Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/8a/49dc00-97e2-4628-ae39-41228e39ff7c/1/jeyZSBnATjXKxMfYl8wOyDPnVcM.roa
File: jeyZSBnATjXKxMfYl8wOyDPnVcM.roa (raw, json)
Hash identifier: SI1fzySTE8/lkB4KvbUnQo1Sp0ggJ6RisIwO6r7qFHw=
Subject key identifier: 8D:EC:99:48:19:C0:4E:35:CA:C4:C7:D8:97:CC:0E:C8:33:E7:55:C3
Certificate issuer: /CN=3fd30d8a7e12fc7bf62e0c121e7cc226dea53b9b
Certificate serial: 019EDEB6E76D0CF99C20C50660523F8AC6B5
Authority key identifier: 3F:D3:0D:8A:7E:12:FC:7B:F6:2E:0C:12:1E:7C:C2:26:DE:A5:3B:9B
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/P9MNin4S_Hv2LgwSHnzCJt6lO5s.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/8a/49dc00-97e2-4628-ae39-41228e39ff7c/1/jeyZSBnATjXKxMfYl8wOyDPnVcM.roa
Signing time: Fri 19 Jun 2026 07:09:49 +0000
ROA not before: Fri 19 Jun 2026 07:09:49 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 137409
IP address blocks: 82.152.117.0/24 maxlen: 24
217.145.74.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9e:de:b6:e7:6d:0c:f9:9c:20:c5:06:60:52:3f:8a:c6:b5
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=3fd30d8a7e12fc7bf62e0c121e7cc226dea53b9b
Validity
Not Before: Jun 19 07:09:49 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=8dec994819c04e35cac4c7d897cc0ec833e755c3
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e7:37:c9:b6:1a:2d:4a:59:94:26:27:92:60:30:
2f:76:24:57:42:3e:df:9b:ff:0f:62:d4:60:37:98:
62:8b:f0:d6:79:bf:ef:27:30:ba:5d:25:2f:40:2f:
58:f1:9b:0c:64:f8:2e:bb:59:74:26:9f:14:8c:88:
26:81:d6:90:11:f5:04:32:dc:46:f9:43:a3:d9:eb:
c2:4e:1a:86:16:0a:60:80:0d:9c:cc:66:71:4b:49:
69:b0:91:0b:c3:6f:a2:c7:57:ba:c8:64:db:c5:42:
bb:69:94:ae:5a:ed:46:9c:c4:90:73:1e:46:f7:35:
81:6f:fc:27:8a:cd:2f:66:2f:8f:69:11:6a:a6:e1:
70:0f:44:c0:86:f4:a1:84:15:96:81:7c:67:3d:3a:
e3:c3:f0:21:12:62:e7:d2:8f:3d:56:b9:b0:02:27:
6d:86:96:be:4c:9d:c4:52:d9:e5:a8:a6:14:cb:9f:
3e:91:3c:24:47:85:aa:42:59:9f:a7:52:03:81:6e:
ab:be:ca:17:79:d1:c8:5e:fd:1f:00:36:c9:8d:f9:
0a:76:00:a8:2c:48:05:a9:3e:1b:c3:b7:ea:21:25:
7b:4d:bc:34:e1:72:dd:b2:f1:28:c5:33:ca:2d:09:
81:af:bf:6a:e9:c4:50:e6:5b:f4:c5:87:6c:38:98:
ed:95
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
8D:EC:99:48:19:C0:4E:35:CA:C4:C7:D8:97:CC:0E:C8:33:E7:55:C3
X509v3 Authority Key Identifier:
keyid:3F:D3:0D:8A:7E:12:FC:7B:F6:2E:0C:12:1E:7C:C2:26:DE:A5:3B:9B
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/P9MNin4S_Hv2LgwSHnzCJt6lO5s.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/8a/49dc00-97e2-4628-ae39-41228e39ff7c/1/jeyZSBnATjXKxMfYl8wOyDPnVcM.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/8a/49dc00-97e2-4628-ae39-41228e39ff7c/1/P9MNin4S_Hv2LgwSHnzCJt6lO5s.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
82.152.117.0/24
217.145.74.0/24
Signature Algorithm: sha256WithRSAEncryption
6f:fc:74:ec:c4:89:ca:8b:66:b8:7f:5d:ab:b5:34:ad:c9:2f:
d4:db:bc:f7:26:37:91:80:0d:ab:cf:ef:86:7b:33:bf:80:e5:
39:11:d5:21:55:01:18:80:ca:f2:18:2e:f1:b3:f0:b6:d8:cd:
06:59:1a:ef:15:61:89:55:2a:22:12:ba:59:a0:9c:a8:1c:f4:
7d:0b:fb:2e:dc:97:71:f3:2a:e0:72:2b:78:0a:e2:a5:c2:01:
09:bf:f6:41:70:9c:1f:c7:0e:3a:53:ce:9a:5a:d9:6e:02:f1:
06:03:d3:ac:f9:c5:4a:3f:29:3b:c6:ad:76:44:42:8e:5c:79:
3d:39:d3:6f:de:15:65:77:9d:36:4b:d9:1d:27:78:38:7f:39:
f0:b2:84:9d:36:16:fa:4b:65:38:32:c1:54:d7:bb:6a:4b:af:
0b:87:5c:29:97:4a:31:7e:02:91:6f:1c:9b:77:8a:e1:21:f6:
dc:4a:d4:9e:bc:1e:da:8f:63:ef:71:93:e6:99:29:05:f2:c0:
65:2d:af:49:b3:7a:53:8a:fb:d6:c9:6c:d8:86:e5:18:68:f1:
cc:e8:5c:87:7c:73:db:3e:13:a7:89:de:d7:f0:1d:16:73:36:
cf:b9:3b:86:28:3f:f7:a5:cb:69:a9:e7:47:64:a0:78:b9:45:
d6:fa:00:36
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jul 11 23:08:58 2026 by rpki-client