Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/09/8f0218-543d-4943-8e3c-aef1b34a287d/1/N9CxH6mF0si8a_QAIohc7rRLdSQ.roa
File: N9CxH6mF0si8a_QAIohc7rRLdSQ.roa (raw, json)
Hash identifier: FGz1xZDxqhKmKYkzbBY2Cv3lGwCrd5UrGIoPE5EEs5I=
Subject key identifier: 37:D0:B1:1F:A9:85:D2:C8:BC:6B:F4:00:22:88:5C:EE:B4:4B:75:24
Certificate issuer: /CN=ca58aeb4129f8e2c9bc42cd19185c8d7f0e6eaf9
Certificate serial: 019B7EA6B1A9B30E9016DFEB7F2F5C6CB781
Authority key identifier: CA:58:AE:B4:12:9F:8E:2C:9B:C4:2C:D1:91:85:C8:D7:F0:E6:EA:F9
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/yliutBKfjiybxCzRkYXI1_Dm6vk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/09/8f0218-543d-4943-8e3c-aef1b34a287d/1/N9CxH6mF0si8a_QAIohc7rRLdSQ.roa
Signing time: Fri 02 Jan 2026 12:20:12 +0000
ROA not before: Fri 02 Jan 2026 12:20:12 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 208709
IP address blocks: 194.113.116.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9b:7e:a6:b1:a9:b3:0e:90:16:df:eb:7f:2f:5c:6c:b7:81
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=ca58aeb4129f8e2c9bc42cd19185c8d7f0e6eaf9
Validity
Not Before: Jan 2 12:20:12 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=37d0b11fa985d2c8bc6bf40022885ceeb44b7524
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a4:2c:0d:28:af:73:e1:51:90:a6:ea:97:b0:d0:
ef:fc:a5:a0:49:a9:ac:f7:7a:32:04:66:e5:7d:01:
eb:d2:9f:71:ae:20:6a:5d:0b:db:e0:32:60:ed:d1:
72:2e:7b:35:5e:a8:0d:f5:74:ba:88:21:98:4c:49:
b6:5f:5e:0a:74:28:69:37:8d:9a:96:21:4c:ef:30:
d2:82:d8:94:2b:db:38:57:24:d3:6b:06:f2:34:6f:
2a:f8:66:73:01:c6:cd:f8:56:d1:a2:15:1e:64:7a:
b9:f5:7e:22:f9:60:00:9a:3c:e9:d7:fb:8b:1c:ee:
c4:cb:eb:ba:6f:c1:21:e9:fa:1a:fd:c1:ef:aa:70:
c2:55:ea:e0:17:a6:ff:36:9c:a6:42:3f:74:83:2e:
0f:72:4c:fe:75:17:7b:05:3a:30:41:15:8b:ac:3c:
3d:dc:e6:9d:0c:80:52:8d:4f:64:0b:68:36:4a:90:
1c:44:55:e1:e5:81:9c:38:bc:c0:37:e8:87:89:fa:
ff:cf:f9:e0:3f:65:99:25:f9:a6:8f:f2:51:86:30:
be:45:66:bd:a3:b1:6a:b0:49:71:2c:07:c5:6d:5e:
af:c2:c2:ac:eb:13:d8:42:bd:61:1b:99:9b:94:b3:
f6:2b:76:10:55:b2:1f:60:8b:50:7d:77:d6:fa:4b:
45:a7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
37:D0:B1:1F:A9:85:D2:C8:BC:6B:F4:00:22:88:5C:EE:B4:4B:75:24
X509v3 Authority Key Identifier:
keyid:CA:58:AE:B4:12:9F:8E:2C:9B:C4:2C:D1:91:85:C8:D7:F0:E6:EA:F9
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/yliutBKfjiybxCzRkYXI1_Dm6vk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/09/8f0218-543d-4943-8e3c-aef1b34a287d/1/N9CxH6mF0si8a_QAIohc7rRLdSQ.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/09/8f0218-543d-4943-8e3c-aef1b34a287d/1/yliutBKfjiybxCzRkYXI1_Dm6vk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
194.113.116.0/24
Signature Algorithm: sha256WithRSAEncryption
09:83:30:b7:a9:ab:76:14:b0:c5:f5:7d:76:8f:b7:fa:cd:69:
f3:fb:c5:25:44:2f:ab:f4:1c:d2:53:fd:2f:24:9a:0e:a3:1e:
9b:74:08:2d:de:b4:0a:59:7d:49:96:04:7d:c1:ac:7b:43:c1:
3a:b3:8c:03:b7:f7:c4:e3:ed:b3:93:64:34:02:ee:f6:d6:4f:
b9:5f:37:e4:71:d4:fa:8e:90:d0:11:85:e8:8d:fe:c8:e9:15:
94:c2:5a:95:c4:65:0f:b7:61:c9:fd:56:7a:d4:89:69:43:52:
32:82:03:7c:e5:63:31:10:5b:6b:f2:1e:dd:27:e7:80:ac:d7:
5d:a2:7d:b6:4b:6b:93:50:9f:0c:64:db:11:e3:e4:13:17:6c:
71:45:4a:20:2c:02:04:16:1d:d9:67:60:b0:8b:e4:cd:74:27:
40:b2:2e:04:25:d7:97:c6:0c:fd:dd:4c:65:f0:e9:d3:48:4c:
48:4a:ac:ba:be:65:74:64:ce:3b:f5:77:62:99:a4:38:e6:fd:
14:23:bc:90:1e:6b:68:cc:24:b1:f3:b0:6d:f5:43:36:38:f2:
cd:4c:02:00:12:53:f8:a0:d6:f6:f0:b1:10:66:8b:ab:d7:df:
3b:34:9a:91:58:ce:d5:7b:bc:6b:ee:7a:30:13:f8:24:5a:25:
5e:d4:c1:64
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Mar 2 06:24:09 2026 by rpki-client