Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/8a/49dc00-97e2-4628-ae39-41228e39ff7c/1/qr0E_m-TNCyMk-NYDjAduPwxEoM.roa
File: qr0E_m-TNCyMk-NYDjAduPwxEoM.roa (raw, json)
Hash identifier: VqPn+9y5ZC3EhZ0AELWIZhQWUjVEy+pW10sJeueED0o=
Subject key identifier: AA:BD:04:FE:6F:93:34:2C:8C:93:E3:58:0E:30:1D:B8:FC:31:12:83
Certificate issuer: /CN=3fd30d8a7e12fc7bf62e0c121e7cc226dea53b9b
Certificate serial: 019F18499FA8BCB17E384192434B795D1F8B
Authority key identifier: 3F:D3:0D:8A:7E:12:FC:7B:F6:2E:0C:12:1E:7C:C2:26:DE:A5:3B:9B
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/P9MNin4S_Hv2LgwSHnzCJt6lO5s.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/8a/49dc00-97e2-4628-ae39-41228e39ff7c/1/qr0E_m-TNCyMk-NYDjAduPwxEoM.roa
Signing time: Tue 30 Jun 2026 11:28:25 +0000
ROA not before: Tue 30 Jun 2026 11:28:25 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 30058
IP address blocks: 82.153.110.0/24 maxlen: 24
89.213.7.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:18:49:9f:a8:bc:b1:7e:38:41:92:43:4b:79:5d:1f:8b
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=3fd30d8a7e12fc7bf62e0c121e7cc226dea53b9b
Validity
Not Before: Jun 30 11:28:25 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=aabd04fe6f93342c8c93e3580e301db8fc311283
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:af:b6:3e:6c:66:6e:e6:27:18:ab:d4:89:be:50:
1a:ff:1b:ae:35:cb:59:b2:52:be:f2:97:61:03:56:
51:9a:63:fd:5e:f3:87:94:39:33:a1:cb:68:e9:43:
35:cd:d9:5f:64:d5:b8:7e:4f:28:bd:c3:fc:96:4c:
ef:3b:2a:05:41:38:a9:70:59:6b:ba:e4:ac:d0:f9:
6c:0b:3a:82:d9:4b:0d:00:aa:e2:46:82:6c:de:36:
39:43:40:00:d8:83:1d:1f:60:18:41:f5:6f:a7:e7:
ed:b3:27:a2:8b:69:19:c6:29:09:b7:bb:f0:11:42:
78:f4:a5:5a:f6:1c:63:6a:e8:96:a1:45:e8:e7:30:
8c:c7:8b:78:8b:76:24:da:09:57:84:7b:4f:57:56:
9f:1d:78:72:d7:8c:65:aa:36:9e:2d:d4:a7:25:66:
e1:0a:dc:b8:41:77:62:cf:e1:2c:b9:e9:94:34:24:
82:b9:32:bd:20:d0:f2:44:07:55:06:8f:22:ef:a0:
80:ac:91:e9:d8:26:e0:65:b1:61:f8:4d:77:f2:4a:
6c:9f:0c:22:97:65:a8:66:ed:a7:c0:93:30:7e:4a:
e6:e7:e1:63:de:94:14:9b:bd:a2:88:3e:b2:82:d1:
a9:74:c2:da:fc:f0:35:6a:55:3c:f5:19:76:b6:b8:
3a:61
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
AA:BD:04:FE:6F:93:34:2C:8C:93:E3:58:0E:30:1D:B8:FC:31:12:83
X509v3 Authority Key Identifier:
keyid:3F:D3:0D:8A:7E:12:FC:7B:F6:2E:0C:12:1E:7C:C2:26:DE:A5:3B:9B
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/P9MNin4S_Hv2LgwSHnzCJt6lO5s.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/8a/49dc00-97e2-4628-ae39-41228e39ff7c/1/qr0E_m-TNCyMk-NYDjAduPwxEoM.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/8a/49dc00-97e2-4628-ae39-41228e39ff7c/1/P9MNin4S_Hv2LgwSHnzCJt6lO5s.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
82.153.110.0/24
89.213.7.0/24
Signature Algorithm: sha256WithRSAEncryption
80:b4:f0:1c:ee:38:c6:3d:81:24:53:bd:e7:72:d8:59:81:7c:
ef:8c:9e:47:d3:ad:fc:9f:6d:fa:ba:c5:f3:d0:45:25:be:30:
69:df:21:a3:da:22:dd:0a:cd:c6:0f:85:4e:2c:b4:da:d0:6a:
05:a9:32:63:52:d8:7d:d4:bb:34:bf:52:b8:8b:2e:10:22:54:
a0:3d:61:89:cd:cd:fb:94:51:42:d8:7b:01:b4:c4:fe:6c:5e:
44:98:24:df:d1:56:55:99:2b:07:9b:a6:5b:83:4d:aa:66:5c:
4b:51:1d:62:bc:33:d4:28:b9:c2:88:03:24:ea:cc:40:48:f3:
d0:1c:14:91:40:bb:3d:f9:a6:34:dd:13:c2:b7:d9:6e:ef:92:
a9:2f:e8:8c:f0:4c:a0:eb:cb:fb:9b:ef:68:64:27:7a:f4:8a:
a2:17:13:bb:6f:f4:2b:16:4f:5b:6d:dc:f7:99:39:78:f6:1f:
43:50:85:15:79:9b:d7:87:95:88:9e:fd:0c:20:49:28:c0:ca:
66:b5:cc:49:01:7d:22:d6:dd:37:24:de:74:6d:57:ea:e5:83:
e4:a7:5a:27:bd:0c:2a:d1:06:b8:72:8b:fb:dc:55:35:45:c3:
6c:46:58:0b:9d:90:3c:6b:d6:2c:5b:b0:4a:c7:e8:ac:d9:b2:
05:80:18:00
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jul 11 23:09:46 2026 by rpki-client