Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/84/618f78-be3c-4f2e-b689-5a0d372a2ddc/1/WvSaWW1nYUabMfuGeN0e_k8i0XI.roa
File: WvSaWW1nYUabMfuGeN0e_k8i0XI.roa (raw, json)
Hash identifier: gVPTWyJQEYW+qk8fibIPyj9fr+5JVn1cDi0Xmb7ovnU=
Subject key identifier: 5A:F4:9A:59:6D:67:61:46:9B:31:FB:86:78:DD:1E:FE:4F:22:D1:72
Certificate issuer: /CN=25b1d0b3c4542ca530b359745c318f737b9c87c9
Certificate serial: 019D1AA264B636D51563644BC44632CBE7A9
Authority key identifier: 25:B1:D0:B3:C4:54:2C:A5:30:B3:59:74:5C:31:8F:73:7B:9C:87:C9
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/JbHQs8RULKUws1l0XDGPc3uch8k.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/84/618f78-be3c-4f2e-b689-5a0d372a2ddc/1/WvSaWW1nYUabMfuGeN0e_k8i0XI.roa
Signing time: Mon 23 Mar 2026 12:19:03 +0000
ROA not before: Mon 23 Mar 2026 12:19:03 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 210545
IP address blocks: 176.102.168.0/22 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:1a:a2:64:b6:36:d5:15:63:64:4b:c4:46:32:cb:e7:a9
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=25b1d0b3c4542ca530b359745c318f737b9c87c9
Validity
Not Before: Mar 23 12:19:03 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=5af49a596d6761469b31fb8678dd1efe4f22d172
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:98:c0:5d:9d:80:98:2b:fa:89:6a:27:bf:cd:ed:
42:40:45:f5:c0:fe:0c:72:d6:46:08:0a:b6:de:51:
91:8e:d7:85:78:6c:b8:61:3a:60:17:89:37:b3:c2:
8f:49:20:86:db:67:34:b0:c2:74:22:4f:65:5a:e3:
dc:03:44:f6:21:50:8d:17:73:94:d3:d0:07:3a:8f:
32:da:dc:1b:2a:3b:a9:24:ed:9e:16:33:8c:e8:b4:
5a:b8:b7:7d:b0:2e:de:89:41:6a:5a:88:6c:e1:6a:
53:c9:12:48:11:9f:03:d4:dd:02:1a:d2:76:ad:08:
28:83:fa:48:3c:7d:26:09:26:ef:81:7e:38:b8:1d:
39:13:ae:10:46:71:8b:ef:0d:ca:70:c9:90:85:69:
45:92:18:70:66:17:9d:53:c1:58:93:a2:d5:3f:96:
f2:14:23:c9:90:b7:85:ce:3b:d5:3c:3f:bc:d2:a1:
03:b7:0d:5a:55:ab:bd:e6:04:10:f5:ee:68:9d:4f:
7e:1d:14:ec:62:7f:96:c7:91:60:50:d3:1a:fd:cd:
46:95:a3:4d:07:0f:87:5b:2d:19:c5:44:a3:80:a3:
ef:a8:01:d4:d2:82:5c:79:de:3d:ed:68:62:5e:e0:
c1:6d:96:9d:c5:5e:d1:c0:2f:f0:e1:9c:d1:24:70:
0b:dd
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
5A:F4:9A:59:6D:67:61:46:9B:31:FB:86:78:DD:1E:FE:4F:22:D1:72
X509v3 Authority Key Identifier:
keyid:25:B1:D0:B3:C4:54:2C:A5:30:B3:59:74:5C:31:8F:73:7B:9C:87:C9
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/JbHQs8RULKUws1l0XDGPc3uch8k.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/84/618f78-be3c-4f2e-b689-5a0d372a2ddc/1/WvSaWW1nYUabMfuGeN0e_k8i0XI.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/84/618f78-be3c-4f2e-b689-5a0d372a2ddc/1/JbHQs8RULKUws1l0XDGPc3uch8k.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
176.102.168.0/22
Signature Algorithm: sha256WithRSAEncryption
bb:4c:c2:1b:b0:da:e4:3b:27:3f:e9:9d:9f:e7:03:90:92:ad:
cb:4b:ec:8d:23:ff:9e:a0:1f:05:2d:6e:2a:39:fc:6d:c2:f3:
6c:6e:03:dc:74:d6:51:bf:4e:62:f5:a0:74:eb:4c:e6:f5:ba:
19:61:ce:0a:ee:a2:d3:36:7c:63:8d:49:2f:88:f8:39:04:8e:
af:5b:8d:f1:3e:ba:81:40:f8:8e:67:80:6e:6b:2e:ae:cb:56:
85:12:6c:75:47:6c:33:ac:e8:71:dd:9b:15:02:c2:c0:e5:e0:
d7:3d:ef:01:b9:4a:5a:a3:07:49:96:3a:1c:49:2a:c0:d5:ea:
2f:ba:6e:c9:f9:b2:8a:7f:9b:23:fd:43:c8:1b:0a:30:a1:d2:
d8:6b:d9:8b:23:59:bb:70:fc:4c:5b:1f:2d:dc:67:ef:b0:67:
cf:b1:a1:9b:35:27:41:80:57:5a:7b:62:2f:c9:75:33:65:3a:
36:71:d5:0e:24:eb:e6:94:bf:ca:c0:2a:fd:66:f4:3a:f1:12:
63:23:5f:d5:59:76:69:9a:a1:e5:9b:d8:5b:70:a4:91:10:c9:
c6:a7:0f:68:a2:e6:b8:67:47:e9:55:31:cd:a1:b3:56:26:25:
f3:ae:6b:bd:5e:e1:5f:7c:a5:21:88:f5:4f:31:ec:87:23:4d:
9f:9a:7b:b2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Mar 28 12:48:54 2026 by rpki-client