![](/console.gif)
Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/39/3c7504-de12-496e-b019-21877404f462/1/B1WmWlj4ETYCwsxBR1KlZVrVQuM.roa
File: B1WmWlj4ETYCwsxBR1KlZVrVQuM.roa (raw, json)
Hash identifier: +i/SgINTlDLyQ7gil/Na8AeLxITRRPDfKyllg3lc/rc=
Subject key identifier: 07:55:A6:5A:58:F8:11:36:02:C2:CC:41:47:52:A5:65:5A:D5:42:E3
Certificate issuer: /CN=6182fa3258c2d2cea1584c56f02625c03ff2b0d5
Certificate serial: 0185362BFF7A6CAD1B7F0CC75342459EFC38
Authority key identifier: 61:82:FA:32:58:C2:D2:CE:A1:58:4C:56:F0:26:25:C0:3F:F2:B0:D5
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/YYL6MljC0s6hWExW8CYlwD_ysNU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/39/3c7504-de12-496e-b019-21877404f462/1/B1WmWlj4ETYCwsxBR1KlZVrVQuM.roa
Signing time: Wed 21 Dec 2022 19:32:11 +0000
ROA not before: Wed 21 Dec 2022 19:32:11 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 211043
IP address blocks: 185.102.171.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:85:36:2b:ff:7a:6c:ad:1b:7f:0c:c7:53:42:45:9e:fc:38
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=6182fa3258c2d2cea1584c56f02625c03ff2b0d5
Validity
Not Before: Dec 21 19:32:11 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=0755a65a58f8113602c2cc414752a5655ad542e3
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a9:3f:d7:7f:9a:78:cf:97:4a:d1:83:87:33:5f:
f2:b2:d2:40:ac:eb:e5:59:39:05:72:4a:93:9f:bf:
01:00:32:98:46:55:15:62:02:a0:c2:ac:1b:43:40:
b2:5f:29:a7:83:5d:a7:80:61:0f:5d:59:b1:3e:9c:
92:93:de:0e:dd:db:ed:dd:e1:bc:34:4c:cb:2b:0d:
28:14:ae:99:51:ba:c7:d1:03:d1:79:49:31:d6:13:
a3:f5:18:3c:f5:90:24:bf:e3:30:e2:05:57:34:c5:
61:53:1f:61:5e:7d:8e:bd:ad:1a:44:88:73:64:69:
6c:e7:21:3d:54:5d:8e:34:bf:30:bb:71:45:82:7c:
eb:59:b4:0f:4e:67:80:75:be:28:d7:78:3c:45:63:
ab:13:d0:be:32:96:2b:41:40:0b:96:1f:95:f5:b0:
f6:ba:92:81:9e:0b:0d:7e:0f:60:05:7c:de:09:1f:
d2:d3:4f:73:10:ce:e5:ac:24:d7:65:37:50:0b:88:
1a:c4:71:e9:f2:7a:0a:3f:20:0f:17:06:0f:b3:ae:
12:e6:5a:7f:68:5c:c6:e1:d6:78:32:63:d1:c4:29:
86:70:37:dd:ec:06:92:a5:9b:42:9f:e9:16:b4:05:
1d:f4:e5:8d:82:bd:38:6a:33:0b:9d:18:18:9f:81:
90:ef
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
07:55:A6:5A:58:F8:11:36:02:C2:CC:41:47:52:A5:65:5A:D5:42:E3
X509v3 Authority Key Identifier:
keyid:61:82:FA:32:58:C2:D2:CE:A1:58:4C:56:F0:26:25:C0:3F:F2:B0:D5
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/YYL6MljC0s6hWExW8CYlwD_ysNU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/39/3c7504-de12-496e-b019-21877404f462/1/B1WmWlj4ETYCwsxBR1KlZVrVQuM.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/39/3c7504-de12-496e-b019-21877404f462/1/YYL6MljC0s6hWExW8CYlwD_ysNU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.102.171.0/24
Signature Algorithm: sha256WithRSAEncryption
50:01:8e:a2:7d:ee:66:fb:82:e6:f6:56:1a:6e:2a:ef:df:02:
26:0e:d9:91:fd:8f:1f:dd:8b:0d:00:18:8b:6c:a2:1d:cc:7d:
72:13:c5:35:85:0f:b5:fd:18:1b:de:bc:3e:76:d2:92:d6:77:
75:95:5e:b8:a7:f0:d8:55:69:bd:c8:2e:89:4e:61:e4:23:4c:
f5:bb:0b:44:ca:b3:73:1b:26:4a:e0:2e:5f:4e:46:4d:80:c4:
79:fd:a0:88:64:6e:6f:f1:a9:f9:b2:64:9f:db:ee:e5:3d:d4:
ce:64:c6:c0:5e:f9:37:24:09:ea:5e:2e:2a:80:24:42:70:28:
b9:9c:6a:70:80:05:8b:61:aa:5d:c5:6a:71:d3:c5:89:1c:23:
a3:05:3c:13:87:05:bf:cf:b1:54:c5:be:79:06:95:b7:c7:a3:
39:b1:85:82:27:57:ef:30:c7:51:32:c1:bd:cc:77:3b:12:29:
f6:43:05:00:21:d4:1d:86:dc:e8:f9:f2:db:4a:e6:c8:5b:8b:
e7:28:6a:c4:1f:21:d2:47:ae:9a:42:94:5d:cc:fa:dc:83:e6:
c1:7c:60:d3:5c:dd:33:37:15:84:cc:1a:c3:5b:9a:9c:0f:96:
a4:fb:b5:ae:91:eb:b2:2a:64:9e:3d:f7:45:36:b8:c1:48:e8:
dc:dc:fb:f1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Feb 17 07:31:17 2025 by rpki-client