Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/61/1d3cdc-d04b-4adb-b069-2a351ab3b8f6/1/ZLl_46Lh9nkqU5_OsPC8plycGUY.roa
File: ZLl_46Lh9nkqU5_OsPC8plycGUY.roa (raw, json)
Hash identifier: O7Bgr6EL1Lg49UOnRcTUe4q3+h1+w1dRqFxJANUXEU4=
Subject key identifier: 64:B9:7F:E3:A2:E1:F6:79:2A:53:9F:CE:B0:F0:BC:A6:5C:9C:19:46
Certificate issuer: /CN=b504bcceb9c363f13e3adaa4c0fa52780f064684
Certificate serial: 019D92A06B8CB7469C6434BCEC4BDF580977
Authority key identifier: B5:04:BC:CE:B9:C3:63:F1:3E:3A:DA:A4:C0:FA:52:78:0F:06:46:84
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/tQS8zrnDY_E-OtqkwPpSeA8GRoQ.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/61/1d3cdc-d04b-4adb-b069-2a351ab3b8f6/1/ZLl_46Lh9nkqU5_OsPC8plycGUY.roa
Signing time: Wed 15 Apr 2026 19:31:20 +0000
ROA not before: Wed 15 Apr 2026 19:31:20 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 213216
IP address blocks: 194.61.0.0/24 maxlen: 32
2a13:7fc0:a42a::/48 maxlen: 64
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:92:a0:6b:8c:b7:46:9c:64:34:bc:ec:4b:df:58:09:77
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=b504bcceb9c363f13e3adaa4c0fa52780f064684
Validity
Not Before: Apr 15 19:31:20 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=64b97fe3a2e1f6792a539fceb0f0bca65c9c1946
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ba:ef:6d:cb:76:be:12:5d:3e:c6:ff:6b:72:f8:
90:0a:5f:70:ad:1e:62:26:93:0c:dc:f5:a9:29:bb:
18:bb:7c:6c:be:be:b4:34:40:5f:15:da:e3:4d:23:
4a:e4:0d:00:16:69:52:47:3f:b8:61:16:1d:3d:d2:
41:e8:f1:1d:7e:b9:f7:34:ba:00:2e:ac:51:08:53:
e4:12:00:74:68:43:13:fa:2d:d8:01:1d:df:3c:a0:
22:bb:1a:ad:d2:b9:1f:95:12:41:2a:4f:96:9a:b3:
b4:1c:b2:0c:ba:46:6f:25:4b:59:54:d4:b4:e5:7f:
0d:6a:54:fe:5d:fa:06:9e:c6:2b:21:e5:83:0a:e8:
78:e3:8b:b1:f5:85:5b:92:62:f7:8c:aa:b9:c6:b7:
94:43:0f:08:8a:d4:6f:1b:bc:45:8e:4a:e3:fa:11:
81:99:e6:47:a7:c5:b5:47:15:6e:65:d6:cb:3b:5e:
cb:82:47:f4:45:9f:a5:5f:b7:49:de:9c:c5:8a:ce:
83:69:71:b1:80:27:92:8e:eb:3b:11:ac:c0:c4:43:
b4:f1:d9:43:ca:18:8c:d5:16:1f:fc:f5:cf:17:9a:
92:75:a1:de:1a:72:56:78:f3:1f:8a:d4:c5:11:ee:
79:3d:e8:94:a3:3a:6f:e6:0c:16:de:38:ab:f8:71:
ad:d1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
64:B9:7F:E3:A2:E1:F6:79:2A:53:9F:CE:B0:F0:BC:A6:5C:9C:19:46
X509v3 Authority Key Identifier:
keyid:B5:04:BC:CE:B9:C3:63:F1:3E:3A:DA:A4:C0:FA:52:78:0F:06:46:84
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/tQS8zrnDY_E-OtqkwPpSeA8GRoQ.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/61/1d3cdc-d04b-4adb-b069-2a351ab3b8f6/1/ZLl_46Lh9nkqU5_OsPC8plycGUY.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/61/1d3cdc-d04b-4adb-b069-2a351ab3b8f6/1/tQS8zrnDY_E-OtqkwPpSeA8GRoQ.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
194.61.0.0/24
IPv6:
2a13:7fc0:a42a::/48
Signature Algorithm: sha256WithRSAEncryption
28:a9:ca:11:d5:c6:7d:e6:2e:55:90:fa:39:a9:88:10:7b:0e:
3e:0c:5f:6d:6d:d5:d1:ef:60:50:77:5c:37:89:b7:bb:9c:66:
3b:5a:ac:c4:13:9c:64:07:10:da:85:c6:eb:03:d6:5e:f8:05:
ad:48:53:28:09:ba:0b:69:4e:5e:41:f8:43:ed:8c:04:33:65:
df:d2:72:c5:a4:c3:bb:75:e9:a4:15:e1:8f:48:1e:c8:7c:7a:
64:01:eb:b0:c1:20:c0:99:a7:10:31:0a:eb:7b:8c:cf:12:82:
d6:44:f5:74:cb:bd:2e:fc:82:db:49:a8:d7:3d:88:c3:d7:4c:
2a:4f:94:52:e1:de:84:62:e9:9a:86:ba:48:ad:61:d0:e9:39:
8f:03:5c:95:de:7a:e8:41:39:ee:96:2f:72:61:2d:79:37:40:
18:99:f8:64:7e:97:e3:a0:f7:61:d7:42:4e:f0:a0:2d:f2:82:
36:85:d4:cf:70:f4:31:d8:70:88:61:30:a6:97:58:bb:83:a7:
66:27:db:e6:84:b0:8d:a8:d0:db:fc:96:b8:bf:80:a7:58:44:
5a:79:44:9c:3c:41:0e:7d:7a:cf:0e:82:85:23:4a:6b:e0:ce:
09:1e:a2:4a:e4:45:4c:e5:9e:5e:a9:3d:f8:b7:c5:34:6a:64:
9e:6d:08:87
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 17 16:10:40 2026 by rpki-client