![](/console.gif)
Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/22/e93848-3525-4bcc-b22d-893989aef00e/1/0oDsH_BuzfMnC3roNY-fUAe775E.roa
File: 0oDsH_BuzfMnC3roNY-fUAe775E.roa (raw, json)
Hash identifier: vla7RGqHt30Absb3aEb6V+4Gx2xVSVTP8K7KQO5F7qo=
Subject key identifier: D2:80:EC:1F:F0:6E:CD:F3:27:0B:7A:E8:35:8F:9F:50:07:BB:EF:91
Certificate issuer: /CN=19193b6e4d0be89035e79939b5002fc5c16c9bcc
Certificate serial: 04CF4813
Authority key identifier: 19:19:3B:6E:4D:0B:E8:90:35:E7:99:39:B5:00:2F:C5:C1:6C:9B:CC
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/GRk7bk0L6JA155k5tQAvxcFsm8w.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/22/e93848-3525-4bcc-b22d-893989aef00e/1/0oDsH_BuzfMnC3roNY-fUAe775E.roa
Signing time: Sat 01 Jan 2022 16:02:28 +0000
ROA not before: Sat 01 Jan 2022 16:02:28 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 209272
IP address blocks: 88.214.27.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 80693267 (0x4cf4813)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=19193b6e4d0be89035e79939b5002fc5c16c9bcc
Validity
Not Before: Jan 1 16:02:28 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=d280ec1ff06ecdf3270b7ae8358f9f5007bbef91
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a8:3f:e7:db:c1:b8:e6:77:99:dd:54:0e:f8:44:
63:c2:bd:a5:cc:37:64:12:8c:16:55:b0:0c:88:aa:
a8:58:7f:53:59:8a:a9:8b:70:5f:ae:4c:a8:b3:49:
1a:e9:01:c4:6e:77:9e:10:93:af:38:f0:05:f2:e6:
72:7d:ad:0d:11:30:f7:5e:e4:76:46:61:3f:0f:55:
7d:28:9a:4f:5d:b8:c6:5c:af:a6:1b:5e:ff:ab:92:
a3:aa:d2:81:ea:3c:16:1f:ac:9d:a9:4f:58:8d:7b:
1c:3f:2a:fd:32:3b:3a:59:ad:06:89:47:1a:ef:f3:
91:3b:87:10:79:2d:59:fd:c9:9e:f1:69:22:32:0a:
02:e8:d7:f0:79:d7:69:54:e7:46:e8:c0:c6:ad:f6:
fd:d9:74:47:d0:df:80:0e:52:0f:2f:0f:b1:e0:42:
28:57:aa:b5:e5:b2:57:42:83:eb:c3:62:0e:6b:01:
9e:af:c3:8a:af:b5:86:93:bd:da:5d:83:61:7c:5e:
dd:11:c7:82:fe:8d:ae:3a:64:63:ca:68:35:ce:56:
8a:33:f2:ed:60:e2:7e:49:ae:05:a6:4f:22:3e:09:
59:04:a7:d8:84:95:91:bd:de:ad:f3:b8:e4:b4:aa:
3f:90:3f:43:ae:4a:d1:08:c6:6d:aa:e4:3a:57:22:
03:77
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D2:80:EC:1F:F0:6E:CD:F3:27:0B:7A:E8:35:8F:9F:50:07:BB:EF:91
X509v3 Authority Key Identifier:
keyid:19:19:3B:6E:4D:0B:E8:90:35:E7:99:39:B5:00:2F:C5:C1:6C:9B:CC
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/GRk7bk0L6JA155k5tQAvxcFsm8w.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/22/e93848-3525-4bcc-b22d-893989aef00e/1/0oDsH_BuzfMnC3roNY-fUAe775E.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/22/e93848-3525-4bcc-b22d-893989aef00e/1/GRk7bk0L6JA155k5tQAvxcFsm8w.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
88.214.27.0/24
Signature Algorithm: sha256WithRSAEncryption
