![](/console.gif)
Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/1c/1007ee-cf83-4a93-ad0c-046c8d40448a/1/HsoHRodEDsJEhju1uACZ9AWGB7E.roa
File: HsoHRodEDsJEhju1uACZ9AWGB7E.roa (raw, json)
Hash identifier: FZgNordO4d1y1qsyTEbdZka1QMMrdA03wN8yHaPPc0M=
Subject key identifier: 1E:CA:07:46:87:44:0E:C2:44:86:3B:B5:B8:00:99:F4:05:86:07:B1
Certificate issuer: /CN=a17a2aac73645631ef9311d4b2ca9d355f7f8c1b
Certificate serial: 0E75FBC3
Authority key identifier: A1:7A:2A:AC:73:64:56:31:EF:93:11:D4:B2:CA:9D:35:5F:7F:8C:1B
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/oXoqrHNkVjHvkxHUssqdNV9_jBs.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/1c/1007ee-cf83-4a93-ad0c-046c8d40448a/1/HsoHRodEDsJEhju1uACZ9AWGB7E.roa
Signing time: Sat 01 Jan 2022 13:56:30 +0000
ROA not before: Sat 01 Jan 2022 13:56:30 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 47527
IP address blocks: 194.247.61.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 242613187 (0xe75fbc3)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=a17a2aac73645631ef9311d4b2ca9d355f7f8c1b
Validity
Not Before: Jan 1 13:56:30 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=1eca074687440ec244863bb5b80099f4058607b1
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ac:55:0c:ca:26:bf:26:be:46:e4:d9:6c:c2:30:
cb:1f:8f:09:2f:54:cb:40:83:da:d9:87:97:41:cb:
8b:5b:4f:cb:cb:41:e0:52:48:94:ec:c2:bd:09:24:
ad:f7:9d:bc:dc:04:a4:6c:50:25:f3:c5:5b:69:a0:
69:11:99:d7:7f:28:7b:0a:07:41:5f:e1:0e:ee:96:
cb:58:6f:30:f7:bf:2e:a9:31:e6:73:cc:e2:79:91:
22:29:0e:aa:fb:bd:af:36:6b:25:6d:c0:90:df:f4:
01:ae:cd:b3:18:2c:06:ad:91:f0:aa:d1:c9:3c:f6:
7e:18:07:ff:6e:38:56:01:95:65:ea:1e:50:f3:bb:
8f:2d:22:d4:45:39:c8:7c:db:e3:da:7a:15:48:6a:
b7:b4:ac:4a:2a:7b:11:79:f5:30:d6:bc:61:8d:2b:
31:b1:47:90:d8:56:c5:06:0e:3d:bb:cd:f3:7e:63:
d5:69:95:83:aa:34:a1:67:67:e8:9b:b6:90:3c:fe:
89:1d:37:31:f1:77:ff:37:81:68:cb:4d:0b:7f:bb:
b6:20:a4:82:05:87:b6:da:1d:9d:9b:9a:a4:ce:15:
0e:70:6c:71:37:16:13:a3:b4:4e:00:23:4e:be:99:
b1:d5:2b:6a:54:16:d4:0a:ce:fa:0e:cd:a7:57:21:
a9:31
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
1E:CA:07:46:87:44:0E:C2:44:86:3B:B5:B8:00:99:F4:05:86:07:B1
X509v3 Authority Key Identifier:
keyid:A1:7A:2A:AC:73:64:56:31:EF:93:11:D4:B2:CA:9D:35:5F:7F:8C:1B
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/oXoqrHNkVjHvkxHUssqdNV9_jBs.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/1c/1007ee-cf83-4a93-ad0c-046c8d40448a/1/HsoHRodEDsJEhju1uACZ9AWGB7E.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/1c/1007ee-cf83-4a93-ad0c-046c8d40448a/1/oXoqrHNkVjHvkxHUssqdNV9_jBs.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
194.247.61.0/24
Signature Algorithm: sha256WithRSAEncryption
bd:11:32:ad:6e:2d:b9:15:5c:81:db:fe:ba:02:bc:7b:ca:39:
32:0b:61:aa:cb:73:eb:e7:a3:f2:26:48:a8:3a:26:9f:e7:33:
25:28:57:5e:39:fd:1e:f1:0b:12:66:d4:98:20:ff:1c:39:43:
7e:bf:00:da:6b:6b:08:24:81:5e:ac:83:c2:cf:f7:d6:36:8d:
5f:20:9c:40:73:e9:c7:a4:84:12:2c:27:e5:55:83:40:4f:b5:
70:eb:59:98:af:d6:8b:21:64:74:ec:65:01:da:a8:a6:f7:b6:
49:d4:b4:c7:08:c3:a8:92:c1:d8:ab:32:9a:9b:d9:7e:3d:4d:
16:3d:a1:1a:32:a2:5c:5d:cc:a2:95:4a:9f:7a:00:9c:97:91:
fe:57:6d:ec:1f:5c:fd:29:cf:48:a8:1d:b4:0e:f5:18:f1:f7:
cc:19:84:45:99:24:d9:34:b2:d2:51:ba:60:e5:9a:dd:ab:bf:
d9:be:29:34:94:30:0b:eb:0d:4c:21:3a:74:56:e2:8f:c3:c3:
34:b9:1f:bd:d9:1b:36:00:d4:00:2e:4b:d4:32:70:34:9c:75:
4d:90:6d:94:ba:c6:a3:6b:61:54:cf:a4:a9:e5:4d:59:cd:72:
e5:14:4e:b4:18:fd:fb:7c:b5:a7:40:1c:54:10:6a:2c:65:72:
60:63:7b:8d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Feb 17 07:18:11 2025 by rpki-client