![](/console.gif)
Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/14/10e965-7409-44d8-9502-cf0aa3ecad28/1/urJ4tMPHRfoOXlladpKVWSbEueo.roa
File: urJ4tMPHRfoOXlladpKVWSbEueo.roa (raw, json)
Hash identifier: K4XGwq0zUTMieG5lK7jwgeGNxzz4gO4eKKrwOO6mXrE=
Subject key identifier: BA:B2:78:B4:C3:C7:45:FA:0E:5E:59:5A:76:92:95:59:26:C4:B9:EA
Certificate issuer: /CN=0802b95ce6239d526c35ae7a8e2ceb48aeb82b5f
Certificate serial: 09305971
Authority key identifier: 08:02:B9:5C:E6:23:9D:52:6C:35:AE:7A:8E:2C:EB:48:AE:B8:2B:5F
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/CAK5XOYjnVJsNa56jizrSK64K18.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/14/10e965-7409-44d8-9502-cf0aa3ecad28/1/urJ4tMPHRfoOXlladpKVWSbEueo.roa
Signing time: Sat 01 Jan 2022 12:58:48 +0000
ROA not before: Sat 01 Jan 2022 12:58:48 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 41668
IP address blocks: 2a02:2698:2800::/38 maxlen: 48
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 154163569 (0x9305971)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=0802b95ce6239d526c35ae7a8e2ceb48aeb82b5f
Validity
Not Before: Jan 1 12:58:48 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=bab278b4c3c745fa0e5e595a7692955926c4b9ea
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:af:70:bc:f0:4e:e3:bc:cd:81:32:a3:7e:a6:9d:
5b:d3:bb:b0:8d:a8:13:68:06:e1:04:4c:84:4b:f1:
1b:b3:83:1e:d1:7a:f3:24:0a:02:53:20:ce:7b:9f:
5e:19:6e:8a:5b:5a:58:b0:b7:b3:b2:65:c3:6f:23:
eb:3f:93:4d:de:2f:a2:0f:5a:43:5c:2a:07:56:8f:
64:91:4d:bc:03:86:37:fc:4f:7f:54:f5:eb:e8:d6:
26:59:7a:fa:21:0b:5e:5e:24:5a:9b:b9:7b:c6:24:
a6:2b:53:1d:11:fc:e9:90:af:d1:bb:69:67:0b:19:
65:ee:1c:ac:7d:0d:67:0b:38:26:94:27:eb:db:76:
9c:84:09:e6:67:aa:2e:06:22:89:5f:5c:12:d7:16:
bd:44:25:3e:c8:b6:a1:e3:09:40:6e:14:ee:d3:1b:
71:da:c5:73:1b:bd:d2:e7:88:57:96:28:58:19:35:
1e:53:f9:b6:ff:d1:8e:7c:63:3f:ca:ab:4d:39:25:
97:4c:fb:20:53:c1:f0:f1:8e:0d:b6:79:19:b2:15:
94:18:ea:b8:b9:dc:fe:ae:e4:37:20:2b:c8:8e:0b:
e8:d9:ab:bb:62:85:ec:21:61:db:d9:c1:f5:da:e5:
ab:86:3d:52:72:f8:0f:4c:2c:7c:bd:fb:59:34:2f:
a2:59
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
BA:B2:78:B4:C3:C7:45:FA:0E:5E:59:5A:76:92:95:59:26:C4:B9:EA
X509v3 Authority Key Identifier:
keyid:08:02:B9:5C:E6:23:9D:52:6C:35:AE:7A:8E:2C:EB:48:AE:B8:2B:5F
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/CAK5XOYjnVJsNa56jizrSK64K18.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/14/10e965-7409-44d8-9502-cf0aa3ecad28/1/urJ4tMPHRfoOXlladpKVWSbEueo.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/14/10e965-7409-44d8-9502-cf0aa3ecad28/1/CAK5XOYjnVJsNa56jizrSK64K18.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a02:2698:2800::/38
Signature Algorithm: sha256WithRSAEncryption
ad:89:1d:23:2d:33:31:08:68:f5:56:38:08:40:4e:97:46:16:
97:9b:56:f6:67:cc:fb:6b:32:23:f9:95:61:e0:65:a0:e2:dc:
69:17:68:ef:f7:56:93:6c:c8:a9:2d:77:9f:c6:ab:fe:75:c3:
59:ad:f7:9b:53:7f:40:9f:43:57:56:20:59:a7:79:e5:83:6c:
da:51:88:28:05:2c:fc:91:df:52:73:3e:94:25:fd:09:9f:38:
10:7d:ab:40:d7:f7:55:f1:a4:52:5a:71:39:38:39:40:81:a9:
69:01:33:3e:89:16:7f:1e:bb:ab:63:d9:ba:37:94:da:7d:d6:
36:cc:d4:b9:3e:04:7c:e5:ce:c6:1f:60:f9:b2:0d:6d:58:f0:
b7:39:93:c3:95:9e:f8:93:a1:ef:f0:07:f7:f7:24:8c:99:b0:
a4:25:92:07:e0:f3:16:20:2c:fa:21:4f:93:88:0e:97:b0:3b:
7d:a9:d3:99:6d:0b:d4:53:7e:b6:fb:15:5a:e0:dd:66:0c:23:
22:a9:c0:8a:af:9d:bf:f1:02:66:b6:5d:69:f4:5b:b4:0b:a8:
74:3a:e0:24:93:db:e1:2b:0b:70:43:df:f7:4c:8b:b4:a5:0d:
2e:73:26:af:62:57:04:9b:9c:1a:a8:33:2b:4b:91:d6:0d:20:
33:50:f6:6f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Feb 20 02:40:09 2025 by rpki-client