![](/console.gif)
Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/44/ad60e8-4609-4d43-89ff-e3c2f4d2ab3b/1/HIW8kwKFyzTefiWyQMH8C5ozaR4.roa
File: HIW8kwKFyzTefiWyQMH8C5ozaR4.roa (raw, json)
Hash identifier: +lh2FPuA0LCGxmwnDSqDzW7qzWgAzYL2kQP/VBGL69Q=
Subject key identifier: 1C:85:BC:93:02:85:CB:34:DE:7E:25:B2:40:C1:FC:0B:9A:33:69:1E
Certificate issuer: /CN=627de978cdc2eb05c3f089061b0abe3c5f698aee
Certificate serial: 018899BDC9354A655FC2797E4DB2EBA41D60
Authority key identifier: 62:7D:E9:78:CD:C2:EB:05:C3:F0:89:06:1B:0A:BE:3C:5F:69:8A:EE
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Yn3peM3C6wXD8IkGGwq-PF9piu4.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/44/ad60e8-4609-4d43-89ff-e3c2f4d2ab3b/1/HIW8kwKFyzTefiWyQMH8C5ozaR4.roa
Signing time: Thu 08 Jun 2023 06:42:11 +0000
ROA not before: Thu 08 Jun 2023 06:42:11 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 207279
IP address blocks: 193.162.29.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:88:99:bd:c9:35:4a:65:5f:c2:79:7e:4d:b2:eb:a4:1d:60
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=627de978cdc2eb05c3f089061b0abe3c5f698aee
Validity
Not Before: Jun 8 06:42:11 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=1c85bc930285cb34de7e25b240c1fc0b9a33691e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:86:92:50:1c:f0:85:38:88:35:51:6e:24:d3:50:
3d:a1:90:06:bd:1e:9e:18:03:66:3e:49:d9:43:a0:
ad:48:35:dc:04:46:a3:0d:7a:b4:95:41:7b:9d:f1:
25:e0:c3:ec:56:86:ca:50:f0:cc:d8:7d:9b:df:d2:
00:0f:1d:48:2c:af:51:d8:2b:14:78:36:70:31:9d:
8f:5a:d8:33:aa:9f:92:75:6d:be:fe:02:68:9f:93:
32:82:c7:cf:e7:3c:09:fb:6b:9d:71:4c:e5:9c:68:
4e:89:30:3a:64:ac:88:56:9c:80:1c:a9:d3:61:1e:
ad:82:32:8f:66:8a:58:90:f5:4f:d2:7e:a2:fe:3b:
09:a4:1a:21:cb:42:17:8a:34:05:1a:4d:a5:00:60:
ec:1c:f2:9e:02:c6:63:22:09:bc:40:01:47:9e:20:
41:8f:4e:28:88:61:27:e8:99:d4:b6:b2:a3:b3:78:
71:b1:e6:97:91:c4:47:62:f5:70:fb:b4:f2:66:14:
22:f7:75:3b:11:9f:da:c6:1b:a6:8e:c8:aa:45:e4:
83:28:55:f9:f9:a7:09:55:cd:82:78:d7:b8:86:c3:
9d:69:67:53:b7:56:1c:98:70:77:f6:d1:9f:c7:8f:
5b:dd:4f:f3:69:83:c2:89:57:7a:14:13:eb:cd:28:
80:79
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
1C:85:BC:93:02:85:CB:34:DE:7E:25:B2:40:C1:FC:0B:9A:33:69:1E
X509v3 Authority Key Identifier:
keyid:62:7D:E9:78:CD:C2:EB:05:C3:F0:89:06:1B:0A:BE:3C:5F:69:8A:EE
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Yn3peM3C6wXD8IkGGwq-PF9piu4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/44/ad60e8-4609-4d43-89ff-e3c2f4d2ab3b/1/HIW8kwKFyzTefiWyQMH8C5ozaR4.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/44/ad60e8-4609-4d43-89ff-e3c2f4d2ab3b/1/Yn3peM3C6wXD8IkGGwq-PF9piu4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
193.162.29.0/24
Signature Algorithm: sha256WithRSAEncryption
74:85:88:6d:26:3d:8f:9f:46:a2:dc:ee:12:0b:30:79:00:04:
a3:c7:a4:8d:c0:31:bc:2d:64:ff:91:c8:83:e2:ba:9d:a9:3e:
20:27:46:d3:24:d1:66:3a:f4:89:8a:b7:04:f8:35:f3:1a:82:
30:74:f0:11:06:ce:e4:79:79:68:64:52:bd:45:3c:34:29:c2:
46:6a:ab:5e:aa:64:f5:e8:24:5d:71:c8:08:a7:10:37:91:39:
24:bc:6b:05:80:a0:0e:26:7c:0c:95:25:59:0b:d9:82:a8:0d:
b3:46:c6:13:2d:c9:6e:e8:e9:e8:b8:84:5d:4f:42:54:09:21:
18:f4:7d:18:e6:29:f8:0f:d1:30:ca:17:81:60:ae:c4:1f:97:
59:40:97:7f:af:bc:01:c5:c6:d1:48:1b:9d:ae:89:a1:fa:40:
96:5b:7b:20:55:c3:e9:ef:1b:52:5e:83:67:36:c4:f1:01:3d:
99:24:0e:42:46:53:78:71:88:22:2c:62:2f:a1:58:f4:b4:fb:
b9:09:05:49:e7:f6:5e:21:fa:8f:64:12:38:79:89:ae:72:ba:
ca:34:54:b6:06:90:eb:cd:e1:02:c8:a2:c7:f5:c4:67:3e:ef:
03:2d:76:67:7b:bc:4f:42:0d:29:c2:93:fc:4b:30:6d:fc:13:
24:40:f1:42
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Feb 17 07:39:01 2025 by rpki-client