Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/81/3ae379-79e1-46ab-b04d-0f0fa6b6e4bd/1/z9AOZSMjvyDQ2OTsot3gKnm5c0M.roa
File: z9AOZSMjvyDQ2OTsot3gKnm5c0M.roa (raw, json)
Hash identifier: gg7BZeONjKJjmAC+VXvsGVNlf+PfATjtwt/JfvTDFL8=
Subject key identifier: CF:D0:0E:65:23:23:BF:20:D0:D8:E4:EC:A2:DD:E0:2A:79:B9:73:43
Certificate issuer: /CN=f1c49833f439b9e0677d8d3bf1f52dfbfb2c624f
Certificate serial: 019B7B36745389D2DC7AE994A2CBC04542E3
Authority key identifier: F1:C4:98:33:F4:39:B9:E0:67:7D:8D:3B:F1:F5:2D:FB:FB:2C:62:4F
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/8cSYM_Q5ueBnfY078fUt-_ssYk8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/81/3ae379-79e1-46ab-b04d-0f0fa6b6e4bd/1/z9AOZSMjvyDQ2OTsot3gKnm5c0M.roa
Signing time: Thu 01 Jan 2026 20:18:44 +0000
ROA not before: Thu 01 Jan 2026 20:18:44 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 6730
IP address blocks: 194.11.207.0/24 maxlen: 24
194.11.212.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9b:7b:36:74:53:89:d2:dc:7a:e9:94:a2:cb:c0:45:42:e3
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=f1c49833f439b9e0677d8d3bf1f52dfbfb2c624f
Validity
Not Before: Jan 1 20:18:44 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=cfd00e652323bf20d0d8e4eca2dde02a79b97343
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a4:03:11:de:56:94:41:06:8f:e9:23:a1:16:25:
99:e3:c5:18:fe:ac:24:1e:ba:ee:e4:5e:35:97:1f:
11:04:b5:e8:70:0d:c2:f8:cf:e4:bf:fe:ef:27:3f:
ca:47:c1:ad:c6:a0:64:41:6a:e3:4e:02:aa:2d:37:
8f:cc:e1:87:6d:82:38:ac:72:e7:ac:3d:8a:ce:d9:
36:66:57:d1:5a:f1:1b:9f:ac:43:32:e0:0d:32:8e:
e2:22:8a:04:ba:da:49:f7:1e:8d:8b:1e:c7:36:0e:
6f:b4:8c:1c:41:0a:f8:f9:07:98:7e:b7:b9:35:d1:
ae:d6:81:27:9e:70:f4:01:09:7b:ff:ef:6e:91:39:
b8:63:b9:da:92:8a:d4:27:13:b8:f4:3e:c9:84:80:
e1:e4:a9:a3:db:13:cd:96:0f:09:f7:76:d5:18:1f:
08:fd:54:44:7a:64:04:dc:8d:9a:aa:bf:37:9c:44:
a6:de:ea:13:32:77:45:a3:4f:e7:02:28:c0:4d:b7:
98:5c:10:24:8d:75:ac:03:81:a5:5f:bc:87:de:21:
21:70:35:14:45:25:0c:0c:ed:e2:45:22:19:c9:db:
2a:6f:ae:a3:48:fa:eb:ba:40:16:05:22:e9:fb:f0:
b8:8c:ed:2e:cd:a3:a0:41:af:bd:95:a7:4b:40:df:
15:93
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
CF:D0:0E:65:23:23:BF:20:D0:D8:E4:EC:A2:DD:E0:2A:79:B9:73:43
X509v3 Authority Key Identifier:
keyid:F1:C4:98:33:F4:39:B9:E0:67:7D:8D:3B:F1:F5:2D:FB:FB:2C:62:4F
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/8cSYM_Q5ueBnfY078fUt-_ssYk8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/81/3ae379-79e1-46ab-b04d-0f0fa6b6e4bd/1/z9AOZSMjvyDQ2OTsot3gKnm5c0M.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/81/3ae379-79e1-46ab-b04d-0f0fa6b6e4bd/1/8cSYM_Q5ueBnfY078fUt-_ssYk8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
194.11.207.0/24
194.11.212.0/24
Signature Algorithm: sha256WithRSAEncryption
b3:09:32:f1:b4:af:4e:9f:05:8d:37:c1:d7:d9:57:7f:dc:01:
75:81:e5:32:83:dc:a1:85:be:32:4f:2a:24:dd:fe:14:d3:b5:
8f:06:e1:44:89:f7:65:0d:73:e0:4b:54:90:fc:ba:47:47:bd:
62:68:7a:56:42:82:8c:cb:19:99:02:4f:1c:c5:26:f6:42:c4:
10:1c:6a:b4:80:08:ce:05:59:ed:b4:5e:8b:67:c5:8e:ec:fb:
1a:8d:bf:1e:fe:be:e7:a2:d8:d8:a7:1d:1e:e8:06:b3:a9:4c:
1f:ad:66:21:27:17:54:7c:46:a4:6f:85:78:c1:ae:3d:bf:36:
ef:ea:33:45:cc:d1:9f:23:a0:39:2a:e3:8f:c0:cf:55:15:d6:
7e:25:e7:fa:78:ba:cd:dd:96:2f:00:7e:dd:4b:f1:dc:ac:c5:
91:dc:87:3d:5d:05:19:ae:bf:52:99:3b:51:1b:76:8f:29:63:
0a:94:ec:3d:60:3f:c2:1f:79:60:88:2b:6f:c5:18:73:5c:9e:
11:ef:fc:60:37:5b:00:26:36:4f:06:ed:f8:c3:b1:35:c9:9c:
62:78:91:45:76:d8:24:e6:36:17:e5:12:57:df:21:aa:76:44:
a5:fd:0b:36:6a:5d:c3:2d:4d:63:b2:71:80:1a:d8:7a:5f:50:
c0:b5:b4:8b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 5 14:16:08 2026 by rpki-client