Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e2/278663-b135-4db1-a044-20624b3c157f/1/QIrfruKOgcCdeLOxo1gjef-8ctQ.roa
File: QIrfruKOgcCdeLOxo1gjef-8ctQ.roa (raw, json)
Hash identifier: ygxie1MG80d/ES3srEdL/VIbkXpaU3ge6t4lQo5emFs=
Subject key identifier: 40:8A:DF:AE:E2:8E:81:C0:9D:78:B3:B1:A3:58:23:79:FF:BC:72:D4
Certificate issuer: /CN=fb32e9f4aa32aba7312fab054b174dce8c515ca3
Certificate serial: 019B7AC7DC3B0388EA4897E46EDAC2778DC5
Authority key identifier: FB:32:E9:F4:AA:32:AB:A7:31:2F:AB:05:4B:17:4D:CE:8C:51:5C:A3
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/1-zLp9Koyq6cxL6sFSxdNzoxRXKM.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/e2/278663-b135-4db1-a044-20624b3c157f/1/QIrfruKOgcCdeLOxo1gjef-8ctQ.roa
Signing time: Thu 01 Jan 2026 18:17:56 +0000
ROA not before: Thu 01 Jan 2026 18:17:56 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 49373
IP address blocks: 91.214.76.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9b:7a:c7:dc:3b:03:88:ea:48:97:e4:6e:da:c2:77:8d:c5
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=fb32e9f4aa32aba7312fab054b174dce8c515ca3
Validity
Not Before: Jan 1 18:17:56 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=408adfaee28e81c09d78b3b1a3582379ffbc72d4
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:94:bf:3d:ba:b8:ba:ee:93:7b:98:53:3b:e5:3f:
9b:a3:76:e5:72:2b:40:09:6c:a8:33:7b:60:18:6f:
ca:8f:74:12:f2:50:59:b0:72:98:c4:43:ed:ac:4e:
5c:41:7c:17:c1:a5:e7:b4:fa:04:03:90:fe:72:ea:
4e:7e:dd:d1:e4:3c:11:90:80:b6:a9:14:f4:29:3c:
bf:af:de:92:b4:37:93:10:65:37:97:81:cc:c0:50:
78:56:88:fa:c9:ad:40:6f:4c:32:f9:6a:42:a8:d7:
5a:a1:73:3b:6b:18:00:2f:d2:d7:ff:6f:62:55:84:
02:8b:f5:a6:cb:62:2c:39:dc:35:e0:b2:af:d0:0c:
25:97:a8:73:cf:7c:db:08:b1:f3:30:e2:d6:05:35:
21:b7:9c:b5:71:44:08:54:a9:1a:46:8f:29:6c:84:
5a:b6:31:3d:3c:51:58:f5:5d:ea:66:59:71:b5:df:
3f:31:8b:e1:1b:fa:a6:0e:11:5e:c3:f7:22:bb:d2:
70:b0:bd:9d:7a:98:8e:2f:4a:71:dc:83:ec:e0:d6:
0b:81:18:ad:b4:48:b9:cd:ae:14:a7:42:52:eb:f5:
2a:5b:b8:5b:ac:48:e8:21:4c:41:74:70:d4:92:9b:
5e:a6:71:ea:6c:a5:4a:a1:55:3c:7c:a0:7f:db:9e:
2b:ad
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
40:8A:DF:AE:E2:8E:81:C0:9D:78:B3:B1:A3:58:23:79:FF:BC:72:D4
X509v3 Authority Key Identifier:
keyid:FB:32:E9:F4:AA:32:AB:A7:31:2F:AB:05:4B:17:4D:CE:8C:51:5C:A3
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/1-zLp9Koyq6cxL6sFSxdNzoxRXKM.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e2/278663-b135-4db1-a044-20624b3c157f/1/QIrfruKOgcCdeLOxo1gjef-8ctQ.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/e2/278663-b135-4db1-a044-20624b3c157f/1/1-zLp9Koyq6cxL6sFSxdNzoxRXKM.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
91.214.76.0/24
Signature Algorithm: sha256WithRSAEncryption
