Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/10/395328-f461-44b7-b031-3f8b55da1ac4/1/TA96EluuK9hYtFKHPh9w57H26w8.roa
File: TA96EluuK9hYtFKHPh9w57H26w8.roa (raw, json)
Hash identifier: Rr7s9I5Bo7KScSJwkfbGRNqNcD/eMP2Gsvt7bqHcZaQ=
Subject key identifier: 4C:0F:7A:12:5B:AE:2B:D8:58:B4:52:87:3E:1F:70:E7:B1:F6:EB:0F
Certificate issuer: /CN=051f29462e7a7da7eb5f45da7873f14e403fe3ab
Certificate serial: 019D259473340721491C85A14387A35EA805
Authority key identifier: 05:1F:29:46:2E:7A:7D:A7:EB:5F:45:DA:78:73:F1:4E:40:3F:E3:AB
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/BR8pRi56fafrX0XaeHPxTkA_46s.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/10/395328-f461-44b7-b031-3f8b55da1ac4/1/TA96EluuK9hYtFKHPh9w57H26w8.roa
Signing time: Wed 25 Mar 2026 15:19:38 +0000
ROA not before: Wed 25 Mar 2026 15:19:38 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 834
IP address blocks: 45.11.191.0/24 maxlen: 24
188.209.128.0/24 maxlen: 24
188.209.135.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:25:94:73:34:07:21:49:1c:85:a1:43:87:a3:5e:a8:05
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=051f29462e7a7da7eb5f45da7873f14e403fe3ab
Validity
Not Before: Mar 25 15:19:38 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=4c0f7a125bae2bd858b452873e1f70e7b1f6eb0f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b1:e7:88:79:a9:51:46:49:e3:33:44:e4:a5:79:
c9:27:fe:d3:4b:65:ee:7c:16:1e:19:40:92:3f:e9:
20:86:43:44:a8:84:89:79:ad:1a:26:e6:de:f2:c7:
68:5d:81:ca:21:df:bc:77:cd:6f:43:da:81:6a:f0:
64:3f:14:63:f3:cd:58:75:17:e4:ec:de:ee:43:e4:
31:81:9d:be:4c:76:0f:dd:93:05:be:1e:64:b2:9b:
94:13:a0:9f:b5:bf:88:dd:8e:a1:50:75:3b:f3:88:
d8:3c:ac:99:f9:34:93:4e:f1:7e:27:e4:be:b0:74:
53:c9:db:d5:60:1c:44:24:fc:01:db:bc:09:a1:f4:
17:4e:be:e3:8d:ba:33:25:e3:fe:34:bd:bd:05:1b:
10:56:3e:28:6f:e8:0e:b3:86:fe:e1:93:cb:22:2a:
46:bb:d9:27:4b:ce:f9:32:e9:db:11:06:55:b0:00:
84:9c:fd:7e:f1:9d:b7:62:e2:3a:75:b5:52:11:69:
58:78:a7:16:85:0c:e9:c4:da:52:a2:ce:2f:a4:a8:
a9:d1:73:89:65:0f:1b:1f:f8:fa:05:d8:b4:64:e8:
2d:5e:00:7b:2d:bc:97:b7:cc:05:0d:7d:3e:49:9b:
3a:61:58:1c:e2:ae:2f:4a:43:d6:2d:53:98:d2:83:
70:83
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
4C:0F:7A:12:5B:AE:2B:D8:58:B4:52:87:3E:1F:70:E7:B1:F6:EB:0F
X509v3 Authority Key Identifier:
keyid:05:1F:29:46:2E:7A:7D:A7:EB:5F:45:DA:78:73:F1:4E:40:3F:E3:AB
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/BR8pRi56fafrX0XaeHPxTkA_46s.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/10/395328-f461-44b7-b031-3f8b55da1ac4/1/TA96EluuK9hYtFKHPh9w57H26w8.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/10/395328-f461-44b7-b031-3f8b55da1ac4/1/BR8pRi56fafrX0XaeHPxTkA_46s.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
45.11.191.0/24
188.209.128.0/24
188.209.135.0/24
Signature Algorithm: sha256WithRSAEncryption
5c:fe:d8:96:9a:e7:e5:5d:81:0e:cc:f2:e3:a4:b3:3e:e7:3a:
7a:6c:36:8e:61:8b:c0:cb:f1:ce:32:27:90:47:06:e6:b5:0a:
d2:c2:84:0c:4f:d7:45:06:c0:41:c7:d9:2c:b1:ef:ff:73:13:
f1:a2:f8:79:7e:65:31:55:85:0b:cd:74:ce:07:e2:13:6a:84:
11:73:fc:ff:bc:ee:b8:18:22:b6:e7:e0:76:f5:a3:89:fd:a0:
52:4a:63:eb:05:cd:a3:8d:51:c8:c6:ee:6d:31:a8:0d:b1:ec:
a2:f9:5b:d6:ad:2c:9f:08:d6:39:f8:6b:ed:e4:98:79:bd:44:
d8:e6:8f:1f:12:57:7e:4e:f2:bb:fc:38:3b:3e:f7:54:30:e8:
a3:13:58:c3:bc:cd:9d:07:ee:f9:f2:7e:02:0d:3f:e2:e9:eb:
03:c3:06:e1:9f:cb:19:ad:9d:eb:ba:34:98:d8:8f:cf:3e:f9:
2e:3e:b2:c0:9f:25:77:26:b2:1c:aa:2f:7e:17:ef:ba:8e:be:
ea:f5:67:cf:56:86:6a:f4:19:1c:5d:95:c1:a5:8b:5b:4e:4e:
9d:60:d2:2f:65:ee:84:99:c1:54:ae:c3:03:dd:71:25:ab:9b:
88:b8:ea:ed:22:bb:3a:3c:26:08:5f:2c:ef:3c:68:ec:40:b6:
d3:26:a5:8a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 26 20:39:09 2026 by rpki-client