![](/console.gif)
Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/33/a75f60-058e-43c7-9ca5-71d472748b53/1/ebYrQbILH18xgM1j-g5pIrP2GHY.roa
File: ebYrQbILH18xgM1j-g5pIrP2GHY.roa (raw, json)
Hash identifier: qaTPgZ/ncjaMvhI4uAhCmRH/DQX3jmij7TuxxWZl0YI=
Subject key identifier: 79:B6:2B:41:B2:0B:1F:5F:31:80:CD:63:FA:0E:69:22:B3:F6:18:76
Certificate issuer: /CN=46a8cc61de20a90048831facae22fa370e576936
Certificate serial: 01882086B1F5EBDE47D524B7A5131E2C6C78
Authority key identifier: 46:A8:CC:61:DE:20:A9:00:48:83:1F:AC:AE:22:FA:37:0E:57:69:36
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/RqjMYd4gqQBIgx-sriL6Nw5XaTY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/33/a75f60-058e-43c7-9ca5-71d472748b53/1/ebYrQbILH18xgM1j-g5pIrP2GHY.roa
Signing time: Mon 15 May 2023 17:47:58 +0000
ROA not before: Mon 15 May 2023 17:47:58 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 7393
IP address blocks: 91.246.63.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:88:20:86:b1:f5:eb:de:47:d5:24:b7:a5:13:1e:2c:6c:78
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=46a8cc61de20a90048831facae22fa370e576936
Validity
Not Before: May 15 17:47:58 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=79b62b41b20b1f5f3180cd63fa0e6922b3f61876
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:82:94:98:0b:0a:90:81:03:b1:32:80:95:f2:fa:
b9:69:56:1f:ae:24:b5:f4:ec:ca:ed:8f:82:90:eb:
b3:bb:07:57:cd:1a:d6:91:d5:57:26:1b:a0:1e:8b:
1f:92:d8:dd:53:b4:0e:fa:55:25:4a:3d:50:c3:c2:
d9:dd:a9:14:ea:f7:c1:e6:54:28:a9:09:dd:80:af:
12:05:b2:39:6f:d2:95:c9:0b:51:89:b5:16:fb:d5:
c4:f3:db:11:c5:05:dd:82:72:20:2e:cd:e3:c0:bf:
db:c5:4d:65:01:43:53:5d:b6:4c:dd:af:ea:6f:e2:
13:95:d4:b3:73:0c:88:18:ac:3c:12:0f:90:e1:fc:
43:63:74:34:eb:56:39:c1:7a:98:70:a8:21:b3:0d:
2c:a8:60:02:c1:fa:65:73:60:fc:f1:e6:b8:6d:11:
f8:02:c1:51:a0:50:50:13:d3:42:55:1b:b2:fa:5d:
4c:a8:cd:9f:d8:3e:07:1a:a8:f0:97:a6:be:a8:9c:
3b:72:20:e1:06:e4:3d:d9:60:4b:d5:54:e6:21:9a:
a4:37:96:55:89:b3:75:ea:97:08:7d:34:5c:67:6b:
2c:f3:09:d5:49:6d:35:c6:d6:1d:22:32:e3:6c:04:
c5:01:fd:bc:7b:fe:59:f2:64:de:e3:c9:a6:2c:15:
6d:6d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
79:B6:2B:41:B2:0B:1F:5F:31:80:CD:63:FA:0E:69:22:B3:F6:18:76
X509v3 Authority Key Identifier:
keyid:46:A8:CC:61:DE:20:A9:00:48:83:1F:AC:AE:22:FA:37:0E:57:69:36
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/RqjMYd4gqQBIgx-sriL6Nw5XaTY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/33/a75f60-058e-43c7-9ca5-71d472748b53/1/ebYrQbILH18xgM1j-g5pIrP2GHY.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/33/a75f60-058e-43c7-9ca5-71d472748b53/1/RqjMYd4gqQBIgx-sriL6Nw5XaTY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
91.246.63.0/24
Signature Algorithm: sha256WithRSAEncryption
b6:bf:28:eb:55:b8:40:09:97:5d:3b:c7:1e:a1:47:4c:db:70:
9c:8f:fa:c9:fa:35:06:c8:92:5e:93:a7:bf:45:e8:ec:5b:60:
59:38:7b:56:4b:cf:c0:0d:e7:01:06:d3:b4:7b:be:22:4e:09:
b2:f8:d6:96:67:25:a5:95:b0:d5:b2:7e:71:6d:07:4c:41:18:
88:57:5e:91:ac:d1:b2:2b:34:83:16:ae:32:80:d8:a8:66:a6:
65:6b:92:e4:f6:d9:d1:18:09:f9:cc:8e:19:f5:07:b9:c7:6d:
48:4b:8b:e7:bf:55:27:76:5d:74:5f:71:96:4d:eb:ae:8f:ae:
1b:c7:e5:81:bc:4e:14:eb:5d:17:e8:ec:87:bf:60:ca:bf:30:
c5:39:98:4a:ef:3f:2d:00:6f:c6:76:a9:e7:96:de:c1:9e:72:
ba:43:d1:c9:84:69:9f:34:40:d7:3f:18:f4:6f:c5:b5:24:7e:
fc:2a:89:7e:ae:ce:6f:e2:3f:18:d6:98:84:5e:be:98:09:13:
6f:fe:de:b0:19:6d:4b:64:0f:1b:1e:ee:6b:98:bf:ac:e6:de:
65:1e:25:91:17:ed:1d:de:9a:27:de:70:4e:e0:f3:40:70:57:
2f:be:53:8e:ef:19:45:dd:e1:9e:ac:c1:61:a0:b6:56:da:a0:
42:00:4c:6f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Feb 17 07:43:11 2025 by rpki-client