Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c3/2854f2-82d7-42bd-acbc-d08a9cdec986/1/UkZFoezS0leiI_kWIb9UyHLyBSk.roa
File: UkZFoezS0leiI_kWIb9UyHLyBSk.roa (raw, json)
Hash identifier: 00IbUIp2whqbo8DVKmdfXvzNpBY/JnPeJjzwUbvBZkk=
Subject key identifier: 52:46:45:A1:EC:D2:D2:57:A2:23:F9:16:21:BF:54:C8:72:F2:05:29
Certificate issuer: /CN=9a620e691d95aaceb3262dbdfcb0ca5099ee2444
Certificate serial: 019B7AC956D4A1C4BE61DDB3AB74082F28D2
Authority key identifier: 9A:62:0E:69:1D:95:AA:CE:B3:26:2D:BD:FC:B0:CA:50:99:EE:24:44
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/mmIOaR2Vqs6zJi29_LDKUJnuJEQ.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c3/2854f2-82d7-42bd-acbc-d08a9cdec986/1/UkZFoezS0leiI_kWIb9UyHLyBSk.roa
Signing time: Thu 01 Jan 2026 18:19:33 +0000
ROA not before: Thu 01 Jan 2026 18:19:33 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 212717
IP address blocks: 2001:678:e24::/48 maxlen: 48
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9b:7a:c9:56:d4:a1:c4:be:61:dd:b3:ab:74:08:2f:28:d2
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=9a620e691d95aaceb3262dbdfcb0ca5099ee2444
Validity
Not Before: Jan 1 18:19:33 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=524645a1ecd2d257a223f91621bf54c872f20529
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d5:83:6b:0b:9b:08:7b:bc:be:e6:ac:ba:33:d0:
e7:5f:9e:38:b5:00:d5:8c:98:c6:ff:9c:17:d1:61:
bb:7a:91:df:1c:2a:e7:6b:99:d9:c6:b3:87:f4:85:
4c:d0:de:c2:0b:e8:47:17:9d:a9:6c:9f:26:28:79:
cf:c6:58:95:d3:04:ac:5d:d4:45:ce:9d:ee:84:81:
53:ab:66:b6:b6:87:80:bc:63:aa:c3:27:83:5a:f0:
ba:98:36:50:6d:5b:b7:76:cd:3c:67:62:1a:8b:b4:
7a:e1:04:25:77:ec:e5:25:d3:09:25:56:97:bb:d6:
c1:e2:c5:e3:6e:8a:cf:ad:7c:f0:9c:04:7a:ba:b7:
6a:3c:d6:e3:32:78:c0:59:9f:83:e5:af:08:82:a5:
b2:42:11:c7:f2:61:d0:35:f5:34:05:cb:ca:d9:13:
b6:fa:73:2f:e3:66:f3:65:1d:b3:1e:b2:a2:81:c8:
13:41:3e:cc:bc:4d:ad:c2:de:56:78:12:b4:00:44:
df:5e:67:c8:4c:3d:69:e9:bf:c6:e5:17:4a:54:4d:
7b:f2:ec:02:5c:8b:f8:79:61:0c:47:6a:96:ba:4f:
f4:11:8b:51:4b:53:82:96:b7:1e:ec:42:73:92:1b:
1e:ec:69:65:0e:b5:ef:f1:93:37:58:a4:bb:ed:2d:
b3:f1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
52:46:45:A1:EC:D2:D2:57:A2:23:F9:16:21:BF:54:C8:72:F2:05:29
X509v3 Authority Key Identifier:
keyid:9A:62:0E:69:1D:95:AA:CE:B3:26:2D:BD:FC:B0:CA:50:99:EE:24:44
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/mmIOaR2Vqs6zJi29_LDKUJnuJEQ.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c3/2854f2-82d7-42bd-acbc-d08a9cdec986/1/UkZFoezS0leiI_kWIb9UyHLyBSk.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c3/2854f2-82d7-42bd-acbc-d08a9cdec986/1/mmIOaR2Vqs6zJi29_LDKUJnuJEQ.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2001:678:e24::/48
