Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/da/eac2af-4bd3-4392-b5f4-48459d07b41e/1/et0ANPD0xEvteuT6Ln0R8Mv5CDM.roa
File: et0ANPD0xEvteuT6Ln0R8Mv5CDM.roa (raw, json)
Hash identifier: x2TO++GW8kYzLHgkxyjphk6fVr1Iv1BidAMSiHgZblg=
Subject key identifier: 7A:DD:00:34:F0:F4:C4:4B:ED:7A:E4:FA:2E:7D:11:F0:CB:F9:08:33
Certificate issuer: /CN=204995c3627f7aacdfe23915e442e3d3900631af
Certificate serial: 019B7C80517A324042A78A6FC18766181B70
Authority key identifier: 20:49:95:C3:62:7F:7A:AC:DF:E2:39:15:E4:42:E3:D3:90:06:31:AF
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/IEmVw2J_eqzf4jkV5ELj05AGMa8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/da/eac2af-4bd3-4392-b5f4-48459d07b41e/1/et0ANPD0xEvteuT6Ln0R8Mv5CDM.roa
Signing time: Fri 02 Jan 2026 02:19:02 +0000
ROA not before: Fri 02 Jan 2026 02:19:02 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 45038
IP address blocks: 2001:67c:630::/48 maxlen: 48
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9b:7c:80:51:7a:32:40:42:a7:8a:6f:c1:87:66:18:1b:70
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=204995c3627f7aacdfe23915e442e3d3900631af
Validity
Not Before: Jan 2 02:19:02 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=7add0034f0f4c44bed7ae4fa2e7d11f0cbf90833
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a3:28:66:1c:52:ef:7f:ea:92:0e:cc:fe:8b:6b:
79:da:63:39:fa:8f:94:b4:39:a8:cc:0a:55:c2:fb:
6b:1c:1a:a6:dd:60:fc:22:47:e9:e3:7b:cc:7d:85:
d8:72:dc:92:85:c3:81:b7:de:0c:c5:91:60:be:a1:
27:eb:a4:c5:13:aa:55:1f:f2:f5:5a:69:61:4a:9d:
73:0a:c5:06:ae:7b:af:bc:8f:05:36:76:c8:5c:c6:
f1:2c:3e:30:f3:fa:f0:79:60:d1:e9:5d:16:af:98:
cd:d5:f0:99:ba:af:83:e9:16:f2:5c:1e:25:65:5e:
74:d9:6d:73:6e:3d:71:68:db:77:b4:39:68:25:a1:
1c:0e:b0:b0:73:9b:f8:4e:c8:a8:71:35:39:15:be:
ac:5e:69:0f:37:1e:d0:1b:cb:cf:59:21:99:26:7f:
9f:fa:8f:cf:c3:2c:3a:79:95:56:6a:a3:01:b0:45:
33:9c:30:c0:ab:61:a5:a7:ee:26:18:f0:01:ff:88:
3b:cd:57:2a:04:ae:fc:a3:82:16:76:e0:71:cf:05:
7e:30:47:d2:25:31:70:f8:c6:c8:71:4b:0a:83:50:
22:af:96:0d:0e:20:ca:a4:a7:79:75:60:61:6d:48:
08:9d:06:0b:db:82:dd:e4:1d:d7:24:79:a5:0c:4a:
eb:f7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
7A:DD:00:34:F0:F4:C4:4B:ED:7A:E4:FA:2E:7D:11:F0:CB:F9:08:33
X509v3 Authority Key Identifier:
keyid:20:49:95:C3:62:7F:7A:AC:DF:E2:39:15:E4:42:E3:D3:90:06:31:AF
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/IEmVw2J_eqzf4jkV5ELj05AGMa8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/da/eac2af-4bd3-4392-b5f4-48459d07b41e/1/et0ANPD0xEvteuT6Ln0R8Mv5CDM.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/da/eac2af-4bd3-4392-b5f4-48459d07b41e/1/IEmVw2J_eqzf4jkV5ELj05AGMa8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2001:67c:630::/48
Signature Algorithm: sha256WithRSAEncryption
aa:02:42:d7:a2:c1:e2:e4:33:74:62:3b:76:99:69:55:6a:6a:
d7:03:0c:7d:b7:ad:fc:72:ea:f8:87:8d:ca:95:4e:c1:c9:cc:
87:43:b0:8c:e8:0c:56:f9:74:d0:bc:20:47:42:f6:66:a5:ce:
17:2c:ac:23:0c:91:07:46:1f:96:95:58:06:7c:b3:23:82:2c:
cc:80:bc:a6:16:06:1b:34:78:23:92:2b:62:ce:8a:62:68:2b:
e8:fb:77:67:d8:10:9c:00:46:69:a6:ca:52:34:69:c4:4b:59:
d4:1b:23:f0:13:dc:1c:0d:c2:57:a5:e6:6c:b3:1a:9b:b0:32:
cf:fe:83:07:c9:de:45:d7:ea:28:f4:c6:9f:e8:31:50:57:6d:
47:7e:1c:d5:87:4a:54:bd:f9:2a:b1:04:96:9b:9c:34:a2:3e:
15:0a:80:82:bf:8e:f6:84:74:35:87:97:31:e7:b5:dd:67:73:
33:bb:86:1a:2d:3c:e2:d3:05:a3:24:7f:5c:4f:b9:7a:98:81:
ab:ac:e4:b5:2b:2a:95:cd:db:66:89:b2:1c:e2:2b:3d:bc:71:
00:41:10:15:5f:a2:b7:af:0e:b7:b0:11:39:8d:2c:bc:dd:db:
4e:1b:5f:32:19:e0:39:f5:ec:86:90:eb:10:34:59:3b:40:e9:
52:99:da:fd
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Mar 2 22:43:46 2026 by rpki-client