Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/38/09f928-a27f-4e3a-b7ff-9e85436191ee/1/5e9MeZDhShrujLkSqLN7eYMHWl8.roa
File: 5e9MeZDhShrujLkSqLN7eYMHWl8.roa (raw, json)
Hash identifier: /dmgZK0n8EohgIkkcn1lUf0J3aamzQZdCxpas+dAOSo=
Subject key identifier: E5:EF:4C:79:90:E1:4A:1A:EE:8C:B9:12:A8:B3:7B:79:83:07:5A:5F
Certificate issuer: /CN=2dc56ee0cc43cee228c40ce4fc472dd4ebdb1dfc
Certificate serial: 01976BC5D935E4C39E74F3954F819B31310B
Authority key identifier: 2D:C5:6E:E0:CC:43:CE:E2:28:C4:0C:E4:FC:47:2D:D4:EB:DB:1D:FC
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/LcVu4MxDzuIoxAzk_Ect1OvbHfw.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/38/09f928-a27f-4e3a-b7ff-9e85436191ee/1/5e9MeZDhShrujLkSqLN7eYMHWl8.roa
Signing time: Sat 14 Jun 2025 00:10:17 +0000
ROA not before: Sat 14 Jun 2025 00:10:17 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 215812
IP address blocks: 2a01:fec0::/48 maxlen: 48
2a01:fec0:1::/48 maxlen: 48
2a01:fec0:2::/48 maxlen: 48
2a01:fec0:3::/48 maxlen: 48
2a01:fec0:4::/48 maxlen: 48
2a01:fec0:5::/48 maxlen: 48
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:6b:c5:d9:35:e4:c3:9e:74:f3:95:4f:81:9b:31:31:0b
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2dc56ee0cc43cee228c40ce4fc472dd4ebdb1dfc
Validity
Not Before: Jun 14 00:10:17 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=e5ef4c7990e14a1aee8cb912a8b37b7983075a5f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e6:40:16:16:38:1d:da:8a:81:39:ec:40:ca:29:
85:c0:62:2c:4f:ff:bc:c7:bb:0f:5d:66:52:b6:c8:
90:6a:11:4e:87:c8:97:fd:a4:15:3e:6c:38:9a:2d:
5e:de:d6:30:ad:d7:eb:c6:6a:b3:cd:35:0c:26:f0:
6d:2c:ea:2c:01:23:47:ea:5c:73:f5:e2:7f:cb:20:
d7:6e:3a:31:f9:4d:31:97:d5:9b:30:88:71:26:5f:
c1:77:cf:0f:80:a3:2a:12:b5:c1:57:23:45:50:52:
92:4c:a0:e5:c8:a4:c7:77:41:55:f7:5c:25:11:08:
eb:7e:ae:98:a1:6d:e4:d1:6d:88:93:cf:6f:63:44:
96:92:11:c3:66:5b:ef:9c:f4:97:28:d3:71:54:31:
18:8c:49:07:e8:a4:28:66:97:08:ce:fb:25:f3:9f:
50:ea:f6:d1:3a:17:fa:79:0d:69:41:4f:3a:32:9c:
1d:b4:a7:cb:df:98:8e:98:3f:7b:9f:fc:dc:51:58:
72:54:11:cf:df:11:08:10:f5:a3:95:80:f6:32:55:
4d:60:17:60:40:3a:20:9b:17:ef:18:12:17:97:e6:
3d:d0:81:af:1d:35:e9:8e:27:77:f3:60:c8:f8:e2:
b4:23:83:b1:6a:64:3a:3b:d2:64:f0:0d:be:19:7a:
a0:07
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E5:EF:4C:79:90:E1:4A:1A:EE:8C:B9:12:A8:B3:7B:79:83:07:5A:5F
X509v3 Authority Key Identifier:
keyid:2D:C5:6E:E0:CC:43:CE:E2:28:C4:0C:E4:FC:47:2D:D4:EB:DB:1D:FC
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/LcVu4MxDzuIoxAzk_Ect1OvbHfw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/38/09f928-a27f-4e3a-b7ff-9e85436191ee/1/5e9MeZDhShrujLkSqLN7eYMHWl8.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/38/09f928-a27f-4e3a-b7ff-9e85436191ee/1/LcVu4MxDzuIoxAzk_Ect1OvbHfw.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a01:fec0::-2a01:fec0:5:ffff:ffff:ffff:ffff:ffff
Signature Algorithm: sha256WithRSAEncryption
0e:f5:c4:9c:76:aa:1c:75:69:37:98:66:da:15:38:cd:78:cf:
42:32:a0:c1:6f:2e:4d:57:5f:ca:19:e7:30:2a:0b:3e:11:d8:
b3:6b:56:c3:6a:fb:2e:f1:1b:8c:7e:01:92:fa:f4:f9:b1:08:
7f:bb:87:51:62:06:ea:a0:46:d8:a0:4c:78:ff:0e:83:27:aa:
40:8c:6d:99:61:bb:7a:c0:a5:87:9f:70:40:7c:36:4f:9a:16:
8b:25:d3:94:1a:5c:bf:2e:e3:66:ff:5d:e8:db:fe:26:c7:c7:
3c:69:62:42:c5:97:e5:cc:cb:ee:28:9b:bd:72:5a:2b:f4:64:
d7:63:c8:c5:3b:00:c5:33:2b:d0:3e:d3:54:19:8b:db:2d:e1:
dd:dd:c5:4e:48:03:6f:3b:27:5d:38:f4:0a:b2:92:21:17:3b:
da:4a:dc:aa:21:3b:30:8f:88:13:42:fb:d3:1e:2e:a8:04:3e:
79:0e:ae:09:99:2a:c5:10:3d:fb:ff:b7:bb:b1:1e:44:3d:6e:
28:ec:06:c1:d8:3c:58:95:45:10:62:03:d0:39:01:ec:d7:fc:
21:e1:9e:60:1f:b2:61:be:8a:cc:48:c7:5f:be:f8:44:42:0a:
ed:f1:c2:3e:8f:cd:b6:be:27:e0:30:b6:f2:1f:11:8a:a4:97:
c9:74:a0:e6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jun 15 11:48:33 2025 by rpki-client