Signature Algorithm: sha256WithRSAEncryption
60:bd:21:a1:da:1a:2a:e4:1e:59:be:9e:9e:96:07:a6:0c:43:
7b:27:e7:ac:1c:23:bd:78:a6:e1:29:60:51:db:53:d7:a5:31:
68:b7:75:05:cc:a6:96:15:62:65:28:9b:72:4f:bf:08:36:d5:
8a:6f:f5:48:3f:78:23:9d:7b:5e:d7:2c:08:be:c5:aa:3a:06:
6f:95:16:2a:88:ee:0a:a3:62:d4:c2:b6:e7:61:79:44:9b:fe:
a7:f6:f1:85:26:da:35:18:53:f4:15:da:62:ac:a6:9d:ae:26:
3a:9c:b7:e4:b5:fe:64:a3:ad:aa:fe:1f:1a:9c:4a:7a:ad:8f:
18:6e:d1:5b:2a:30:7b:72:73:a3:31:72:18:87:52:ba:05:3b:
86:0a:32:a5:71:54:3d:8d:13:0b:94:97:65:58:c2:c6:f6:ac:
5a:c6:b0:7b:45:fe:11:6c:f2:c9:9b:fc:58:62:67:53:1b:96:
54:60:3d:e5:8a:74:72:bd:dc:1d:ff:5b:5e:50:b5:a3:cc:1c:
b4:4f:26:eb:3c:99:d8:df:2b:1f:2c:5c:eb:d3:25:e2:66:26:
4c:4e:fd:4f:3d:91:c1:cb:db:85:91:c0:d9:c0:d1:88:6c:13:
3b:fb:49:60:79:ce:75:7e:61:57:a9:9d:ac:58:e8:bb:8c:d7:
51:db:e6:32
-----BEGIN CERTIFICATE-----
MIIFADCCA+igAwIBAgISAZt6yVbUocS+Yd2zq3QILyjSMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDlhNjIwZTY5MWQ5NWFhY2ViMzI2MmRiZGZjYjBjYTUwOTll
ZTI0NDQwHhcNMjYwMTAxMTgxOTMzWhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
Eyg1MjQ2NDVhMWVjZDJkMjU3YTIyM2Y5MTYyMWJmNTRjODcyZjIwNTI5MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA1YNrC5sIe7y+5qy6M9DnX544tQDV
jJjG/5wX0WG7epHfHCrna5nZxrOH9IVM0N7CC+hHF52pbJ8mKHnPxliV0wSsXdRF
zp3uhIFTq2a2toeAvGOqwyeDWvC6mDZQbVu3ds08Z2Iai7R64QQld+zlJdMJJVaX
u9bB4sXjborPrXzwnAR6urdqPNbjMnjAWZ+D5a8IgqWyQhHH8mHQNfU0BcvK2RO2
+nMv42bzZR2zHrKigcgTQT7MvE2twt5WeBK0AETfXmfITD1p6b/G5RdKVE178uwC
XIv4eWEMR2qWuk/0EYtRS1OClrce7EJzkhse7GllDrXv8ZM3WKS77S2z8QIDAQAB
o4ICDDCCAggwHQYDVR0OBBYEFFJGRaHs0tJXoiP5FiG/VMhy8gUpMB8GA1UdIwQY
MBaAFJpiDmkdlarOsyYtvfywylCZ7iREMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvbW1JT2FSMlZxczZ6SmkyOV9MREtVSm51SkVRLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9jMy8yODU0ZjItODJkNy00MmJkLWFjYmMt
ZDA4YTljZGVjOTg2LzEvVWtaRm9lelMwbGVpSV9rV0liOVV5SEx5QlNrLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9jMy8yODU0ZjItODJkNy00MmJkLWFjYmMtZDA4YTljZGVjOTg2
LzEvbW1JT2FSMlZxczZ6SmkyOV9MREtVSm51SkVRLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCIGCCsGAQUFBwEHAQH/BBMwETAPBAIAAjAJAwcAIAEGeA4k
MA0GCSqGSIb3DQEBCwUAA4IBAQBgvSGh2hoq5B5Zvp6elgemDEN7J+esHCO9eKbh
KWBR21PXpTFot3UFzKaWFWJlKJtyT78INtWKb/VIP3gjnXte1ywIvsWqOgZvlRYq
iO4Ko2LUwrbnYXlEm/6n9vGFJto1GFP0FdpirKadriY6nLfktf5ko62q/h8anEp6
rY8YbtFbKjB7cnOjMXIYh1K6BTuGCjKlcVQ9jRMLlJdlWMLG9qxaxrB7Rf4RbPLJ
m/xYYmdTG5ZUYD3linRyvdwd/1teULWjzBy0TybrPJnY3ysfLFzr0yXiZiZMTv1P
PZHBy9uFkcDZwNGIbBM7+0lgec51fmFXqZ2sWOi7jNdR2+Yy
-----END CERTIFICATE-----
Generated at Mon Mar 2 07:35:13 2026 by rpki-client