: 24
88.203.190.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:28:28:1c:00:dd:d8:9d:56:6b:60:f8:6a:9f:c7:27:50
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=0548cedf17029ed98a108113c6c109ecaccd82ec
Validity
Not Before: Jan 2 17:55:04 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=84b5bcd4a056f26833e0a828a747c18acc7244bf
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9a:1f:ae:7a:89:c6:41:c2:d0:ca:31:93:b5:99:
d5:00:37:5f:8e:00:54:31:04:5f:2c:fd:f2:e2:7f:
a1:16:df:c7:74:73:1c:90:11:1b:e5:aa:d8:c6:c1:
77:35:b6:65:59:d8:ee:85:cf:e6:49:da:cc:9c:77:
ff:0d:1c:3f:a2:96:94:c9:03:78:20:a2:55:87:df:
9d:f2:10:29:cd:69:2c:ae:ae:5f:79:1f:40:a4:a7:
0e:0a:a4:37:41:d7:3f:8e:f5:16:e0:ec:d4:37:ff:
8f:3e:ed:6b:15:6c:f4:e5:54:54:ac:79:a5:27:ee:
13:81:18:a9:84:42:39:4e:86:e6:61:a2:8e:b3:4d:
f9:ed:2a:71:98:78:5f:18:38:2a:bd:66:80:f2:cd:
4f:c5:45:d4:86:6f:18:6e:4a:95:77:50:e8:79:89:
92:61:8f:d7:d0:ef:e1:47:0c:3e:07:49:8b:06:9c:
11:7b:ef:c4:16:0c:0b:aa:bb:89:09:70:56:75:af:
76:a3:1d:8c:bc:bd:9c:60:c0:b1:6f:68:f0:93:69:
d5:12:18:43:9c:ce:69:06:d2:24:06:cd:d8:9d:7d:
08:fa:f3:48:1b:f9:0e:3e:24:ef:1f:4d:be:d1:3b:
dd:94:14:ae:d4:0b:6d:0b:56:7c:1c:59:e6:36:86:
9c:3d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
84:B5:BC:D4:A0:56:F2:68:33:E0:A8:28:A7:47:C1:8A:CC:72:44:BF
X509v3 Authority Key Identifier:
keyid:05:48:CE:DF:17:02:9E:D9:8A:10:81:13:C6:C1:09:EC:AC:CD:82:EC
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/BUjO3xcCntmKEIETxsEJ7KzNguw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/09/541c05-8d7d-42b8-ab00-7fbbae6f9437/1/hLW81KBW8mgz4Kgop0fBisxyRL8.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/09/541c05-8d7d-42b8-ab00-7fbbae6f9437/1/BUjO3xcCntmKEIETxsEJ7KzNguw.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
88.203.187.0-88.203.190.255
Signature Algorithm: sha256WithRSAEncryption
77:7d:84:1b:73:e7:12:d6:d9:36:27:c0:9f:52:83:78:af:e1:
67:d9:0f:f0:7b:b0:b4:07:08:4b:43:bb:a6:93:38:df:ae:48:
3d:28:ea:9f:39:66:ce:af:1f:42:11:a9:5a:1f:0b:29:f8:2f:
07:eb:c5:6e:cb:d5:26:a5:ef:81:39:6f:1f:04:72:db:16:a7:
f7:77:95:d7:07:d9:b8:6d:fd:ad:93:81:b5:30:fa:9d:71:25:
88:b7:66:c9:86:f9:11:83:66:6e:a6:bb:c0:a4:2d:da:39:3a:
