![](/console.gif)
Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/2d/6e5e6e-c466-4539-b704-f1797cab78d4/1/7tjVRXqKCT9ZbqPixEx7IUUHCA4.roa
File: 7tjVRXqKCT9ZbqPixEx7IUUHCA4.roa (raw, json)
Hash identifier: NYU/83gX44fVlVkCyAzwzk6ZarYZh2vBkpkehH8jwPg=
Subject key identifier: EE:D8:D5:45:7A:8A:09:3F:59:6E:A3:E2:C4:4C:7B:21:45:07:08:0E
Certificate issuer: /CN=335cd11fdbafb032534ae022abb4c8e369878a67
Certificate serial: 038836B4
Authority key identifier: 33:5C:D1:1F:DB:AF:B0:32:53:4A:E0:22:AB:B4:C8:E3:69:87:8A:67
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/M1zRH9uvsDJTSuAiq7TI42mHimc.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/2d/6e5e6e-c466-4539-b704-f1797cab78d4/1/7tjVRXqKCT9ZbqPixEx7IUUHCA4.roa
Signing time: Fri 24 Jun 2022 15:28:40 +0000
ROA not before: Fri 24 Jun 2022 15:28:40 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 22653
IP address blocks: 95.214.26.0/24 maxlen: 24
95.214.25.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 59258548 (0x38836b4)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=335cd11fdbafb032534ae022abb4c8e369878a67
Validity
Not Before: Jun 24 15:28:40 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=eed8d5457a8a093f596ea3e2c44c7b214507080e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8d:ef:3f:bc:46:79:eb:32:95:06:3c:75:3e:bd:
19:41:2e:a0:ce:10:87:ba:6a:b7:7e:e6:ef:cf:ad:
7c:22:9d:2f:b6:ad:7e:a1:94:af:00:2e:9f:c0:ef:
67:3b:9f:45:c5:88:b6:53:39:90:8b:07:cc:72:ac:
19:6b:5b:f6:20:66:7b:be:a2:d7:e0:8d:9e:10:83:
f3:3e:2b:61:a8:e4:26:a1:f7:8d:7b:22:72:e6:3c:
23:12:17:19:bb:78:6e:92:a9:d2:70:51:d9:47:f4:
50:fc:e2:a3:2b:a3:6c:ac:75:d6:74:9f:cf:7c:a1:
16:eb:cf:50:3d:bb:56:b1:a6:07:19:9e:ef:d7:81:
9b:50:cd:c0:84:1c:23:ab:62:79:57:9b:8f:75:b1:
21:d5:f5:38:d6:0c:b7:f8:15:4a:c1:35:83:9f:01:
18:62:44:13:62:aa:55:70:4c:d3:3b:1b:b8:54:50:
2a:3b:64:e4:a8:55:6a:e2:88:88:9f:fc:4c:6a:80:
4a:de:8b:f7:d1:86:2b:37:ed:56:62:bf:5d:39:d0:
aa:1f:9b:c4:b9:b9:d6:5f:a0:ca:6a:78:e5:16:c5:
c2:de:28:42:73:2c:f1:ba:07:b0:e8:dd:72:86:68:
48:a6:61:f6:4f:a4:67:13:5d:69:be:3a:70:5b:73:
ae:23
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
EE:D8:D5:45:7A:8A:09:3F:59:6E:A3:E2:C4:4C:7B:21:45:07:08:0E
X509v3 Authority Key Identifier:
keyid:33:5C:D1:1F:DB:AF:B0:32:53:4A:E0:22:AB:B4:C8:E3:69:87:8A:67
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/M1zRH9uvsDJTSuAiq7TI42mHimc.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/2d/6e5e6e-c466-4539-b704-f1797cab78d4/1/7tjVRXqKCT9ZbqPixEx7IUUHCA4.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/2d/6e5e6e-c466-4539-b704-f1797cab78d4/1/M1zRH9uvsDJTSuAiq7TI42mHimc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
95.214.25.0-95.214.26.255
Signature Algorithm: sha256WithRSAEncryption
69:46:68:d3:9c:95:c0:41:85:6a:b0:dc:a2:7b:c1:16:df:52:
4d:19:0f:2c:04:e5:73:b6:71:a3:57:4c:8d:4b:b3:5c:b5:22:
e1:df:ea:63:35:02:0d:f6:6f:7d:a0:fa:b3:47:ea:88:b0:b0:
21:72:91:d1:c8:6b:7d:4d:e7:f1:50:e3:00:73:7f:53:60:00:
a3:b4:84:0e:51:e2:d9:14:33:70:ab:9c:95:a4:87:89:c3:92:
9b:18:07:09:65:91:62:a1:b8:7c:36:d9:a4:e6:72:87:50:71:
d7:08:04:45:31:b0:bf:a7:a5:95:6a:9e:81:d3:7a:cc:be:95:
20:6e:de:c4:6c:a5:0f:6d:f7:89:ff:5a:20:66:a7:cc:b1:48:
8c:c1:a4:c0:f4:4a:0f:b6:e6:5b:14:76:54:ca:7c:45:43:66:
8d:cf:ee:35:12:7e:1c:f8:f8:da:55:25:82:38:00:09:cd:38:
37:5c:01:b7:35:a3:f3:3a:7c:68:b5:5c:d0:80:59:e1:c8:57:
bc:8a:ab:1e:2c:84:67:cd:c5:d2:07:76:30:75:6e:63:74:93:
c0:4f:2d:e0:66:e6:3e:32:c6:ca:22:b0:ec:1d:1b:07:4a:99:
52:42:7e:e0:5b:2c:21:87:73:38:0f:cb:55:82:14:6b:b4:fd:
1a:0a:24:5e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Feb 17 07:38:24 2025 by rpki-client