Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/fb/c261bf-6c6b-4b07-b5aa-c08c0446d613/1/AtXs8TT9g49_5EQstEVWGSFxLRs.roa
File: AtXs8TT9g49_5EQstEVWGSFxLRs.roa (raw, json)
Hash identifier: N5wvnlJt6Y84znnohaS9xjKGCCASxb9eIJA3xELDLEg=
Subject key identifier: 02:D5:EC:F1:34:FD:83:8F:7F:E4:44:2C:B4:45:56:19:21:71:2D:1B
Certificate issuer: /CN=b9e6c41a2b04fcd8f8e95718fa7d2e12cc44ac1f
Certificate serial: 019B7E386A0082C5EA632219AFA57B58E4DA
Authority key identifier: B9:E6:C4:1A:2B:04:FC:D8:F8:E9:57:18:FA:7D:2E:12:CC:44:AC:1F
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/uebEGisE_Nj46VcY-n0uEsxErB8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/fb/c261bf-6c6b-4b07-b5aa-c08c0446d613/1/AtXs8TT9g49_5EQstEVWGSFxLRs.roa
Signing time: Fri 02 Jan 2026 10:19:44 +0000
ROA not before: Fri 02 Jan 2026 10:19:44 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 214339
IP address blocks: 2a12:de40:46::/48 maxlen: 48
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9b:7e:38:6a:00:82:c5:ea:63:22:19:af:a5:7b:58:e4:da
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=b9e6c41a2b04fcd8f8e95718fa7d2e12cc44ac1f
Validity
Not Before: Jan 2 10:19:44 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=02d5ecf134fd838f7fe4442cb445561921712d1b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a2:ad:88:b7:14:aa:b5:42:27:7e:32:5d:b4:a7:
68:2c:1c:5c:0f:bd:1b:e3:16:b9:88:f3:b8:5d:d4:
38:0b:6f:df:64:d1:2b:73:b6:18:8a:62:20:59:ad:
12:e6:eb:d8:a4:fa:5c:a6:94:d1:4a:20:43:8e:e2:
25:f1:d4:8e:02:59:fd:2c:97:6c:3c:0f:04:2e:f6:
92:0c:3b:c8:e6:25:fa:8b:01:16:44:ed:8e:5b:8c:
51:56:7b:6f:a1:a1:95:c9:02:19:e0:c8:d7:23:dd:
84:95:4b:37:70:15:6e:a9:b4:80:3f:75:4a:93:42:
77:70:5b:1b:5b:96:81:55:99:2c:b6:1d:69:da:31:
91:de:af:0e:70:90:cd:be:03:87:b8:e4:81:97:7d:
06:0a:4c:26:56:e3:c2:83:53:0e:78:3c:2b:80:fb:
17:4a:bb:50:26:dc:57:b2:b9:04:f2:1d:0f:e1:46:
24:81:96:11:6d:10:ef:64:01:cd:a1:09:30:8f:09:
ac:f8:f0:91:c1:2d:0b:a7:84:17:f8:cb:01:49:cc:
45:c5:a1:56:b4:e5:78:94:a8:23:24:26:ec:f5:28:
f7:51:9c:e4:f9:ef:12:c0:52:6e:21:4b:c8:07:10:
2b:df:c9:09:1b:f9:a0:f3:8c:c4:ce:47:65:cc:29:
32:39
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
02:D5:EC:F1:34:FD:83:8F:7F:E4:44:2C:B4:45:56:19:21:71:2D:1B
X509v3 Authority Key Identifier:
keyid:B9:E6:C4:1A:2B:04:FC:D8:F8:E9:57:18:FA:7D:2E:12:CC:44:AC:1F
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/uebEGisE_Nj46VcY-n0uEsxErB8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/fb/c261bf-6c6b-4b07-b5aa-c08c0446d613/1/AtXs8TT9g49_5EQstEVWGSFxLRs.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/fb/c261bf-6c6b-4b07-b5aa-c08c0446d613/1/uebEGisE_Nj46VcY-n0uEsxErB8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a12:de40:46::/48
Signature Algorithm: sha256WithRSAEncryption
0f:85:09:6a:44:e4:b9:68:dd:f9:2c:07:eb:5d:b8:c3:df:fb:
6d:7b:c5:1c:2d:ed:0d:92:8d:d1:8a:0e:40:0b:39:dd:fe:73:
db:51:6b:ed:4a:4e:e2:c1:84:29:6f:1f:eb:ab:38:4f:14:7d:
92:d9:99:d3:56:48:c2:14:9c:70:39:da:4b:69:43:50:08:21:
30:7e:05:21:21:5b:57:30:93:15:53:14:8f:14:18:df:c4:6c:
72:03:54:fe:90:8e:1d:93:74:d6:3e:18:b9:9b:f1:68:1a:06:
de:2a:c3:18:be:df:7f:75:ba:16:73:42:47:8e:78:dd:46:62:
bd:70:48:c9:ec:e2:5e:7c:6c:1b:37:d0:c6:9e:f1:e0:f4:5f:
e7:4e:6e:9e:3f:d2:08:18:d6:ed:56:d8:81:35:6a:3a:8c:88:
5d:ce:0b:b4:0b:e6:3a:37:8f:e6:b9:e1:1b:c9:f8:bf:ce:71:
9b:f9:28:d5:16:10:b8:28:00:fa:de:6f:f8:51:dd:fc:12:20:
0a:8c:55:fe:e4:0b:25:60:3f:af:3f:0c:c9:b7:55:bf:e9:59:
69:b5:c7:e9:3a:52:0d:00:2b:6c:3d:48:14:d7:2c:d8:25:8c:
8b:b4:ec:62:2d:8d:5b:4e:85:c7:60:6c:43:96:7f:bb:d6:73:
bf:c3:eb:c3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Mar 2 11:05:58 2026 by rpki-client