![](/console.gif)
Route Origin Authorization
$ rpki-client -vvf rpki.cc/repo/MythicalKitten/10/326130363a396638373a3a2f33322d3332203d3e20323034383537.roa
File: 326130363a396638373a3a2f33322d3332203d3e20323034383537.roa (raw, json)
Hash identifier: TcrUN6OFdqyv5LZf6jughYuqUmJ/iPl0N3DL28aa45Q=
Subject key identifier: FE:16:7B:CD:EF:50:0E:32:D4:DD:D2:41:42:0E:7D:15:E2:CC:2A:6B
Certificate issuer: /CN=A8707AD424B98E28A709FFA2BFDF7DB63930D093
Certificate serial: 5AD9671234B61DF20E716580B3242470C4DCD512
Authority key identifier: A8:70:7A:D4:24:B9:8E:28:A7:09:FF:A2:BF:DF:7D:B6:39:30:D0:93
Authority info access: rsync://rsync.paas.rpki.ripe.net/repository/37411d6b-3615-4a86-8673-340ce2f226ee/6/A8707AD424B98E28A709FFA2BFDF7DB63930D093.cer
Subject info access: rsync://rpki.cc/repo/MythicalKitten/10/326130363a396638373a3a2f33322d3332203d3e20323034383537.roa
Signing time: Sun 07 May 2023 08:10:29 +0000
ROA not before: Sun 07 May 2023 08:05:29 +0000
ROA not after: Sun 05 May 2024 08:10:29 +0000
asID: 204857
IP address blocks: 2a06:9f87::/32 maxlen: 32
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
5a:d9:67:12:34:b6:1d:f2:0e:71:65:80:b3:24:24:70:c4:dc:d5:12
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A8707AD424B98E28A709FFA2BFDF7DB63930D093
Validity
Not Before: May 7 08:05:29 2023 GMT
Not After : May 5 08:10:29 2024 GMT
Subject: CN=FE167BCDEF500E32D4DDD241420E7D15E2CC2A6B
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a6:fa:28:88:82:79:14:63:96:ec:91:4b:83:d4:
de:38:91:be:5e:68:95:6a:ca:3c:46:58:18:ca:72:
5e:61:b5:91:21:a8:16:98:02:03:dc:a8:51:14:e3:
07:26:0a:24:0e:f9:1c:16:0f:78:a8:d5:05:36:de:
a6:a3:6e:29:b8:7f:f6:a8:90:ce:9c:f7:78:6f:0c:
ae:78:c4:58:51:3b:23:8d:bd:be:ae:9b:17:f5:cb:
89:ec:1e:05:d8:66:5d:7e:4f:7e:5d:4c:bc:20:e3:
55:c7:55:61:88:0c:7c:73:54:b7:45:a6:58:41:f2:
30:84:57:b4:70:e5:e1:a0:d4:10:bd:72:90:97:81:
84:d1:e4:5c:a3:b3:f0:0a:cf:a1:46:90:d9:a7:0e:
38:14:0f:f1:e7:a8:25:2d:90:1e:21:11:79:ea:ea:
eb:b1:ed:0f:d8:23:c6:04:a7:71:64:1f:f4:b3:66:
b7:cc:66:2d:f1:4f:4d:61:60:39:bc:d4:35:cb:ac:
b2:dc:3b:36:a8:b8:72:b9:c3:54:f0:67:e6:06:2b:
b7:d5:76:0a:98:a2:c6:09:8d:b7:12:73:cc:42:86:
47:36:73:31:34:6a:e3:93:df:f0:9f:86:5b:9d:d1:
ee:b9:31:a9:60:3f:97:4e:45:d5:50:b1:2d:e7:40:
63:cb
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
FE:16:7B:CD:EF:50:0E:32:D4:DD:D2:41:42:0E:7D:15:E2:CC:2A:6B
X509v3 Authority Key Identifier:
keyid:A8:70:7A:D4:24:B9:8E:28:A7:09:FF:A2:BF:DF:7D:B6:39:30:D0:93
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.cc/repo/MythicalKitten/10/A8707AD424B98E28A709FFA2BFDF7DB63930D093.crl
Authority Information Access:
CA Issuers - URI:rsync://rsync.paas.rpki.ripe.net/repository/37411d6b-3615-4a86-8673-340ce2f226ee/6/A8707AD424B98E28A709FFA2BFDF7DB63930D093.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.cc/repo/MythicalKitten/10/326130363a396638373a3a2f33322d3332203d3e20323034383537.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a06:9f87::/32
Signature Algorithm: sha256WithRSAEncryption
28:87:f3:ef:6d:42:d8:db:b8:dd:0c:f7:6c:d1:68:e9:f6:f3:
ab:e7:36:4b:00:3f:43:c0:c8:86:1d:7a:4a:e5:9a:8d:e6:5c:
e9:cf:ad:b9:4d:b2:d7:f8:09:3c:b4:82:a9:10:0c:4f:35:92:
78:28:a0:ce:11:15:fc:46:1a:5d:7d:b5:c5:3e:5a:25:4f:56:
64:56:69:c5:0e:17:d9:22:54:47:00:46:9b:2c:93:67:5b:78:
32:da:20:b0:bd:6e:4a:a7:ec:21:27:f2:4e:00:44:46:e8:31:
e4:46:fa:a9:e9:f3:2f:7b:87:8c:e6:97:3a:0d:4e:6e:7b:62:
61:71:a3:d8:62:38:c5:6c:d9:ec:40:c1:82:67:f4:ec:a5:2c:
57:61:3f:c5:32:ac:9c:01:e1:e3:7d:93:31:f4:63:84:00:a8:
d2:c7:22:cc:98:34:ec:eb:d2:c9:9d:a6:59:f0:8b:df:52:f8:
33:28:3e:ab:c9:56:3b:f2:bc:86:f9:1b:6b:c6:53:4b:9d:4a:
9c:28:0e:d7:b8:c7:26:87:c1:07:26:d1:38:7e:5f:53:f4:25:
42:90:2f:a3:e1:db:df:db:91:00:f1:3b:84:8f:e6:46:49:3c:
c4:43:81:c6:ce:1e:27:7b:0f:c0:ff:61:4d:f4:e6:35:56:ff:
d1:cb:b0:6f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Feb 16 22:28:01 2025 by rpki-client