Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/1e/35aa48-3ed6-4b72-aa76-8cebc5d16489/1/govFb5yudfzheFru4uSSuQZ4AF8.roa
File: govFb5yudfzheFru4uSSuQZ4AF8.roa (raw, json)
Hash identifier: o0Hf53J+gTRO0cM+mx6iY59GeeykUvvcDUXZDbrovUo=
Subject key identifier: 82:8B:C5:6F:9C:AE:75:FC:E1:78:5A:EE:E2:E4:92:B9:06:78:00:5F
Certificate issuer: /CN=eec23b0e7820bc3ecd4f8708e7b990edd6920d5d
Certificate serial: 019EFDE72F75ED697C71C0F8D33062AC3F35
Authority key identifier: EE:C2:3B:0E:78:20:BC:3E:CD:4F:87:08:E7:B9:90:ED:D6:92:0D:5D
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/7sI7DnggvD7NT4cI57mQ7daSDV0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/1e/35aa48-3ed6-4b72-aa76-8cebc5d16489/1/govFb5yudfzheFru4uSSuQZ4AF8.roa
Signing time: Thu 25 Jun 2026 08:30:47 +0000
ROA not before: Thu 25 Jun 2026 08:30:47 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 213627
IP address blocks: 2a0e:db40::/29 maxlen: 32
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9e:fd:e7:2f:75:ed:69:7c:71:c0:f8:d3:30:62:ac:3f:35
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=eec23b0e7820bc3ecd4f8708e7b990edd6920d5d
Validity
Not Before: Jun 25 08:30:47 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=828bc56f9cae75fce1785aeee2e492b90678005f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b8:c9:b8:c5:3c:ea:98:4b:38:58:a3:3a:9a:6f:
0d:96:b9:d0:73:95:c5:64:69:a9:d0:ce:d0:07:c4:
66:bf:a8:3c:08:09:6d:a4:8e:19:55:f9:60:12:cb:
30:cb:52:e7:34:b5:4a:77:13:e7:85:f9:bf:ea:15:
32:eb:51:91:30:24:74:25:00:b4:34:53:1c:87:a2:
63:c7:d7:9a:cc:a3:c4:93:70:fd:04:c9:72:b9:b9:
6a:41:f8:54:89:91:32:43:1b:5f:18:6f:5b:a7:8f:
57:4b:59:69:a8:af:25:aa:01:5e:a9:13:19:1c:89:
fd:2f:c8:11:0e:37:ba:ba:cf:d8:6f:11:09:94:93:
b8:d1:c5:78:a5:0a:10:fd:85:61:7d:31:58:3f:ea:
f3:4f:b1:3f:70:cb:5e:4e:9b:79:ad:ce:7b:78:d0:
b9:5b:3b:3a:54:61:5c:96:4c:f1:56:ae:0c:f4:49:
fc:e2:cb:05:f3:53:ae:3d:59:c4:5a:bb:d6:e9:db:
32:6d:01:43:7b:96:90:02:11:9a:3c:bf:51:ea:3c:
da:5e:4e:41:13:00:d1:96:2d:f3:f1:b1:18:b9:10:
e9:05:b8:96:0c:86:ae:cd:ef:4b:b4:0c:ae:1a:40:
0b:6b:db:1e:d8:91:23:9e:f6:56:1f:e2:68:d0:df:
c7:81
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
82:8B:C5:6F:9C:AE:75:FC:E1:78:5A:EE:E2:E4:92:B9:06:78:00:5F
X509v3 Authority Key Identifier:
keyid:EE:C2:3B:0E:78:20:BC:3E:CD:4F:87:08:E7:B9:90:ED:D6:92:0D:5D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/7sI7DnggvD7NT4cI57mQ7daSDV0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/1e/35aa48-3ed6-4b72-aa76-8cebc5d16489/1/govFb5yudfzheFru4uSSuQZ4AF8.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/1e/35aa48-3ed6-4b72-aa76-8cebc5d16489/1/7sI7DnggvD7NT4cI57mQ7daSDV0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a0e:db40::/29
Signature Algorithm: sha256WithRSAEncryption
80:c1:1c:2c:53:6b:23:d3:bc:77:19:25:2e:f1:cb:23:cd:fc:
98:4a:5e:78:04:ba:8e:ac:14:9a:17:59:79:a4:7f:fb:6f:0d:
f1:ef:eb:44:ad:23:73:20:cb:0f:2e:71:5c:ab:08:b6:bd:0a:
33:1c:f6:cc:d5:95:5b:9a:99:22:ca:6d:b3:be:d7:7c:68:ec:
f3:a2:2b:a5:e8:48:a9:71:88:49:03:65:17:4e:dc:d8:9c:6e:
10:69:65:b4:71:5d:98:b5:3b:55:41:dd:4a:2b:1e:08:17:f7:
4a:28:75:57:82:c3:34:d5:55:e7:3a:01:b8:d3:36:7e:b0:d4:
d9:8e:1e:a3:eb:df:e0:f1:56:dd:d9:35:3e:fa:37:f4:4f:9c:
ef:f1:da:8f:4f:21:5b:92:9f:e2:46:c0:3f:d7:11:eb:6f:61:
5c:17:be:09:87:81:89:91:15:0e:12:48:d9:a8:56:42:4a:88:
1b:2c:b0:8e:aa:5e:62:c6:d7:5e:15:09:49:b7:7e:f2:cb:35:
f0:11:23:ad:01:a6:b7:b7:ea:10:03:24:20:2c:2b:58:93:76:
32:89:13:ac:c3:5e:f8:45:fb:a0:b9:1b:68:d0:53:6c:6a:72:
8b:ad:d2:0f:17:71:e0:2b:14:24:db:a6:dc:f6:e7:11:a5:04:
5c:cd:63:b4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 29 04:13:29 2026 by rpki-client