Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/fb/c261bf-6c6b-4b07-b5aa-c08c0446d613/1/PbdnC4gI-LdpqBUnpI_quxn0pDI.roa
File: PbdnC4gI-LdpqBUnpI_quxn0pDI.roa (raw, json)
Hash identifier: zJnEpr5CVFgbqet5DBHxUH3vTf4zryH8mY+AWs0nf1A=
Subject key identifier: 3D:B7:67:0B:88:08:F8:B7:69:A8:15:27:A4:8F:EA:BB:19:F4:A4:32
Certificate issuer: /CN=b9e6c41a2b04fcd8f8e95718fa7d2e12cc44ac1f
Certificate serial: 019B7E386A78C455B4DF9CBB002C46F255A3
Authority key identifier: B9:E6:C4:1A:2B:04:FC:D8:F8:E9:57:18:FA:7D:2E:12:CC:44:AC:1F
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/uebEGisE_Nj46VcY-n0uEsxErB8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/fb/c261bf-6c6b-4b07-b5aa-c08c0446d613/1/PbdnC4gI-LdpqBUnpI_quxn0pDI.roa
Signing time: Fri 02 Jan 2026 10:19:45 +0000
ROA not before: Fri 02 Jan 2026 10:19:45 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 214928
IP address blocks: 2a12:de40:300::/40 maxlen: 40
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9b:7e:38:6a:78:c4:55:b4:df:9c:bb:00:2c:46:f2:55:a3
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=b9e6c41a2b04fcd8f8e95718fa7d2e12cc44ac1f
Validity
Not Before: Jan 2 10:19:45 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=3db7670b8808f8b769a81527a48feabb19f4a432
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e0:1f:be:4f:ee:7e:f5:81:6a:27:bc:ae:d6:aa:
bd:9d:01:5c:cf:b5:0d:d0:40:b8:c0:96:d1:02:53:
8b:15:f9:aa:33:6d:de:4b:63:72:2f:a0:16:81:40:
2d:5f:0e:3d:e1:a8:c9:70:35:e3:eb:8d:dc:ae:42:
1b:a4:18:c9:9b:d7:1b:b3:d0:b5:e3:fa:d5:88:88:
05:a8:f1:3d:70:69:6d:b6:a8:65:42:ed:fa:33:a7:
e2:43:7c:d8:e5:4e:f0:01:7e:d6:13:2d:23:ca:e9:
03:b8:52:c9:eb:b0:4d:c8:fe:1a:bb:df:57:07:fe:
45:c4:c0:e4:2b:2f:74:8f:f5:92:2a:cf:5d:a7:01:
cf:bd:f1:89:18:a5:e7:0f:d4:8b:ff:5e:1e:eb:46:
fd:75:bc:19:f7:77:ea:6f:8e:69:82:99:d7:0c:57:
89:4f:d0:65:50:16:90:4f:a7:6d:f4:db:5f:00:07:
77:a6:c2:8d:eb:0d:62:04:b6:70:b6:c0:36:57:de:
e9:71:28:f0:8e:82:38:d1:27:3c:be:2f:05:4d:a0:
35:bd:dd:28:36:99:44:11:96:01:5d:65:e4:bd:b2:
23:00:37:9c:05:7f:7a:26:c1:7d:0e:91:8f:9d:f8:
bf:43:60:b5:a6:c6:bd:a2:95:af:9a:1d:91:3d:51:
55:d7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
3D:B7:67:0B:88:08:F8:B7:69:A8:15:27:A4:8F:EA:BB:19:F4:A4:32
X509v3 Authority Key Identifier:
keyid:B9:E6:C4:1A:2B:04:FC:D8:F8:E9:57:18:FA:7D:2E:12:CC:44:AC:1F
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/uebEGisE_Nj46VcY-n0uEsxErB8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/fb/c261bf-6c6b-4b07-b5aa-c08c0446d613/1/PbdnC4gI-LdpqBUnpI_quxn0pDI.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/fb/c261bf-6c6b-4b07-b5aa-c08c0446d613/1/uebEGisE_Nj46VcY-n0uEsxErB8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a12:de40:300::/40
Signature Algorithm: sha256WithRSAEncryption
69:96:d1:dc:f4:bb:d6:5a:05:4e:1d:70:ea:5f:08:89:13:c1:
68:48:d4:0e:ec:6c:be:55:1f:b3:f4:85:14:c5:f1:07:16:8d:
e1:57:da:8b:d5:59:57:5a:e2:14:3c:d6:8c:ec:f0:8c:19:f0:
cf:b4:3a:b3:52:59:e3:bb:11:a5:1f:55:30:0d:de:7f:c8:2f:
97:d5:e5:c2:84:16:81:dc:e0:55:ab:f6:d9:de:be:32:7e:b0:
3c:07:ac:7b:41:18:c0:f3:74:42:92:8e:2f:30:17:0e:e4:a2:
c8:35:fe:5d:14:4a:3c:cb:2b:b4:5b:e9:92:14:b4:f9:0c:9a:
62:a1:ee:fd:4d:12:52:49:87:fb:f7:af:de:63:ec:b6:a5:fc:
b3:72:4d:ab:e1:81:eb:ef:5f:68:73:c2:c9:17:20:af:f4:a5:
5e:c7:71:74:86:7a:3a:d5:18:3d:15:09:62:4a:5e:dc:47:8d:
93:ab:e9:39:a3:53:30:d4:77:47:27:92:ae:93:ae:bf:d3:35:
4b:be:e1:dd:85:e1:0e:d7:05:48:2c:fe:86:84:c4:50:d1:b9:
d0:b6:67:10:80:c0:5c:95:ab:a2:ac:9e:79:aa:05:1c:71:af:
84:0e:97:74:49:b6:b7:da:a0:96:dd:0d:eb:62:cc:e1:5d:bc:
c5:af:95:ce
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Mar 2 11:05:58 2026 by rpki-client