![](/console.gif)
Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/31/2ab375-4598-49a1-a4a4-c1b562c57703/1/6eRkOjJ_bD1jOLYEZ79HNHZsOf0.roa
File: 6eRkOjJ_bD1jOLYEZ79HNHZsOf0.roa (raw, json)
Hash identifier: aJ7Zk4fgFvZ/HPBpfrVxeBU5dyfrplanROrkY9++h04=
Subject key identifier: E9:E4:64:3A:32:7F:6C:3D:63:38:B6:04:67:BF:47:34:76:6C:39:FD
Certificate issuer: /CN=d136b1b31512d94294e20b15238c203c6e3cd9dc
Certificate serial: 081C6F74
Authority key identifier: D1:36:B1:B3:15:12:D9:42:94:E2:0B:15:23:8C:20:3C:6E:3C:D9:DC
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/0TaxsxUS2UKU4gsVI4wgPG482dw.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/31/2ab375-4598-49a1-a4a4-c1b562c57703/1/6eRkOjJ_bD1jOLYEZ79HNHZsOf0.roa
Signing time: Sat 01 Jan 2022 14:06:59 +0000
ROA not before: Sat 01 Jan 2022 14:06:59 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 40065
IP address blocks: 45.87.84.0/22 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 136081268 (0x81c6f74)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=d136b1b31512d94294e20b15238c203c6e3cd9dc
Validity
Not Before: Jan 1 14:06:59 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=e9e4643a327f6c3d6338b60467bf4734766c39fd
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:96:1e:7a:12:df:38:66:84:9f:52:b5:3d:42:9f:
a0:13:41:1c:8e:1c:67:cc:a8:78:ad:c9:67:ff:f9:
14:8b:c2:22:9a:22:ca:6d:25:46:57:87:f3:1a:e1:
1f:ad:5b:64:2f:78:dc:f8:b2:c6:91:c6:cb:a0:cf:
fb:3d:62:21:49:76:8a:27:2f:89:b5:e0:12:fd:62:
4f:76:cb:2c:e6:b7:5b:f8:8b:73:a8:05:a1:2a:07:
5b:9b:1c:d6:4a:15:f9:85:06:0d:2f:e1:2e:26:61:
b4:e5:e1:1c:6d:5e:a6:e0:3d:8d:c5:2e:14:f1:7d:
3b:a3:77:97:24:75:61:e4:e3:69:87:63:16:2c:50:
c4:f0:b3:a2:4c:af:46:43:6b:f9:9e:28:05:88:0b:
04:ff:9b:37:6a:a5:08:11:60:2f:f1:75:51:46:e6:
35:6f:d2:98:7f:8f:32:33:04:a2:43:d1:e0:97:77:
64:7e:c3:94:a1:f5:b6:14:6e:c7:72:8f:31:b2:c1:
1b:b8:e2:21:f1:ce:e7:15:56:a1:ab:33:8e:bb:3e:
cc:d0:02:ee:a3:30:6c:73:04:11:a9:3f:48:38:77:
b9:61:cc:62:3b:a9:30:a3:db:95:b8:34:b7:4f:0d:
fb:97:9b:c0:0b:65:a0:63:a2:ea:2b:5e:90:7e:07:
37:7f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E9:E4:64:3A:32:7F:6C:3D:63:38:B6:04:67:BF:47:34:76:6C:39:FD
X509v3 Authority Key Identifier:
keyid:D1:36:B1:B3:15:12:D9:42:94:E2:0B:15:23:8C:20:3C:6E:3C:D9:DC
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/0TaxsxUS2UKU4gsVI4wgPG482dw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/31/2ab375-4598-49a1-a4a4-c1b562c57703/1/6eRkOjJ_bD1jOLYEZ79HNHZsOf0.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/31/2ab375-4598-49a1-a4a4-c1b562c57703/1/0TaxsxUS2UKU4gsVI4wgPG482dw.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
45.87.84.0/22
Signature Algorithm: sha256WithRSAEncryption
2f:dc:f2:c0:22:30:75:ba:96:0d:0b:82:a1:49:12:61:6d:b7:
43:dc:1d:bd:71:94:56:7d:91:fd:bc:67:42:63:5b:f8:f4:75:
ce:84:8a:df:23:16:74:94:a3:5c:35:33:f2:65:f4:90:df:74:
f5:3f:fd:25:25:f2:5c:3b:a6:d0:95:59:29:07:f9:90:b6:17:
47:ec:c7:10:81:28:22:62:b5:5f:cb:55:e0:0e:36:b2:4c:50:
c2:26:da:30:f4:1b:ad:6c:6c:8a:e8:39:78:22:18:a7:e5:c3:
20:62:e4:b4:81:87:2c:cf:1a:6f:ea:73:2b:eb:a5:ce:0d:9d:
d3:0f:1d:75:4a:5a:b6:39:e8:a0:cb:38:92:34:7f:85:61:ff:
5e:12:55:bf:0e:8b:fe:1b:11:09:18:85:a9:ae:69:89:58:ff:
c4:69:f6:0d:b6:d5:82:15:88:28:1b:98:9d:a9:c3:27:6a:2e:
84:f7:d0:ef:db:87:c3:31:9b:c9:77:f3:77:d1:dc:a4:54:bf:
4f:77:02:15:8a:ce:01:e1:9b:93:f5:4a:9c:87:f1:30:31:c6:
72:70:3d:21:53:7e:d3:9f:1b:9f:db:ca:60:3f:4c:20:1c:32:
76:54:86:42:ad:7b:b6:e7:26:78:72:83:4b:33:4d:e0:25:6a:
28:af:a5:89
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Feb 17 08:08:05 2025 by rpki-client