![](/console.gif)
Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/0f/364b94-6ca4-4f9a-88a5-8b3d527c49e4/1/TN1J07MTVpIvGimR4uPy9wrG_Ns.roa
File: TN1J07MTVpIvGimR4uPy9wrG_Ns.roa (raw, json)
Hash identifier: gAUPzC6UJ/GdPwNg6/pJY9bteN2Ky/YENlXadeYLgoI=
Subject key identifier: 4C:DD:49:D3:B3:13:56:92:2F:1A:29:91:E2:E3:F2:F7:0A:C6:FC:DB
Certificate issuer: /CN=58bf7f3ad53f29a3c43f0ad82017a05368c0104a
Certificate serial: 032ADE85
Authority key identifier: 58:BF:7F:3A:D5:3F:29:A3:C4:3F:0A:D8:20:17:A0:53:68:C0:10:4A
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/WL9_OtU_KaPEPwrYIBegU2jAEEo.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/0f/364b94-6ca4-4f9a-88a5-8b3d527c49e4/1/TN1J07MTVpIvGimR4uPy9wrG_Ns.roa
Signing time: Sat 01 Jan 2022 11:04:28 +0000
ROA not before: Sat 01 Jan 2022 11:04:28 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 62579
IP address blocks: 185.139.25.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 53141125 (0x32ade85)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=58bf7f3ad53f29a3c43f0ad82017a05368c0104a
Validity
Not Before: Jan 1 11:04:28 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=4cdd49d3b31356922f1a2991e2e3f2f70ac6fcdb
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d7:95:2c:83:df:74:eb:1a:a8:d7:66:50:b0:29:
50:2f:d1:de:c3:f7:a9:83:e1:f2:a5:b7:06:85:22:
0d:61:bd:03:1c:72:0e:af:74:fe:6a:21:85:27:fd:
25:ac:c3:c0:0d:bb:d3:25:f1:e9:fa:64:97:5d:fa:
2d:24:60:04:03:3e:c8:7d:6d:bc:3d:d5:f5:59:78:
3f:5f:b2:42:c2:f6:63:e6:52:38:ad:ba:eb:39:6f:
c3:54:80:72:74:f9:f1:6a:e4:05:b4:5e:a6:d3:68:
5d:a1:d7:08:dc:8d:d5:b3:7b:30:ed:3c:b1:cb:c4:
a0:89:ae:09:e3:ca:8c:64:84:99:fd:8e:19:6e:80:
05:90:7e:5f:98:d1:74:e8:af:13:7d:6c:d6:ad:a1:
3d:9b:02:14:4a:d8:80:1f:3f:af:7d:53:54:26:cf:
5b:5f:8b:a2:a0:96:6b:79:b0:cd:fb:fe:79:95:cd:
28:8c:0f:b3:3f:47:f3:2a:5f:e4:c4:82:b8:ec:36:
40:49:50:05:bf:cc:02:0c:4f:03:c6:31:c1:74:84:
18:79:95:e3:a2:ab:f6:c2:57:59:c0:9d:aa:88:2d:
d1:07:ec:c8:5f:5a:a6:e2:e2:f9:f7:f4:e4:a3:c6:
a5:d1:bd:fe:f8:ba:fb:e7:7e:9f:ce:8f:25:e7:08:
39:d1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
4C:DD:49:D3:B3:13:56:92:2F:1A:29:91:E2:E3:F2:F7:0A:C6:FC:DB
X509v3 Authority Key Identifier:
keyid:58:BF:7F:3A:D5:3F:29:A3:C4:3F:0A:D8:20:17:A0:53:68:C0:10:4A
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/WL9_OtU_KaPEPwrYIBegU2jAEEo.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/0f/364b94-6ca4-4f9a-88a5-8b3d527c49e4/1/TN1J07MTVpIvGimR4uPy9wrG_Ns.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/0f/364b94-6ca4-4f9a-88a5-8b3d527c49e4/1/WL9_OtU_KaPEPwrYIBegU2jAEEo.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.139.25.0/24
Signature Algorithm: sha256WithRSAEncryption
10:86:d5:3f:db:3f:bd:db:81:21:01:a1:17:e7:50:2d:99:1b:
d1:64:13:91:82:65:bb:c4:3e:49:62:ee:a1:6a:60:c1:23:43:
de:2f:bb:95:74:b3:1d:92:b0:d3:4c:47:40:06:7b:8a:bf:7c:
6e:f2:7c:d7:48:29:f7:36:b8:8a:d7:0a:2a:01:3e:cd:b4:4c:
36:39:89:61:40:7f:3b:3f:e8:fd:b3:29:b5:40:20:af:1e:3d:
2d:6f:d5:b2:77:2f:be:f1:bf:e2:2b:a9:f9:06:aa:a2:7c:a1:
a7:3c:0a:16:dd:04:ca:40:da:d7:a3:53:6c:6d:74:5c:46:d2:
26:41:a6:7d:b3:ef:59:64:b0:3d:93:bb:f9:f9:f8:fe:c7:b2:
a8:cc:ff:b8:f1:70:e6:a7:fc:80:e0:f5:9f:89:fa:5b:6d:cc:
86:0b:61:18:99:a1:39:ae:65:eb:cd:87:f8:54:17:9b:1d:bc:
57:37:cc:a2:00:22:df:8c:63:c7:af:d9:98:ab:4f:8e:27:ca:
23:6d:88:72:a5:5d:77:e0:b6:4e:12:4b:e3:7d:65:e0:aa:9b:
03:42:ad:4d:c9:ef:ac:3b:9e:51:9a:66:54:dc:e6:cd:1b:46:
90:05:a8:64:b2:d0:f3:cd:98:96:7f:1a:57:f3:f3:d9:de:56:
87:e9:70:f7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Feb 17 07:42:15 2025 by rpki-client