57:76:08:a6:8c:65:b8:3f:7a:9b:09:ab:39:2b:60:de:ae:ee:
9e:43:71:d7:84:38:10:4f:2a:17:72:24:27:28:25:21:65:2a:
c4:78:31:8f:b6:98:79:3c:df:b9:d2:bf:55:76:25:a7:e0:5e:
c3:7e:3d:32:8c:56:9c:5f:36:83:d4:46:93:7e:c8:be:4a:4c:
b7:3c:61:b5:c5:31:1d:9e:8c:b9:80:d6:3d:40:7f:3b:17:c3:
10:3b:51:b3:40:10:f8:8b:97:bb:9d:0f:89:e2:b7:7d:84:85:
b1:28:86:0a:e4:a2:37:ad:8a:ed:90:8d:f0:a4:99:38:b2:05:
e3:4e:34:f8:b1:6e:16:f0:58:cb:6c:da:78:9f:3e:e4:c8:33:
21:3a:d4:2c
-----BEGIN CERTIFICATE-----
MIIFBTCCA+2gAwIBAgISAZQoKBwA3didVmtg+GqfxydQMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDA1NDhjZWRmMTcwMjllZDk4YTEwODExM2M2YzEwOWVjYWNj
ZDgyZWMwHhcNMjUwMTAyMTc1NTA0WhcNMjYwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
Eyg4NGI1YmNkNGEwNTZmMjY4MzNlMGE4MjhhNzQ3YzE4YWNjNzI0NGJmMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAmh+ueonGQcLQyjGTtZnVADdfjgBU
MQRfLP3y4n+hFt/HdHMckBEb5arYxsF3NbZlWdjuhc/mSdrMnHf/DRw/opaUyQN4
IKJVh9+d8hApzWksrq5feR9ApKcOCqQ3Qdc/jvUW4OzUN/+PPu1rFWz05VRUrHml
J+4TgRiphEI5TobmYaKOs0357SpxmHhfGDgqvWaA8s1PxUXUhm8YbkqVd1DoeYmS
YY/X0O/hRww+B0mLBpwRe+/EFgwLqruJCXBWda92ox2MvL2cYMCxb2jwk2nVEhhD
nM5pBtIkBs3YnX0I+vNIG/kOPiTvH02+0TvdlBSu1AttC1Z8HFnmNoacPQIDAQAB
o4ICETCCAg0wHQYDVR0OBBYEFIS1vNSgVvJoM+CoKKdHwYrMckS/MB8GA1UdIwQY
MBaAFAVIzt8XAp7ZihCBE8bBCeyszYLsMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvQlVqTzN4Y0NudG1LRUlFVHhzRUo3S3pOZ3V3LmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8wOS81NDFjMDUtOGQ3ZC00MmI4LWFiMDAt
N2ZiYmFlNmY5NDM3LzEvaExXODFLQlc4bWd6NEtnb3AwZkJpc3h5Ukw4LnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8wOS81NDFjMDUtOGQ3ZC00MmI4LWFiMDAtN2ZiYmFlNmY5NDM3
LzEvQlVqTzN4Y0NudG1LRUlFVHhzRUo3S3pOZ3V3LmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCcGCCsGAQUFBwEHAQH/BBgwFjAUBAIAATAOMAwDBABYy7sD
BABYy74wDQYJKoZIhvcNAQELBQADggEBAHd9hBtz5xLW2TYnwJ9Sg3iv4WfZD/B7
sLQHCEtDu6aTON+uSD0o6p85Zs6vH0IRqVofCyn4LwfrxW7L1Sal74E5bx8EctsW
p/d3ldcH2bht/a2TgbUw+p1xJYi3ZsmG+RGDZm6mu8CkLdo5Old2CKaMZbg/epsJ
qzkrYN6u7p5DcdeEOBBPKhdyJCcoJSFlKsR4MY+2mHk837nSv1V2JafgXsN+PTKM
VpxfNoPURpN+yL5KTLc8YbXFMR2ejLmA1j1AfzsXwxA7UbNAEPiLl7udD4nit32E
hbEohgrkojetiu2QjfCkmTiyBeNONPixbhbwWMts2nifPuTIMyE61Cw=
-----END CERTIFICATE-----
Generated at Mon Apr 7 16:49:19 2025 by rpki-client