Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/7f/aa9e97-4001-48a4-bf80-3d25458b39ee/1/pAWuDCLG9_f-C14ZXfNOI7En-Ms.roa
File: pAWuDCLG9_f-C14ZXfNOI7En-Ms.roa (raw, json)
Hash identifier: YP8AfIVFTAfXipKsCjOHk5ss11q6ofMu51lXDdefjss=
Subject key identifier: A4:05:AE:0C:22:C6:F7:F7:FE:0B:5E:19:5D:F3:4E:23:B1:27:F8:CB
Certificate issuer: /CN=d2cb5d181afea69f39e17112593be4b00e584b4d
Certificate serial: 019B76EAACF050632B1AC8162F9BEFAB32A3
Authority key identifier: D2:CB:5D:18:1A:FE:A6:9F:39:E1:71:12:59:3B:E4:B0:0E:58:4B:4D
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/0stdGBr-pp854XESWTvksA5YS00.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/7f/aa9e97-4001-48a4-bf80-3d25458b39ee/1/pAWuDCLG9_f-C14ZXfNOI7En-Ms.roa
Signing time: Thu 01 Jan 2026 00:17:29 +0000
ROA not before: Thu 01 Jan 2026 00:17:29 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 214814
IP address blocks: 193.164.208.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9b:76:ea:ac:f0:50:63:2b:1a:c8:16:2f:9b:ef:ab:32:a3
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=d2cb5d181afea69f39e17112593be4b00e584b4d
Validity
Not Before: Jan 1 00:17:29 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=a405ae0c22c6f7f7fe0b5e195df34e23b127f8cb
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:dc:2d:9b:da:cd:67:07:30:23:8d:f9:fa:7d:e2:
26:6c:a0:9b:f9:ec:3b:4a:93:74:54:c7:1c:74:02:
3d:df:07:d7:a2:d4:ed:de:09:1e:69:ef:44:15:31:
32:cb:ae:49:9a:b0:b9:49:d7:f9:f6:0c:fa:04:67:
e9:79:6f:a4:94:45:47:29:91:b3:bc:72:b4:6a:ad:
25:9e:e3:11:35:bf:5f:c3:d1:b4:c5:0b:97:72:31:
fb:70:fe:97:de:42:3c:73:b7:e4:21:e5:6f:5b:64:
2a:f1:dc:f3:38:21:52:0d:67:4e:22:93:bf:b6:78:
c2:a4:17:07:7b:f5:a7:5e:c8:4f:30:f7:8f:3c:a7:
dd:f7:d8:c5:f2:5d:60:50:48:37:13:fb:36:d8:5d:
8c:1f:6b:6d:ac:d0:84:70:bc:35:da:89:f2:25:bb:
df:f6:54:73:ff:8f:80:8e:56:33:f0:57:c2:e4:39:
68:f2:93:45:0c:90:b7:ae:cd:59:61:82:18:54:a4:
9a:55:a4:45:ac:ce:bb:9a:17:5e:4c:1f:44:99:4e:
d4:07:1b:74:3a:94:fe:b3:fe:5a:fa:7f:98:72:54:
c2:58:23:62:d7:74:79:13:be:2a:8e:8b:a3:c8:b3:
9a:3d:c7:16:10:90:c0:65:85:c0:27:2e:53:36:46:
b7:d7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A4:05:AE:0C:22:C6:F7:F7:FE:0B:5E:19:5D:F3:4E:23:B1:27:F8:CB
X509v3 Authority Key Identifier:
keyid:D2:CB:5D:18:1A:FE:A6:9F:39:E1:71:12:59:3B:E4:B0:0E:58:4B:4D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/0stdGBr-pp854XESWTvksA5YS00.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/7f/aa9e97-4001-48a4-bf80-3d25458b39ee/1/pAWuDCLG9_f-C14ZXfNOI7En-Ms.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/7f/aa9e97-4001-48a4-bf80-3d25458b39ee/1/0stdGBr-pp854XESWTvksA5YS00.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
193.164.208.0/24
Signature Algorithm: sha256WithRSAEncryption
57:1a:2c:7d:c8:d9:22:62:fd:63:9f:06:5d:63:e1:a8:9f:90:
fd:db:10:2b:8a:91:83:d4:55:0f:2b:71:3e:f4:dc:a1:70:bf:
d2:df:ba:c7:a4:c6:15:36:8c:c6:3b:25:6a:a0:ea:e6:80:3e:
55:3a:a9:4a:94:0c:bf:1c:68:85:76:30:32:e1:a6:9e:03:17:
19:db:5a:fb:45:1d:fc:75:2d:1c:97:b6:37:9b:55:82:69:2d:
7b:a7:94:92:31:b1:6b:27:7c:73:44:98:2e:16:4f:0b:a8:bb:
f0:a3:8b:d7:fa:e4:28:fa:d8:25:cc:84:a2:fb:86:b4:53:79:
fe:ed:4f:1c:34:4f:2b:90:97:ac:99:24:f2:3d:d5:b2:c8:cf:
40:d7:47:c3:c1:f1:12:ad:e3:d1:b8:2b:23:6d:f4:5d:a2:8e:
11:7a:55:81:3a:5e:cf:63:90:7f:dd:16:54:d0:d8:7b:63:31:
78:c7:65:21:b6:42:3d:b5:bb:57:c6:25:8b:69:f5:93:8b:a8:
42:41:b5:5d:67:71:4a:94:fa:cd:7f:78:e7:cd:70:b9:98:2d:
3f:0c:2e:18:bd:28:d3:61:25:d8:5a:21:b7:e0:ae:39:14:36:
17:fd:41:e5:39:c5:92:8b:77:6c:67:ca:37:8e:ce:be:76:00:
e1:99:f2:d8
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Mar 2 20:50:17 2026 by rpki-client