Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d1/96436c-f6fa-40ba-a27c-fb1030651067/1/5gCvrLecynoNlZqqecgbQQFoRrQ.roa
File: 5gCvrLecynoNlZqqecgbQQFoRrQ.roa (raw, json)
Hash identifier: 9K+m38Q0PxPs98dlo8mOUJqX2gTHhK0yh4taoKPklF4=
Subject key identifier: E6:00:AF:AC:B7:9C:CA:7A:0D:95:9A:AA:79:C8:1B:41:01:68:46:B4
Certificate issuer: /CN=dbe6ab8e0c46e841b44d2b9c6b03bb65f5621db1
Certificate serial: 01946A42BEAE3A1B12EC7192985C876B3E79
Authority key identifier: DB:E6:AB:8E:0C:46:E8:41:B4:4D:2B:9C:6B:03:BB:65:F5:62:1D:B1
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/2-arjgxG6EG0TSucawO7ZfViHbE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d1/96436c-f6fa-40ba-a27c-fb1030651067/1/5gCvrLecynoNlZqqecgbQQFoRrQ.roa
Signing time: Wed 15 Jan 2025 13:59:06 +0000
ROA not before: Wed 15 Jan 2025 13:59:06 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 215925
IP address blocks: 2a0f:ca80:9::/48 maxlen: 48
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:6a:42:be:ae:3a:1b:12:ec:71:92:98:5c:87:6b:3e:79
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=dbe6ab8e0c46e841b44d2b9c6b03bb65f5621db1
Validity
Not Before: Jan 15 13:59:06 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=e600afacb79cca7a0d959aaa79c81b41016846b4
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b9:d9:bb:8d:4e:89:1a:18:2f:a5:be:e8:51:0c:
0a:48:e4:93:a3:81:e8:d3:a9:1f:1b:f5:a2:e6:c0:
5e:8d:df:1d:d5:1a:ca:6a:45:3b:f2:90:7d:7b:d5:
75:ad:26:38:23:62:8e:54:79:f9:ca:13:cd:53:14:
5c:c1:9b:33:51:1e:87:24:79:49:db:30:30:2e:02:
60:f2:61:27:5e:70:c5:c9:d5:4b:f0:db:25:04:f0:
03:9f:ba:4d:e2:5d:a7:ea:fa:a4:70:e3:a9:c6:b0:
c0:84:aa:a5:99:01:68:df:c0:8d:d6:8c:20:33:f5:
57:1e:ff:00:d3:29:66:c3:9c:ec:8b:d0:79:e7:a1:
ca:19:5e:be:7b:33:69:f4:9d:c4:e3:fd:2b:32:4e:
29:a7:09:40:55:20:af:f0:98:5c:10:c9:35:81:88:
58:3f:ad:d2:4a:7e:7c:56:6c:a4:c0:f5:7e:f7:72:
d4:91:6a:28:31:f6:6c:fd:cc:e1:1d:24:60:53:c3:
3e:b6:70:30:68:9f:db:03:dd:5c:f2:48:24:2f:c9:
5e:9a:e5:eb:a0:d8:24:b7:e3:1d:b8:e6:27:d7:aa:
30:e3:97:4e:d9:40:f1:cf:e5:a4:1c:65:09:01:40:
e9:62:3a:ce:1f:1e:51:f1:cd:b7:10:9c:9d:a4:d0:
4b:95
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E6:00:AF:AC:B7:9C:CA:7A:0D:95:9A:AA:79:C8:1B:41:01:68:46:B4
X509v3 Authority Key Identifier:
keyid:DB:E6:AB:8E:0C:46:E8:41:B4:4D:2B:9C:6B:03:BB:65:F5:62:1D:B1
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/2-arjgxG6EG0TSucawO7ZfViHbE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d1/96436c-f6fa-40ba-a27c-fb1030651067/1/5gCvrLecynoNlZqqecgbQQFoRrQ.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/d1/96436c-f6fa-40ba-a27c-fb1030651067/1/2-arjgxG6EG0TSucawO7ZfViHbE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a0f:ca80:9::/48
Signature Algorithm: sha256WithRSAEncryption
04:3c:c3:6f:1c:7b:f7:b8:16:46:6b:e7:20:e7:b5:db:63:28:
19:61:79:b4:2c:6a:10:c5:9c:f8:c7:b0:a5:ad:1a:02:7d:9e:
d5:e2:35:2b:b1:91:fe:c2:62:5a:27:52:2b:65:14:9c:19:4a:
b0:a0:de:ad:f6:d8:82:d4:05:b5:22:f8:1a:14:0d:3d:8a:05:
f6:5f:49:a2:eb:68:20:50:01:86:38:ee:22:49:70:82:46:20:
d6:b4:a8:58:87:7c:08:f2:0b:58:83:43:ae:99:40:5f:ad:ca:
b7:55:8f:1d:16:44:6f:a7:a8:e4:d7:2b:90:f9:ef:69:1c:1f:
23:5d:ff:31:5d:b3:46:13:48:b1:f4:99:76:01:9b:6d:c4:24:
bc:1a:52:af:e5:c6:70:50:b9:88:59:a0:ee:e7:ea:bf:04:76:
ba:36:49:e7:60:a9:24:34:43:af:59:47:49:0d:a9:8b:57:39:
da:de:da:5f:68:54:fa:df:aa:9d:34:aa:ea:7b:81:5d:f6:0f:
f1:a6:66:f9:9a:29:f6:82:ba:68:8a:55:6a:c1:ae:3e:91:d3:
14:90:da:6e:6c:d8:b2:6f:03:3e:f4:84:96:6f:f4:16:53:a2:
9f:2c:a8:27:88:96:75:2c:48:82:87:bf:32:77:16:d9:61:7f:
46:2a:c6:c9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 6 20:41:41 2025 by rpki-client