![](/console.gif)
Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/47/dad92e-267d-45de-86d0-42a6322e7771/1/WeREVj0iRsTgUrD4jmpMyrcny98.roa
File: WeREVj0iRsTgUrD4jmpMyrcny98.roa (raw, json)
Hash identifier: +hyN42TY0wzToKxWpoPJBANKLoij3c3uIPKJaaXzsCg=
Subject key identifier: 59:E4:44:56:3D:22:46:C4:E0:52:B0:F8:8E:6A:4C:CA:B7:27:CB:DF
Certificate issuer: /CN=78745e4f905eb4e85b34d95a516ba84f9224d645
Certificate serial: 687710
Authority key identifier: 78:74:5E:4F:90:5E:B4:E8:5B:34:D9:5A:51:6B:A8:4F:92:24:D6:45
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/eHReT5BetOhbNNlaUWuoT5Ik1kU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/47/dad92e-267d-45de-86d0-42a6322e7771/1/WeREVj0iRsTgUrD4jmpMyrcny98.roa
Signing time: Sat 01 Jan 2022 01:52:33 +0000
ROA not before: Sat 01 Jan 2022 01:52:33 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 62240
IP address blocks: 146.19.31.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 6846224 (0x687710)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=78745e4f905eb4e85b34d95a516ba84f9224d645
Validity
Not Before: Jan 1 01:52:33 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=59e444563d2246c4e052b0f88e6a4ccab727cbdf
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:af:b3:05:4b:66:7d:af:37:5c:90:91:6d:de:bb:
6f:ac:1f:cb:0f:c2:c6:5f:63:fd:25:e6:23:03:7c:
dd:1e:a7:25:8b:e9:4d:35:51:10:4d:f0:82:cc:29:
61:f8:49:ba:64:a2:21:d0:3f:72:ed:0a:66:35:c4:
91:b9:e5:32:ad:a6:f4:1f:8b:52:2a:12:8d:a9:e2:
94:85:f5:34:bc:77:19:3a:8c:76:47:58:17:e6:90:
e9:44:53:9e:a0:1e:ec:bf:e6:d5:fd:bf:a3:d0:b6:
aa:0d:21:c8:68:b3:91:14:bd:d9:f9:ad:25:06:1f:
d0:27:77:10:ff:ab:69:7e:61:67:c3:f9:d8:74:36:
ed:d8:10:94:2e:03:4b:f8:bf:3a:18:e8:f4:c4:66:
08:54:80:f2:6d:01:9c:3b:c3:1a:3f:21:4f:23:fe:
42:e9:b8:79:45:84:55:53:65:3d:11:5f:d9:0d:17:
02:0c:8c:2b:6d:c9:26:16:57:32:dc:e6:df:ff:71:
87:9d:86:70:42:af:7e:48:ce:4c:7e:54:3c:6e:c7:
23:56:a8:0c:23:4c:ab:c2:14:24:2b:8a:fa:c2:45:
c1:50:a5:d3:d4:c7:ee:45:94:54:b4:cc:61:80:de:
f4:f8:41:35:08:53:99:a9:fe:e2:c4:26:c9:76:65:
4f:cb
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
59:E4:44:56:3D:22:46:C4:E0:52:B0:F8:8E:6A:4C:CA:B7:27:CB:DF
X509v3 Authority Key Identifier:
keyid:78:74:5E:4F:90:5E:B4:E8:5B:34:D9:5A:51:6B:A8:4F:92:24:D6:45
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/eHReT5BetOhbNNlaUWuoT5Ik1kU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/47/dad92e-267d-45de-86d0-42a6322e7771/1/WeREVj0iRsTgUrD4jmpMyrcny98.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/47/dad92e-267d-45de-86d0-42a6322e7771/1/eHReT5BetOhbNNlaUWuoT5Ik1kU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
146.19.31.0/24
Signature Algorithm: sha256WithRSAEncryption
31:2e:ac:ae:be:81:ba:d0:e1:e9:9d:4b:71:e5:77:30:66:50:
76:09:52:50:45:c9:49:b9:0a:64:ba:84:7a:1a:32:50:1d:3d:
59:1d:51:c0:2c:aa:09:e2:19:85:15:b4:bb:74:e3:f2:0c:de:
db:d8:c7:7a:bf:56:5e:00:85:5b:94:78:31:d7:71:09:12:ef:
7f:76:69:74:26:2f:fc:88:ca:e6:99:9d:b9:e8:7e:c8:74:7a:
13:f3:b5:b1:cc:99:3a:bb:90:51:db:ee:7f:6c:3b:a6:b0:11:
48:4f:5e:7f:c6:8c:6c:a7:6a:1d:20:22:6b:de:03:3e:28:17:
cc:44:7b:e7:77:49:e1:32:0e:8d:7b:df:ca:20:5f:0c:20:06:
7b:74:fb:98:4a:28:fb:56:70:f1:e0:46:95:8a:33:57:53:d1:
af:af:85:b9:1e:24:c6:70:52:cf:64:46:87:ee:0c:c7:5e:10:
d7:c4:84:1b:02:18:c1:fc:5f:d8:67:db:b3:c3:11:ab:ee:ef:
99:62:d7:2d:70:7c:bf:8c:59:25:50:f9:3c:bf:fa:35:8c:19:
8e:91:7e:2c:aa:51:90:d5:33:ff:2d:75:8c:00:22:7d:f1:40:
4c:56:3a:6a:b8:e4:a6:3c:68:da:c3:14:f5:b6:6a:c5:82:95:
c3:de:90:fd
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Feb 17 08:08:46 2025 by rpki-client