Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/09/8f0218-543d-4943-8e3c-aef1b34a287d/1/zVB4b3DsqzqW_nlLTR8L6ErNhAs.roa
File: zVB4b3DsqzqW_nlLTR8L6ErNhAs.roa (raw, json)
Hash identifier: w9kQSSXu9sbngh5G9cWGRSopl+p/HUiuG/uqItRLrZ8=
Subject key identifier: CD:50:78:6F:70:EC:AB:3A:96:FE:79:4B:4D:1F:0B:E8:4A:CD:84:0B
Certificate issuer: /CN=ca58aeb4129f8e2c9bc42cd19185c8d7f0e6eaf9
Certificate serial: 019B7EA6B0FF181C26EEB01168C0939D818C
Authority key identifier: CA:58:AE:B4:12:9F:8E:2C:9B:C4:2C:D1:91:85:C8:D7:F0:E6:EA:F9
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/yliutBKfjiybxCzRkYXI1_Dm6vk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/09/8f0218-543d-4943-8e3c-aef1b34a287d/1/zVB4b3DsqzqW_nlLTR8L6ErNhAs.roa
Signing time: Fri 02 Jan 2026 12:20:12 +0000
ROA not before: Fri 02 Jan 2026 12:20:12 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 45049
IP address blocks: 194.113.116.0/24 maxlen: 24
2a14:4400::/32 maxlen: 48
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9b:7e:a6:b0:ff:18:1c:26:ee:b0:11:68:c0:93:9d:81:8c
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=ca58aeb4129f8e2c9bc42cd19185c8d7f0e6eaf9
Validity
Not Before: Jan 2 12:20:12 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=cd50786f70ecab3a96fe794b4d1f0be84acd840b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:f3:47:d6:92:82:31:e4:5d:8e:13:6a:ec:f3:85:
ae:fc:57:d6:84:70:bb:78:f1:8a:1e:ea:53:3e:88:
02:e6:a3:bc:77:fe:4d:c7:38:68:23:af:7c:bf:a6:
10:3c:8a:8d:0e:c5:9c:d4:39:51:8f:06:25:9d:c7:
63:8f:d2:c6:a5:b2:18:b8:18:bd:3e:f6:b9:7b:51:
c3:d8:fc:b2:bb:14:ce:af:f1:ff:68:1e:6e:ef:5e:
36:8a:59:d7:34:86:09:01:93:49:46:ab:34:3a:50:
6f:48:b7:d6:71:d4:80:dc:4a:a7:e3:90:37:3c:66:
33:09:34:4e:00:c9:e0:8f:f0:1a:e5:2e:06:4d:46:
d5:8f:93:4f:15:b0:da:10:e3:23:dc:d2:3d:d4:4e:
90:fb:f5:59:7a:df:9b:32:59:a8:26:9e:4e:b9:8c:
53:f2:0c:1f:73:1d:6c:8a:9c:14:d7:55:f7:81:41:
b6:fa:24:32:5a:f2:fe:1a:33:76:b2:90:37:a0:91:
a8:5d:59:82:fb:84:b2:4c:d1:7f:25:c7:aa:72:b4:
de:82:6d:eb:33:c4:55:7a:29:26:24:20:b9:09:43:
5d:51:8f:ca:1d:a6:4b:e7:f5:f3:46:ee:32:f4:51:
80:13:57:d2:25:7a:29:01:0b:89:80:58:e7:9c:d0:
58:2b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
CD:50:78:6F:70:EC:AB:3A:96:FE:79:4B:4D:1F:0B:E8:4A:CD:84:0B
X509v3 Authority Key Identifier:
keyid:CA:58:AE:B4:12:9F:8E:2C:9B:C4:2C:D1:91:85:C8:D7:F0:E6:EA:F9
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/yliutBKfjiybxCzRkYXI1_Dm6vk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/09/8f0218-543d-4943-8e3c-aef1b34a287d/1/zVB4b3DsqzqW_nlLTR8L6ErNhAs.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/09/8f0218-543d-4943-8e3c-aef1b34a287d/1/yliutBKfjiybxCzRkYXI1_Dm6vk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
