![](/console.gif)
Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/48/127292-2be7-4e24-b26b-fa30dd19d02a/1/ph6R7xRmUzpnSUy0mNPPZUDwtUo.roa
File: ph6R7xRmUzpnSUy0mNPPZUDwtUo.roa (raw, json)
Hash identifier: vkiqZpbyMwZ579aH+VWFPyd/2UlkHrQx5Abdp/OWMTM=
Subject key identifier: A6:1E:91:EF:14:66:53:3A:67:49:4C:B4:98:D3:CF:65:40:F0:B5:4A
Certificate issuer: /CN=7f052b8d34abd1a6ac7d6b838b5ff041ebc3d4a9
Certificate serial: 1DC137
Authority key identifier: 7F:05:2B:8D:34:AB:D1:A6:AC:7D:6B:83:8B:5F:F0:41:EB:C3:D4:A9
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/fwUrjTSr0aasfWuDi1_wQevD1Kk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/48/127292-2be7-4e24-b26b-fa30dd19d02a/1/ph6R7xRmUzpnSUy0mNPPZUDwtUo.roa
Signing time: Sat 01 Jan 2022 01:52:01 +0000
ROA not before: Sat 01 Jan 2022 01:52:01 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 200973
IP address blocks: 185.90.3.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 1950007 (0x1dc137)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=7f052b8d34abd1a6ac7d6b838b5ff041ebc3d4a9
Validity
Not Before: Jan 1 01:52:01 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=a61e91ef1466533a67494cb498d3cf6540f0b54a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ba:97:a6:d7:34:3b:7b:f7:af:99:c2:40:66:1c:
cf:9f:63:ed:03:4c:c5:60:be:17:ff:19:94:57:ba:
74:75:a2:27:72:06:b9:86:e1:7f:c0:21:cf:93:c2:
85:01:c6:8d:bd:05:9f:5e:6f:f4:db:79:1c:eb:84:
32:74:94:ef:81:70:ac:29:ef:d0:36:46:23:4e:15:
b8:10:61:7c:5a:7a:df:1c:b9:a6:d2:26:aa:3c:3a:
40:00:df:9d:45:de:f4:c1:62:54:46:b6:73:2b:d2:
2f:4d:0f:0a:6a:24:51:58:4a:72:c6:a0:61:a8:a0:
7c:99:36:30:ed:d3:48:90:bf:cc:fe:e6:ea:8b:18:
1d:06:96:dd:7d:c4:6c:59:59:a0:07:ed:89:bb:1c:
28:64:1f:7b:66:b6:a4:e0:53:b1:40:58:03:e0:25:
22:d2:1d:65:53:bb:ca:8c:c5:7a:87:51:a4:07:c3:
c0:49:69:88:93:8a:4c:ee:bc:4f:fd:1c:4f:2a:e5:
48:de:1f:31:91:5e:47:8e:63:f1:f8:7c:f5:dc:10:
5f:4d:94:ef:2a:30:4f:8d:18:e2:ad:0b:d9:2a:a2:
ef:83:e5:94:0b:99:49:34:15:de:02:c2:ac:5a:ce:
a4:16:85:17:84:1e:0c:69:24:23:31:b7:ef:18:c4:
5e:97
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A6:1E:91:EF:14:66:53:3A:67:49:4C:B4:98:D3:CF:65:40:F0:B5:4A
X509v3 Authority Key Identifier:
keyid:7F:05:2B:8D:34:AB:D1:A6:AC:7D:6B:83:8B:5F:F0:41:EB:C3:D4:A9
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/fwUrjTSr0aasfWuDi1_wQevD1Kk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/48/127292-2be7-4e24-b26b-fa30dd19d02a/1/ph6R7xRmUzpnSUy0mNPPZUDwtUo.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/48/127292-2be7-4e24-b26b-fa30dd19d02a/1/fwUrjTSr0aasfWuDi1_wQevD1Kk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.90.3.0/24
Signature Algorithm: sha256WithRSAEncryption
38:a2:16:bc:96:5a:86:a2:c4:d9:41:0d:e5:29:bf:f6:28:2c:
fb:b7:41:d2:ca:8b:46:f1:0a:ef:1e:4c:15:6f:42:b8:b0:e5:
30:ea:9e:85:64:70:02:43:39:08:4c:7d:68:ea:05:9f:45:39:
a9:81:a7:b5:60:98:90:6c:77:dd:b2:e6:68:13:7d:84:9c:54:
68:16:a4:0d:4b:14:0f:81:1e:7f:37:f5:56:8d:43:67:06:d3:
20:79:4d:30:68:dd:37:fe:09:72:46:0e:ce:ea:d5:58:85:1f:
af:e7:33:cf:51:08:81:cc:b3:64:66:a9:5a:37:95:5b:25:b4:
b3:f9:be:eb:8a:32:eb:b8:2a:e3:21:c9:a2:e4:c4:44:c8:e2:
43:b4:78:08:7b:89:2f:62:15:4c:f6:2d:20:47:17:3c:61:d7:
b9:48:d7:f1:54:67:97:16:58:c8:d1:33:b0:f0:86:43:bc:5e:
53:a6:7e:d7:14:2d:c2:d9:98:f5:cb:49:4a:ad:bf:57:5e:df:
05:fe:e9:c7:2f:b6:d4:f2:bc:16:db:5b:94:77:12:49:b6:db:
fe:5f:7b:9f:cf:b5:1c:e0:2d:d3:b3:25:8b:3b:9a:c9:41:31:
ef:ba:42:cb:e7:c4:80:a7:b4:a5:70:d7:8c:8f:e7:4a:94:c6:
b9:96:88:e2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Feb 17 07:34:18 2025 by rpki-client