Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/8a/49dc00-97e2-4628-ae39-41228e39ff7c/1/5wjEx5G_FxAEJ9y7BCJocrmLHtw.roa
File: 5wjEx5G_FxAEJ9y7BCJocrmLHtw.roa (raw, json)
Hash identifier: LA5u57PajB/b87ldhgEsXaFvZNKJDtP0/aJvrQEsKO8=
Subject key identifier: E7:08:C4:C7:91:BF:17:10:04:27:DC:BB:04:22:68:72:B9:8B:1E:DC
Certificate issuer: /CN=3fd30d8a7e12fc7bf62e0c121e7cc226dea53b9b
Certificate serial: 019F12440DE1B3E219C5AB2ECB624126567A
Authority key identifier: 3F:D3:0D:8A:7E:12:FC:7B:F6:2E:0C:12:1E:7C:C2:26:DE:A5:3B:9B
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/P9MNin4S_Hv2LgwSHnzCJt6lO5s.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/8a/49dc00-97e2-4628-ae39-41228e39ff7c/1/5wjEx5G_FxAEJ9y7BCJocrmLHtw.roa
Signing time: Mon 29 Jun 2026 07:24:37 +0000
ROA not before: Mon 29 Jun 2026 07:24:37 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 33355
IP address blocks: 81.168.105.0/24 maxlen: 24
213.130.132.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:12:44:0d:e1:b3:e2:19:c5:ab:2e:cb:62:41:26:56:7a
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=3fd30d8a7e12fc7bf62e0c121e7cc226dea53b9b
Validity
Not Before: Jun 29 07:24:37 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=e708c4c791bf17100427dcbb04226872b98b1edc
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c5:f8:da:c2:fd:70:16:33:21:04:57:19:79:57:
04:8c:ca:98:75:50:59:38:01:00:f0:8e:ed:d9:12:
12:1e:31:56:18:54:ab:4d:d1:da:6e:09:38:c8:3d:
94:0c:c8:15:94:a8:ce:93:1e:5b:28:76:29:3f:95:
ed:59:ca:0b:df:97:14:fe:6c:1c:f4:82:c8:13:69:
14:1a:e0:2a:08:39:d7:2a:79:35:37:48:e5:48:18:
36:3b:50:a3:f8:72:e0:ee:e6:96:80:6c:03:4b:5d:
c5:08:9f:08:41:d4:8e:29:05:5b:78:73:44:44:7a:
d0:4b:df:a7:05:7b:96:ac:98:39:de:0b:3a:17:46:
73:5c:d3:7e:fd:84:54:9f:d9:93:7a:d6:e0:8c:e0:
98:2f:21:96:27:29:f5:c8:0a:d0:ec:59:e3:3a:20:
1e:ec:73:48:79:56:7d:ac:60:e9:0f:7e:7a:a2:ec:
b0:23:ee:c4:c9:f3:90:b2:87:35:05:37:5a:0f:fe:
fb:3b:b7:62:b6:43:42:18:c1:a0:79:15:5a:de:e5:
2e:e4:19:33:ae:57:5d:8d:aa:93:4b:b5:cc:f1:18:
6c:ef:a9:05:e3:92:fc:cf:0b:5e:12:bd:c1:f9:fa:
4c:90:df:ac:00:e9:61:80:dd:87:a3:c3:bc:42:a8:
bc:4d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E7:08:C4:C7:91:BF:17:10:04:27:DC:BB:04:22:68:72:B9:8B:1E:DC
X509v3 Authority Key Identifier:
keyid:3F:D3:0D:8A:7E:12:FC:7B:F6:2E:0C:12:1E:7C:C2:26:DE:A5:3B:9B
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/P9MNin4S_Hv2LgwSHnzCJt6lO5s.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/8a/49dc00-97e2-4628-ae39-41228e39ff7c/1/5wjEx5G_FxAEJ9y7BCJocrmLHtw.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/8a/49dc00-97e2-4628-ae39-41228e39ff7c/1/P9MNin4S_Hv2LgwSHnzCJt6lO5s.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
81.168.105.0/24
213.130.132.0/24
Signature Algorithm: sha256WithRSAEncryption
08:38:81:03:09:64:ea:5b:16:40:aa:3f:89:3b:3c:4f:6d:ab:
58:a2:bd:a0:ae:99:bf:91:ef:be:3d:00:65:cb:e3:55:6f:9e:
e2:b7:ee:76:58:ae:4b:ba:4d:c6:54:d6:b7:a5:f2:98:7a:6f:
56:c3:9b:77:0c:01:10:cb:07:2a:c7:a1:3f:fc:cc:4a:b1:b6:
ac:3d:2c:60:3c:01:c9:fa:aa:e8:04:97:7d:59:2b:2e:7e:d4:
6f:34:78:32:f5:93:9b:ed:80:f8:9c:f7:c3:56:33:3b:55:9d:
32:54:eb:a0:e9:24:2b:27:fa:4b:47:29:81:e8:fe:c7:5d:5e:
1d:9e:8d:58:b4:2d:48:79:36:37:bc:f8:bd:e6:01:f2:ec:80:
8a:08:34:d9:9f:e8:5b:74:fd:e4:f9:24:9d:7b:33:9f:2d:6a:
d6:b9:d7:94:0f:ed:b2:63:d3:a0:3f:bd:0a:e3:20:5d:d7:a8:
f8:7a:d0:e7:79:df:ed:71:b2:94:c8:36:ad:bd:84:44:c9:c7:
9b:34:d3:f2:38:6b:07:24:48:43:be:5c:41:61:21:02:fe:7e:
53:f6:b1:b3:34:0d:a6:76:21:bd:ec:27:67:ac:1a:8a:31:30:
96:a2:31:74:93:ee:5f:44:98:d7:14:dd:cb:1b:ed:d9:32:47:
79:13:59:66
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jul 11 23:08:10 2026 by rpki-client