![](/console.gif)
Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/0e/1f3497-dcbb-4970-a901-72fa0c680db3/1/R7ucA79nJNVQMWEvfwPLuwwYQWs.roa
File: R7ucA79nJNVQMWEvfwPLuwwYQWs.roa (raw, json)
Hash identifier: qkCaNQ2eU7M658nIO484dL/vOtXT7gP5TTEzpkZRlhQ=
Subject key identifier: 47:BB:9C:03:BF:67:24:D5:50:31:61:2F:7F:03:CB:BB:0C:18:41:6B
Certificate issuer: /CN=e566f962bc8fc409f927e6351218db7a5f3d5551
Certificate serial: E1DA99
Authority key identifier: E5:66:F9:62:BC:8F:C4:09:F9:27:E6:35:12:18:DB:7A:5F:3D:55:51
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/5Wb5YryPxAn5J-Y1Ehjbel89VVE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/0e/1f3497-dcbb-4970-a901-72fa0c680db3/1/R7ucA79nJNVQMWEvfwPLuwwYQWs.roa
Signing time: Sat 01 Jan 2022 08:56:29 +0000
ROA not before: Sat 01 Jan 2022 08:56:29 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 212238
IP address blocks: 46.253.136.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 14801561 (0xe1da99)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=e566f962bc8fc409f927e6351218db7a5f3d5551
Validity
Not Before: Jan 1 08:56:29 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=47bb9c03bf6724d55031612f7f03cbbb0c18416b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e9:75:a1:f4:22:26:e6:ef:f4:94:73:32:77:c5:
ff:76:26:f5:26:e2:e4:ae:65:b5:f7:c6:f3:43:10:
51:cc:c6:b0:55:92:60:ae:40:d1:dd:e1:04:98:5f:
dc:ff:33:07:c7:cc:c2:6d:43:dd:81:e4:5c:89:43:
10:85:e3:72:9b:a4:14:ad:86:72:79:1f:5a:f2:88:
aa:26:18:c3:bc:2b:92:13:bb:4e:35:a2:48:90:57:
23:4f:66:c6:49:c1:10:96:9a:14:7b:9a:e8:7c:ac:
1f:7d:83:b6:10:2a:d9:5a:00:cf:c1:f5:5b:d0:3a:
a1:73:15:ef:e2:86:df:1b:1b:78:63:c6:7d:36:95:
ec:5b:79:97:5e:cb:49:b9:5c:d1:94:6e:8b:4a:31:
41:20:52:a0:58:f6:18:ec:c7:82:dc:7a:19:24:5f:
19:61:18:cd:91:2a:16:c8:61:e5:f2:fc:35:fc:5d:
dd:8c:dd:15:87:60:0d:6f:25:e2:fb:61:03:03:a8:
04:b5:d4:ff:66:53:14:af:58:d3:d6:ad:68:a5:37:
00:ca:b7:64:48:e7:13:3f:88:35:e9:c1:5d:ad:b0:
5a:89:1f:85:83:0a:83:39:6b:c7:f5:47:31:da:b0:
e0:e6:a9:d1:dd:fd:7b:ea:db:41:80:a6:39:f3:b2:
c0:b1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
47:BB:9C:03:BF:67:24:D5:50:31:61:2F:7F:03:CB:BB:0C:18:41:6B
X509v3 Authority Key Identifier:
keyid:E5:66:F9:62:BC:8F:C4:09:F9:27:E6:35:12:18:DB:7A:5F:3D:55:51
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/5Wb5YryPxAn5J-Y1Ehjbel89VVE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/0e/1f3497-dcbb-4970-a901-72fa0c680db3/1/R7ucA79nJNVQMWEvfwPLuwwYQWs.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/0e/1f3497-dcbb-4970-a901-72fa0c680db3/1/5Wb5YryPxAn5J-Y1Ehjbel89VVE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
46.253.136.0/24
Signature Algorithm: sha256WithRSAEncryption
