Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a2/13f5f1-45b6-4bc1-b5a5-521fa41dfc96/1/QZlMcTzXSMFD3l1XOfNrAicLHi8.roa
File: QZlMcTzXSMFD3l1XOfNrAicLHi8.roa (raw, json)
Hash identifier: w17u57VFgcqjea52EXeiTFUC7g06QWK/Z1l/OPBEixU=
Subject key identifier: 41:99:4C:71:3C:D7:48:C1:43:DE:5D:57:39:F3:6B:02:27:0B:1E:2F
Certificate issuer: /CN=f970049cba7f39aeed31d65313c7b953f3fda135
Certificate serial: 019ECA301EAED9B3D795911239F3D4612BC8
Authority key identifier: F9:70:04:9C:BA:7F:39:AE:ED:31:D6:53:13:C7:B9:53:F3:FD:A1:35
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/1-XAEnLp_Oa7tMdZTE8e5U_P9oTU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/a2/13f5f1-45b6-4bc1-b5a5-521fa41dfc96/1/QZlMcTzXSMFD3l1XOfNrAicLHi8.roa
Signing time: Mon 15 Jun 2026 07:30:11 +0000
ROA not before: Mon 15 Jun 2026 07:30:11 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 50757
IP address blocks: 2.110.21.0/24 maxlen: 24
185.90.52.0/22 maxlen: 24
212.70.2.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9e:ca:30:1e:ae:d9:b3:d7:95:91:12:39:f3:d4:61:2b:c8
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=f970049cba7f39aeed31d65313c7b953f3fda135
Validity
Not Before: Jun 15 07:30:11 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=41994c713cd748c143de5d5739f36b02270b1e2f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a5:91:11:e6:80:01:55:be:eb:ef:b3:73:f0:1b:
09:76:c4:55:9a:86:0c:5d:cd:36:61:72:ce:10:07:
bf:75:e2:0e:9c:0e:79:f5:c5:37:87:0d:cf:74:98:
63:e4:60:99:65:43:29:cf:fd:9c:b5:b0:23:db:6a:
9a:b7:6b:76:18:64:fc:b1:a8:e7:cc:9a:48:f0:a2:
24:8e:b4:39:32:4c:4e:d8:e3:e9:74:8f:ec:57:c7:
62:1d:a6:d5:80:ea:55:28:56:60:a3:29:34:87:32:
e0:76:2c:52:62:d0:0b:1e:8a:dd:fa:4b:30:11:f7:
a4:f0:49:70:58:9d:a3:f2:49:a3:7c:ad:ec:7e:33:
57:c5:3d:b6:52:c3:26:23:d4:1a:00:b7:6c:59:56:
fe:10:48:81:85:4a:59:b2:13:7e:76:09:ce:7d:3b:
3f:16:b1:88:a7:b9:09:14:f9:91:90:a5:57:0e:e5:
1e:76:04:56:80:c2:fb:c4:ea:58:7d:d5:90:06:88:
8d:a9:95:12:f7:aa:fc:95:33:17:fe:af:81:da:c7:
4c:03:6a:45:64:72:78:78:76:27:40:40:60:32:06:
3c:09:a2:90:48:1b:5f:6e:97:ea:f0:0b:65:8c:f7:
dc:97:8c:1f:21:56:c7:a4:90:4b:8b:c5:4e:51:44:
36:d1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
41:99:4C:71:3C:D7:48:C1:43:DE:5D:57:39:F3:6B:02:27:0B:1E:2F
X509v3 Authority Key Identifier:
keyid:F9:70:04:9C:BA:7F:39:AE:ED:31:D6:53:13:C7:B9:53:F3:FD:A1:35
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/1-XAEnLp_Oa7tMdZTE8e5U_P9oTU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a2/13f5f1-45b6-4bc1-b5a5-521fa41dfc96/1/QZlMcTzXSMFD3l1XOfNrAicLHi8.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/a2/13f5f1-45b6-4bc1-b5a5-521fa41dfc96/1/1-XAEnLp_Oa7tMdZTE8e5U_P9oTU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
2.110.21.0/24
185.90.52.0/22
212.70.2.0/24
Signature Algorithm: sha256WithRSAEncryption
37:63:3c:77:e5:e4:f4:82:fb:89:b0:ef:52:44:ee:3c:97:36:
44:1d:b4:3f:b6:72:cf:65:b1:3f:b7:30:f3:77:10:c1:df:f1:
15:82:25:ae:9d:1a:8d:e8:ca:40:b8:b1:0a:0d:ee:4a:60:4e:
e6:ab:da:6f:56:60:f5:4b:0f:64:2a:3d:0b:f5:37:aa:be:b8:
60:69:7c:4c:ed:7e:e8:c7:cf:ab:de:d7:49:89:7f:36:4a:fc:
c9:8b:50:b3:0f:1b:87:ce:db:5f:6f:f9:89:b7:4f:ca:d1:05:
79:fb:53:fa:8b:13:15:27:5f:64:c1:af:f7:0d:64:10:5c:9e:
64:65:9b:ab:0d:a8:19:ab:5a:d8:6d:43:97:44:26:ca:c3:9b:
04:2a:60:1d:fe:55:aa:0a:30:56:9e:bc:0e:3b:18:1e:78:f1:
a9:fd:47:2b:e0:62:ca:61:6b:ae:13:07:34:ac:a8:e7:1b:e4:
22:df:68:49:90:03:54:45:73:64:b2:12:46:f0:29:21:77:f7:
42:59:b4:1c:61:c2:ea:eb:97:4e:1d:fd:bd:fd:02:13:84:ea:
6e:cd:cd:1f:a4:67:e6:44:76:5f:ff:ca:5b:b4:2a:7a:50:54:
1f:7a:82:02:a0:50:2b:b5:79:16:14:f7:75:c1:9a:d6:f4:b0:
7c:24:69:21
-----BEGIN CERTIFICATE-----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=
-----END CERTIFICATE-----
Generated at Sat Aug 15 01:26:36 2026 by rpki-client