92:b4:12:aa:a6:66:c8:39:e5:3f:81:6e:a5:c8:96:f1:38:68:
63:d4:c8:0b:db:46:c6:11:6b:b8:10:03:0e:44:2b:d2:d2:34:
df:9a:a3:31:f8:59:a8:5d:1d:d1:5e:75:63:a6:4b:37:18:9e:
52:73:fe:18:1f:dc:52:f6:c2:5d:08:08:4d:04:96:55:74:f8:
e9:5b:44:de:cb:5f:b3:0a:47:57:b1:34:30:95:82:00:6b:db:
a2:f3:07:8e:43:f3:52:ff:71:f8:d6:44:ff:f6:91:b9:06:bb:
f4:9a:81:ae:ec:2c:06:0d:b7:04:3e:c4:38:12:d2:7c:48:dc:
96:9e:e0:81:42:18:93:10:42:84:59:b9:d3:80:cf:3c:33:66:
36:0a:f4:4c:75:82:76:9b:f3:fc:3e:9c:3f:4e:77:18:fa:cb:
3f:c4:03:91:9c:b6:cb:b4:d3:b8:b6:6e:40:71:82:42:37:a2:
97:bc:a0:03:61:d3:12:d1:0d:6e:57:ce:b2:b3:34:36:60:a1:
63:aa:3a:01:2c:a2:a0:5a:d3:a2:d4:13:e8:3c:22:49:a2:a9:
5d:4a:9c:04:59:e3:63:8e:d0:a8:ec:48:21:0d:02:60:1d:e4:
8f:66:55:58:bc:94:6a:be:07:15:f4:08:60:db:5e:5f:d8:bb:
49:ef:ef:3f
-----BEGIN CERTIFICATE-----
MIIE/zCCA+egAwIBAgISAZt6x9w7A4jqSJfkbtrCd43FMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGZiMzJlOWY0YWEzMmFiYTczMTJmYWIwNTRiMTc0ZGNlOGM1
MTVjYTMwHhcNMjYwMTAxMTgxNzU2WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
Eyg0MDhhZGZhZWUyOGU4MWMwOWQ3OGIzYjFhMzU4MjM3OWZmYmM3MmQ0MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAlL89uri67pN7mFM75T+bo3blcitA
CWyoM3tgGG/Kj3QS8lBZsHKYxEPtrE5cQXwXwaXntPoEA5D+cupOft3R5DwRkIC2
qRT0KTy/r96StDeTEGU3l4HMwFB4Voj6ya1Ab0wy+WpCqNdaoXM7axgAL9LX/29i
VYQCi/Wmy2IsOdw14LKv0Awll6hzz3zbCLHzMOLWBTUht5y1cUQIVKkaRo8pbIRa
tjE9PFFY9V3qZllxtd8/MYvhG/qmDhFew/ciu9JwsL2depiOL0px3IPs4NYLgRit
tEi5za4Up0JS6/UqW7hbrEjoIUxBdHDUkptepnHqbKVKoVU8fKB/254rrQIDAQAB
o4ICCzCCAgcwHQYDVR0OBBYEFECK367ijoHAnXizsaNYI3n/vHLUMB8GA1UdIwQY
MBaAFPsy6fSqMqunMS+rBUsXTc6MUVyjMA4GA1UdDwEB/wQEAwIHgDBlBggrBgEF
BQcBAQRZMFcwVQYIKwYBBQUHMAKGSXJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvMS16THA5S295cTZjeEw2c0ZTeGROem94UlhLTS5jZXIw
gY0GCCsGAQUFBwELBIGAMH4wfAYIKwYBBQUHMAuGcHJzeW5jOi8vcnBraS5yaXBl
Lm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvZTIvMjc4NjYzLWIxMzUtNGRiMS1hMDQ0
LTIwNjI0YjNjMTU3Zi8xL1FJcmZydUtPZ2NDZGVMT3hvMWdqZWYtOGN0US5yb2Ew
gYIGA1UdHwR7MHkwd6B1oHOGcXJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBvc2l0
b3J5L0RFRkFVTFQvZTIvMjc4NjYzLWIxMzUtNGRiMS1hMDQ0LTIwNjI0YjNjMTU3
Zi8xLzEtekxwOUtveXE2Y3hMNnNGU3hkTnpveFJYS00uY3JsMBgGA1UdIAEB/wQO
MAwwCgYIKwYBBQUHDgIwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgABMAYDBABb1kww
DQYJKoZIhvcNAQELBQADggEBAJK0EqqmZsg55T+BbqXIlvE4aGPUyAvbRsYRa7gQ
Aw5EK9LSNN+aozH4WahdHdFedWOmSzcYnlJz/hgf3FL2wl0ICE0EllV0+OlbRN7L
X7MKR1exNDCVggBr26LzB45D81L/cfjWRP/2kbkGu/Saga7sLAYNtwQ+xDgS0nxI
3Jae4IFCGJMQQoRZudOAzzwzZjYK9Ex1gnab8/w+nD9Odxj6yz/EA5Gctsu007i2
bkBxgkI3ope8oANh0xLRDW5XzrKzNDZgoWOqOgEsoqBa06LUE+g8IkmiqV1KnARZ
42OO0KjsSCENAmAd5I9mVVi8lGq+BxX0CGDbXl/Yu0nv7z8=
-----END CERTIFICATE-----
Generated at Mon Mar 2 16:59:53 2026 by rpki-client