Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/64/6b9822-2f3e-45ba-a018-88ba02786d0d/1/ewmzu1c5hlX5WEsUAJJ_EBHHe8c.roa
File: ewmzu1c5hlX5WEsUAJJ_EBHHe8c.roa (raw, json)
Hash identifier: LqYC06a3Uz9AaZO7Y0iTGjC5jKrTveBVSDvC1hJ3I8g=
Subject key identifier: 7B:09:B3:BB:57:39:86:55:F9:58:4B:14:00:92:7F:10:11:C7:7B:C7
Certificate issuer: /CN=5e81164ce388259186fba015acc4b0eb48beb552
Certificate serial: 019421442F5CDD0F2938B01342B3A2E655D6
Authority key identifier: 5E:81:16:4C:E3:88:25:91:86:FB:A0:15:AC:C4:B0:EB:48:BE:B5:52
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/XoEWTOOIJZGG-6AVrMSw60i-tVI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/64/6b9822-2f3e-45ba-a018-88ba02786d0d/1/ewmzu1c5hlX5WEsUAJJ_EBHHe8c.roa
Signing time: Wed 01 Jan 2025 09:48:24 +0000
ROA not before: Wed 01 Jan 2025 09:48:24 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 197197
IP address blocks: 109.224.64.0/18 maxlen: 18
2a00:7e80::/32 maxlen: 32
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:21:44:2f:5c:dd:0f:29:38:b0:13:42:b3:a2:e6:55:d6
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=5e81164ce388259186fba015acc4b0eb48beb552
Validity
Not Before: Jan 1 09:48:24 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=7b09b3bb57398655f9584b1400927f1011c77bc7
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e0:fb:ea:5d:17:e5:a2:a0:d3:27:88:72:1b:c6:
3b:27:3b:3a:87:45:ff:02:96:e3:0b:81:b8:3b:f6:
f4:fb:dd:72:5a:39:9a:c8:d1:17:ce:fa:2d:a6:1a:
01:26:fc:cf:13:a7:1b:06:84:c4:f3:70:1f:1e:78:
c7:94:5f:b1:48:2c:47:95:4f:78:1a:2e:69:e9:f4:
58:a9:7b:31:af:4e:37:63:a9:dc:c8:a8:67:7a:7b:
0f:22:b7:3a:9e:96:75:d3:50:66:98:0b:d6:2a:90:
24:d1:7d:a1:da:c7:26:4a:53:a7:cd:66:de:01:25:
ea:30:18:47:46:a8:4b:d8:37:83:04:3c:d5:58:8b:
59:04:11:89:c7:32:ec:67:55:3b:bc:31:b3:c1:a8:
c8:35:31:3a:d3:6b:04:46:a1:56:15:20:a5:34:7f:
3c:b2:60:12:10:08:28:8a:88:6e:c8:ce:93:0b:64:
20:ef:61:2d:db:11:c5:83:7e:d3:2b:ac:75:ae:14:
55:49:ed:1f:de:ff:9b:98:21:76:dc:dc:6f:f7:c8:
89:ec:bf:73:d8:fe:19:c3:65:31:bd:c8:a8:00:21:
0a:e6:96:18:69:73:3d:c7:1b:4d:8d:7b:ba:8f:35:
84:40:64:e8:b5:53:5c:67:1d:5f:4e:52:e0:e4:8e:
9b:9b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
7B:09:B3:BB:57:39:86:55:F9:58:4B:14:00:92:7F:10:11:C7:7B:C7
X509v3 Authority Key Identifier:
keyid:5E:81:16:4C:E3:88:25:91:86:FB:A0:15:AC:C4:B0:EB:48:BE:B5:52
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/XoEWTOOIJZGG-6AVrMSw60i-tVI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/64/6b9822-2f3e-45ba-a018-88ba02786d0d/1/ewmzu1c5hlX5WEsUAJJ_EBHHe8c.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/64/6b9822-2f3e-45ba-a018-88ba02786d0d/1/XoEWTOOIJZGG-6AVrMSw60i-tVI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
109.224.64.0/18
IPv6:
2a00:7e80::/32
Signature Algorithm: sha256WithRSAEncryption
1a:aa:ce:9e:3d:f1:f7:23:78:ea:5e:a3:e3:f6:2a:a2:d6:fa:
1f:80:55:cd:74:e5:32:29:de:06:81:b0:30:d5:fe:8d:e6:3b:
c6:da:2b:85:36:26:ce:24:79:9e:69:4d:f5:22:f4:23:bc:c9:
f6:0e:a1:d0:85:71:c4:47:1c:5c:1d:26:d3:f4:32:c6:1e:f8:
d1:87:70:e5:43:44:46:69:cb:eb:b0:ff:45:6b:9d:73:7c:a1:
70:6a:3d:84:ae:91:f9:b3:7f:a8:1a:64:3e:90:d6:11:fe:02:
a2:2a:83:01:1c:85:bc:43:82:39:20:58:0b:65:43:8c:58:2e:
d5:e1:38:91:d4:eb:14:07:4e:84:72:f7:e0:c5:42:6f:e1:e2:
33:8f:2f:e6:d2:2a:b0:e0:14:22:42:3e:a8:88:75:e5:f9:7e:
26:9f:41:23:02:30:b5:d7:67:54:d5:86:db:10:50:48:9d:94:
be:81:a9:59:c6:d0:89:86:de:06:24:fc:c6:84:90:a5:fd:2d:
31:df:94:8c:01:24:38:87:fc:11:1a:9f:ef:3e:46:a5:20:d2:
2a:64:5d:82:92:be:97:86:92:04:e0:b5:5e:76:60:c7:a4:ce:
a8:20:36:7f:0f:05:59:8a:3a:bc:b8:ba:b4:e9:6b:f6:b1:90:
47:92:dd:5f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Apr 8 09:41:52 2025 by rpki-client