Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b1/ddce4d-9912-487d-b55d-47d82a41a8f3/1/2swZefhIVPR3XL7oX-tRbngk5GY.roa
File: 2swZefhIVPR3XL7oX-tRbngk5GY.roa (raw, json)
Hash identifier: Ns+iNjjhlWLfQInvmtWCHXcMGpn4FdP2B+Xiv5UYy6o=
Subject key identifier: DA:CC:19:79:F8:48:54:F4:77:5C:BE:E8:5F:EB:51:6E:78:24:E4:66
Certificate issuer: /CN=5794afdb5e6a1885780920a54ffa82408ea85ba1
Certificate serial: 019D3DC11823B5598664278EA2D737444F34
Authority key identifier: 57:94:AF:DB:5E:6A:18:85:78:09:20:A5:4F:FA:82:40:8E:A8:5B:A1
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/V5Sv215qGIV4CSClT_qCQI6oW6E.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/b1/ddce4d-9912-487d-b55d-47d82a41a8f3/1/2swZefhIVPR3XL7oX-tRbngk5GY.roa
Signing time: Mon 30 Mar 2026 07:59:17 +0000
ROA not before: Mon 30 Mar 2026 07:59:17 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 16276
IP address blocks: 178.236.233.0/24 maxlen: 24
178.236.237.0/24 maxlen: 24
185.2.49.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:3d:c1:18:23:b5:59:86:64:27:8e:a2:d7:37:44:4f:34
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=5794afdb5e6a1885780920a54ffa82408ea85ba1
Validity
Not Before: Mar 30 07:59:17 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=dacc1979f84854f4775cbee85feb516e7824e466
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a9:ac:18:06:ac:3c:0f:27:48:7c:8b:86:ba:ce:
23:0e:4b:de:ea:2f:44:5a:76:02:b3:21:95:fe:fc:
ae:cb:df:e7:da:cc:ce:fa:66:24:24:46:be:81:e7:
fc:f3:a0:00:d2:7a:ec:c9:be:84:ad:91:71:5a:08:
6a:29:21:11:b5:25:91:45:6e:8f:6f:0c:99:a2:0b:
95:0c:88:53:fb:a8:c6:5e:81:bc:b1:c0:c7:f3:ff:
e8:08:02:65:b2:36:1f:f4:5d:d8:b3:52:9c:64:87:
cb:68:c5:9a:0a:f9:ab:6f:81:da:e9:e0:b8:8f:54:
f8:42:00:50:87:50:a1:af:b3:4b:97:6a:ab:ca:78:
4f:36:c3:5d:61:96:db:e9:d5:a0:f6:cf:30:e6:fe:
85:ba:29:91:73:e4:8c:39:48:4b:21:7b:70:97:3a:
64:69:f1:13:0b:3b:43:a5:5d:74:31:c1:3e:44:3f:
e6:0c:f3:ac:4e:97:d4:7f:ff:2e:ed:7e:84:ad:8b:
12:87:32:00:9f:8d:26:d2:1b:9d:9b:9e:89:5d:f9:
ca:96:72:99:ff:e4:14:87:61:fc:8e:f2:17:40:c6:
f4:ff:db:7a:84:7a:b6:3f:aa:a4:4e:ab:bb:25:0e:
26:36:21:48:70:42:20:30:e4:ab:50:b3:37:0b:99:
08:0b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
DA:CC:19:79:F8:48:54:F4:77:5C:BE:E8:5F:EB:51:6E:78:24:E4:66
X509v3 Authority Key Identifier:
keyid:57:94:AF:DB:5E:6A:18:85:78:09:20:A5:4F:FA:82:40:8E:A8:5B:A1
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/V5Sv215qGIV4CSClT_qCQI6oW6E.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b1/ddce4d-9912-487d-b55d-47d82a41a8f3/1/2swZefhIVPR3XL7oX-tRbngk5GY.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/b1/ddce4d-9912-487d-b55d-47d82a41a8f3/1/V5Sv215qGIV4CSClT_qCQI6oW6E.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
178.236.233.0/24
178.236.237.0/24
185.2.49.0/24
Signature Algorithm: sha256WithRSAEncryption
6d:15:29:44:f6:c1:f4:40:23:7a:a3:0c:a3:b1:3e:e4:b9:3d:
a0:ea:76:62:a2:2a:06:c4:b7:45:70:5d:c4:2d:93:42:d2:17:
a3:8b:0d:ad:01:5f:36:f0:1f:e5:03:b3:40:6a:7e:86:ec:73:
84:3c:2b:29:c0:65:79:08:2b:c1:fb:a7:31:0a:74:76:1a:ec:
6b:50:1c:6a:c0:d5:13:23:3b:d7:20:8c:0a:fb:0c:de:e8:77:
3f:b5:e6:ad:5d:b6:a5:66:7a:1f:7f:ee:22:cb:17:76:6a:1b:
43:f0:3e:b9:b5:75:77:c1:ce:38:dd:48:7b:90:39:f1:cc:b4:
8a:b9:9e:5e:16:c4:76:72:a4:c1:b6:68:e7:25:5b:d6:0c:2a:
0f:7f:90:80:28:34:1d:c2:bb:80:58:90:d4:41:cd:ec:7e:78:
37:92:32:1e:19:48:e6:c2:df:aa:53:49:14:8c:95:39:a1:eb:
61:0d:b7:2c:d6:0f:99:92:ab:e1:11:ed:8b:0d:60:7c:01:b9:
57:51:2b:c3:33:ce:82:e7:a7:41:32:43:eb:b4:6d:0c:e2:4f:
b9:95:89:6a:a3:50:cd:a7:98:47:8a:dd:cc:49:e3:8f:e8:93:
23:4b:16:67:0a:8b:21:0c:91:9c:0f:61:48:cc:f2:6e:d7:5f:
9b:a7:84:b9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 17 13:29:19 2026 by rpki-client