Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e4/6266af-ffbb-4462-baa6-5739ed83c691/1/EMuW5Z9DWUHZG18MkN4T9RSyVCo.roa
File: EMuW5Z9DWUHZG18MkN4T9RSyVCo.roa (raw, json)
Hash identifier: bxVgw2um9ah/cRF/XmN35x0nCwDRiz2wAFfpllVfiIs=
Subject key identifier: 10:CB:96:E5:9F:43:59:41:D9:1B:5F:0C:90:DE:13:F5:14:B2:54:2A
Certificate issuer: /CN=6fe561f84c5bab17d503bf93d3c3d325c2a2252e
Certificate serial: 01942369F62FF0861FFD9D8D99AA9E1E3910
Authority key identifier: 6F:E5:61:F8:4C:5B:AB:17:D5:03:BF:93:D3:C3:D3:25:C2:A2:25:2E
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/b-Vh-ExbqxfVA7-T08PTJcKiJS4.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/e4/6266af-ffbb-4462-baa6-5739ed83c691/1/EMuW5Z9DWUHZG18MkN4T9RSyVCo.roa
Signing time: Wed 01 Jan 2025 19:48:54 +0000
ROA not before: Wed 01 Jan 2025 19:48:54 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 61028
IP address blocks: 109.226.128.0/18 maxlen: 24
185.133.112.0/22 maxlen: 24
188.209.160.0/19 maxlen: 24
2a0d:c80::/29 maxlen: 48
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:23:69:f6:2f:f0:86:1f:fd:9d:8d:99:aa:9e:1e:39:10
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=6fe561f84c5bab17d503bf93d3c3d325c2a2252e
Validity
Not Before: Jan 1 19:48:54 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=10cb96e59f435941d91b5f0c90de13f514b2542a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a9:0a:37:eb:4f:40:ff:37:af:b0:1b:d3:b2:f3:
6d:8d:bf:94:d4:15:e8:3c:36:1b:f2:1a:6b:73:09:
38:41:a4:b9:07:0a:de:2e:5e:f6:66:a7:73:04:3c:
ea:92:ac:81:03:43:75:65:76:9d:f2:22:2c:c4:f3:
f0:04:61:da:aa:f9:b3:e2:07:b4:10:d4:ab:ab:88:
b3:70:39:e0:7b:c6:7b:46:ba:52:2b:b5:02:39:b0:
1d:80:e0:fa:c2:93:f5:ff:77:68:3a:cf:4c:e3:3b:
33:1d:71:e1:51:d7:8b:1b:87:ba:94:2e:38:73:57:
4a:3a:f4:ac:7f:cd:40:90:ac:42:a2:63:6d:a5:cc:
5c:6a:ba:c7:5d:60:87:87:5e:d9:cd:58:d1:b3:4f:
68:55:46:8b:59:0c:9a:7c:d4:f2:c2:52:d4:c6:24:
80:9e:24:65:91:c8:2d:ba:aa:1f:83:a5:28:72:83:
79:ad:d8:5d:6c:45:bb:8a:54:13:2b:16:d4:e0:c4:
1b:b5:e0:1c:97:b3:f3:87:c1:b4:fd:0f:03:ce:89:
8e:98:30:94:7b:83:5f:dd:c0:1f:26:48:5c:de:0f:
b0:16:a1:35:e7:a1:23:58:ff:db:9f:78:a8:8e:71:
94:ec:47:a6:d6:4b:d5:81:01:03:21:c8:b0:2d:31:
36:69
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
10:CB:96:E5:9F:43:59:41:D9:1B:5F:0C:90:DE:13:F5:14:B2:54:2A
X509v3 Authority Key Identifier:
keyid:6F:E5:61:F8:4C:5B:AB:17:D5:03:BF:93:D3:C3:D3:25:C2:A2:25:2E
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/b-Vh-ExbqxfVA7-T08PTJcKiJS4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e4/6266af-ffbb-4462-baa6-5739ed83c691/1/EMuW5Z9DWUHZG18MkN4T9RSyVCo.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/e4/6266af-ffbb-4462-baa6-5739ed83c691/1/b-Vh-ExbqxfVA7-T08PTJcKiJS4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
