![](/console.gif)
Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/31/246d61-ab75-4b19-aec2-a75abc2ab7e7/1/v5K7CHFqry8xFIsr39raYTAAlcM.roa
File: v5K7CHFqry8xFIsr39raYTAAlcM.roa (raw, json)
Hash identifier: Eei02Yh70NLLZpnJfqMtgtO4r01MJ3wNtbdwnXQJKHo=
Subject key identifier: BF:92:BB:08:71:6A:AF:2F:31:14:8B:2B:DF:DA:DA:61:30:00:95:C3
Certificate issuer: /CN=733bda0008dfb5a2eb4e2a56902448fed940d59f
Certificate serial: 01826E131F0A7D1846613E2CD9FDDAD03B5B
Authority key identifier: 73:3B:DA:00:08:DF:B5:A2:EB:4E:2A:56:90:24:48:FE:D9:40:D5:9F
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/czvaAAjftaLrTipWkCRI_tlA1Z8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/31/246d61-ab75-4b19-aec2-a75abc2ab7e7/1/v5K7CHFqry8xFIsr39raYTAAlcM.roa
Signing time: Fri 05 Aug 2022 12:55:23 +0000
ROA not before: Fri 05 Aug 2022 12:55:23 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 35758
IP address blocks: 212.46.33.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:82:6e:13:1f:0a:7d:18:46:61:3e:2c:d9:fd:da:d0:3b:5b
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=733bda0008dfb5a2eb4e2a56902448fed940d59f
Validity
Not Before: Aug 5 12:55:23 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=bf92bb08716aaf2f31148b2bdfdada61300095c3
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:92:59:a9:47:24:f4:da:30:40:00:d7:be:6b:67:
ad:ef:7c:f6:87:08:3c:36:0d:0e:9b:5b:ca:2f:51:
49:95:19:ff:53:fa:2d:83:26:03:c9:c9:6d:da:bf:
be:8c:be:65:ff:f1:4a:c3:29:48:12:fb:8a:04:41:
3b:5a:c8:24:f5:ce:eb:3f:8a:a3:94:82:be:7d:7f:
07:e1:36:07:9d:55:8e:9f:c6:9e:a5:c7:79:f1:5d:
f0:a9:fd:79:36:60:a0:48:9b:1f:2a:8b:c2:d7:65:
80:0c:9e:6a:6d:93:99:3e:13:9b:1f:a9:b6:17:8a:
a6:c0:fd:62:e4:1f:87:05:7a:a8:e2:e3:12:86:13:
95:92:90:7d:21:6e:54:d1:c5:46:2c:d0:6a:bd:99:
21:42:e4:08:d0:00:0e:b1:91:dd:56:3a:3a:4f:46:
2a:7c:47:9b:2a:85:df:72:19:07:17:69:30:e5:3d:
dc:ea:55:3d:ff:74:bd:71:04:bc:a8:15:fc:bf:3f:
39:f6:3c:c1:b4:a8:93:d7:c3:8b:c6:65:e3:18:83:
3a:5d:46:af:29:2b:be:df:b9:ef:55:c6:d3:70:1f:
25:c1:6b:b6:da:2f:53:f2:3f:86:14:c9:ba:57:70:
cd:67:1b:74:ab:13:df:7b:33:6f:5e:55:8c:04:b6:
bc:6d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
BF:92:BB:08:71:6A:AF:2F:31:14:8B:2B:DF:DA:DA:61:30:00:95:C3
X509v3 Authority Key Identifier:
keyid:73:3B:DA:00:08:DF:B5:A2:EB:4E:2A:56:90:24:48:FE:D9:40:D5:9F
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/czvaAAjftaLrTipWkCRI_tlA1Z8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/31/246d61-ab75-4b19-aec2-a75abc2ab7e7/1/v5K7CHFqry8xFIsr39raYTAAlcM.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/31/246d61-ab75-4b19-aec2-a75abc2ab7e7/1/czvaAAjftaLrTipWkCRI_tlA1Z8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
