![](/console.gif)
Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/24/0bcc46-fa82-48ab-910e-f2dbf3bc8b8b/1/v12cHvCe_eKdjDuT72heeAwMpzw.roa
File: v12cHvCe_eKdjDuT72heeAwMpzw.roa (raw, json)
Hash identifier: BZqzHOhTiHg+kw/vrtfoD/8lYknZywdgyXeTqJjfbZg=
Subject key identifier: BF:5D:9C:1E:F0:9E:FD:E2:9D:8C:3B:93:EF:68:5E:78:0C:0C:A7:3C
Certificate issuer: /CN=c84500bf9d054d2f369950e2e71ebf20fa215a09
Certificate serial: 0182119BF800763CCCD19F0815DA186EA363
Authority key identifier: C8:45:00:BF:9D:05:4D:2F:36:99:50:E2:E7:1E:BF:20:FA:21:5A:09
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/yEUAv50FTS82mVDi5x6_IPohWgk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/24/0bcc46-fa82-48ab-910e-f2dbf3bc8b8b/1/v12cHvCe_eKdjDuT72heeAwMpzw.roa
Signing time: Mon 18 Jul 2022 14:00:10 +0000
ROA not before: Mon 18 Jul 2022 14:00:10 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 41811
IP address blocks: 195.8.100.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:82:11:9b:f8:00:76:3c:cc:d1:9f:08:15:da:18:6e:a3:63
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=c84500bf9d054d2f369950e2e71ebf20fa215a09
Validity
Not Before: Jul 18 14:00:10 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=bf5d9c1ef09efde29d8c3b93ef685e780c0ca73c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d9:af:a1:f2:a2:61:ab:f5:31:b4:f3:46:30:57:
52:34:ad:8d:23:17:d8:4c:25:df:0c:50:ec:a4:73:
5c:b5:c1:7f:15:c5:62:1f:69:4e:94:66:a2:3d:22:
8e:58:38:a5:92:ca:89:4e:38:bf:65:38:90:d1:6a:
8c:af:cc:ce:c8:20:55:d3:ea:40:db:3b:e0:02:64:
11:cf:c1:73:aa:27:74:b6:f3:dd:1a:af:5e:19:6d:
84:00:dd:5e:fe:54:aa:d6:95:16:0c:1f:55:2d:b0:
43:7d:fa:ee:e2:dd:fd:2c:80:14:90:55:b7:41:ed:
ae:a8:3b:52:06:c1:6f:02:61:bc:6a:ab:93:a4:1a:
ba:8e:b2:d7:c9:c2:bb:9d:27:a9:96:b1:cd:48:01:
7b:21:c4:5d:2e:87:c0:94:88:d4:c2:4d:81:25:32:
d6:ad:60:a6:f7:25:af:4d:98:5d:75:c3:f3:9c:96:
67:3b:fc:0e:b9:11:bf:1f:dd:64:ec:ff:4e:2d:0b:
a3:e7:e0:ff:40:0d:69:ce:68:37:b5:b9:42:a0:f7:
59:63:cb:1b:47:91:2c:52:3a:5d:1a:9c:ac:b7:23:
c4:c4:c5:fd:51:a7:c7:a3:c5:9a:97:84:da:a4:ca:
ca:df:bb:51:59:3f:a2:a0:d1:29:54:6a:94:66:54:
49:19
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
BF:5D:9C:1E:F0:9E:FD:E2:9D:8C:3B:93:EF:68:5E:78:0C:0C:A7:3C
X509v3 Authority Key Identifier:
keyid:C8:45:00:BF:9D:05:4D:2F:36:99:50:E2:E7:1E:BF:20:FA:21:5A:09
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/yEUAv50FTS82mVDi5x6_IPohWgk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/24/0bcc46-fa82-48ab-910e-f2dbf3bc8b8b/1/v12cHvCe_eKdjDuT72heeAwMpzw.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/24/0bcc46-fa82-48ab-910e-f2dbf3bc8b8b/1/yEUAv50FTS82mVDi5x6_IPohWgk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
195.8.100.0/24
Signature Algorithm: sha256WithRSAEncryption
75:fd:d4:04:40:30:ef:57:b4:97:db:de:6e:79:bc:46:ab:2f:
48:86:e4:10:95:f0:97:54:c9:17:ca:cc:91:6e:54:55:56:14:
8f:ff:4a:e1:b6:70:97:ff:60:cb:e1:7f:28:dd:2f:af:e3:6c:
ca:25:68:97:64:3f:86:46:1d:80:56:9b:8a:6e:a2:59:28:c4:
62:64:6e:10:ed:8d:3b:28:b0:2a:53:2f:e8:2c:47:cb:d7:f1:
12:7a:4b:d8:6b:ab:f3:06:9a:ec:13:21:a5:64:c3:44:f6:2f:
35:8b:7f:6f:86:73:00:ae:af:2b:9b:bc:89:33:8b:c1:e5:85:
b0:36:59:9f:00:36:e2:06:44:ce:63:7e:dc:20:9e:db:87:d8:
9e:93:8e:2b:be:45:b4:90:1f:7a:5d:d6:eb:43:68:15:d5:9e:
ac:17:3b:35:dc:65:27:c1:09:2b:2a:61:4c:b8:c6:bf:09:b4:
c1:18:74:7b:6c:83:4a:91:64:39:c6:64:ce:67:e8:76:c4:29:
f0:dd:d4:2c:98:eb:57:81:cd:9d:70:6f:f8:c4:dd:38:55:9d:
c3:d5:09:6f:a5:ec:a6:06:27:ea:de:92:d4:d4:3c:d0:bd:2b:
d5:1c:32:23:05:aa:0e:b4:fc:5f:85:50:4e:5a:37:13:73:15:
a7:72:a5:23
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Feb 17 08:18:31 2025 by rpki-client