Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d4/96d072-d129-42be-a75f-110ea8585354/1/rpRgekkmJ-v_7vKrJqugF96QRTo.roa
File: rpRgekkmJ-v_7vKrJqugF96QRTo.roa (raw, json)
Hash identifier: fwTcHjEaF15w21s8IS/kOgW8pHFkDEAyZT+fMpIoLfI=
Subject key identifier: AE:94:60:7A:49:26:27:EB:FF:EE:F2:AB:26:AB:A0:17:DE:90:45:3A
Certificate issuer: /CN=d65c1b7d9f04c7f04327e6c446416e2f8c31d57d
Certificate serial: 019B700BC315D81C5DB613AC90EED8382928
Authority key identifier: D6:5C:1B:7D:9F:04:C7:F0:43:27:E6:C4:46:41:6E:2F:8C:31:D5:7D
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/1lwbfZ8Ex_BDJ-bERkFuL4wx1X0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d4/96d072-d129-42be-a75f-110ea8585354/1/rpRgekkmJ-v_7vKrJqugF96QRTo.roa
Signing time: Tue 30 Dec 2025 16:16:17 +0000
ROA not before: Tue 30 Dec 2025 16:16:17 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 41731
IP address blocks: 45.91.60.0/22 maxlen: 22
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9b:70:0b:c3:15:d8:1c:5d:b6:13:ac:90:ee:d8:38:29:28
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=d65c1b7d9f04c7f04327e6c446416e2f8c31d57d
Validity
Not Before: Dec 30 16:16:17 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=ae94607a492627ebffeef2ab26aba017de90453a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b1:f2:a0:fc:48:de:24:aa:d8:ac:ad:64:a0:05:
cd:1b:91:2b:d2:cf:ee:aa:cf:95:a6:72:3f:0a:c2:
dc:29:03:c8:fa:27:62:fd:98:5e:f8:f4:f8:31:d8:
9d:4f:c8:f4:5e:cd:f5:61:92:d6:f0:9c:33:64:9a:
d4:d6:99:7b:90:fe:e3:31:92:de:2e:3a:0b:83:cf:
8a:b9:60:72:b5:c5:d0:72:a2:ce:07:8b:46:24:5b:
f0:07:33:23:54:ea:86:0c:f3:53:19:03:30:82:fa:
2d:36:32:74:86:8f:47:d5:9e:19:25:00:9e:79:d8:
52:3f:f5:57:5c:e9:89:22:e7:77:f9:79:8d:03:8d:
94:f5:40:01:46:a1:e7:3a:29:81:71:05:85:1f:2b:
5c:00:ef:16:cd:ec:6f:74:7e:55:a1:4a:c4:68:cb:
fe:05:c8:17:60:f4:fd:5f:57:a8:3d:41:ef:a3:94:
a6:7e:57:56:77:51:64:bc:70:7b:a5:83:a7:ab:49:
f1:fc:b5:f8:c7:1e:aa:22:4c:c5:15:8d:69:2c:1c:
e6:d7:10:78:68:af:f3:33:b9:c9:b0:83:1b:f1:55:
62:9a:b3:26:3d:9d:c9:e7:80:16:b7:2b:b7:0a:f4:
a2:45:a5:dc:6b:d4:f9:f9:15:65:3f:22:e4:10:38:
68:51
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
AE:94:60:7A:49:26:27:EB:FF:EE:F2:AB:26:AB:A0:17:DE:90:45:3A
X509v3 Authority Key Identifier:
keyid:D6:5C:1B:7D:9F:04:C7:F0:43:27:E6:C4:46:41:6E:2F:8C:31:D5:7D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/1lwbfZ8Ex_BDJ-bERkFuL4wx1X0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d4/96d072-d129-42be-a75f-110ea8585354/1/rpRgekkmJ-v_7vKrJqugF96QRTo.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/d4/96d072-d129-42be-a75f-110ea8585354/1/1lwbfZ8Ex_BDJ-bERkFuL4wx1X0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
45.91.60.0/22
Signature Algorithm: sha256WithRSAEncryption
7c:f9:41:72:0a:a3:5b:53:e1:d6:3c:dc:c5:4c:a0:a9:6d:c0:
9a:bb:5e:54:9d:a7:dc:1a:9a:fd:dd:bc:68:a3:38:0a:c9:9d:
e6:be:bb:03:4c:e3:ff:05:bd:6f:06:b7:64:fb:bc:a9:74:ba:
7d:b8:41:98:02:36:69:75:07:07:c6:80:13:42:e2:36:d8:cb:
0f:3d:1d:b5:5e:b3:28:72:97:bb:80:09:43:44:b3:23:84:ad:
82:b1:bf:1c:9b:8a:9c:26:5f:5a:46:14:15:20:d5:f7:ae:f6:
f8:28:1b:cf:92:27:0b:c1:95:2a:15:72:96:4b:a1:e1:26:6b:
72:c1:be:33:a1:44:6a:e0:b7:09:2a:3d:d2:9f:9f:2e:b5:1d:
81:76:4f:81:49:32:0e:da:21:ff:f7:d2:aa:58:2f:72:58:ce:
0c:c9:4e:c4:0f:e5:61:54:d4:ba:de:c3:fd:99:12:b2:3e:ba:
5d:8f:ad:b7:1f:e6:1a:09:d2:07:0d:cc:db:74:f2:b0:7d:c7:
19:33:6a:01:42:ac:e2:f5:cc:3b:06:60:0d:c6:c3:eb:4d:bf:
ce:6a:84:8b:85:58:ad:84:8a:e1:8f:dc:2f:65:e0:47:62:be:
8a:00:75:53:59:56:e2:23:26:58:b8:3f:38:bb:ba:fd:14:34:
71:88:06:e4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Mar 2 04:01:14 2026 by rpki-client