Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/8a/49dc00-97e2-4628-ae39-41228e39ff7c/1/vgVX78l0SNk9Y5tT-b_AkMtA6LU.roa
File: vgVX78l0SNk9Y5tT-b_AkMtA6LU.roa (raw, json)
Hash identifier: 3v08oIKYAmpCSJ7DT8O0W3iaR6B4GPibpYGdHoKuW7A=
Subject key identifier: BE:05:57:EF:C9:74:48:D9:3D:63:9B:53:F9:BF:C0:90:CB:40:E8:B5
Certificate issuer: /CN=3fd30d8a7e12fc7bf62e0c121e7cc226dea53b9b
Certificate serial: 019EEE56F09146AA43755DEF916D9C047745
Authority key identifier: 3F:D3:0D:8A:7E:12:FC:7B:F6:2E:0C:12:1E:7C:C2:26:DE:A5:3B:9B
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/P9MNin4S_Hv2LgwSHnzCJt6lO5s.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/8a/49dc00-97e2-4628-ae39-41228e39ff7c/1/vgVX78l0SNk9Y5tT-b_AkMtA6LU.roa
Signing time: Mon 22 Jun 2026 07:58:55 +0000
ROA not before: Mon 22 Jun 2026 07:58:55 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 215224
IP address blocks: 37.98.148.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9e:ee:56:f0:91:46:aa:43:75:5d:ef:91:6d:9c:04:77:45
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=3fd30d8a7e12fc7bf62e0c121e7cc226dea53b9b
Validity
Not Before: Jun 22 07:58:55 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=be0557efc97448d93d639b53f9bfc090cb40e8b5
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8b:d1:f6:2a:09:54:8d:11:e7:c6:40:06:9f:4e:
d1:99:93:69:cf:24:f6:f2:c1:aa:2e:70:2b:04:ca:
86:ad:f9:c7:a9:63:3f:f7:81:c0:41:f9:d8:cd:00:
9a:92:d9:e5:cc:f3:bb:f9:2b:78:f3:98:aa:01:7a:
42:70:df:1b:4e:44:36:12:b7:98:ef:36:f1:a0:52:
bd:30:5e:d2:d4:cd:e8:90:e0:c0:56:1d:83:e5:d1:
fe:46:84:95:b0:e5:32:3a:47:c6:b0:57:e1:0c:10:
05:d0:47:75:52:86:eb:f7:9a:46:30:ca:3b:bb:b8:
eb:f6:68:97:a9:bb:df:e0:3b:aa:05:4b:62:e0:8c:
e1:0d:65:1d:60:39:30:d5:99:63:d9:89:0e:bd:09:
06:45:53:cb:19:6a:87:8a:91:b8:3e:01:b5:f8:61:
36:2f:90:06:13:33:29:68:73:20:32:d8:af:30:dc:
fb:31:01:29:8d:b6:5d:d7:73:f6:9c:54:7a:0c:7b:
08:08:f9:b3:2a:31:63:c8:ba:ea:39:5f:b2:13:8f:
bb:0b:a7:82:ca:8d:26:af:ed:f1:30:ec:e0:17:fe:
22:17:eb:9b:f1:23:ed:41:9e:bd:b0:fd:e1:e6:b5:
d7:4a:26:83:5e:df:24:d7:11:86:96:15:b8:76:8a:
1d:21
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
BE:05:57:EF:C9:74:48:D9:3D:63:9B:53:F9:BF:C0:90:CB:40:E8:B5
X509v3 Authority Key Identifier:
keyid:3F:D3:0D:8A:7E:12:FC:7B:F6:2E:0C:12:1E:7C:C2:26:DE:A5:3B:9B
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/P9MNin4S_Hv2LgwSHnzCJt6lO5s.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/8a/49dc00-97e2-4628-ae39-41228e39ff7c/1/vgVX78l0SNk9Y5tT-b_AkMtA6LU.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/8a/49dc00-97e2-4628-ae39-41228e39ff7c/1/P9MNin4S_Hv2LgwSHnzCJt6lO5s.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
37.98.148.0/24
Signature Algorithm: sha256WithRSAEncryption
41:63:a6:10:95:10:fe:af:3c:0b:08:92:70:a5:b0:f8:63:a9:
93:5d:f3:48:f3:fa:de:8b:cd:d9:92:4b:5e:ec:cb:89:6e:8c:
25:4d:b4:2a:bd:d7:9f:3d:ac:ef:1b:a6:b7:b7:bb:05:af:3d:
11:e0:8a:de:d5:0f:3a:2b:c8:70:0d:35:7e:ef:9b:04:ec:6a:
47:5b:99:32:a5:67:2d:3b:2d:a4:2e:f6:b8:5d:45:ae:7f:b2:
a4:71:4d:f3:ba:4a:d2:70:35:26:af:e3:94:74:77:b2:94:40:
d0:1f:f9:35:c9:4a:f8:1d:ef:fb:09:19:5b:41:20:87:45:85:
5d:ac:ee:7a:d5:44:7c:0d:26:a2:45:6e:f6:71:06:d4:d3:be:
36:27:66:12:31:ef:ae:0b:64:69:96:61:e6:e5:ec:2d:40:01:
45:96:9e:dc:cf:5a:2d:88:c5:11:a0:8f:7d:b6:cf:70:a4:cc:
48:b8:dc:76:cf:fb:37:07:fd:16:6f:c0:e7:1d:a2:a1:00:5f:
80:f3:e9:aa:01:c9:64:ea:49:34:2c:0b:7b:ca:a9:fd:10:b9:
77:fb:e4:aa:d3:20:89:f8:3d:09:32:d7:48:df:93:f9:2e:62:
b5:bb:75:64:d1:5d:76:5c:ff:f9:5f:a8:ef:df:f5:8a:2d:c4:
95:08:27:a0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jul 11 23:08:53 2026 by rpki-client