Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/3f/0f8fea-f00a-4415-b396-399fc9693b22/1/FGQvDY3NvioAebu7FplvGe4vpVc.roa
File: FGQvDY3NvioAebu7FplvGe4vpVc.roa (raw, json)
Hash identifier: OhnTlVgvogNsjxchBSrN9/t6iXlbYbGMxAz+0SKc5+I=
Subject key identifier: 14:64:2F:0D:8D:CD:BE:2A:00:79:BB:BB:16:99:6F:19:EE:2F:A5:57
Certificate issuer: /CN=363769f8644a5a718ae62b058dd1fb62cb5a3c20
Certificate serial: 019F2075DFED67CEF8423DF33B1EDBBF62EA
Authority key identifier: 36:37:69:F8:64:4A:5A:71:8A:E6:2B:05:8D:D1:FB:62:CB:5A:3C:20
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Njdp-GRKWnGK5isFjdH7YstaPCA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/3f/0f8fea-f00a-4415-b396-399fc9693b22/1/FGQvDY3NvioAebu7FplvGe4vpVc.roa
Signing time: Thu 02 Jul 2026 01:33:43 +0000
ROA not before: Thu 02 Jul 2026 01:33:43 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 219407
IP address blocks: 2a02:eb00:3::/48 maxlen: 48
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:20:75:df:ed:67:ce:f8:42:3d:f3:3b:1e:db:bf:62:ea
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=363769f8644a5a718ae62b058dd1fb62cb5a3c20
Validity
Not Before: Jul 2 01:33:43 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=14642f0d8dcdbe2a0079bbbb16996f19ee2fa557
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d0:c9:df:c8:0b:ee:17:8c:52:14:15:fe:5f:cd:
57:30:32:f8:37:3d:ae:41:d7:75:f3:70:83:57:b8:
24:aa:c7:e9:54:b0:79:a6:0c:1b:65:70:58:9c:ef:
66:2d:5d:cf:c3:6f:38:df:87:85:f8:11:7e:84:65:
af:bc:85:f7:32:3e:56:0f:e6:11:4f:2e:d7:a6:b1:
c1:b6:ef:c5:27:1c:32:28:6f:eb:4d:43:be:05:be:
47:d6:83:43:15:2b:6d:97:39:5f:e6:46:b7:42:b1:
0d:c3:47:92:78:a5:49:f4:1f:14:0b:8e:01:ea:6f:
a0:78:4f:97:5c:e9:3c:ae:41:58:f1:28:72:66:b6:
0d:69:a3:bb:30:62:46:6d:16:dd:91:fe:da:ac:41:
94:9f:0e:45:23:9f:48:59:cc:9e:d8:75:27:cc:f5:
34:df:46:0c:71:25:65:37:ee:b1:f0:f7:a4:3a:40:
ff:eb:18:e3:2b:5e:a7:c7:52:cc:a4:06:d3:0f:a4:
bd:01:b4:60:3f:61:66:89:9c:04:e9:88:83:28:0e:
a7:32:79:d6:2b:6d:a4:2f:32:5d:30:48:a9:97:d5:
3b:d1:b9:96:92:3d:1b:62:34:d9:04:86:d1:af:8e:
4f:59:e0:95:a3:62:61:5c:c0:39:80:db:e0:7b:90:
56:03
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
14:64:2F:0D:8D:CD:BE:2A:00:79:BB:BB:16:99:6F:19:EE:2F:A5:57
X509v3 Authority Key Identifier:
keyid:36:37:69:F8:64:4A:5A:71:8A:E6:2B:05:8D:D1:FB:62:CB:5A:3C:20
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Njdp-GRKWnGK5isFjdH7YstaPCA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/3f/0f8fea-f00a-4415-b396-399fc9693b22/1/FGQvDY3NvioAebu7FplvGe4vpVc.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/3f/0f8fea-f00a-4415-b396-399fc9693b22/1/Njdp-GRKWnGK5isFjdH7YstaPCA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a02:eb00:3::/48
Signature Algorithm: sha256WithRSAEncryption
40:7d:b6:24:e2:f9:99:9a:84:2b:1c:9a:54:c1:d1:59:0a:11:
ab:4e:bd:6f:e6:48:42:bd:f1:10:4c:a2:dd:00:53:77:b6:d1:
c3:c1:59:d3:d4:65:0c:d7:16:ff:4a:22:fa:05:af:dc:26:d4:
29:33:4b:36:bc:68:df:32:46:0c:52:d6:02:cb:03:31:5e:d3:
a0:7a:2f:8d:36:2e:03:89:d3:f1:75:b6:11:40:27:1b:e6:1a:
3e:d3:d2:6c:6c:ba:b7:24:68:a5:29:3b:54:83:0a:a3:94:e4:
47:63:e0:5b:3b:c8:83:a9:29:9f:a2:e4:70:fb:3e:69:be:39:
73:81:ba:de:25:ee:c6:67:ba:d8:3d:4b:62:58:be:43:d6:1f:
80:98:bf:5f:e1:b1:46:e2:bc:8e:42:af:a0:6f:34:70:c6:ba:
5e:5a:60:51:c0:7b:d0:4a:62:fa:45:7e:43:32:05:36:48:fe:
fb:de:f3:18:88:55:08:5d:a6:94:82:9a:f7:85:fb:84:e7:65:
30:f3:e0:de:da:2f:c2:da:d9:15:71:9f:7b:67:d9:e2:b8:bd:
45:cd:3e:9c:61:c5:eb:e7:14:85:44:5e:73:f2:62:5a:b1:f1:
47:96:a3:da:c2:f6:3a:17:ad:ba:9f:c2:99:3c:48:22:38:af:
c8:54:3c:74
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Aug 14 01:35:38 2026 by rpki-client