Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/38/07489a-805e-4339-b43a-539da69774c8/1/GWEPv8y55Nfw4OgxSikDcW4Z8tw.roa
File: GWEPv8y55Nfw4OgxSikDcW4Z8tw.roa (raw, json)
Hash identifier: op40RW3COdE099VcHl+hf9g4HY63nkXk7/1pW1u5s78=
Subject key identifier: 19:61:0F:BF:CC:B9:E4:D7:F0:E0:E8:31:4A:29:03:71:6E:19:F2:DC
Certificate issuer: /CN=54f2b9a759357682ac419b5c0211cc0e420252ba
Certificate serial: 019B79ECDBD3818539A271293F610B98F938
Authority key identifier: 54:F2:B9:A7:59:35:76:82:AC:41:9B:5C:02:11:CC:0E:42:02:52:BA
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/VPK5p1k1doKsQZtcAhHMDkICUro.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/38/07489a-805e-4339-b43a-539da69774c8/1/GWEPv8y55Nfw4OgxSikDcW4Z8tw.roa
Signing time: Thu 01 Jan 2026 14:18:44 +0000
ROA not before: Thu 01 Jan 2026 14:18:44 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 205005
IP address blocks: 185.2.144.0/23 maxlen: 23
185.121.208.0/22 maxlen: 22
2a00:1be7::/32 maxlen: 32
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9b:79:ec:db:d3:81:85:39:a2:71:29:3f:61:0b:98:f9:38
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=54f2b9a759357682ac419b5c0211cc0e420252ba
Validity
Not Before: Jan 1 14:18:44 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=19610fbfccb9e4d7f0e0e8314a2903716e19f2dc
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ab:5e:dd:7e:b6:6c:3b:a7:12:ba:e3:d4:0c:41:
fe:19:f3:06:da:0c:79:6a:37:70:52:e7:ce:fa:9e:
8b:2d:02:24:a2:1f:e2:f7:45:61:d6:d4:74:26:ef:
7d:93:b9:ab:10:ee:65:a4:81:b1:42:b5:93:fe:f8:
c5:30:3e:9d:6b:6e:52:0e:a4:55:05:70:4a:07:97:
19:63:d6:33:da:79:96:77:32:ad:84:72:45:0a:c9:
01:c6:71:46:b4:f7:b0:42:63:8c:bc:4f:d6:1f:ef:
2c:d0:33:c9:db:b0:08:3b:18:91:85:41:5d:6f:85:
b9:5d:57:7c:c1:e6:a0:9d:a8:6d:b5:9e:11:02:a8:
4f:62:c5:4a:58:23:fb:52:2c:28:bc:5d:f9:77:70:
12:bc:4a:bd:3d:7c:88:9e:8d:aa:27:38:48:79:dc:
2c:67:ce:69:de:46:63:e5:23:2a:80:78:5a:67:b8:
ec:b8:a2:56:f5:03:e2:42:ee:a7:01:8a:75:32:1e:
af:f1:21:7d:ae:3b:88:f7:67:cf:7e:3d:74:b7:fc:
71:55:37:11:d9:99:b3:d3:ff:4b:dc:50:3b:70:a5:
e2:49:e0:74:41:dd:0b:15:23:39:28:ec:cf:da:96:
5c:32:46:81:c2:c1:c0:35:2a:57:6e:85:c5:68:34:
50:df
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
19:61:0F:BF:CC:B9:E4:D7:F0:E0:E8:31:4A:29:03:71:6E:19:F2:DC
X509v3 Authority Key Identifier:
keyid:54:F2:B9:A7:59:35:76:82:AC:41:9B:5C:02:11:CC:0E:42:02:52:BA
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/VPK5p1k1doKsQZtcAhHMDkICUro.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/38/07489a-805e-4339-b43a-539da69774c8/1/GWEPv8y55Nfw4OgxSikDcW4Z8tw.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/38/07489a-805e-4339-b43a-539da69774c8/1/VPK5p1k1doKsQZtcAhHMDkICUro.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.2.144.0/23
185.121.208.0/22
IPv6:
2a00:1be7::/32
Signature Algorithm: sha256WithRSAEncryption
32:e4:bb:4f:80:6a:db:75:1a:7d:76:1d:6a:c8:be:a3:46:cf:
23:ac:ec:92:18:09:50:4a:6f:37:d8:06:be:e4:f7:06:65:ae:
96:29:b0:e6:3b:c8:9e:5a:b0:e3:05:74:ee:42:62:9b:22:c9:
f6:43:39:67:6f:34:e6:1a:89:f7:ed:0c:1e:95:9e:46:ef:1e:
27:4f:f2:d6:ca:00:48:34:97:2a:35:d6:f3:9a:cc:bd:b0:41:
45:04:a9:3c:00:4e:ed:2f:3a:5d:5c:f2:1f:58:88:ab:f6:a0:
4a:47:75:0a:5d:1f:9b:a0:80:83:31:48:1f:23:25:51:b9:cf:
e7:e9:5b:9e:41:a2:68:3f:90:9e:ea:a8:bb:ff:f1:e8:5d:eb:
cc:04:58:d4:90:0d:a4:e6:62:29:2a:97:6c:cf:56:13:2a:7c:
cb:43:af:22:4f:8e:cf:7c:be:13:c4:80:e5:34:f3:d5:c5:ce:
89:cc:d6:99:cc:26:f9:45:4c:c4:b5:22:d4:b8:1c:de:4c:c4:
eb:a8:0a:da:98:ec:4c:88:f2:eb:e2:6d:47:5a:5d:fa:e5:5f:
b5:60:ee:e8:7f:2c:3d:00:a1:65:91:6c:d8:9e:6d:cb:6d:0a:
0a:92:23:7b:12:2d:65:88:25:29:c4:60:72:f3:76:1c:ce:b7:
e0:b4:cf:72
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Mar 2 16:03:31 2026 by rpki-client