109.226.128.0/18
185.133.112.0/22
188.209.160.0/19
IPv6:
2a0d:c80::/29
Signature Algorithm: sha256WithRSAEncryption
66:e9:e6:38:0a:46:2e:c8:ff:58:6f:56:83:e3:a2:2b:90:9a:
29:be:bf:b6:6e:9d:c0:db:60:42:27:93:73:29:41:d6:0f:ab:
1e:93:80:b3:e5:af:79:15:35:84:a8:ef:2b:19:65:98:34:1f:
16:bf:ed:a7:8d:7a:d9:50:3a:ff:e1:e9:71:64:6f:3b:c0:06:
ad:68:db:05:6b:01:19:c8:ec:9b:d2:05:cb:73:65:52:a0:53:
c0:d2:70:3c:5e:9a:98:05:99:f7:bb:95:76:4d:69:ad:00:84:
fc:95:f7:e3:10:cd:0e:60:2e:73:00:94:72:5b:9a:a8:c5:36:
62:d7:b5:a3:89:bc:9f:a6:0d:1a:05:10:13:32:95:b2:df:e7:
4f:57:87:2a:bd:63:cf:35:a3:be:e5:ca:d2:76:f5:6c:19:19:
b0:6e:dd:69:4e:b3:e1:55:a3:84:13:46:ac:a6:ec:30:2e:61:
c1:de:02:78:75:63:c1:4e:4c:02:8c:34:6c:2c:d7:74:02:49:
4e:d6:30:a1:0e:1a:67:37:67:ff:8a:ff:30:ba:d1:9d:7f:f9:
06:98:5a:23:01:05:fc:a7:5e:3f:24:33:19:5b:79:4e:28:f6:
8f:b5:cc:17:a9:ef:81:73:fc:ba:27:31:78:18:2c:0d:d5:10:
86:a6:e7:b8
-----BEGIN CERTIFICATE-----
MIIFGDCCBACgAwIBAgISAZQjafYv8IYf/Z2NmaqeHjkQMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDZmZTU2MWY4NGM1YmFiMTdkNTAzYmY5M2QzYzNkMzI1YzJh
MjI1MmUwHhcNMjUwMTAxMTk0ODU0WhcNMjYwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EygxMGNiOTZlNTlmNDM1OTQxZDkxYjVmMGM5MGRlMTNmNTE0YjI1NDJhMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAqQo3609A/zevsBvTsvNtjb+U1BXo
PDYb8hprcwk4QaS5BwreLl72ZqdzBDzqkqyBA0N1ZXad8iIsxPPwBGHaqvmz4ge0
ENSrq4izcDnge8Z7RrpSK7UCObAdgOD6wpP1/3doOs9M4zszHXHhUdeLG4e6lC44
c1dKOvSsf81AkKxComNtpcxcarrHXWCHh17ZzVjRs09oVUaLWQyafNTywlLUxiSA
niRlkcgtuqofg6UocoN5rdhdbEW7ilQTKxbU4MQbteAcl7Pzh8G0/Q8DzomOmDCU
e4Nf3cAfJkhc3g+wFqE156EjWP/bn3iojnGU7Eem1kvVgQEDIciwLTE2aQIDAQAB
o4ICJDCCAiAwHQYDVR0OBBYEFBDLluWfQ1lB2RtfDJDeE/UUslQqMB8GA1UdIwQY
MBaAFG/lYfhMW6sX1QO/k9PD0yXCoiUuMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvYi1WaC1FeGJxeGZWQTctVDA4UFRKY0tpSlM0LmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9lNC82MjY2YWYtZmZiYi00NDYyLWJhYTYt
NTczOWVkODNjNjkxLzEvRU11VzVaOURXVUhaRzE4TWtONFQ5UlN5VkNvLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9lNC82MjY2YWYtZmZiYi00NDYyLWJhYTYtNTczOWVkODNjNjkx
LzEvYi1WaC1FeGJxeGZWQTctVDA4UFRKY0tpSlM0LmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMDoGCCsGAQUFBwEHAQH/BCswKTAYBAIAATASAwQGbeKAAwQC
uYVwAwQFvNGgMA0EAgACMAcDBQMqDQyAMA0GCSqGSIb3DQEBCwUAA4IBAQBm6eY4
CkYuyP9Yb1aD46IrkJopvr+2bp3A22BCJ5NzKUHWD6sek4Cz5a95FTWEqO8rGWWY
NB8Wv+2njXrZUDr/4elxZG87wAataNsFawEZyOyb0gXLc2VSoFPA0nA8XpqYBZn3
u5V2TWmtAIT8lffjEM0OYC5zAJRyW5qoxTZi17Wjibyfpg0aBRATMpWy3+dPV4cq
vWPPNaO+5crSdvVsGRmwbt1pTrPhVaOEE0aspuwwLmHB3gJ4dWPBTkwCjDRsLNd0
AklO1jChDhpnN2f/iv8wutGdf/kGmFojAQX8p14/JDMZW3lOKPaPtcwXqe+Bc/y6
JzF4GCwN1RCGpue4
-----END CERTIFICATE-----
Generated at Fri Apr 25 14:38:17 2025 by rpki-client