Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/15/fce675-bf53-4787-93e7-81f566185b06/1/1-WjY3ZbltqNn70hQqbSKhe1NRv4.roa
File: 1-WjY3ZbltqNn70hQqbSKhe1NRv4.roa (raw, json)
Hash identifier: GkpZZWuDnJ+3LATbTn9aArAM20dJMxzITFfRrF/Zq0A=
Subject key identifier: F9:68:D8:DD:96:E5:B6:A3:67:EF:48:50:A9:B4:8A:85:ED:4D:46:FE
Certificate issuer: /CN=2b0be226230d4099ceea0a4a6cf4ed8b90201350
Certificate serial: 019B76EB18DE9B8FA38CB276A9DDBAED5FE2
Authority key identifier: 2B:0B:E2:26:23:0D:40:99:CE:EA:0A:4A:6C:F4:ED:8B:90:20:13:50
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/KwviJiMNQJnO6gpKbPTti5AgE1A.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/15/fce675-bf53-4787-93e7-81f566185b06/1/1-WjY3ZbltqNn70hQqbSKhe1NRv4.roa
Signing time: Thu 01 Jan 2026 00:17:57 +0000
ROA not before: Thu 01 Jan 2026 00:17:57 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 209360
IP address blocks: 37.61.77.0/24 maxlen: 24
37.61.78.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9b:76:eb:18:de:9b:8f:a3:8c:b2:76:a9:dd:ba:ed:5f:e2
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2b0be226230d4099ceea0a4a6cf4ed8b90201350
Validity
Not Before: Jan 1 00:17:57 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=f968d8dd96e5b6a367ef4850a9b48a85ed4d46fe
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:97:33:f2:61:c1:11:e9:60:a8:6f:61:39:9c:69:
1b:2e:c7:28:bc:7d:cf:3f:1c:b0:f6:2f:5a:82:8d:
4e:42:8a:e5:19:76:75:05:2a:e3:4b:f9:6a:73:77:
7e:a7:3b:37:84:d1:c8:2b:ab:24:13:3e:3e:c8:7d:
63:c4:16:24:f7:c1:7d:88:2d:da:b9:1a:24:5d:9f:
91:27:94:8d:12:1f:2c:d5:c2:a4:20:d6:52:5a:93:
b6:33:1d:f8:28:4b:a7:2e:5c:4a:1a:6b:9b:57:0d:
86:2e:ac:cc:2d:7a:5c:5b:96:a3:b7:ff:b3:f4:e4:
33:39:33:e2:70:3b:2b:22:a3:0f:b7:5f:21:3b:b8:
39:d0:85:cf:c8:eb:46:a4:99:e1:47:80:a6:12:92:
85:d1:b3:1a:bd:be:7b:38:50:66:22:87:c1:8c:bc:
0c:da:06:72:76:88:0c:f7:41:3a:1a:f0:cd:b2:7f:
e8:b8:b3:da:3e:36:c5:b5:af:e8:a1:3e:10:0c:c1:
ed:f4:1a:b1:26:4a:85:9c:e4:e5:0a:57:23:29:17:
7a:02:3c:97:13:3b:04:3e:a9:4f:b7:1a:d0:29:60:
12:fd:e6:2e:23:e4:0d:0f:70:1f:0e:05:83:1d:da:
31:a8:36:2b:60:86:1e:5d:c2:25:3b:76:52:63:38:
ce:cd
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F9:68:D8:DD:96:E5:B6:A3:67:EF:48:50:A9:B4:8A:85:ED:4D:46:FE
X509v3 Authority Key Identifier:
keyid:2B:0B:E2:26:23:0D:40:99:CE:EA:0A:4A:6C:F4:ED:8B:90:20:13:50
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/KwviJiMNQJnO6gpKbPTti5AgE1A.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/15/fce675-bf53-4787-93e7-81f566185b06/1/1-WjY3ZbltqNn70hQqbSKhe1NRv4.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/15/fce675-bf53-4787-93e7-81f566185b06/1/KwviJiMNQJnO6gpKbPTti5AgE1A.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
37.61.77.0-37.61.78.255
Signature Algorithm: sha256WithRSAEncryption
30:19:2f:cf:d1:38:ab:80:36:5a:58:98:1f:8d:f7:7f:77:77:
4e:fd:50:9d:b9:c1:17:53:76:76:bd:a6:4e:32:ac:d7:25:e3:
9e:80:29:be:54:c7:7a:8f:0c:5f:91:71:d7:8a:bb:df:89:5f:
da:ed:d5:d0:76:44:50:89:2b:15:70:56:0e:8c:81:72:59:5e:
cc:af:c2:ed:7c:cb:87:68:1f:09:d3:47:48:de:05:5b:e5:86:
25:02:92:73:ad:6b:35:35:c8:c1:15:b4:2c:f0:9b:6b:29:7f:
08:c7:07:7d:b3:5c:ff:2d:6c:aa:92:c6:48:dc:57:5b:aa:a7:
af:45:5d:bb:26:26:c0:d9:48:ec:ea:01:28:80:d4:b2:f6:90:
80:e4:14:91:33:e7:94:ae:fc:d8:0d:69:f1:90:d6:50:a6:4d:
3e:24:23:28:ae:f2:05:23:8f:4e:97:82:4e:6b:01:9b:a9:12:
8c:04:24:de:14:25:f3:e7:69:32:40:85:f1:f4:d9:40:1b:63:
24:fb:33:44:3e:05:9a:50:4b:a1:84:3b:1d:d1:d2:6b:89:d1:
84:1b:e0:1e:a6:56:8e:37:a8:d0:b9:7f:a6:ec:3a:3d:10:8c:
b3:c6:bb:31:15:fd:ce:36:52:59:75:60:1b:4e:21:de:c9:c4:
42:2f:15:0e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Mar 2 16:05:09 2026 by rpki-client