Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/8a/49dc00-97e2-4628-ae39-41228e39ff7c/1/pP2HOpQE4baroPw7FZeLMmaGwes.roa
File: pP2HOpQE4baroPw7FZeLMmaGwes.roa (raw, json)
Hash identifier: rhTt18utJqlmUz/gB21W39H17l50ryaONVNrjH/YAuQ=
Subject key identifier: A4:FD:87:3A:94:04:E1:B6:AB:A0:FC:3B:15:97:8B:32:66:86:C1:EB
Certificate issuer: /CN=3fd30d8a7e12fc7bf62e0c121e7cc226dea53b9b
Certificate serial: 019EF8DD59ADC8CEF25B0442373A0692D809
Authority key identifier: 3F:D3:0D:8A:7E:12:FC:7B:F6:2E:0C:12:1E:7C:C2:26:DE:A5:3B:9B
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/P9MNin4S_Hv2LgwSHnzCJt6lO5s.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/8a/49dc00-97e2-4628-ae39-41228e39ff7c/1/pP2HOpQE4baroPw7FZeLMmaGwes.roa
Signing time: Wed 24 Jun 2026 09:01:56 +0000
ROA not before: Wed 24 Jun 2026 09:01:56 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 135402
IP address blocks: 213.210.42.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9e:f8:dd:59:ad:c8:ce:f2:5b:04:42:37:3a:06:92:d8:09
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=3fd30d8a7e12fc7bf62e0c121e7cc226dea53b9b
Validity
Not Before: Jun 24 09:01:56 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=a4fd873a9404e1b6aba0fc3b15978b326686c1eb
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b5:25:1b:c4:71:af:35:f2:95:3d:f6:db:18:61:
a9:92:e8:83:2e:04:7c:eb:c5:18:f4:ae:42:96:b4:
72:fe:44:da:79:0d:63:57:6b:ca:2d:5a:c8:3c:bf:
95:7a:dc:e7:4f:e5:b2:57:7e:ab:2e:b4:e4:3d:ba:
3c:22:3c:2e:d6:76:d8:0d:98:38:24:51:42:3c:2b:
d4:9c:2c:c3:d8:b1:65:77:81:38:82:61:2c:29:60:
6b:64:bb:f5:d0:04:7f:f0:5e:c4:2f:1a:19:11:70:
84:33:63:8b:3c:54:03:09:22:75:6f:f8:46:95:30:
cd:93:ee:ce:69:bb:1d:8f:4c:39:c1:53:cd:04:54:
fb:37:fa:df:4b:2f:a6:6c:a0:c5:b9:99:69:86:c2:
5e:29:24:bd:2c:1d:19:ba:29:06:21:c1:c9:b9:ed:
41:37:7d:74:31:03:85:c2:36:7a:cc:9b:14:0d:76:
28:f2:8a:d5:72:4a:ce:d7:d5:cf:05:13:21:a3:98:
7e:7a:3d:aa:5a:ae:51:d8:cd:df:37:c0:93:83:c7:
76:3d:a4:fd:8b:df:ea:44:f4:00:46:b8:67:78:61:
a0:8c:14:91:69:40:67:22:b0:03:19:57:c2:a3:98:
9f:b3:51:2d:25:37:15:c3:04:af:2a:1a:2c:20:f9:
a2:d3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A4:FD:87:3A:94:04:E1:B6:AB:A0:FC:3B:15:97:8B:32:66:86:C1:EB
X509v3 Authority Key Identifier:
keyid:3F:D3:0D:8A:7E:12:FC:7B:F6:2E:0C:12:1E:7C:C2:26:DE:A5:3B:9B
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/P9MNin4S_Hv2LgwSHnzCJt6lO5s.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/8a/49dc00-97e2-4628-ae39-41228e39ff7c/1/pP2HOpQE4baroPw7FZeLMmaGwes.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/8a/49dc00-97e2-4628-ae39-41228e39ff7c/1/P9MNin4S_Hv2LgwSHnzCJt6lO5s.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
213.210.42.0/24
Signature Algorithm: sha256WithRSAEncryption
16:6c:e5:6c:6c:96:5b:c1:35:56:11:83:16:ac:d6:69:91:8d:
99:69:da:42:d9:3f:29:18:6d:8e:f0:cb:fd:35:63:34:fa:a7:
a8:fb:f6:fc:ef:16:10:16:58:c2:27:a8:74:38:f0:a0:66:61:
cf:2b:51:ae:09:de:36:17:28:48:29:a1:f2:0e:20:15:84:79:
3e:75:87:fd:39:75:36:29:73:c7:85:ce:cf:61:9f:53:7a:7a:
da:59:a5:73:b9:a4:7a:b5:6e:f3:e4:10:1f:3a:de:c7:cb:79:
2d:02:ce:05:12:c6:ce:29:62:b8:8f:87:eb:f0:48:1f:5b:78:
78:6d:d6:98:bf:3d:31:6c:48:2d:1a:97:8f:2c:19:8a:f1:0c:
48:7c:78:ca:bc:3c:c3:db:7e:96:d4:37:0a:f4:83:c6:cf:42:
ba:e2:4c:86:35:19:32:d9:a4:04:aa:9a:7f:38:a1:80:be:e7:
26:7e:71:09:3a:8c:30:5f:a2:dd:bc:a8:e8:4a:b1:11:62:c2:
dc:8a:b1:a0:f1:6d:fd:4b:ec:92:41:a7:e3:ca:b7:d4:11:94:
85:be:e0:4f:33:cd:0d:e9:7d:00:ef:59:26:7d:6c:d2:b1:92:
6a:c4:26:46:73:94:f5:ef:bc:02:f4:fe:a7:55:54:e0:24:50:
e7:55:8d:8a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jul 11 23:08:09 2026 by rpki-client