![](/console.gif)
Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/1c/943585-c124-4bac-888a-3e59cf1aec44/1/E4Nbs3MZE75ZtvsxKyLV95vrFhA.roa
File: E4Nbs3MZE75ZtvsxKyLV95vrFhA.roa (raw, json)
Hash identifier: dizc03dPRlOCVSY4DFmrciFidfiSSpnguE/uEQE8rzc=
Subject key identifier: 13:83:5B:B3:73:19:13:BE:59:B6:FB:31:2B:22:D5:F7:9B:EB:16:10
Certificate issuer: /CN=b67dd6f5bce98f7bc3169b1db9fa0e5b9cef2ebb
Certificate serial: 02771B51
Authority key identifier: B6:7D:D6:F5:BC:E9:8F:7B:C3:16:9B:1D:B9:FA:0E:5B:9C:EF:2E:BB
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/tn3W9bzpj3vDFpsdufoOW5zvLrs.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/1c/943585-c124-4bac-888a-3e59cf1aec44/1/E4Nbs3MZE75ZtvsxKyLV95vrFhA.roa
Signing time: Sat 18 Jun 2022 00:02:44 +0000
ROA not before: Sat 18 Jun 2022 00:02:44 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 834
IP address blocks: 185.251.23.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 41360209 (0x2771b51)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=b67dd6f5bce98f7bc3169b1db9fa0e5b9cef2ebb
Validity
Not Before: Jun 18 00:02:44 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=13835bb3731913be59b6fb312b22d5f79beb1610
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b2:c9:25:2d:ca:66:7a:87:bc:d5:77:f2:5c:ca:
2a:8a:f4:ee:23:c6:54:78:ad:10:d5:ab:e0:26:44:
a3:c1:49:00:68:07:7a:7a:6b:82:0a:6b:a1:76:3c:
56:0a:3d:d2:55:1f:ad:fc:85:38:49:cf:51:05:f7:
f1:85:66:27:e5:23:18:ef:49:fe:13:a3:a3:8e:48:
f8:57:02:d8:59:5e:ce:cd:3b:4c:67:1f:e6:cf:b9:
78:2c:10:e7:e7:ac:dd:10:de:42:7a:57:af:54:4a:
8a:89:ce:67:ee:5c:c4:61:07:39:cb:fd:a9:8d:3c:
75:f1:c7:70:6b:4f:7e:9a:de:2c:fa:2f:05:e1:34:
9f:cb:e3:e4:70:4b:4d:98:01:b3:f1:5e:cf:40:76:
20:89:2c:b7:85:fd:ee:58:bc:03:8f:c8:41:2b:77:
35:bd:bd:b2:ba:6a:06:bf:55:fd:32:74:cb:78:a4:
17:40:ee:30:4b:75:67:c5:e3:01:fd:6d:47:78:2b:
59:ed:8d:ed:72:af:74:de:8f:5b:86:d5:fd:f2:76:
2a:24:69:bb:05:3e:a1:0f:b3:34:1a:7b:5f:da:f8:
2e:b9:ce:a6:e7:32:ca:64:76:48:bf:15:c8:d3:3e:
86:c4:db:82:67:39:85:fb:29:40:36:35:16:ac:ac:
65:f5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
13:83:5B:B3:73:19:13:BE:59:B6:FB:31:2B:22:D5:F7:9B:EB:16:10
X509v3 Authority Key Identifier:
keyid:B6:7D:D6:F5:BC:E9:8F:7B:C3:16:9B:1D:B9:FA:0E:5B:9C:EF:2E:BB
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/tn3W9bzpj3vDFpsdufoOW5zvLrs.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/1c/943585-c124-4bac-888a-3e59cf1aec44/1/E4Nbs3MZE75ZtvsxKyLV95vrFhA.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/1c/943585-c124-4bac-888a-3e59cf1aec44/1/tn3W9bzpj3vDFpsdufoOW5zvLrs.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.251.23.0/24
Signature Algorithm: sha256WithRSAEncryption
66:e6:82:ba:f6:16:85:cb:99:a2:ff:47:ac:ce:42:82:07:49:
57:21:28:d7:fa:57:1a:37:0f:1b:37:0b:a5:8f:47:cf:cf:f8:
06:92:89:94:aa:59:c5:1f:59:43:90:42:03:66:aa:c1:7b:d0:
be:48:c5:c9:26:64:14:45:92:ac:61:f5:12:2f:2a:45:6c:1b:
8c:f9:bc:3b:81:cf:85:77:da:cf:84:e0:a3:92:13:cf:fd:2a:
57:01:af:68:7c:58:f6:e2:59:9e:66:d4:5c:b7:6a:c6:e6:62:
d0:98:f3:b4:62:20:e3:45:10:fe:b3:18:5f:aa:ae:64:15:c8:
bb:72:4e:90:78:79:fd:fb:04:8c:01:ed:19:f6:65:7d:5f:ce:
a8:09:cc:65:3f:81:12:5a:ee:37:37:43:45:b9:db:4e:62:c6:
e1:75:97:b5:3c:d8:a8:89:d2:fc:68:ae:6b:5f:d5:6f:69:c2:
35:63:16:0f:ea:71:8d:27:ef:9e:88:bd:c7:90:9e:48:92:bb:
35:fd:66:bc:2c:d3:e6:ef:0b:d8:95:22:a4:16:c1:37:30:0b:
98:a5:34:78:21:82:a2:69:13:32:d4:e9:2f:27:53:17:1d:a4:
f0:61:41:3f:89:05:43:00:04:9f:70:b0:bd:82:68:76:f9:01:
5a:67:2f:4b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Feb 17 07:45:30 2025 by rpki-client