Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/89/48cb86-2750-4d6a-8a71-1be525576863/1/xWLCEb-zJ7WGBwkngfdc9PpluN0.roa
File: xWLCEb-zJ7WGBwkngfdc9PpluN0.roa (raw, json)
Hash identifier: MQd5RJj3i+oN/wD5pFMxb2/6Jo5e87BNkkpdm+wzhUA=
Subject key identifier: C5:62:C2:11:BF:B3:27:B5:86:07:09:27:81:F7:5C:F4:FA:65:B8:DD
Certificate issuer: /CN=c8f6f5dec09bc7a1203045699ba058295d38e346
Certificate serial: 03DBEEFB
Authority key identifier: C8:F6:F5:DE:C0:9B:C7:A1:20:30:45:69:9B:A0:58:29:5D:38:E3:46
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/yPb13sCbx6EgMEVpm6BYKV0440Y.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/89/48cb86-2750-4d6a-8a71-1be525576863/1/xWLCEb-zJ7WGBwkngfdc9PpluN0.roa
Signing time: Sat 01 Jan 2022 00:57:07 +0000
ROA not before: Sat 01 Jan 2022 00:57:07 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 20807
IP address blocks: 92.39.224.0/20 maxlen: 20
92.39.224.0/21 maxlen: 21
109.68.136.0/22 maxlen: 22
109.68.136.0/21 maxlen: 21
92.39.232.0/21 maxlen: 21
109.68.140.0/22 maxlen: 22
81.94.16.0/21 maxlen: 21
81.94.16.0/20 maxlen: 20
81.94.24.0/21 maxlen: 21
185.45.60.0/22 maxlen: 22
178.162.0.0/18 maxlen: 18
178.162.0.0/17 maxlen: 17
178.162.10.0/23 maxlen: 23
178.162.12.0/23 maxlen: 23
178.162.24.0/22 maxlen: 22
178.162.20.0/22 maxlen: 22
77.247.160.0/21 maxlen: 21
77.247.160.0/20 maxlen: 20
77.247.168.0/21 maxlen: 21
80.70.224.0/20 maxlen: 20
178.162.86.0/23 maxlen: 23
178.162.88.0/23 maxlen: 23
178.162.94.0/23 maxlen: 23
178.162.96.0/23 maxlen: 23
178.162.32.0/23 maxlen: 23
178.162.64.0/18 maxlen: 18
178.162.66.0/23 maxlen: 23
178.162.72.0/21 maxlen: 21
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 64745211 (0x3dbeefb)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=c8f6f5dec09bc7a1203045699ba058295d38e346
Validity
Not Before: Jan 1 00:57:07 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=c562c211bfb327b58607092781f75cf4fa65b8dd
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b8:33:e8:de:6a:f0:df:5e:31:db:13:57:0a:3b:
0d:9c:a8:b1:14:7e:05:11:0a:2c:cc:57:de:5e:ef:
16:66:3d:74:10:fc:f5:f0:af:61:c8:6a:93:87:05:
4c:8e:50:05:8b:bd:78:6b:54:98:c2:a1:4b:98:65:
77:74:31:c0:64:d4:49:5d:cd:b6:22:e7:73:b5:bd:
fc:4d:26:67:79:10:a0:d7:08:b0:13:ee:15:4e:8b:
7d:67:97:5c:5c:f6:74:97:62:85:01:20:c9:4c:0e:
4c:b8:37:5f:75:5a:92:47:a7:8b:74:8c:9c:24:aa:
31:56:7a:38:73:96:bf:b9:4a:cd:e9:91:d1:18:48:
a3:a0:fe:5f:ef:13:bd:a9:45:e7:8e:40:fe:16:c0:
9b:7f:ee:98:ba:ae:24:98:cd:64:4c:18:f9:e2:b4:
29:f1:39:56:50:42:d9:1c:b2:cc:bc:c5:f2:fb:9a:
a4:b3:55:ef:c2:3a:71:9a:b3:b8:e5:a4:9f:00:87:
2f:ed:9f:a2:2f:5c:65:8d:fd:13:cb:97:a5:27:63:
17:bb:e4:2f:0a:f5:10:2d:bc:ef:41:a4:b8:03:d9:
49:1b:63:18:44:a9:b4:45:26:50:07:98:ea:2c:f0:
fe:f8:06:7f:af:46:b1:bf:a5:cd:ef:4c:d8:2d:f0:
8d:83
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C5:62:C2:11:BF:B3:27:B5:86:07:09:27:81:F7:5C:F4:FA:65:B8:DD
X509v3 Authority Key Identifier:
keyid:C8:F6:F5:DE:C0:9B:C7:A1:20:30:45:69:9B:A0:58:29:5D:38:E3:46
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/yPb13sCbx6EgMEVpm6BYKV0440Y.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/89/48cb86-2750-4d6a-8a71-1be525576863/1/xWLCEb-zJ7WGBwkngfdc9PpluN0.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/89/48cb86-2750-4d6a-8a71-1be525576863/1/yPb13sCbx6EgMEVpm6BYKV0440Y.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
77.247.160.0/20
80.70.224.0/20
81.94.16.0/20
92.39.224.0/20
109.68.136.0/21
178.162.0.0/17
185.45.60.0/22
Signature Algorithm: sha256WithRSAEncryption
15:03:0b:8e:6d:8d:eb:05:4b:c6:6c:f0:a6:b2:e0:96:cc:58:
6c:3e:37:b3:7d:8b:a1:07:2c:18:e7:62:9e:d7:28:17:c4:83:
29:85:c9:de:8c:24:92:da:6f:3c:23:70:99:f9:1b:74:dd:9f:
eb:55:c8:b6:24:60:a3:3e:41:f0:ec:7f:2f:85:5c:69:09:e5:
1f:66:7e:38:e0:a6:66:97:26:7d:fa:4f:53:9d:4c:5d:1a:20:
2c:e3:99:81:c2:70:39:d0:fc:78:e5:d0:1d:6e:54:6a:8a:cb:
9e:78:d2:b1:d8:aa:b9:d2:ff:d3:6c:84:84:38:60:2c:1f:21:
a5:33:55:34:44:b4:4f:75:7a:46:22:5a:c3:a5:5c:d9:1d:ce:
2e:bd:52:db:70:b7:17:45:b2:d6:56:a2:3a:36:6c:38:75:af:
29:c6:9e:b0:b3:bb:14:56:24:60:17:01:05:ff:d5:b0:3d:d7:
5f:62:d6:ae:05:f6:12:a9:76:fe:db:97:87:80:dc:c9:08:7e:
3d:67:66:e4:6c:1f:98:54:1a:88:5f:b0:96:3f:24:1c:e9:35:
62:57:ad:69:62:b7:05:fb:af:a7:95:eb:9b:f3:d8:3f:2a:5c:
0d:87:77:58:e2:af:cd:40:86:04:f6:8a:8e:04:86:ca:09:a6:
28:ef:67:ed
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 18 18:24:21 2025 by rpki-client