Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/36/ec44ea-ef43-4b3a-a69a-b4cb637da8c3/1/7Tkoy4lojAeiPcSkXajHe26fQC4.roa
File: 7Tkoy4lojAeiPcSkXajHe26fQC4.roa (raw, json)
Hash identifier: kvNhfuNmRwiDvsVRjUcYOz9LMArG+Y7eQaS5KgCSjUg=
Subject key identifier: ED:39:28:CB:89:68:8C:07:A2:3D:C4:A4:5D:A8:C7:7B:6E:9F:40:2E
Certificate issuer: /CN=a2b12e8df3abd5559f9cf9680af65dd16589de86
Certificate serial: 0198D6EBF46D42EFE97547127F57E42841FD
Authority key identifier: A2:B1:2E:8D:F3:AB:D5:55:9F:9C:F9:68:0A:F6:5D:D1:65:89:DE:86
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/orEujfOr1VWfnPloCvZd0WWJ3oY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/36/ec44ea-ef43-4b3a-a69a-b4cb637da8c3/1/7Tkoy4lojAeiPcSkXajHe26fQC4.roa
Signing time: Sat 23 Aug 2025 12:34:04 +0000
ROA not before: Sat 23 Aug 2025 12:34:04 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 9304
IP address blocks: 46.236.254.0/23 maxlen: 24
82.139.232.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:d6:eb:f4:6d:42:ef:e9:75:47:12:7f:57:e4:28:41:fd
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=a2b12e8df3abd5559f9cf9680af65dd16589de86
Validity
Not Before: Aug 23 12:34:04 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=ed3928cb89688c07a23dc4a45da8c77b6e9f402e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c2:64:7d:a5:6a:73:75:57:0b:05:93:38:04:12:
c3:ef:80:32:3d:98:b6:3f:2a:8b:30:ab:e0:f2:9f:
53:c6:24:7d:c7:7a:ff:a7:f7:98:22:5c:c0:5c:28:
35:55:7b:05:99:2e:aa:5c:be:67:41:89:4d:53:0e:
a5:10:4c:13:28:b9:13:30:61:38:05:43:9e:4b:61:
c5:34:7b:e5:f3:f2:18:81:01:29:da:86:9e:7f:97:
51:33:22:bd:e2:8c:06:11:aa:19:21:18:79:74:94:
06:47:4b:3b:5c:9b:79:b3:ce:e9:bc:7b:82:95:79:
35:93:7f:81:72:4f:a9:93:68:9d:6c:c1:7f:dd:d7:
12:d2:d5:67:a0:70:17:f3:92:78:7b:38:81:bc:1b:
6a:46:f2:b7:db:d8:3d:e9:31:80:da:fe:99:22:22:
0e:74:88:77:eb:99:91:8c:36:e8:17:7b:7f:78:7c:
8b:a9:45:95:51:73:dc:63:b4:80:1b:a4:df:a3:54:
25:23:7e:4d:6a:cc:a9:8f:18:7a:fc:7f:a3:1e:60:
1b:99:ea:a6:26:cf:3c:81:c3:54:bf:00:df:2e:8d:
a1:8f:3a:f4:60:24:69:63:b0:41:90:54:79:08:06:
6a:bf:ca:0a:99:c8:38:b8:9d:6b:27:21:6e:56:01:
e7:dd
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
ED:39:28:CB:89:68:8C:07:A2:3D:C4:A4:5D:A8:C7:7B:6E:9F:40:2E
X509v3 Authority Key Identifier:
keyid:A2:B1:2E:8D:F3:AB:D5:55:9F:9C:F9:68:0A:F6:5D:D1:65:89:DE:86
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/orEujfOr1VWfnPloCvZd0WWJ3oY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/36/ec44ea-ef43-4b3a-a69a-b4cb637da8c3/1/7Tkoy4lojAeiPcSkXajHe26fQC4.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/36/ec44ea-ef43-4b3a-a69a-b4cb637da8c3/1/orEujfOr1VWfnPloCvZd0WWJ3oY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
46.236.254.0/23
82.139.232.0/24
Signature Algorithm: sha256WithRSAEncryption
5f:3d:02:f7:e5:28:2b:d4:30:fe:5c:3a:c9:c6:43:67:82:d4:
28:29:c3:69:db:f1:2f:be:2d:1b:a7:d5:da:29:ec:86:1c:fc:
c7:d5:45:a6:7b:f7:fa:93:0f:3c:31:e3:81:bf:e7:5c:d7:aa:
df:ea:98:be:29:9d:eb:2f:9e:05:5c:8c:4d:c8:04:ce:d7:af:
45:3d:39:3b:22:61:b0:de:48:87:50:b6:68:a4:28:20:81:93:
70:fa:6b:97:c2:89:62:41:6d:1f:39:b3:1f:dd:dc:56:76:54:
6a:d3:ad:67:aa:f7:ee:4d:54:f7:8e:f8:9f:94:66:d3:07:6c:
ba:62:23:89:0e:37:17:bb:b8:7f:f6:f5:ae:1e:52:7c:ec:e2:
eb:c6:5d:07:69:d2:fe:f8:25:82:d3:ea:1c:13:bc:46:ed:ef:
25:e3:4c:14:be:d7:da:bb:88:81:ac:d1:47:f0:28:1b:a2:91:
00:f1:1a:03:03:4f:d6:5e:f6:0e:9a:d3:85:3c:ed:d9:38:1d:
2c:dc:9c:63:d6:50:c7:d3:d7:01:61:ab:91:77:50:19:f6:db:
d6:7e:72:60:a4:99:88:4e:9e:8e:c5:60:26:7b:c4:4e:d0:55:
8d:2f:72:17:a4:cb:55:92:3c:eb:13:ae:32:a5:54:2c:a2:d5:
6d:e8:64:cf
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Sep 5 10:01:05 2025 by rpki-client