Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b3/987979-9693-45e3-85ba-ed5358b6da31/1/Xjpgprt-MiRUXHTOkbwNzV8r0fw.roa
File: Xjpgprt-MiRUXHTOkbwNzV8r0fw.roa (raw, json)
Hash identifier: K/itoI+NZE9bbCEUvh9ewWIzAihCr0o1PG+M1VaHse0=
Subject key identifier: 5E:3A:60:A6:BB:7E:32:24:54:5C:74:CE:91:BC:0D:CD:5F:2B:D1:FC
Certificate issuer: /CN=7415fec4ae76b24e4f02991649917b99b740044a
Certificate serial: 019B7AC8CF64990E3757405C7F129E4823F2
Authority key identifier: 74:15:FE:C4:AE:76:B2:4E:4F:02:99:16:49:91:7B:99:B7:40:04:4A
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/dBX-xK52sk5PApkWSZF7mbdABEo.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/b3/987979-9693-45e3-85ba-ed5358b6da31/1/Xjpgprt-MiRUXHTOkbwNzV8r0fw.roa
Signing time: Thu 01 Jan 2026 18:18:59 +0000
ROA not before: Thu 01 Jan 2026 18:18:59 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 209693
IP address blocks: 92.42.102.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9b:7a:c8:cf:64:99:0e:37:57:40:5c:7f:12:9e:48:23:f2
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=7415fec4ae76b24e4f02991649917b99b740044a
Validity
Not Before: Jan 1 18:18:59 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=5e3a60a6bb7e3224545c74ce91bc0dcd5f2bd1fc
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ad:15:11:b1:df:4b:9b:90:ae:26:15:0b:09:e2:
11:6d:33:f5:a9:2a:9d:e6:5e:7a:5a:7f:0f:4d:f3:
f1:1a:42:fb:68:75:c0:36:06:cd:6a:05:1e:5a:aa:
ac:51:8d:27:47:f9:9a:9a:e9:72:01:ef:bf:4b:d6:
69:8f:03:d6:95:9a:83:92:07:ac:d9:c9:0f:09:bc:
5d:03:dd:fb:ad:19:54:52:0c:92:7f:72:80:c8:75:
81:02:3e:6e:43:4e:76:0f:9d:a9:1e:a8:67:70:4a:
34:55:19:6a:73:f9:ff:51:bc:64:03:e7:51:bc:43:
03:fa:ab:ad:8d:41:fa:2a:5e:98:61:bb:f8:28:91:
ed:9d:15:5d:ab:cf:fe:75:51:ab:3d:40:13:e8:c2:
7c:f5:50:8d:72:ab:33:73:8e:8f:c6:73:27:48:91:
6c:ea:a0:ab:8d:8e:4c:02:97:48:98:66:14:41:84:
73:6e:b0:64:d8:3e:58:fe:93:ec:eb:4e:92:07:b7:
ea:ed:99:82:76:9f:82:40:bf:b2:cc:a8:7d:d4:97:
d3:3e:9e:93:72:f1:20:d4:8b:af:ce:c8:da:41:6a:
11:cd:de:7c:da:41:2c:2c:81:fe:1f:47:5d:61:11:
84:2e:61:7b:44:31:0d:99:d9:f0:34:86:32:a7:22:
04:c3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
5E:3A:60:A6:BB:7E:32:24:54:5C:74:CE:91:BC:0D:CD:5F:2B:D1:FC
X509v3 Authority Key Identifier:
keyid:74:15:FE:C4:AE:76:B2:4E:4F:02:99:16:49:91:7B:99:B7:40:04:4A
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/dBX-xK52sk5PApkWSZF7mbdABEo.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b3/987979-9693-45e3-85ba-ed5358b6da31/1/Xjpgprt-MiRUXHTOkbwNzV8r0fw.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/b3/987979-9693-45e3-85ba-ed5358b6da31/1/dBX-xK52sk5PApkWSZF7mbdABEo.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
92.42.102.0/24
Signature Algorithm: sha256WithRSAEncryption
7e:1d:58:7e:87:5a:06:95:ba:57:90:f9:c9:73:b8:22:91:51:
42:38:38:f0:94:da:b3:6d:c2:78:72:83:88:2a:e6:6a:31:f8:
af:23:12:89:61:2e:c2:bf:1a:a6:aa:94:c1:d7:5f:dd:d3:cf:
a7:39:b1:26:1f:9f:d9:20:53:9e:5b:b7:c8:6b:28:d0:23:e1:
59:9f:97:40:7f:8c:e0:31:ed:61:ca:48:ff:82:34:b9:51:ca:
65:22:ce:8b:97:da:bb:6c:07:08:de:7f:c1:98:d0:b0:eb:6c:
85:3c:30:47:c8:8d:b1:a6:75:72:6a:12:7d:3b:9e:8a:44:76:
9d:ef:f0:5d:28:fa:c8:65:e8:fb:a2:92:50:71:f9:52:1f:22:
30:cc:e0:1b:ca:50:18:86:a5:8a:41:c5:67:ef:f1:84:e3:14:
3b:f8:52:1b:9c:db:99:7b:67:03:d5:56:5a:67:c2:0c:f3:98:
3c:d3:57:08:38:2d:07:19:d8:1c:c3:7b:2d:96:ef:31:ac:f8:
6d:7d:7e:90:52:9a:3f:e9:16:86:c0:11:ee:ac:7e:2f:c4:d8:
bf:d4:c7:55:f0:81:fa:ff:98:c2:5b:21:0d:83:30:a0:0e:13:
68:60:ee:5b:a1:2a:ae:b2:38:e6:cc:ba:f5:dc:44:27:f6:f2:
33:00:b7:bb
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Mar 2 18:11:07 2026 by rpki-client