Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/fb/c261bf-6c6b-4b07-b5aa-c08c0446d613/1/zBJ815NEMGO5lAJofEA7mRpmXyc.roa
File: zBJ815NEMGO5lAJofEA7mRpmXyc.roa (raw, json)
Hash identifier: etc4FseBmmRq4WwS1VrTBZlwgMfeHf0SaswKmBne0ig=
Subject key identifier: CC:12:7C:D7:93:44:30:63:B9:94:02:68:7C:40:3B:99:1A:66:5F:27
Certificate issuer: /CN=b9e6c41a2b04fcd8f8e95718fa7d2e12cc44ac1f
Certificate serial: 019B7E3869938A9A8E6B2C5E4CA32BB324D6
Authority key identifier: B9:E6:C4:1A:2B:04:FC:D8:F8:E9:57:18:FA:7D:2E:12:CC:44:AC:1F
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/uebEGisE_Nj46VcY-n0uEsxErB8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/fb/c261bf-6c6b-4b07-b5aa-c08c0446d613/1/zBJ815NEMGO5lAJofEA7mRpmXyc.roa
Signing time: Fri 02 Jan 2026 10:19:44 +0000
ROA not before: Fri 02 Jan 2026 10:19:44 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 213764
IP address blocks: 2a12:de40:32::/48 maxlen: 48
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9b:7e:38:69:93:8a:9a:8e:6b:2c:5e:4c:a3:2b:b3:24:d6
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=b9e6c41a2b04fcd8f8e95718fa7d2e12cc44ac1f
Validity
Not Before: Jan 2 10:19:44 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=cc127cd793443063b99402687c403b991a665f27
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c5:52:4a:2b:eb:d1:bb:b0:e7:62:00:4a:69:75:
9e:c4:28:be:65:32:70:73:10:a3:77:f8:2c:47:7a:
6f:1e:5b:b8:2c:69:36:63:cd:ad:ea:45:1e:47:ea:
7b:b3:5b:41:51:59:3d:19:ec:a3:31:4e:cb:76:4f:
81:b8:07:ab:16:f1:04:c8:f6:62:84:70:16:82:08:
0d:14:07:ed:85:eb:6e:d9:ba:61:f4:62:29:c2:43:
7c:17:78:f3:34:fa:de:b4:e4:29:81:60:42:bd:e6:
e0:18:71:17:8b:b2:fe:44:63:90:18:37:22:6d:6d:
2e:e4:27:68:88:88:d3:67:35:2a:e7:29:d9:43:65:
ca:9d:13:ea:66:2e:d7:94:a3:9a:e2:7e:1f:43:3f:
13:55:4d:d6:68:d1:89:b3:30:6e:0c:2e:16:e7:ba:
14:0e:5a:96:a1:2b:09:ed:1b:b5:4b:a1:d7:7b:49:
94:73:82:20:d7:02:b4:1b:4c:64:c6:14:42:88:17:
d2:c2:c1:a4:40:18:21:4f:9b:fd:e3:2d:ca:1f:cc:
de:41:ca:28:21:17:97:a3:c0:cb:b8:fe:22:8c:2b:
5b:83:fb:8c:f5:12:c7:35:30:7a:d0:2f:49:29:6b:
a3:92:d1:9b:d6:f6:b3:58:9a:de:9e:84:dc:41:99:
3c:01
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
CC:12:7C:D7:93:44:30:63:B9:94:02:68:7C:40:3B:99:1A:66:5F:27
X509v3 Authority Key Identifier:
keyid:B9:E6:C4:1A:2B:04:FC:D8:F8:E9:57:18:FA:7D:2E:12:CC:44:AC:1F
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/uebEGisE_Nj46VcY-n0uEsxErB8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/fb/c261bf-6c6b-4b07-b5aa-c08c0446d613/1/zBJ815NEMGO5lAJofEA7mRpmXyc.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/fb/c261bf-6c6b-4b07-b5aa-c08c0446d613/1/uebEGisE_Nj46VcY-n0uEsxErB8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a12:de40:32::/48
Signature Algorithm: sha256WithRSAEncryption
7a:a4:89:76:bc:5a:66:fe:26:a3:f6:41:e3:f7:3c:93:a6:84:
e0:f5:28:5e:ef:cb:c9:e9:ee:15:6e:25:12:30:ca:3a:5d:0a:
a0:66:89:c4:cf:b9:8e:e6:d9:b1:da:b2:6d:eb:ae:e1:68:6b:
86:f6:33:54:b3:bc:65:07:ff:73:2b:f0:10:03:05:59:62:60:
d5:7e:e8:48:c2:b9:f5:d7:59:f5:ed:e0:9d:af:1e:e9:52:d4:
0e:9c:8b:96:d2:44:d7:82:be:95:55:a2:09:42:f4:86:25:d5:
51:5b:cc:98:f9:31:bd:ff:de:a0:6e:d4:46:f5:83:58:99:bf:
28:64:ae:e5:20:c4:bd:c2:51:60:92:31:20:30:91:f4:e1:e6:
9b:97:0c:28:3b:38:0a:44:50:2d:94:b6:20:3e:56:6d:eb:71:
8e:87:61:65:6c:2c:8f:76:3e:d7:6f:f0:6f:44:f9:a8:e0:c6:
26:06:c1:8d:f4:fb:74:50:a6:23:66:6c:e1:07:e5:bf:0c:2d:
6b:7c:5b:f0:77:5e:c0:63:56:43:ae:66:ef:49:68:db:2d:3c:
3a:2d:3c:81:2a:88:3a:dd:8a:ec:34:14:5c:44:59:f9:60:93:
ac:b5:9c:b5:72:ff:43:ee:58:a0:43:73:d4:3f:38:3c:1c:e5:
e3:b0:65:49
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Mar 2 11:05:55 2026 by rpki-client