Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/8a/49dc00-97e2-4628-ae39-41228e39ff7c/1/sO9CCdeU1eAXZ5Ykpc8ajgMhJPU.roa
File: sO9CCdeU1eAXZ5Ykpc8ajgMhJPU.roa (raw, json)
Hash identifier: 7jTRXQYKYHAJMylbXpnflLvw1eAaC53FlXG/SEfPWtE=
Subject key identifier: B0:EF:42:09:D7:94:D5:E0:17:67:96:24:A5:CF:1A:8E:03:21:24:F5
Certificate issuer: /CN=3fd30d8a7e12fc7bf62e0c121e7cc226dea53b9b
Certificate serial: 019EEE56F007540BB14B104BE57B6A2C64CD
Authority key identifier: 3F:D3:0D:8A:7E:12:FC:7B:F6:2E:0C:12:1E:7C:C2:26:DE:A5:3B:9B
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/P9MNin4S_Hv2LgwSHnzCJt6lO5s.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/8a/49dc00-97e2-4628-ae39-41228e39ff7c/1/sO9CCdeU1eAXZ5Ykpc8ajgMhJPU.roa
Signing time: Mon 22 Jun 2026 07:58:55 +0000
ROA not before: Mon 22 Jun 2026 07:58:55 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 154408
IP address blocks: 213.210.11.0/24 maxlen: 24
213.218.224.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9e:ee:56:f0:07:54:0b:b1:4b:10:4b:e5:7b:6a:2c:64:cd
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=3fd30d8a7e12fc7bf62e0c121e7cc226dea53b9b
Validity
Not Before: Jun 22 07:58:55 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=b0ef4209d794d5e017679624a5cf1a8e032124f5
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c1:27:eb:40:70:09:71:36:ef:1d:de:1d:45:ca:
43:e3:29:27:a0:43:40:72:d4:e2:0c:a5:c6:3f:a1:
a0:78:d2:01:6c:4b:7d:d1:63:74:69:8f:b7:e0:87:
19:3c:9e:61:fa:d9:02:09:3a:07:95:9f:74:04:b4:
e0:8b:78:69:42:7c:0a:ec:bd:4f:8d:e8:36:28:f2:
6b:6d:6a:3e:25:48:3a:a7:85:22:5e:9b:2e:9a:2a:
c2:d0:e2:6a:3e:0a:54:9e:ff:2d:c5:24:71:75:29:
a6:c9:3a:63:04:4f:74:13:d3:39:e4:1e:0c:38:bf:
26:b7:9d:ba:f9:fc:04:d6:3b:7d:41:c9:65:bf:07:
2b:ac:64:0f:33:67:f8:3f:a6:15:00:c5:e8:a9:d6:
23:1a:df:0d:50:30:5f:50:72:9b:e1:b1:72:bf:dc:
91:3b:34:1d:81:90:7b:21:4e:56:cb:ef:70:91:1d:
ba:9c:0a:85:56:49:13:e8:99:0b:3c:69:0c:bc:81:
24:3d:93:30:56:a7:39:8b:ac:63:ff:59:2e:f8:8d:
0d:5e:88:2e:be:ce:2b:ab:61:74:48:b5:55:61:86:
d4:47:ef:a2:a9:83:d4:1a:47:c0:5c:33:84:5e:9f:
14:0f:68:08:55:fb:59:fd:da:93:8d:05:4b:a1:c4:
c4:17
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B0:EF:42:09:D7:94:D5:E0:17:67:96:24:A5:CF:1A:8E:03:21:24:F5
X509v3 Authority Key Identifier:
keyid:3F:D3:0D:8A:7E:12:FC:7B:F6:2E:0C:12:1E:7C:C2:26:DE:A5:3B:9B
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/P9MNin4S_Hv2LgwSHnzCJt6lO5s.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/8a/49dc00-97e2-4628-ae39-41228e39ff7c/1/sO9CCdeU1eAXZ5Ykpc8ajgMhJPU.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/8a/49dc00-97e2-4628-ae39-41228e39ff7c/1/P9MNin4S_Hv2LgwSHnzCJt6lO5s.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
213.210.11.0/24
213.218.224.0/24
Signature Algorithm: sha256WithRSAEncryption
5e:c5:1a:75:65:da:ad:d2:ac:3b:2a:83:2b:95:3b:56:cd:1c:
25:8e:32:7e:dc:3f:8e:64:5f:54:4d:77:93:80:e9:f4:6c:1f:
d7:8d:d0:01:a5:1b:ba:29:aa:7e:10:4e:43:73:e9:5e:b1:fd:
bc:80:64:7e:a1:fb:c1:ba:56:61:f1:19:15:23:c8:93:4c:4e:
1a:d4:f8:55:29:51:8b:0d:a6:c7:b2:38:54:83:9f:7e:8e:9e:
af:df:70:02:cb:7e:9a:da:ef:e1:8d:74:9f:90:88:06:fa:a0:
9a:ca:a9:74:3b:23:ae:6a:5d:12:97:b8:b0:a3:be:36:37:b5:
0b:f0:37:1c:cd:d4:b2:06:13:84:89:8a:82:5b:1e:f6:b1:e9:
f7:75:23:3c:06:b8:72:51:7f:eb:27:08:49:e8:8b:00:63:9b:
08:00:09:80:b7:2b:b4:89:5a:60:2e:3e:42:76:93:66:0b:18:
24:ad:8b:b9:8f:53:b1:e7:42:41:b0:f5:ac:d1:7f:e0:27:50:
e2:d5:e1:0c:ae:11:61:82:c3:35:14:b7:8d:59:e1:f3:dd:24:
02:b2:86:36:73:20:d6:bd:4d:49:96:87:1a:5f:be:ea:02:63:
0f:c5:14:f6:d2:c7:21:7a:fb:9f:1b:a1:68:c0:8a:57:d0:f9:
38:fc:a5:dd
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jul 11 23:08:10 2026 by rpki-client