47:e4:09:6a:06:04:c7:63:95:cb:17:40:66:81:da:29:b8:95:
70:3e:dc:27:9e:0a:34:6e:57:5c:67:7f:a8:bc:a1:a1:de:66:
bb:73:75:99:4a:ca:d7:60:38:07:e9:4b:81:87:62:99:77:b0:
34:d1:d4:9b:21:f8:fc:77:e1:23:50:23:1b:96:d6:4f:74:09:
3d:93:09:53:f1:77:18:3a:a5:54:d2:04:d3:33:0a:1c:e7:72:
04:88:ac:14:72:e0:38:2c:8c:68:8c:0e:1f:06:f5:6b:b2:24:
1f:19:97:f6:3f:c7:bd:82:17:56:dd:55:c2:f7:39:55:6e:52:
c5:6e:03:66:d5:85:59:44:4c:7c:16:dc:d0:af:e5:15:fa:11:
60:07:bb:da:55:6d:69:09:1a:0c:73:e8:d0:38:ba:e0:70:24:
53:de:5a:33:84:fe:68:7f:49:71:5c:e8:7f:c1:af:22:6d:02:
1b:c7:24:f5:1d:3c:aa:aa:e3:09:15:0b:1d:48:ca:1c:3f:52:
12:bd:5a:c4:1c:c5:ac:ce:27:f0:bc:7e:e7:2d:0b:ca:2a:ce:
73:be:88:b7:9b:71:5c:75:35:15:4c:fc:37:2a:79:20:5b:53:
22:7f:bc:2e:f4:8a:2e:68:34:c6:4c:19:95:6e:d2:3e:57:86:
07:aa:65:33
-----BEGIN CERTIFICATE-----
MIIE7zCCA9egAwIBAgIEBM9IEzANBgkqhkiG9w0BAQsFADAzMTEwLwYDVQQDEygx
OTE5M2I2ZTRkMGJlODkwMzVlNzk5MzliNTAwMmZjNWMxNmM5YmNjMB4XDTIyMDEw
MTE2MDIyOFoXDTIzMDcwMTAwMDAwMFowMzExMC8GA1UEAxMoZDI4MGVjMWZmMDZl
Y2RmMzI3MGI3YWU4MzU4ZjlmNTAwN2JiZWY5MTCCASIwDQYJKoZIhvcNAQEBBQAD
ggEPADCCAQoCggEBAKg/59vBuOZ3md1UDvhEY8K9pcw3ZBKMFlWwDIiqqFh/U1mK
qYtwX65MqLNJGukBxG53nhCTrzjwBfLmcn2tDREw917kdkZhPw9VfSiaT124xlyv
phte/6uSo6rSgeo8Fh+snalPWI17HD8q/TI7OlmtBolHGu/zkTuHEHktWf3JnvFp
IjIKAujX8HnXaVTnRujAxq32/dl0R9DfgA5SDy8PseBCKFeqteWyV0KD68NiDmsB
nq/Diq+1hpO92l2DYXxe3RHHgv6NrjpkY8poNc5WijPy7WDifkmuBaZPIj4JWQSn
2ISVkb3erfO45LSqP5A/Q65K0QjGbarkOlciA3cCAwEAAaOCAgkwggIFMB0GA1Ud
DgQWBBTSgOwf8G7N8ycLeug1j59QB7vvkTAfBgNVHSMEGDAWgBQZGTtuTQvokDXn
mTm1AC/FwWybzDAOBgNVHQ8BAf8EBAMCB4AwZAYIKwYBBQUHAQEEWDBWMFQGCCsG
AQUFBzAChkhyc3luYzovL3Jwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxU
L0dSazdiazBMNkpBMTU1azV0UUF2eGNGc204dy5jZXIwgY0GCCsGAQUFBwELBIGA
MH4wfAYIKwYBBQUHMAuGcHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5
L0RFRkFVTFQvMjIvZTkzODQ4LTM1MjUtNGJjYy1iMjJkLTg5Mzk4OWFlZjAwZS8x
LzBvRHNIX0J1emZNbkMzcm9OWS1mVUFlNzc1RS5yb2EwgYEGA1UdHwR6MHgwdqB0
oHKGcHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvMjIv
ZTkzODQ4LTM1MjUtNGJjYy1iMjJkLTg5Mzk4OWFlZjAwZS8xL0dSazdiazBMNkpB
MTU1azV0UUF2eGNGc204dy5jcmwwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAf
BggrBgEFBQcBBwEB/wQQMA4wDAQCAAEwBgMEAFjWGzANBgkqhkiG9w0BAQsFAAOC
AQEAR+QJagYEx2OVyxdAZoHaKbiVcD7cJ54KNG5XXGd/qLyhod5mu3N1mUrK12A4
B+lLgYdimXewNNHUmyH4/HfhI1AjG5bWT3QJPZMJU/F3GDqlVNIE0zMKHOdyBIis
FHLgOCyMaIwOHwb1a7IkHxmX9j/HvYIXVt1Vwvc5VW5SxW4DZtWFWURMfBbc0K/l
FfoRYAe72lVtaQkaDHPo0Di64HAkU95aM4T+aH9JcVzof8GvIm0CG8ck9R08qqrj
CRULHUjKHD9SEr1axBzFrM4n8Lx+5y0LyirOc76It5txXHU1FUz8Nyp5IFtTIn+8
LvSKLmg0xkwZlW7SPleGB6plMw==
-----END CERTIFICATE-----
Generated at Mon Feb 17 07:26:51 2025 by rpki-client