212.46.33.0/24
Signature Algorithm: sha256WithRSAEncryption
82:df:1e:5d:21:ce:af:7c:82:c8:2e:32:e8:c9:9f:8a:af:d7:
be:82:ff:5d:3e:09:15:f3:76:d1:c2:a3:fb:e9:92:a8:6a:a8:
e2:8e:5a:bd:0c:5c:1e:dc:ce:6e:b1:fe:90:27:15:69:28:49:
14:e2:f0:15:1f:57:28:f1:6e:01:4f:1e:e7:2c:4f:9f:a8:25:
9c:22:bd:41:69:53:55:54:b5:41:5b:5f:81:0b:b7:d5:76:45:
79:ed:af:a0:cc:d8:f6:6a:55:08:d6:86:87:08:94:db:bb:c3:
fe:e3:8b:cc:da:cb:29:7c:ff:31:41:7a:8c:d2:3c:be:43:9b:
51:97:46:4d:25:f2:4a:6f:8b:fd:60:48:c8:f1:21:4d:39:cb:
f7:da:f7:bc:52:84:b6:cb:33:bb:c3:2b:8a:cc:03:8f:d7:a0:
2f:cc:b3:92:f9:ec:df:90:e1:b4:11:9a:97:d9:86:e6:de:1c:
92:cf:e9:ca:3c:14:b3:37:8d:6e:1c:b4:6c:3a:a7:52:62:39:
14:57:c4:98:19:c2:f8:64:b9:8d:40:08:08:db:9c:b1:b2:fe:
79:46:44:14:69:e0:ac:a2:0f:cd:a0:79:ff:b2:51:9a:e8:56:
c0:5b:60:f3:2c:a8:85:51:ad:ae:68:fe:b1:aa:70:bc:35:1d:
81:1f:12:00
-----BEGIN CERTIFICATE-----
MIIE/TCCA+WgAwIBAgISAYJuEx8KfRhGYT4s2f3a0DtbMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDczM2JkYTAwMDhkZmI1YTJlYjRlMmE1NjkwMjQ0OGZlZDk0
MGQ1OWYwHhcNMjIwODA1MTI1NTIzWhcNMjMwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EyhiZjkyYmIwODcxNmFhZjJmMzExNDhiMmJkZmRhZGE2MTMwMDA5NWMzMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAklmpRyT02jBAANe+a2et73z2hwg8
Ng0Om1vKL1FJlRn/U/otgyYDyclt2r++jL5l//FKwylIEvuKBEE7Wsgk9c7rP4qj
lIK+fX8H4TYHnVWOn8aepcd58V3wqf15NmCgSJsfKovC12WADJ5qbZOZPhObH6m2
F4qmwP1i5B+HBXqo4uMShhOVkpB9IW5U0cVGLNBqvZkhQuQI0AAOsZHdVjo6T0Yq
fEebKoXfchkHF2kw5T3c6lU9/3S9cQS8qBX8vz859jzBtKiT18OLxmXjGIM6XUav
KSu+37nvVcbTcB8lwWu22i9T8j+GFMm6V3DNZxt0qxPfezNvXlWMBLa8bQIDAQAB
o4ICCTCCAgUwHQYDVR0OBBYEFL+Suwhxaq8vMRSLK9/a2mEwAJXDMB8GA1UdIwQY
MBaAFHM72gAI37Wi604qVpAkSP7ZQNWfMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvY3p2YUFBamZ0YUxyVGlwV2tDUklfdGxBMVo4LmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8zMS8yNDZkNjEtYWI3NS00YjE5LWFlYzIt
YTc1YWJjMmFiN2U3LzEvdjVLN0NIRnFyeTh4RklzcjM5cmFZVEFBbGNNLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8zMS8yNDZkNjEtYWI3NS00YjE5LWFlYzItYTc1YWJjMmFiN2U3
LzEvY3p2YUFBamZ0YUxyVGlwV2tDUklfdGxBMVo4LmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQA1C4hMA0G
CSqGSIb3DQEBCwUAA4IBAQCC3x5dIc6vfILILjLoyZ+Kr9e+gv9dPgkV83bRwqP7
6ZKoaqjijlq9DFwe3M5usf6QJxVpKEkU4vAVH1co8W4BTx7nLE+fqCWcIr1BaVNV
VLVBW1+BC7fVdkV57a+gzNj2alUI1oaHCJTbu8P+44vM2sspfP8xQXqM0jy+Q5tR
l0ZNJfJKb4v9YEjI8SFNOcv32ve8UoS2yzO7wyuKzAOP16AvzLOS+ezfkOG0EZqX
2Ybm3hySz+nKPBSzN41uHLRsOqdSYjkUV8SYGcL4ZLmNQAgI25yxsv55RkQUaeCs
og/NoHn/slGa6FbAW2DzLKiFUa2uaP6xqnC8NR2BHxIA
-----END CERTIFICATE-----
Generated at Mon Feb 17 08:03:39 2025 by rpki-client