Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/64/ad5ea9-8bd1-41ef-8356-fadc3524fa30/1/Ewvd8kR5CZPnIqf-7V19V6YiTzI.roa
File: Ewvd8kR5CZPnIqf-7V19V6YiTzI.roa (raw, json)
Hash identifier: AhGATYtf5656YCYoFsEjiAavvsnbqAu8zWMfaczbeCk=
Subject key identifier: 13:0B:DD:F2:44:79:09:93:E7:22:A7:FE:ED:5D:7D:57:A6:22:4F:32
Certificate issuer: /CN=eeb3e113ccfaeee1996ba90c461407fce290a9db
Certificate serial: 037458B3
Authority key identifier: EE:B3:E1:13:CC:FA:EE:E1:99:6B:A9:0C:46:14:07:FC:E2:90:A9:DB
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/7rPhE8z67uGZa6kMRhQH_OKQqds.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/64/ad5ea9-8bd1-41ef-8356-fadc3524fa30/1/Ewvd8kR5CZPnIqf-7V19V6YiTzI.roa
Signing time: Sat 01 Jan 2022 11:04:59 +0000
ROA not before: Sat 01 Jan 2022 11:04:59 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 208081
IP address blocks: 91.199.36.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 57956531 (0x37458b3)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=eeb3e113ccfaeee1996ba90c461407fce290a9db
Validity
Not Before: Jan 1 11:04:59 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=130bddf244790993e722a7feed5d7d57a6224f32
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e6:1c:b5:ac:ea:b1:1e:43:57:c8:61:82:b9:a5:
09:e9:4b:31:1f:0a:82:62:2b:ba:c6:fa:ba:5f:03:
05:a7:9a:0e:32:3d:6b:d1:d6:fb:7c:6e:99:14:e0:
2b:f4:ee:fa:5a:c4:dc:77:e4:97:bd:29:a2:41:c4:
c4:37:15:23:0d:36:47:ee:35:27:72:d6:03:1c:22:
06:51:0d:ab:bf:48:f3:34:cf:e8:67:ca:52:47:8f:
cd:ff:8b:72:d2:4e:15:43:e0:9a:eb:52:dd:af:1d:
49:cf:be:74:53:c3:02:41:4b:b5:e3:18:19:0d:a0:
49:24:dc:7a:f2:4a:f0:57:16:73:28:a1:82:12:1d:
0e:e4:0c:01:45:90:c3:90:dd:1d:3c:a3:df:32:c1:
e6:92:68:b4:5b:cd:e6:7c:37:a0:b0:03:aa:86:3e:
14:02:a4:bd:d1:2f:26:f1:dd:98:69:2b:61:91:8b:
39:74:3f:8d:ee:f5:5f:6a:4b:52:30:a6:22:d1:39:
78:e6:de:bf:54:0a:57:02:4c:60:69:e6:74:98:bc:
1f:7a:66:e1:20:19:dc:f4:25:9d:d8:d9:27:ba:14:
f5:d6:12:3a:bb:b4:5a:3f:d3:3e:9a:aa:1c:02:c9:
20:e7:f4:55:2e:3a:ee:a7:0b:c5:85:a1:6d:06:0f:
25:c9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
13:0B:DD:F2:44:79:09:93:E7:22:A7:FE:ED:5D:7D:57:A6:22:4F:32
X509v3 Authority Key Identifier:
keyid:EE:B3:E1:13:CC:FA:EE:E1:99:6B:A9:0C:46:14:07:FC:E2:90:A9:DB
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/7rPhE8z67uGZa6kMRhQH_OKQqds.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/64/ad5ea9-8bd1-41ef-8356-fadc3524fa30/1/Ewvd8kR5CZPnIqf-7V19V6YiTzI.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/64/ad5ea9-8bd1-41ef-8356-fadc3524fa30/1/7rPhE8z67uGZa6kMRhQH_OKQqds.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
91.199.36.0/24
Signature Algorithm: sha256WithRSAEncryption
2e:ed:4c:0d:3c:8f:f2:cd:86:ac:c8:7e:85:29:9b:56:28:85:
24:18:15:a4:4d:77:f4:ea:56:61:0b:df:be:5d:86:f7:0c:a7:
10:df:eb:2e:54:7c:b3:20:bd:db:42:b6:1b:7c:c7:53:73:34:
47:9d:6d:9f:a7:a4:db:87:fb:5c:1e:26:2d:bb:8b:c8:e2:6b:
5d:7b:5f:56:8a:fc:1c:d3:d1:5b:75:b6:cb:bd:9f:89:b0:31:
79:63:1c:fd:8b:b6:d6:fd:7a:31:2f:6e:21:b7:13:03:3b:47:
8a:24:ad:ed:d6:4f:ad:bf:70:63:b6:41:34:ab:90:7a:b9:e1:
06:fe:79:c4:ab:d1:45:22:d1:05:8f:b9:d1:f0:38:8c:60:4f:
7a:a0:aa:d8:b5:ca:a4:6f:f6:db:3f:99:2a:2b:6e:59:bc:80:
9a:90:17:94:98:71:24:b0:5e:6f:c5:2f:13:d8:51:a1:2f:f3:
a9:74:5d:ba:76:45:df:85:1f:4f:dd:56:c2:30:e5:1e:cb:9e:
c1:59:82:d3:9f:19:e0:7c:c7:72:8f:96:de:de:2a:eb:a1:65:
5b:eb:b1:c5:2c:00:14:5a:72:b9:78:cb:bd:45:3a:84:63:56:
59:05:67:d0:95:99:db:35:b9:95:cd:ce:02:bb:6f:4b:3e:5a:
07:79:83:1d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Apr 8 10:09:34 2025 by rpki-client