Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/bf/bba8e7-b9d2-4d9b-88b9-9408f1bc0d12/1/kntcIg5R-5qlE_1v0MgDc5JrGm8.roa
File: kntcIg5R-5qlE_1v0MgDc5JrGm8.roa (raw, json)
Hash identifier: znKqSMDbos60JURfUbINwysXxNpan+j5qOGaM247VDM=
Subject key identifier: 92:7B:5C:22:0E:51:FB:9A:A5:13:FD:6F:D0:C8:03:73:92:6B:1A:6F
Certificate issuer: /CN=5da38f7c3ecad29ec50644b70068b92a1be47074
Certificate serial: 019CDCE0441E80040EFA36E34A5F5F1B5CD9
Authority key identifier: 5D:A3:8F:7C:3E:CA:D2:9E:C5:06:44:B7:00:68:B9:2A:1B:E4:70:74
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/XaOPfD7K0p7FBkS3AGi5KhvkcHQ.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/bf/bba8e7-b9d2-4d9b-88b9-9408f1bc0d12/1/kntcIg5R-5qlE_1v0MgDc5JrGm8.roa
Signing time: Wed 11 Mar 2026 12:30:10 +0000
ROA not before: Wed 11 Mar 2026 12:30:10 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 210006
IP address blocks: 91.227.114.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9c:dc:e0:44:1e:80:04:0e:fa:36:e3:4a:5f:5f:1b:5c:d9
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=5da38f7c3ecad29ec50644b70068b92a1be47074
Validity
Not Before: Mar 11 12:30:10 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=927b5c220e51fb9aa513fd6fd0c80373926b1a6f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d5:0a:4d:a6:2a:f2:71:6d:29:b0:17:59:f1:78:
ca:c8:87:ae:ba:9d:ca:af:af:5b:9b:cc:fe:5a:3f:
35:c9:14:52:65:1f:9f:a5:78:fc:52:5f:71:67:f5:
ba:04:d8:7e:7f:54:6d:58:02:9a:20:a0:76:a4:61:
0f:66:db:c8:7b:63:ce:c6:f3:f2:0a:2c:0f:e2:1f:
46:65:e2:a5:10:22:4f:86:1c:11:9c:76:59:fa:fd:
9f:49:cb:c4:74:25:9a:06:58:34:2f:c7:d3:53:3c:
8e:70:88:5d:08:6a:bc:18:ef:38:0d:e4:5c:6c:b0:
49:52:fe:1b:d2:2a:88:da:ff:18:4c:c3:a3:c0:33:
78:a6:ad:59:80:1d:6e:66:d1:fb:74:fa:50:df:cd:
be:80:a0:3f:53:7c:fe:23:e9:7f:a9:42:37:d5:8c:
6d:da:c6:03:a4:67:02:c6:79:34:e7:0e:f2:c8:49:
66:91:e8:ad:da:79:1a:88:13:d9:ae:03:0e:0f:03:
54:e7:f8:03:6a:cb:0d:b6:cf:4a:10:07:fc:c2:77:
b7:bd:6a:f9:43:88:f6:93:48:b2:4a:29:2c:b9:57:
86:f4:4d:6c:bb:41:d8:b6:b1:c0:1a:cb:3c:7c:ff:
98:d0:27:11:b3:bc:51:a7:a3:aa:3d:1f:a6:34:83:
b8:b1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
92:7B:5C:22:0E:51:FB:9A:A5:13:FD:6F:D0:C8:03:73:92:6B:1A:6F
X509v3 Authority Key Identifier:
keyid:5D:A3:8F:7C:3E:CA:D2:9E:C5:06:44:B7:00:68:B9:2A:1B:E4:70:74
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/XaOPfD7K0p7FBkS3AGi5KhvkcHQ.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/bf/bba8e7-b9d2-4d9b-88b9-9408f1bc0d12/1/kntcIg5R-5qlE_1v0MgDc5JrGm8.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/bf/bba8e7-b9d2-4d9b-88b9-9408f1bc0d12/1/XaOPfD7K0p7FBkS3AGi5KhvkcHQ.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
91.227.114.0/24
Signature Algorithm: sha256WithRSAEncryption
63:00:d5:41:ab:30:a4:d4:39:95:89:6a:30:58:27:fb:76:75:
05:bc:4a:19:68:36:13:7b:89:89:06:cb:f5:59:d3:12:8d:12:
7f:a1:1d:d2:8c:ea:8b:58:db:2a:90:c3:3c:57:1f:28:df:0c:
e6:e5:4f:98:37:bf:64:bc:b0:5f:4b:e0:2f:c7:67:d2:ef:51:
61:ae:d6:68:22:f8:97:84:0f:73:16:b0:29:6e:91:8d:e1:46:
33:3f:eb:55:89:70:b2:57:a7:0a:86:87:87:a9:08:b4:f3:d7:
36:94:50:61:6b:42:7b:bc:c4:24:09:79:e1:85:ba:99:c6:a8:
6e:6d:cc:1d:f5:9a:03:16:e9:c2:ae:f1:d3:aa:46:bf:6a:72:
d3:15:8e:58:53:29:6a:15:72:bd:d1:2d:45:c1:ca:a3:dc:26:
da:a8:09:04:0b:0d:16:17:02:75:da:97:58:38:5a:15:fd:10:
2a:a2:61:90:4a:5d:b2:03:55:a2:bd:d1:06:99:f6:5c:4e:40:
f0:4e:b7:93:cb:3f:e2:d9:56:fc:76:30:51:72:0b:e8:a4:34:
0b:5f:7e:4a:9e:5f:38:d0:31:57:92:b1:c5:68:00:a6:33:91:
24:0f:d0:67:57:6f:43:2e:e7:1c:23:54:da:e8:61:9f:ae:36:
bd:38:f2:ff
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 17 13:27:53 2026 by rpki-client