194.113.116.0/24
IPv6:
2a14:4400::/32
Signature Algorithm: sha256WithRSAEncryption
4e:44:71:c6:a5:88:63:1e:0f:b7:3c:9d:4e:18:11:38:c9:64:
34:23:fa:de:ca:d7:0c:74:9a:7b:6b:0a:83:32:5c:a1:95:2c:
b1:95:b0:5c:c9:b1:ee:e7:bd:46:65:0b:63:d1:df:4a:a4:a2:
44:fd:be:e4:43:a8:e6:c0:9b:62:d9:f7:3b:b5:bc:31:71:69:
5e:4f:8a:21:6d:c5:7b:e3:76:0a:3a:ff:8d:ea:da:56:1e:d4:
85:1d:80:d8:ed:1a:1f:d2:fc:a5:91:0e:9b:34:59:d0:a5:27:
25:2f:36:63:a9:28:b4:52:c1:3e:84:7a:0a:c3:b9:f1:88:45:
f5:0e:4d:fd:0f:f5:4a:26:03:ed:01:0b:56:f2:7f:04:13:e9:
66:44:7f:19:3e:0f:9d:2d:72:10:85:5c:4d:08:64:77:93:94:
e3:77:80:74:55:b7:eb:6e:1d:71:21:6e:5c:98:98:9a:e4:87:
a6:bd:e1:96:fb:07:de:08:f7:ad:29:92:f0:2d:fa:29:9d:c2:
80:29:63:39:6c:dd:cb:b4:c8:fe:8c:22:53:62:f4:53:18:2d:
2c:9f:6e:b6:4b:09:11:5a:4a:f4:f9:14:c8:b1:11:b3:ad:b5:
e4:89:77:bc:f3:63:35:5e:27:99:5e:a0:de:35:19:7c:f9:80:
6c:e7:bb:92
-----BEGIN CERTIFICATE-----
MIIFDDCCA/SgAwIBAgISAZt+prD/GBwm7rARaMCTnYGMMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGNhNThhZWI0MTI5ZjhlMmM5YmM0MmNkMTkxODVjOGQ3ZjBl
NmVhZjkwHhcNMjYwMTAyMTIyMDEyWhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EyhjZDUwNzg2ZjcwZWNhYjNhOTZmZTc5NGI0ZDFmMGJlODRhY2Q4NDBiMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA80fWkoIx5F2OE2rs84Wu/FfWhHC7
ePGKHupTPogC5qO8d/5NxzhoI698v6YQPIqNDsWc1DlRjwYlncdjj9LGpbIYuBi9
Pva5e1HD2PyyuxTOr/H/aB5u7142ilnXNIYJAZNJRqs0OlBvSLfWcdSA3Eqn45A3
PGYzCTROAMngj/Aa5S4GTUbVj5NPFbDaEOMj3NI91E6Q+/VZet+bMlmoJp5OuYxT
8gwfcx1sipwU11X3gUG2+iQyWvL+GjN2spA3oJGoXVmC+4SyTNF/JceqcrTegm3r
M8RVeikmJCC5CUNdUY/KHaZL5/XzRu4y9FGAE1fSJXopAQuJgFjnnNBYKwIDAQAB
o4ICGDCCAhQwHQYDVR0OBBYEFM1QeG9w7Ks6lv55S00fC+hKzYQLMB8GA1UdIwQY
MBaAFMpYrrQSn44sm8Qs0ZGFyNfw5ur5MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQveWxpdXRCS2ZqaXlieEN6UmtZWEkxX0RtNnZrLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8wOS84ZjAyMTgtNTQzZC00OTQzLThlM2Mt
YWVmMWIzNGEyODdkLzEvelZCNGIzRHNxenFXX25sTFRSOEw2RXJOaEFzLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8wOS84ZjAyMTgtNTQzZC00OTQzLThlM2MtYWVmMWIzNGEyODdk
LzEveWxpdXRCS2ZqaXlieEN6UmtZWEkxX0RtNnZrLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMC4GCCsGAQUFBwEHAQH/BB8wHTAMBAIAATAGAwQAwnF0MA0E
AgACMAcDBQAqFEQAMA0GCSqGSIb3DQEBCwUAA4IBAQBORHHGpYhjHg+3PJ1OGBE4
yWQ0I/reytcMdJp7awqDMlyhlSyxlbBcybHu571GZQtj0d9KpKJE/b7kQ6jmwJti
2fc7tbwxcWleT4ohbcV743YKOv+N6tpWHtSFHYDY7Rof0vylkQ6bNFnQpSclLzZj
qSi0UsE+hHoKw7nxiEX1Dk39D/VKJgPtAQtW8n8EE+lmRH8ZPg+dLXIQhVxNCGR3
k5Tjd4B0Vbfrbh1xIW5cmJia5IemveGW+wfeCPetKZLwLfopncKAKWM5bN3LtMj+
jCJTYvRTGC0sn262SwkRWkr0+RTIsRGzrbXkiXe882M1XieZXqDeNRl8+YBs57uS
-----END CERTIFICATE-----
Generated at Mon Mar 2 02:59:14 2026 by rpki-client