Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/05/01aac3-bce9-4d7e-a5fc-3f1b16c6cd63/1/AZ5qxXs3sBthXMKoqjSO3VbhNNw.roa
File: AZ5qxXs3sBthXMKoqjSO3VbhNNw.roa (raw, json)
Hash identifier: T4J6Jno9APZmLEqazrpUp0SKEpBM9Bo/2KK7p0DkqHU=
Subject key identifier: 01:9E:6A:C5:7B:37:B0:1B:61:5C:C2:A8:AA:34:8E:DD:56:E1:34:DC
Certificate issuer: /CN=080369a358961f7284fbd591e927737cdb05c35d
Certificate serial: 019B7C7FD5F0D2DC95FCD7CC1326D3A90A78
Authority key identifier: 08:03:69:A3:58:96:1F:72:84:FB:D5:91:E9:27:73:7C:DB:05:C3:5D
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/CANpo1iWH3KE-9WR6SdzfNsFw10.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/05/01aac3-bce9-4d7e-a5fc-3f1b16c6cd63/1/AZ5qxXs3sBthXMKoqjSO3VbhNNw.roa
Signing time: Fri 02 Jan 2026 02:18:31 +0000
ROA not before: Fri 02 Jan 2026 02:18:31 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 8426
IP address blocks: 81.92.128.0/20 maxlen: 21
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9b:7c:7f:d5:f0:d2:dc:95:fc:d7:cc:13:26:d3:a9:0a:78
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=080369a358961f7284fbd591e927737cdb05c35d
Validity
Not Before: Jan 2 02:18:31 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=019e6ac57b37b01b615cc2a8aa348edd56e134dc
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bf:14:e1:fc:f9:f6:6e:19:9f:a6:b5:71:1e:43:
76:62:f0:84:23:55:39:6a:99:b5:de:8e:01:ce:e1:
dc:a5:15:ec:3a:9a:16:0a:64:4d:b6:73:59:73:e0:
2c:d9:9a:e3:b9:70:d0:8d:ce:e1:a3:a1:f2:dd:71:
79:c1:db:45:cd:53:6b:65:94:ad:46:b6:5b:ee:86:
d2:61:ca:a9:51:ba:47:f6:16:d0:25:78:72:dd:63:
c9:7a:af:d0:ef:f9:03:6f:b4:18:70:62:0f:d6:4a:
69:e2:7c:da:a5:18:e2:43:d7:9b:e0:ac:82:58:b3:
b4:7e:c9:b4:dc:a4:c5:a1:94:6d:39:49:7c:bf:0e:
06:d5:93:f9:42:44:f7:17:ba:5a:12:a7:46:4c:fa:
0b:a0:1a:00:7e:28:b8:ad:a9:70:7f:b9:56:ed:2e:
2d:f2:68:c3:12:1e:7f:f5:a0:5b:bf:a8:bd:63:6b:
40:71:f5:74:33:e9:d3:e3:5f:24:2a:33:20:31:5e:
a8:3f:1f:b8:cb:22:61:5a:35:b8:28:34:98:70:e6:
88:81:bc:46:bd:76:a4:f3:de:b0:ce:c9:98:3e:cc:
c6:e8:ec:43:cf:8f:57:c2:f0:d5:c3:05:76:8a:1d:
2d:31:dd:8b:14:14:59:4f:1b:5b:b6:f8:4e:71:4f:
7b:d7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
01:9E:6A:C5:7B:37:B0:1B:61:5C:C2:A8:AA:34:8E:DD:56:E1:34:DC
X509v3 Authority Key Identifier:
keyid:08:03:69:A3:58:96:1F:72:84:FB:D5:91:E9:27:73:7C:DB:05:C3:5D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/CANpo1iWH3KE-9WR6SdzfNsFw10.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/05/01aac3-bce9-4d7e-a5fc-3f1b16c6cd63/1/AZ5qxXs3sBthXMKoqjSO3VbhNNw.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/05/01aac3-bce9-4d7e-a5fc-3f1b16c6cd63/1/CANpo1iWH3KE-9WR6SdzfNsFw10.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
81.92.128.0/20
Signature Algorithm: sha256WithRSAEncryption
98:a4:af:db:d5:71:26:b5:13:43:4d:e5:d5:71:52:d2:70:45:
99:78:2d:18:57:cf:49:a2:c4:e4:40:40:0b:35:7f:aa:bd:3b:
dc:97:6a:27:b8:cf:aa:ed:4f:1b:0d:9e:41:23:04:34:b8:46:
9b:4d:31:f3:84:d1:a2:a6:e7:50:a6:aa:2c:25:27:3b:db:bd:
2c:43:9d:c4:77:66:78:49:1c:41:c9:64:2f:73:22:ba:3f:ab:
8e:8c:17:61:72:1a:5c:af:11:7e:62:c2:ea:45:f6:00:9b:86:
3d:6b:0f:81:cc:85:b6:6c:a2:b4:25:68:1d:d1:71:5a:29:ce:
34:9e:58:17:30:47:09:c3:17:79:9b:59:f7:19:76:f1:9f:fe:
19:53:26:8d:a9:72:3a:99:da:85:80:fa:20:3b:16:e0:a6:ca:
57:db:b9:75:6c:af:ac:bc:e7:e6:e3:db:1a:f4:fb:4f:e9:76:
92:48:64:b5:51:fc:dc:6a:2e:70:d8:b2:e1:da:d7:34:4c:32:
ce:49:5c:bf:16:eb:0c:45:4b:d2:db:0b:ec:15:35:cc:40:6f:
50:20:9f:df:7b:36:79:0a:ee:2b:aa:4e:45:38:9c:af:71:1d:
27:1d:b5:c9:48:c1:21:68:ad:96:02:15:7b:d0:9b:07:56:bc:
b5:5b:e4:12
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Mar 2 07:24:30 2026 by rpki-client