Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/36/ec44ea-ef43-4b3a-a69a-b4cb637da8c3/1/1gP7laimXwOtYI0TDdvjNAZSDA0.roa
File: 1gP7laimXwOtYI0TDdvjNAZSDA0.roa (raw, json)
Hash identifier: 8Xqi4yRc4nERbnab0H1thViYzL4oL0Ulg6zO3qwk1tY=
Subject key identifier: D6:03:FB:95:A8:A6:5F:03:AD:60:8D:13:0D:DB:E3:34:06:52:0C:0D
Certificate issuer: /CN=a2b12e8df3abd5559f9cf9680af65dd16589de86
Certificate serial: 0198E594B38E49C19126989C1B8444778474
Authority key identifier: A2:B1:2E:8D:F3:AB:D5:55:9F:9C:F9:68:0A:F6:5D:D1:65:89:DE:86
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/orEujfOr1VWfnPloCvZd0WWJ3oY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/36/ec44ea-ef43-4b3a-a69a-b4cb637da8c3/1/1gP7laimXwOtYI0TDdvjNAZSDA0.roa
Signing time: Tue 26 Aug 2025 08:53:04 +0000
ROA not before: Tue 26 Aug 2025 08:53:04 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 203446
IP address blocks: 82.139.239.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:e5:94:b3:8e:49:c1:91:26:98:9c:1b:84:44:77:84:74
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=a2b12e8df3abd5559f9cf9680af65dd16589de86
Validity
Not Before: Aug 26 08:53:04 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=d603fb95a8a65f03ad608d130ddbe33406520c0d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b1:2e:a4:0f:69:e2:75:28:05:79:20:a6:31:e1:
54:f5:a8:fe:95:cf:05:dc:a7:72:c8:5f:99:ba:16:
6b:fa:d7:3e:a2:44:46:71:d8:2f:38:fa:a6:7f:2b:
93:a2:2c:8f:d1:d9:d2:c6:67:c6:ff:10:ed:51:d2:
8c:f1:2b:ec:ad:5d:16:67:83:b3:b4:11:b9:79:a3:
6c:33:c4:36:cd:dc:f0:9d:75:20:04:a2:80:cb:c9:
81:67:8b:71:22:a9:75:85:a1:0f:1c:95:2b:fd:fe:
4a:3d:25:02:5b:d9:0c:41:0e:8f:39:e7:54:57:62:
2a:c6:ba:07:1b:df:08:f8:72:35:a7:2c:e2:c3:c8:
77:7d:79:f9:ad:17:53:b6:c9:4e:13:3d:3e:15:ba:
26:d4:df:6d:58:e0:48:23:59:d4:29:87:80:65:e7:
46:0b:b1:8c:cc:13:f2:c2:86:d9:73:69:cc:8c:c8:
f4:af:e8:a6:fd:b7:22:59:65:81:ab:2d:12:bf:58:
ca:e7:5f:c8:6e:a7:fe:f8:9d:86:56:bd:b0:9e:eb:
b7:23:30:a0:26:19:cb:82:1e:37:4d:dc:1a:1c:f8:
28:a1:f7:dd:96:12:02:5e:81:c2:51:1b:d1:6c:7c:
48:e2:63:9b:85:1c:33:32:d8:b3:cf:bd:63:5a:65:
76:21
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D6:03:FB:95:A8:A6:5F:03:AD:60:8D:13:0D:DB:E3:34:06:52:0C:0D
X509v3 Authority Key Identifier:
keyid:A2:B1:2E:8D:F3:AB:D5:55:9F:9C:F9:68:0A:F6:5D:D1:65:89:DE:86
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/orEujfOr1VWfnPloCvZd0WWJ3oY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/36/ec44ea-ef43-4b3a-a69a-b4cb637da8c3/1/1gP7laimXwOtYI0TDdvjNAZSDA0.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/36/ec44ea-ef43-4b3a-a69a-b4cb637da8c3/1/orEujfOr1VWfnPloCvZd0WWJ3oY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
82.139.239.0/24
Signature Algorithm: sha256WithRSAEncryption
1a:5c:a2:83:69:25:16:26:78:42:4f:1c:c9:ea:78:db:83:b0:
2f:dd:02:b5:64:44:c9:b0:0e:6e:5c:6d:7a:a4:ae:f3:b2:0f:
74:39:93:f8:54:c6:d3:f1:43:89:73:70:22:d0:91:b4:ac:ea:
95:ea:fd:f5:60:ff:ef:f2:8e:30:e1:e8:bc:ca:02:24:cf:7a:
96:17:e0:b0:0c:87:a9:36:54:bd:12:23:47:05:a3:ef:b1:20:
02:6a:22:d1:b3:87:18:62:16:cc:14:34:be:04:79:4c:42:aa:
f6:f5:cb:bc:0f:11:b1:38:0c:b6:53:f2:d5:1b:10:bb:9e:a2:
35:05:cb:b0:25:c9:85:ee:d0:cb:6c:5b:bd:61:d8:93:31:d4:
f7:ea:64:1a:91:3c:6d:bf:9b:41:23:84:1f:e8:4b:3a:8a:7a:
06:9c:97:71:c6:b1:17:05:8f:e7:d6:80:96:87:35:7d:81:8f:
d9:e8:ed:92:4f:ce:1c:c8:f2:d3:0b:88:b8:d7:fc:8e:eb:d5:
04:58:d3:c7:a5:62:1b:ed:2b:68:4e:25:c1:13:bc:5b:bb:e0:
c4:56:d0:7c:8f:a5:f4:96:15:29:c5:05:cc:6b:d4:6b:e5:8f:
f4:7a:7e:6d:2b:e2:73:39:02:89:0b:4e:00:88:42:a6:34:d2:
b3:ad:77:0a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Sep 8 22:27:07 2025 by rpki-client