Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/8a/49dc00-97e2-4628-ae39-41228e39ff7c/1/1LP_T47fTVQPGgzMcsc5jSlwDBQ.roa
File: 1LP_T47fTVQPGgzMcsc5jSlwDBQ.roa (raw, json)
Hash identifier: PHDDgTXa17Hr3/HvYFVE3g9S+2QWd5rp1Ae7+ffmtus=
Subject key identifier: D4:B3:FF:4F:8E:DF:4D:54:0F:1A:0C:CC:72:C7:39:8D:29:70:0C:14
Certificate issuer: /CN=3fd30d8a7e12fc7bf62e0c121e7cc226dea53b9b
Certificate serial: 019EF8DD5A26BD20E7543AF1DB6454AA8543
Authority key identifier: 3F:D3:0D:8A:7E:12:FC:7B:F6:2E:0C:12:1E:7C:C2:26:DE:A5:3B:9B
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/P9MNin4S_Hv2LgwSHnzCJt6lO5s.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/8a/49dc00-97e2-4628-ae39-41228e39ff7c/1/1LP_T47fTVQPGgzMcsc5jSlwDBQ.roa
Signing time: Wed 24 Jun 2026 09:01:56 +0000
ROA not before: Wed 24 Jun 2026 09:01:56 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 137235
IP address blocks: 89.31.234.0/24 maxlen: 24
213.210.52.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9e:f8:dd:5a:26:bd:20:e7:54:3a:f1:db:64:54:aa:85:43
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=3fd30d8a7e12fc7bf62e0c121e7cc226dea53b9b
Validity
Not Before: Jun 24 09:01:56 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=d4b3ff4f8edf4d540f1a0ccc72c7398d29700c14
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c1:dd:f4:0f:04:b0:22:f2:fc:64:a1:15:bf:0f:
ba:02:61:ed:f5:39:31:bc:80:66:25:e4:6b:c6:aa:
3e:a5:ce:30:fc:1e:42:9e:a8:d6:6e:cf:05:fc:3a:
9c:76:e3:f2:78:ae:0d:72:08:99:09:a8:33:98:a8:
b6:42:17:81:3f:a4:d9:90:b3:0b:9a:f2:91:2e:dc:
f7:21:b7:9d:90:18:44:4f:bf:c8:66:45:0c:66:2c:
b9:b0:19:96:8f:26:0b:fd:b4:40:fe:10:3c:59:1e:
dc:b7:dd:01:17:8e:81:59:51:85:85:a4:0e:39:21:
17:3e:32:36:4c:7d:02:93:19:36:e0:6e:9b:09:f3:
34:e4:51:b9:cb:45:97:9e:be:e7:7f:9c:0c:fd:da:
3e:29:27:ef:43:b5:0f:90:0a:2d:16:76:88:09:20:
12:9d:f8:c4:02:80:7e:7f:23:64:3d:02:62:ca:91:
41:0e:c2:5a:83:c8:ea:bc:15:cc:c9:68:a7:95:d0:
fa:c1:2e:7f:01:10:21:fa:ff:cd:76:e3:d8:f3:4a:
28:dc:88:92:42:0f:b0:c9:f2:33:38:05:d1:85:33:
32:29:f6:0e:77:b4:2b:1e:77:67:58:07:fe:3d:a4:
e9:f4:5f:95:38:1c:75:63:72:b0:11:dc:52:1a:d3:
c5:3d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D4:B3:FF:4F:8E:DF:4D:54:0F:1A:0C:CC:72:C7:39:8D:29:70:0C:14
X509v3 Authority Key Identifier:
keyid:3F:D3:0D:8A:7E:12:FC:7B:F6:2E:0C:12:1E:7C:C2:26:DE:A5:3B:9B
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/P9MNin4S_Hv2LgwSHnzCJt6lO5s.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/8a/49dc00-97e2-4628-ae39-41228e39ff7c/1/1LP_T47fTVQPGgzMcsc5jSlwDBQ.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/8a/49dc00-97e2-4628-ae39-41228e39ff7c/1/P9MNin4S_Hv2LgwSHnzCJt6lO5s.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
89.31.234.0/24
213.210.52.0/24
Signature Algorithm: sha256WithRSAEncryption
99:6a:d1:a1:fc:1f:0c:d8:b2:ea:95:e7:d5:b5:2f:07:4b:c3:
95:d5:03:e0:84:5b:46:08:93:4f:cb:51:ca:40:87:fd:c5:8d:
8e:44:bf:2f:09:81:94:8c:91:bf:86:cf:ec:d8:35:e7:bf:1e:
19:a5:55:6e:4e:1f:9a:db:56:0a:c9:22:4a:1b:48:50:95:9b:
46:d3:e8:9a:3c:76:cf:29:58:a4:30:d0:5c:3e:de:d0:be:0b:
c7:92:c3:ca:35:4f:05:dc:73:b9:e0:b5:e1:65:a9:4d:99:82:
e5:75:91:8c:d6:00:84:8e:aa:ac:fc:69:b2:2d:86:49:8b:8a:
24:7b:ea:7c:76:4f:cd:3f:30:d1:2e:e5:45:71:53:c9:8d:3e:
84:ae:29:9b:98:7e:9a:9e:20:8b:e2:e8:4e:8d:1c:8d:df:cb:
b5:37:4b:af:19:ae:6e:1b:d8:32:76:11:55:4c:e5:cf:e1:13:
50:0b:66:3a:7c:11:55:6e:85:fe:80:f0:40:38:be:d4:a1:4a:
ae:6c:dd:76:3f:3f:de:96:02:5f:73:8d:ba:2a:ee:a1:55:5f:
50:26:62:f6:d5:96:c6:46:b4:a9:3c:ad:f1:8c:46:cf:ea:26:
14:94:cd:39:f9:8c:93:8a:1e:4a:92:ec:29:42:3e:ed:04:78:
3e:27:23:7d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jul 11 23:08:50 2026 by rpki-client