![](/console.gif)
Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/27/dbecfc-1fde-4c46-834c-19be17db55f9/1/cXT6rAY6JxlaXCUsAEsluUuVOC8.roa
File: cXT6rAY6JxlaXCUsAEsluUuVOC8.roa (raw, json)
Hash identifier: zVlE6IImjYFKZRGvmVyH1EQnHFN98DB87pWuTELqBEQ=
Subject key identifier: 71:74:FA:AC:06:3A:27:19:5A:5C:25:2C:00:4B:25:B9:4B:95:38:2F
Certificate issuer: /CN=7d00ccf61fa633675bc7c652c7946be09c2c465f
Certificate serial: AED114
Authority key identifier: 7D:00:CC:F6:1F:A6:33:67:5B:C7:C6:52:C7:94:6B:E0:9C:2C:46:5F
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/fQDM9h-mM2dbx8ZSx5Rr4JwsRl8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/27/dbecfc-1fde-4c46-834c-19be17db55f9/1/cXT6rAY6JxlaXCUsAEsluUuVOC8.roa
Signing time: Sat 01 Jan 2022 08:04:30 +0000
ROA not before: Sat 01 Jan 2022 08:04:30 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 209854
IP address blocks: 194.26.131.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 11456788 (0xaed114)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=7d00ccf61fa633675bc7c652c7946be09c2c465f
Validity
Not Before: Jan 1 08:04:30 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=7174faac063a27195a5c252c004b25b94b95382f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a3:f9:5a:c3:d5:61:d7:32:78:3a:5d:f6:b4:64:
d0:ff:a3:72:d8:80:aa:00:c2:97:ab:e7:6d:a0:d6:
27:b8:4e:a0:24:a8:0b:52:30:cf:3e:89:14:02:7b:
4d:d1:aa:c5:46:76:67:a0:78:83:84:8e:be:b8:fa:
83:4a:c3:4b:90:8c:ad:01:1f:f2:6e:20:65:05:36:
55:1a:6b:4e:b1:f6:07:65:f7:64:be:64:42:a7:52:
73:39:c3:8d:89:99:3c:00:8b:84:7f:2c:ca:cf:7a:
d1:19:bd:c0:76:5c:7c:18:16:2c:df:b0:f1:76:4b:
66:f2:f7:83:00:10:92:a0:52:62:ee:3d:e1:5a:c1:
fa:70:c4:5e:3a:b1:32:fd:08:5f:b9:aa:68:85:98:
8d:ce:fe:c4:d0:4b:c3:34:11:92:bc:00:97:1d:03:
19:90:19:51:58:5d:70:80:24:e3:69:f2:b1:bd:2f:
55:a8:93:3f:75:8c:38:85:ab:d5:8e:20:f8:06:1e:
69:5f:c1:f2:d5:7f:7c:09:69:1a:f4:77:e0:9d:16:
a2:87:56:8e:25:20:4a:f8:33:79:c6:14:70:10:b2:
47:85:f5:44:44:26:91:95:c6:7e:b4:50:54:a1:c0:
18:b2:87:5d:52:58:23:c1:a9:1f:9a:bc:50:ef:f8:
a8:33
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
71:74:FA:AC:06:3A:27:19:5A:5C:25:2C:00:4B:25:B9:4B:95:38:2F
X509v3 Authority Key Identifier:
keyid:7D:00:CC:F6:1F:A6:33:67:5B:C7:C6:52:C7:94:6B:E0:9C:2C:46:5F
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/fQDM9h-mM2dbx8ZSx5Rr4JwsRl8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/27/dbecfc-1fde-4c46-834c-19be17db55f9/1/cXT6rAY6JxlaXCUsAEsluUuVOC8.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/27/dbecfc-1fde-4c46-834c-19be17db55f9/1/fQDM9h-mM2dbx8ZSx5Rr4JwsRl8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
194.26.131.0/24
Signature Algorithm: sha256WithRSAEncryption
81:40:39:0f:0e:8c:04:1e:7f:01:18:82:cd:dc:e3:3b:c0:43:
f9:f8:dc:3a:3d:b9:27:89:d6:fe:cb:36:24:25:c2:38:c4:d8:
fc:07:fd:aa:b0:a6:bd:94:10:ad:7c:78:1c:ce:8d:66:72:e6:
46:d3:22:94:0f:b8:5c:31:a7:eb:1b:76:60:4b:f0:b2:19:73:
e6:29:39:a9:06:0f:b9:b0:48:b7:34:c0:25:5d:c7:5b:90:fe:
53:94:24:c1:6f:ac:73:2a:2f:9b:11:50:77:78:4e:07:9d:4a:
ef:cc:75:4c:57:d2:a0:3f:da:e4:c3:85:cf:73:ae:9e:cc:94:
80:53:3c:81:c4:55:42:28:8c:f3:5d:92:24:78:cd:08:de:34:
4c:ab:7b:a2:fe:b8:81:0e:76:50:7f:a4:63:4a:1d:0d:ce:5c:
6c:67:f8:15:28:ce:cb:9c:4b:e6:da:34:48:6f:36:de:5a:db:
dd:f3:9e:f5:37:44:43:cc:92:9f:92:3e:9d:f0:1f:a9:fe:72:
d6:be:ea:13:34:63:69:bc:95:2f:1c:9e:dc:b8:dc:5d:59:62:
d2:25:c8:f8:db:4f:5d:28:67:df:34:57:23:b5:f6:05:16:17:
92:00:d7:e6:df:1f:5a:75:4a:c4:52:8f:ab:ee:2f:46:81:86:
33:5c:f7:51
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Feb 17 07:16:57 2025 by rpki-client