Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/8a/49dc00-97e2-4628-ae39-41228e39ff7c/1/KXFduEMS_JfoEPIuz2neDq-96dA.roa
File: KXFduEMS_JfoEPIuz2neDq-96dA.roa (raw, json)
Hash identifier: 9lr/4XQOM8e+fU22ycX0qEdiarA3yrSRMZKWuf5CPvQ=
Subject key identifier: 29:71:5D:B8:43:12:FC:97:E8:10:F2:2E:CF:69:DE:0E:AF:BD:E9:D0
Certificate issuer: /CN=3fd30d8a7e12fc7bf62e0c121e7cc226dea53b9b
Certificate serial: 019F12441003DF3B44B62BCCB0ABCFC1D33A
Authority key identifier: 3F:D3:0D:8A:7E:12:FC:7B:F6:2E:0C:12:1E:7C:C2:26:DE:A5:3B:9B
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/P9MNin4S_Hv2LgwSHnzCJt6lO5s.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/8a/49dc00-97e2-4628-ae39-41228e39ff7c/1/KXFduEMS_JfoEPIuz2neDq-96dA.roa
Signing time: Mon 29 Jun 2026 07:24:38 +0000
ROA not before: Mon 29 Jun 2026 07:24:38 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 154612
IP address blocks: 81.168.63.0/24 maxlen: 24
89.213.46.0/24 maxlen: 24
89.213.68.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:12:44:10:03:df:3b:44:b6:2b:cc:b0:ab:cf:c1:d3:3a
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=3fd30d8a7e12fc7bf62e0c121e7cc226dea53b9b
Validity
Not Before: Jun 29 07:24:38 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=29715db84312fc97e810f22ecf69de0eafbde9d0
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d7:48:7d:5a:fb:e0:62:fc:d3:be:ff:59:a4:f8:
02:42:99:53:92:75:b1:9f:0e:30:75:e6:25:52:e7:
82:e5:f4:e6:62:c5:4f:18:57:8a:f8:93:7d:cb:af:
9c:82:d4:94:0a:8e:e6:c3:de:68:11:a9:24:26:fd:
0b:e5:55:12:88:e6:1a:16:26:36:b6:99:69:08:0e:
b8:c5:5e:cc:b4:ba:f9:fc:e0:28:4e:eb:20:89:11:
49:cf:7e:04:11:72:38:4d:87:d1:77:6d:56:56:ec:
3c:f0:0f:7f:2c:68:c9:d7:06:ca:c3:4f:c4:ad:0d:
0f:f4:22:99:5c:3a:57:7c:cd:40:af:4e:71:d9:33:
40:0e:97:7d:44:62:83:ea:0f:4d:a8:c2:dc:17:9c:
a2:4a:2a:4e:e1:33:0c:a5:72:63:9f:2a:c4:27:a6:
03:ed:e6:46:c0:0e:9d:e3:79:35:ba:0a:9f:18:ce:
9e:2b:53:a6:2d:e2:f5:8b:1c:f5:90:33:20:15:bf:
97:4c:8e:2e:04:dd:48:4d:30:0b:e2:c5:48:99:c1:
53:ce:c5:22:b8:f8:d1:76:ef:c4:7e:f5:97:12:35:
a0:e3:09:53:7e:a1:f7:63:4d:54:7f:d2:b6:ca:3b:
36:26:ca:8e:7b:18:9e:17:11:28:b9:05:ab:1e:95:
47:fd
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
29:71:5D:B8:43:12:FC:97:E8:10:F2:2E:CF:69:DE:0E:AF:BD:E9:D0
X509v3 Authority Key Identifier:
keyid:3F:D3:0D:8A:7E:12:FC:7B:F6:2E:0C:12:1E:7C:C2:26:DE:A5:3B:9B
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/P9MNin4S_Hv2LgwSHnzCJt6lO5s.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/8a/49dc00-97e2-4628-ae39-41228e39ff7c/1/KXFduEMS_JfoEPIuz2neDq-96dA.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/8a/49dc00-97e2-4628-ae39-41228e39ff7c/1/P9MNin4S_Hv2LgwSHnzCJt6lO5s.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
81.168.63.0/24
89.213.46.0/24
89.213.68.0/24
Signature Algorithm: sha256WithRSAEncryption
12:ae:27:18:9c:8a:24:e8:6c:5b:49:00:83:c0:60:f8:8d:a4:
0f:e7:28:55:f4:a7:3b:8e:e1:dc:07:90:72:73:06:52:14:7b:
09:47:8b:71:8c:ec:89:fd:c9:cc:13:d9:72:2e:1f:29:ec:e2:
4b:86:6e:9b:3a:d3:fd:9e:61:ef:f4:9b:b4:ed:bb:39:74:1d:
b8:d9:62:f5:f7:87:18:6f:36:80:fe:ef:12:0d:34:3e:7a:a4:
b1:a8:d6:aa:45:3f:5c:7c:46:49:05:79:bc:27:b6:87:ab:60:
c6:97:3a:da:b1:61:25:db:42:32:41:cf:76:ae:e7:fd:d4:35:
d9:5a:69:dd:e8:60:d4:cd:9a:ae:64:05:6e:48:23:29:ab:bb:
6b:65:2e:bc:f4:9b:0a:6e:26:98:4b:c2:e1:9c:93:6a:c4:3a:
e8:cc:1f:09:ab:bd:95:21:3e:03:39:c6:74:a4:bb:d5:a6:a6:
9e:6d:92:e3:87:c0:b2:7c:63:4a:e0:17:bf:24:4f:85:5b:32:
63:29:1d:5a:93:ba:10:d2:cf:a7:fd:22:06:71:6c:26:3d:1e:
60:c2:b9:40:81:b0:ad:fc:3d:14:c6:42:83:e4:45:87:b2:0b:
60:9a:6a:a4:5b:4f:4f:f9:29:50:f0:5f:51:30:61:2b:86:5a:
99:64:69:69
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jul 11 23:08:23 2026 by rpki-client