Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/89/48cb86-2750-4d6a-8a71-1be525576863/1/wphPd9tKUrTLTYzUp52n0m2Peco.roa
File: wphPd9tKUrTLTYzUp52n0m2Peco.roa (raw, json)
Hash identifier: SooncV60gLtkhDvuSRl8K3GWYPLTeeozVnBqsUnxe0U=
Subject key identifier: C2:98:4F:77:DB:4A:52:B4:CB:4D:8C:D4:A7:9D:A7:D2:6D:8F:79:CA
Certificate issuer: /CN=c8f6f5dec09bc7a1203045699ba058295d38e346
Certificate serial: 01857227C88C474505E9245A259C523447C6
Authority key identifier: C8:F6:F5:DE:C0:9B:C7:A1:20:30:45:69:9B:A0:58:29:5D:38:E3:46
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/yPb13sCbx6EgMEVpm6BYKV0440Y.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/89/48cb86-2750-4d6a-8a71-1be525576863/1/wphPd9tKUrTLTYzUp52n0m2Peco.roa
Signing time: Mon 02 Jan 2023 11:04:47 +0000
ROA not before: Mon 02 Jan 2023 11:04:47 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 20807
IP address blocks: 92.39.224.0/21 maxlen: 21
92.39.224.0/20 maxlen: 20
109.68.136.0/22 maxlen: 22
109.68.136.0/21 maxlen: 21
92.39.232.0/21 maxlen: 21
109.68.140.0/22 maxlen: 22
81.94.16.0/21 maxlen: 21
81.94.16.0/20 maxlen: 20
81.94.24.0/21 maxlen: 21
185.45.60.0/22 maxlen: 22
178.162.0.0/18 maxlen: 18
178.162.0.0/17 maxlen: 17
178.162.10.0/23 maxlen: 23
178.162.12.0/23 maxlen: 23
178.162.24.0/22 maxlen: 22
178.162.20.0/22 maxlen: 22
77.247.160.0/21 maxlen: 21
77.247.160.0/20 maxlen: 20
77.247.168.0/21 maxlen: 21
80.70.224.0/20 maxlen: 20
178.162.86.0/23 maxlen: 23
178.162.88.0/23 maxlen: 23
178.162.94.0/23 maxlen: 23
178.162.96.0/23 maxlen: 23
178.162.32.0/23 maxlen: 23
178.162.64.0/18 maxlen: 18
178.162.66.0/23 maxlen: 23
178.162.72.0/21 maxlen: 21
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:85:72:27:c8:8c:47:45:05:e9:24:5a:25:9c:52:34:47:c6
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=c8f6f5dec09bc7a1203045699ba058295d38e346
Validity
Not Before: Jan 2 11:04:47 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=c2984f77db4a52b4cb4d8cd4a79da7d26d8f79ca
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:82:28:9b:84:a6:be:7f:bc:d0:fa:bd:09:c2:3c:
fa:40:6f:60:6c:93:df:cd:af:a9:e6:b5:e0:5d:29:
52:b4:01:ca:73:82:f5:a4:a8:62:20:f2:fd:53:3c:
99:b9:1f:a5:fd:f8:56:1b:cc:32:7e:46:c7:70:99:
36:e7:56:e1:db:2e:6f:7c:c0:c8:9b:8c:df:af:76:
33:63:a0:fc:1a:33:aa:b7:bc:20:22:e0:80:c0:0e:
41:fb:70:37:b2:15:5f:c7:ff:69:90:e6:09:67:fc:
a9:dd:df:81:72:3b:94:cd:3d:68:9e:3b:44:5e:9e:
b2:e0:67:8b:7b:6e:d6:51:2b:b2:bc:02:ec:3e:c5:
b8:d9:93:65:f4:09:86:bc:ce:1b:67:bd:de:7e:67:
58:d6:09:bc:74:f7:5d:2c:f4:6a:f9:5b:fa:cf:9b:
5e:d0:24:cb:f2:9d:69:64:aa:d9:37:b6:57:ba:63:
50:ee:cb:5d:97:a3:42:dc:f6:52:ce:ab:80:27:c8:
a0:ec:d1:40:8c:ed:30:29:c6:a2:dc:8b:c0:fc:0a:
26:92:14:3f:94:59:c8:2a:bf:d8:82:b9:e6:fa:53:
e5:bb:ab:f8:ca:88:ee:39:df:b0:b7:24:83:49:89:
8b:77:09:f3:56:fb:02:c6:bc:7c:81:c1:34:ab:00:
32:f1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C2:98:4F:77:DB:4A:52:B4:CB:4D:8C:D4:A7:9D:A7:D2:6D:8F:79:CA
X509v3 Authority Key Identifier:
keyid:C8:F6:F5:DE:C0:9B:C7:A1:20:30:45:69:9B:A0:58:29:5D:38:E3:46
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/yPb13sCbx6EgMEVpm6BYKV0440Y.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/89/48cb86-2750-4d6a-8a71-1be525576863/1/wphPd9tKUrTLTYzUp52n0m2Peco.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/89/48cb86-2750-4d6a-8a71-1be525576863/1/yPb13sCbx6EgMEVpm6BYKV0440Y.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
77.247.160.0/20
80.70.224.0/20
81.94.16.0/20
92.39.224.0/20
109.68.136.0/21
178.162.0.0/17
185.45.60.0/22
Signature Algorithm: sha256WithRSAEncryption
77:33:5b:08:78:94:88:02:0e:b2:74:54:af:8b:d3:e4:c0:5c:
fd:f5:44:db:ae:10:26:45:d8:f8:bc:f8:df:4e:37:f5:32:41:
15:0c:62:84:85:e9:8a:5d:a2:92:08:d7:aa:01:24:b7:cf:6d:
f0:fc:98:43:fe:62:59:e2:53:04:af:38:cf:8e:fe:53:11:8a:
c9:9b:55:84:c8:2e:b9:37:51:cd:69:e1:14:51:58:96:cc:b3:
6b:ce:f7:da:38:11:fc:cf:26:aa:74:9d:13:3c:4b:f7:86:05:
78:ba:b8:46:65:88:75:ef:da:f1:c0:6b:b5:90:1b:0c:20:99:
fd:83:95:5c:58:a2:32:4f:32:50:80:e6:3e:1c:cc:39:e9:bf:
7b:1e:c7:de:9d:5b:bd:73:8c:c8:ac:b5:20:f8:4e:b8:9a:e3:
47:50:5b:18:b1:1e:04:0f:91:09:2b:a5:75:c8:2f:53:19:ef:
74:4a:2d:cf:ff:c7:a1:5a:03:3e:f1:ad:37:b0:bd:62:7d:28:
c4:20:68:c3:5d:13:8a:2d:0b:64:df:21:11:3f:fb:07:df:21:
a6:eb:00:f3:c2:6e:33:77:64:c9:0f:63:66:00:37:48:8d:2f:
16:44:b3:3c:3a:86:82:65:9b:4b:da:8d:93:a7:81:5c:37:8d:
80:22:08:ab
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 18 18:22:37 2025 by rpki-client