![](/console.gif)
Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/2e/b66a33-92ff-4bc5-849e-8ba6f92434de/1/v-RXOEacJgMyZqnjyIOSvNiltAg.roa
File: v-RXOEacJgMyZqnjyIOSvNiltAg.roa (raw, json)
Hash identifier: Af5dg26pznpOEv5WniCwgj7enzmIai+ukB3K1okfwbo=
Subject key identifier: BF:E4:57:38:46:9C:26:03:32:66:A9:E3:C8:83:92:BC:D8:A5:B4:08
Certificate issuer: /CN=84393e987d67c3dba9094837ec8829ff176c1090
Certificate serial: 01856D662D4958C04E7739DA5D219E138748
Authority key identifier: 84:39:3E:98:7D:67:C3:DB:A9:09:48:37:EC:88:29:FF:17:6C:10:90
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/hDk-mH1nw9upCUg37Igp_xdsEJA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/2e/b66a33-92ff-4bc5-849e-8ba6f92434de/1/v-RXOEacJgMyZqnjyIOSvNiltAg.roa
Signing time: Sun 01 Jan 2023 12:54:50 +0000
ROA not before: Sun 01 Jan 2023 12:54:50 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 197883
IP address blocks: 80.73.241.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:85:6d:66:2d:49:58:c0:4e:77:39:da:5d:21:9e:13:87:48
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=84393e987d67c3dba9094837ec8829ff176c1090
Validity
Not Before: Jan 1 12:54:50 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=bfe45738469c26033266a9e3c88392bcd8a5b408
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a2:e5:87:3a:f5:cf:62:6c:e0:4a:d7:49:93:9a:
0b:e0:30:7a:72:14:f8:29:45:a6:bf:5b:54:37:88:
3b:b1:70:25:e3:37:90:e1:8a:cb:42:37:81:e8:f2:
49:07:1d:62:62:50:f2:41:db:a5:ad:e5:97:79:5e:
54:15:61:2f:65:14:f2:f3:8f:c0:73:7a:bc:8a:09:
94:ea:3e:dd:a9:e2:cf:04:9e:c6:98:f9:a8:93:fc:
2b:c3:9e:29:5b:dd:8f:8c:2f:2f:3d:03:7d:3b:55:
fb:37:58:b4:43:e7:80:a0:37:9c:b3:7f:13:44:f7:
71:07:94:0f:f9:87:7f:1e:a0:99:b9:e7:83:ba:5e:
a8:ed:3a:a8:a2:ae:c3:60:8d:61:d9:58:4e:03:ed:
d0:78:26:84:d6:22:47:d9:50:14:2e:88:e5:0c:0a:
6c:a8:1d:a9:3f:37:b4:b1:4a:e8:10:2f:81:a4:a9:
94:60:73:f2:aa:da:d5:df:f0:42:61:54:ce:92:76:
be:29:d8:1a:51:b3:63:a6:a5:32:c6:b4:49:ca:5d:
28:1b:6a:bb:43:27:28:e7:09:89:96:ae:22:00:ed:
2d:ac:62:4e:44:fe:64:82:e1:99:d4:0a:56:29:2d:
16:e8:14:9f:35:3a:ea:6c:6e:bd:90:1b:ef:0f:83:
c1:01
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
BF:E4:57:38:46:9C:26:03:32:66:A9:E3:C8:83:92:BC:D8:A5:B4:08
X509v3 Authority Key Identifier:
keyid:84:39:3E:98:7D:67:C3:DB:A9:09:48:37:EC:88:29:FF:17:6C:10:90
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/hDk-mH1nw9upCUg37Igp_xdsEJA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/2e/b66a33-92ff-4bc5-849e-8ba6f92434de/1/v-RXOEacJgMyZqnjyIOSvNiltAg.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/2e/b66a33-92ff-4bc5-849e-8ba6f92434de/1/hDk-mH1nw9upCUg37Igp_xdsEJA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
80.73.241.0/24
Signature Algorithm: sha256WithRSAEncryption
0b:af:5b:2c:48:f6:a1:07:ce:a1:a7:12:d7:9a:54:ae:6f:20:
5d:72:d2:b6:36:29:34:fa:df:2c:35:83:07:60:da:cc:46:cf:
48:58:ae:c0:1a:92:db:4d:58:1c:97:3a:6d:e3:fd:f2:3a:1b:
49:30:63:b3:c9:bc:54:1b:3a:ab:d8:9e:4f:e3:39:82:53:09:
9f:54:cc:9a:7e:ee:de:4a:b9:ab:eb:27:e9:96:56:c4:e0:24:
8c:21:d9:16:8f:b9:93:0c:e4:1a:70:5e:05:d4:53:70:45:5a:
f6:44:1f:38:18:d9:e6:4f:61:7c:ec:83:02:12:99:82:7d:18:
23:07:11:11:a8:d7:28:ea:40:52:3d:10:a0:09:f3:68:f7:88:
a1:4f:96:f6:a6:16:73:7c:d6:f1:37:35:e9:91:00:49:2a:16:
78:ca:28:f4:87:95:21:92:67:22:40:d9:f8:23:1e:11:6a:3f:
55:40:0a:e1:e6:d7:68:22:40:dd:4e:27:aa:1b:42:14:d0:9f:
a4:49:af:90:78:8c:6b:e3:10:98:cf:f1:ea:89:ad:6a:f4:16:
6e:75:d9:2b:d8:e6:67:2e:b9:59:8f:ad:2f:97:35:6c:ac:8a:
07:19:e4:80:12:d7:5d:49:d3:f0:9a:e8:6a:9f:ba:56:c2:99:
dc:67:57:30
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Feb 17 07:25:57 2025 by rpki-client