![](/console.gif)
Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/3e/9ecbd1-1982-4049-8cc3-38b11362f68e/1/wceKI_eZH5jhVCu0rbdc2se-08Q.roa
File: wceKI_eZH5jhVCu0rbdc2se-08Q.roa (raw, json)
Hash identifier: RwgHjzIP0AdJ3RbU68CUSIM2Obca8zDMRzqFAvZwPuM=
Subject key identifier: C1:C7:8A:23:F7:99:1F:98:E1:54:2B:B4:AD:B7:5C:DA:C7:BE:D3:C4
Certificate issuer: /CN=c5483453041593075038881b8d5df31495d942b4
Certificate serial: 018658DF93DBA62B1717F0163529CF96C7C8
Authority key identifier: C5:48:34:53:04:15:93:07:50:38:88:1B:8D:5D:F3:14:95:D9:42:B4
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/xUg0UwQVkwdQOIgbjV3zFJXZQrQ.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/3e/9ecbd1-1982-4049-8cc3-38b11362f68e/1/wceKI_eZH5jhVCu0rbdc2se-08Q.roa
Signing time: Thu 16 Feb 2023 06:18:12 +0000
ROA not before: Thu 16 Feb 2023 06:18:12 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 142430
IP address blocks: 178.22.29.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:86:58:df:93:db:a6:2b:17:17:f0:16:35:29:cf:96:c7:c8
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=c5483453041593075038881b8d5df31495d942b4
Validity
Not Before: Feb 16 06:18:12 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=c1c78a23f7991f98e1542bb4adb75cdac7bed3c4
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cf:4c:18:d2:85:e4:e2:d0:df:ca:d2:78:5b:08:
ec:51:44:13:be:79:68:c8:64:6e:5c:98:41:a3:1b:
b9:cf:33:05:6d:56:99:52:3d:f2:8f:a3:9c:39:6f:
96:07:a6:8e:ff:40:e4:df:f5:02:8d:ad:ef:74:33:
d4:43:19:fa:64:6b:58:e9:44:45:5f:e1:3e:19:37:
bb:bb:df:b0:2d:19:4c:6a:57:54:c4:54:28:d8:1b:
e8:4b:96:bb:4d:dd:0a:39:a5:bb:7a:5a:c1:c8:5f:
d9:ea:59:94:e6:2b:fd:c4:a8:d7:89:a5:17:f1:8d:
12:38:b1:a2:a9:96:b8:a4:ab:9d:51:40:0c:a9:36:
a8:4d:96:6a:f1:10:66:15:a2:87:d7:eb:b3:6a:98:
fd:19:9f:8d:95:e3:84:ae:89:24:81:d3:66:57:0f:
af:82:f7:41:e7:f1:11:aa:1a:39:8d:cf:78:fd:d7:
1a:fd:17:ed:72:2e:03:2f:30:3b:35:8e:28:09:d7:
33:41:e1:a8:ad:36:8c:69:e3:b3:96:88:a4:3c:63:
90:a0:fe:62:5c:fa:db:bb:7c:e8:09:94:c5:6d:0f:
c4:2c:68:47:56:0b:06:ec:72:22:10:f9:74:ab:41:
90:3a:3b:c7:bc:58:ed:6b:1a:8c:d6:14:cf:ae:90:
cc:fd
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C1:C7:8A:23:F7:99:1F:98:E1:54:2B:B4:AD:B7:5C:DA:C7:BE:D3:C4
X509v3 Authority Key Identifier:
keyid:C5:48:34:53:04:15:93:07:50:38:88:1B:8D:5D:F3:14:95:D9:42:B4
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/xUg0UwQVkwdQOIgbjV3zFJXZQrQ.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/3e/9ecbd1-1982-4049-8cc3-38b11362f68e/1/wceKI_eZH5jhVCu0rbdc2se-08Q.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/3e/9ecbd1-1982-4049-8cc3-38b11362f68e/1/xUg0UwQVkwdQOIgbjV3zFJXZQrQ.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
178.22.29.0/24
Signature Algorithm: sha256WithRSAEncryption
85:3a:75:49:4f:42:59:d2:40:d1:e9:05:6d:11:d5:98:b5:2c:
80:65:71:4e:e3:db:ce:d6:78:c7:0f:77:80:17:75:66:49:9c:
e7:0d:c6:1e:1a:aa:74:85:99:49:66:68:60:af:fd:c0:31:26:
8b:2e:45:58:90:7c:5b:68:16:59:56:16:9d:e0:32:c9:03:45:
e0:3c:59:d0:32:e4:34:d3:dd:93:f0:e5:ff:db:b0:11:b3:a2:
bd:60:ad:7b:50:3f:cc:42:ea:79:ba:33:cf:5b:31:a7:5e:bb:
cf:34:81:ce:05:16:42:da:aa:64:ce:25:eb:c6:27:1b:b0:b9:
32:aa:22:d0:39:c6:96:50:58:fd:d5:21:c7:80:13:c3:3f:38:
99:8f:89:c2:4e:e1:ed:ac:76:a7:6f:19:fc:a2:a5:25:7a:83:
af:7e:93:0f:07:e0:3b:7e:02:f5:8e:71:ba:00:4e:73:7a:78:
8a:87:ee:94:de:f1:d7:ce:29:87:d8:bb:92:37:f8:2f:ce:bd:
8b:02:4a:af:3a:7e:56:4f:ba:d2:7d:5e:ed:96:02:cb:ba:5d:
72:df:d6:5d:d6:4a:94:9c:8c:2f:50:07:35:ee:1f:21:87:8c:
8b:80:d8:73:f2:22:a6:4f:f4:8f:89:47:5e:02:23:11:fd:3a:
a3:34:e1:12
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Feb 17 07:12:54 2025 by rpki-client