6d:d3:39:59:56:42:da:ef:8f:1c:ae:29:21:b8:27:c3:30:7f:
a9:d8:0f:4d:e6:95:13:dc:52:2b:89:6d:22:ee:cc:a5:6d:2d:
70:88:d1:eb:e0:cc:78:0d:43:1c:54:d4:60:73:34:d0:c1:0e:
d6:f0:3f:7b:5f:35:1a:b7:66:23:4e:2e:f1:a7:f4:8b:4a:d5:
b1:0d:2b:fd:3c:57:82:b1:4f:8a:5a:3d:1a:e9:8b:a8:cb:35:
9c:1b:ac:f6:45:61:c2:80:fb:94:50:6c:f2:0d:53:67:d5:43:
35:d5:d0:09:60:b6:cd:25:14:e1:04:7b:6b:51:c1:58:52:6d:
c8:42:3c:7e:92:2b:91:90:76:b7:3e:b2:ce:f2:b3:18:5e:40:
4b:d7:d6:a6:13:b9:f9:67:bf:b5:ad:df:ce:1a:2d:0c:ec:e8:
7f:65:b7:af:2e:d8:a6:58:a2:ad:40:25:0b:37:5c:fc:9e:b5:
a0:4e:7c:36:77:03:2c:ce:6a:14:2e:99:28:92:5c:df:2d:ce:
84:3d:39:64:14:1e:9e:71:80:a9:68:6a:5b:c3:c7:40:07:ce:
6e:54:4e:9c:9d:f2:54:91:b4:c5:37:41:9d:f6:5a:c3:44:66:
3e:a2:7b:37:de:80:5e:8f:28:b7:9e:e0:d7:ef:d9:1b:09:b1:
69:a7:7a:16
-----BEGIN CERTIFICATE-----
MIIE7zCCA9egAwIBAgIEAOHamTANBgkqhkiG9w0BAQsFADAzMTEwLwYDVQQDEyhl
NTY2Zjk2MmJjOGZjNDA5ZjkyN2U2MzUxMjE4ZGI3YTVmM2Q1NTUxMB4XDTIyMDEw
MTA4NTYyOVoXDTIzMDcwMTAwMDAwMFowMzExMC8GA1UEAxMoNDdiYjljMDNiZjY3
MjRkNTUwMzE2MTJmN2YwM2NiYmIwYzE4NDE2YjCCASIwDQYJKoZIhvcNAQEBBQAD
ggEPADCCAQoCggEBAOl1ofQiJubv9JRzMnfF/3Ym9Sbi5K5ltffG80MQUczGsFWS
YK5A0d3hBJhf3P8zB8fMwm1D3YHkXIlDEIXjcpukFK2GcnkfWvKIqiYYw7wrkhO7
TjWiSJBXI09mxknBEJaaFHua6HysH32DthAq2VoAz8H1W9A6oXMV7+KG3xsbeGPG
fTaV7Ft5l17LSblc0ZRui0oxQSBSoFj2GOzHgtx6GSRfGWEYzZEqFshh5fL8Nfxd
3YzdFYdgDW8l4vthAwOoBLXU/2ZTFK9Y09ataKU3AMq3ZEjnEz+INenBXa2wWokf
hYMKgzlrx/VHMdqw4Oap0d39e+rbQYCmOfOywLECAwEAAaOCAgkwggIFMB0GA1Ud
DgQWBBRHu5wDv2ck1VAxYS9/A8u7DBhBazAfBgNVHSMEGDAWgBTlZvlivI/ECfkn
5jUSGNt6Xz1VUTAOBgNVHQ8BAf8EBAMCB4AwZAYIKwYBBQUHAQEEWDBWMFQGCCsG
AQUFBzAChkhyc3luYzovL3Jwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxU
LzVXYjVZcnlQeEFuNUotWTFFaGpiZWw4OVZWRS5jZXIwgY0GCCsGAQUFBwELBIGA
MH4wfAYIKwYBBQUHMAuGcHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5
L0RFRkFVTFQvMGUvMWYzNDk3LWRjYmItNDk3MC1hOTAxLTcyZmEwYzY4MGRiMy8x
L1I3dWNBNzluSk5WUU1XRXZmd1BMdXd3WVFXcy5yb2EwgYEGA1UdHwR6MHgwdqB0
oHKGcHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvMGUv
MWYzNDk3LWRjYmItNDk3MC1hOTAxLTcyZmEwYzY4MGRiMy8xLzVXYjVZcnlQeEFu
NUotWTFFaGpiZWw4OVZWRS5jcmwwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAf
BggrBgEFBQcBBwEB/wQQMA4wDAQCAAEwBgMEAC79iDANBgkqhkiG9w0BAQsFAAOC
AQEAbdM5WVZC2u+PHK4pIbgnwzB/qdgPTeaVE9xSK4ltIu7MpW0tcIjR6+DMeA1D
HFTUYHM00MEO1vA/e181GrdmI04u8af0i0rVsQ0r/TxXgrFPilo9GumLqMs1nBus
9kVhwoD7lFBs8g1TZ9VDNdXQCWC2zSUU4QR7a1HBWFJtyEI8fpIrkZB2tz6yzvKz
GF5AS9fWphO5+We/ta3fzhotDOzof2W3ry7YpliirUAlCzdc/J61oE58NncDLM5q
FC6ZKJJc3y3OhD05ZBQennGAqWhqW8PHQAfOblROnJ3yVJG0xTdBnfZaw0RmPqJ7
N96AXo8ot57g1+/ZGwmxaad6Fg==
-----END CERTIFICATE-----
Generated at Mon Feb 17 07:45:40 2025 by rpki-client