![](/console.gif)
Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/0a/fefc97-81cf-4fe4-ac75-c44de5fd78ba/1/Npv434mcCqlAkJ_7zFnvJStIp5Y.roa
File: Npv434mcCqlAkJ_7zFnvJStIp5Y.roa (raw, json)
Hash identifier: KYOsDj1Ljk6N/PzbF6FmgaqF8H0WK9zcpTecUh+5rwQ=
Subject key identifier: 36:9B:F8:DF:89:9C:0A:A9:40:90:9F:FB:CC:59:EF:25:2B:48:A7:96
Certificate issuer: /CN=bc69e2061e8c7cee42efa4fef9f30f7bf6f6d053
Certificate serial: 0806092A
Authority key identifier: BC:69:E2:06:1E:8C:7C:EE:42:EF:A4:FE:F9:F3:0F:7B:F6:F6:D0:53
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/vGniBh6MfO5C76T--fMPe_b20FM.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/0a/fefc97-81cf-4fe4-ac75-c44de5fd78ba/1/Npv434mcCqlAkJ_7zFnvJStIp5Y.roa
Signing time: Sat 01 Jan 2022 03:55:31 +0000
ROA not before: Sat 01 Jan 2022 03:55:31 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 211567
IP address blocks: 193.111.79.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 134613290 (0x806092a)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=bc69e2061e8c7cee42efa4fef9f30f7bf6f6d053
Validity
Not Before: Jan 1 03:55:31 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=369bf8df899c0aa940909ffbcc59ef252b48a796
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9f:25:a5:db:f8:a1:1d:2e:d3:07:89:7a:a8:cb:
af:56:f0:51:17:0c:9c:3d:d0:10:6c:39:74:d4:aa:
d7:cd:51:bd:c8:84:d3:c5:1e:b2:7c:a9:c2:82:f1:
ce:5d:d7:e3:b0:a2:10:09:6d:64:99:2a:ed:3b:c2:
e2:af:9d:69:29:44:99:70:e0:94:65:b7:24:ec:bb:
56:1e:db:a6:c8:5a:86:9b:2c:fd:6f:74:83:94:cd:
b9:07:6f:de:bf:7d:de:c5:9f:31:27:0d:52:ff:a7:
57:c8:4d:00:1c:ac:f9:c9:ae:60:e3:fa:da:a7:83:
44:13:bd:7a:c7:48:4f:f5:a6:8b:d4:58:af:bf:1f:
94:3b:0b:01:f8:85:b3:16:ef:32:e1:5a:15:fe:ce:
bb:20:5d:e2:88:a7:ae:01:e6:57:63:b7:dc:85:1c:
05:71:93:07:6a:35:91:98:27:2a:2e:1e:1d:b5:e9:
99:02:6b:01:38:15:5f:2c:8f:b0:c3:a7:a3:37:54:
e7:70:51:54:a0:13:e8:c5:f3:a4:d3:4e:93:1f:d0:
0e:6b:38:70:99:9d:da:82:aa:ba:46:28:48:0e:e8:
88:c7:d6:31:38:84:5a:a4:ce:56:b5:8b:c3:56:db:
b2:df:92:69:98:1c:e2:0c:89:dc:2c:bd:05:eb:51:
e8:17
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
36:9B:F8:DF:89:9C:0A:A9:40:90:9F:FB:CC:59:EF:25:2B:48:A7:96
X509v3 Authority Key Identifier:
keyid:BC:69:E2:06:1E:8C:7C:EE:42:EF:A4:FE:F9:F3:0F:7B:F6:F6:D0:53
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/vGniBh6MfO5C76T--fMPe_b20FM.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/0a/fefc97-81cf-4fe4-ac75-c44de5fd78ba/1/Npv434mcCqlAkJ_7zFnvJStIp5Y.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/0a/fefc97-81cf-4fe4-ac75-c44de5fd78ba/1/vGniBh6MfO5C76T--fMPe_b20FM.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
193.111.79.0/24
Signature Algorithm: sha256WithRSAEncryption
93:a9:41:d7:e6:eb:94:4e:36:db:07:0d:66:cc:18:3e:f7:dd:
ec:3b:57:f9:38:61:b3:7c:ec:03:de:14:22:fa:6b:fa:41:72:
25:01:9d:3b:7b:c4:47:57:ff:69:f9:b6:99:48:db:29:90:94:
68:5b:4b:cd:e9:0c:46:37:41:4e:9d:04:a4:61:c2:81:f8:3f:
b0:c2:5f:a3:ce:75:ed:da:8d:61:a0:54:64:a1:60:df:d2:b5:
3b:90:27:90:4f:59:fa:4e:b8:67:70:06:a8:61:90:8b:52:83:
6c:d7:0e:5c:11:86:40:59:e9:0b:9d:47:fd:14:a0:6c:99:66:
c2:9f:0a:ce:4d:85:8d:96:ee:1d:65:5f:b2:13:53:ab:4a:88:
f8:49:44:c4:12:70:40:9d:d3:f7:54:9b:d8:3c:a8:55:ff:5e:
39:7a:79:81:03:34:ac:de:fe:11:e3:90:34:99:28:58:e6:81:
fc:0c:a8:e5:bc:42:d9:cd:0d:9b:92:e4:e6:0d:db:eb:1e:69:
f6:a1:07:ed:99:9f:06:82:0a:83:73:a2:d2:6f:81:d2:f8:91:
05:fe:b0:c9:b2:82:72:7f:50:f7:f5:87:c4:66:b0:8e:7b:33:
a8:ae:84:f5:26:b1:ed:f4:a3:88:80:0c:95:13:0b:76:f0:15:
26:af:77:51
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Feb 17 07:59:59 2025 by rpki-client