![](/console.gif)
Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/39/754749-393a-4560-9e51-dff2c371ab35/1/LuCyMxHP6B6LaUYE7yv8FxZp1kQ.roa
File: LuCyMxHP6B6LaUYE7yv8FxZp1kQ.roa (raw, json)
Hash identifier: oPBJcph5PCJpNv4Uo7fa4e+cqYqocAKss5DM9uWJBgE=
Subject key identifier: 2E:E0:B2:33:11:CF:E8:1E:8B:69:46:04:EF:2B:FC:17:16:69:D6:44
Certificate issuer: /CN=c4934a004228d4958065609f31824f0732188f81
Certificate serial: 02A8D531
Authority key identifier: C4:93:4A:00:42:28:D4:95:80:65:60:9F:31:82:4F:07:32:18:8F:81
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/xJNKAEIo1JWAZWCfMYJPBzIYj4E.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/39/754749-393a-4560-9e51-dff2c371ab35/1/LuCyMxHP6B6LaUYE7yv8FxZp1kQ.roa
Signing time: Wed 02 Mar 2022 20:49:53 +0000
ROA not before: Wed 02 Mar 2022 20:49:53 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 1239
IP address blocks: 77.241.72.0/22 maxlen: 22
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 44619057 (0x2a8d531)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=c4934a004228d4958065609f31824f0732188f81
Validity
Not Before: Mar 2 20:49:53 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=2ee0b23311cfe81e8b694604ef2bfc171669d644
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c9:04:88:5d:9a:06:0b:1b:0b:37:76:97:8a:43:
83:d4:9b:a7:e7:98:20:f6:66:96:c5:73:81:d7:a0:
29:b9:cb:f7:33:f0:b3:e9:98:bf:89:7b:1b:30:2b:
1c:0a:dd:e7:81:f9:6c:6a:27:5d:3a:7f:d2:eb:1c:
8e:ba:5a:fe:a1:81:fe:be:4c:7d:b9:e3:62:05:00:
4e:a8:c9:1c:f9:6d:ac:ae:42:8b:f4:ed:91:fc:8a:
c0:fe:9a:cd:17:b5:6e:f5:61:3b:a3:6b:ec:60:01:
be:ba:52:20:05:d7:86:2d:a4:35:7f:b2:cd:ee:eb:
04:b7:57:27:35:af:e3:2a:36:c4:ed:c1:e8:da:5a:
a2:ca:22:d7:8e:d5:4a:b6:ea:a8:58:9d:64:b0:57:
e5:0e:87:e8:66:30:cc:3c:47:8e:5d:23:58:51:fb:
3f:d0:41:30:cc:68:c8:26:dd:92:dc:e6:fa:aa:79:
f5:26:02:94:29:f9:fe:87:ba:94:0f:73:71:23:39:
7c:37:25:23:8a:53:74:b1:d9:c2:31:59:d6:54:9c:
19:d2:dc:0a:52:42:9a:04:3e:ac:e3:f1:00:6c:e6:
2f:ea:ca:a7:aa:35:7b:34:47:79:04:6d:40:ef:d5:
74:96:bd:5b:3e:aa:87:94:41:f4:8f:2c:36:38:1d:
a4:53
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
2E:E0:B2:33:11:CF:E8:1E:8B:69:46:04:EF:2B:FC:17:16:69:D6:44
X509v3 Authority Key Identifier:
keyid:C4:93:4A:00:42:28:D4:95:80:65:60:9F:31:82:4F:07:32:18:8F:81
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/xJNKAEIo1JWAZWCfMYJPBzIYj4E.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/39/754749-393a-4560-9e51-dff2c371ab35/1/LuCyMxHP6B6LaUYE7yv8FxZp1kQ.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/39/754749-393a-4560-9e51-dff2c371ab35/1/xJNKAEIo1JWAZWCfMYJPBzIYj4E.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
77.241.72.0/22
Signature Algorithm: sha256WithRSAEncryption
97:9f:a9:f5:00:c3:e7:18:30:93:ff:b6:a4:87:4e:6a:fb:a2:
46:77:cd:1d:cf:58:19:86:f5:ea:0b:29:9d:78:93:38:dc:eb:
67:2e:74:82:dc:07:1b:d0:b6:f4:f8:66:3d:77:b1:f7:b2:21:
b0:b7:71:66:a5:1b:8a:d2:70:27:d4:a8:3b:92:fc:42:df:29:
c6:c8:16:5c:62:85:d6:bf:c9:09:fe:37:93:04:cb:da:10:b5:
d0:82:14:17:21:9d:6a:8e:b8:c6:04:1e:6f:55:c8:c4:87:ae:
8a:2d:4a:70:a5:bf:a4:df:50:35:d5:3b:8a:ca:8b:0e:36:a8:
ab:7c:52:d3:d1:fa:95:5b:dc:a5:3a:6c:fe:ea:98:b9:03:43:
db:14:22:0c:9b:0a:0e:3a:f8:ff:4e:29:cc:0f:6a:b6:6a:aa:
1e:3b:11:0c:3e:66:cb:21:2e:d4:3c:50:ad:a3:c9:8e:36:55:
15:18:ff:99:38:64:6e:4f:1a:95:8c:32:74:7b:e1:cc:15:42:
fb:9c:a7:e3:2d:20:6c:8f:f7:2d:dc:cc:13:50:cb:1f:af:68:
2d:03:0d:12:71:21:3a:38:2e:34:b3:36:37:ea:44:54:53:35:
c6:a3:7d:91:72:f4:f5:3f:d9:7e:3b:9e:18:bc:9a:06:fd:10:
f9:1a:7d:eb
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Feb 17 07:24:04 2025 by rpki-client