![](/console.gif)
Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/49/40db6b-da85-4c9d-a948-6521d395f132/1/c0IInkE4Vu9x7dX8ocGFRrQGhFs.roa
File: c0IInkE4Vu9x7dX8ocGFRrQGhFs.roa (raw, json)
Hash identifier: 6HsTS/oVVtGH49fEmE8GhnesBYMms14ZZ/3J3C8NLI0=
Subject key identifier: 73:42:08:9E:41:38:56:EF:71:ED:D5:FC:A1:C1:85:46:B4:06:84:5B
Certificate issuer: /CN=8e747481f2c98fbb70dca8d65c23de4fca37583d
Certificate serial: 042CF301
Authority key identifier: 8E:74:74:81:F2:C9:8F:BB:70:DC:A8:D6:5C:23:DE:4F:CA:37:58:3D
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/jnR0gfLJj7tw3KjWXCPeT8o3WD0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/49/40db6b-da85-4c9d-a948-6521d395f132/1/c0IInkE4Vu9x7dX8ocGFRrQGhFs.roa
Signing time: Mon 04 Jul 2022 19:43:25 +0000
ROA not before: Mon 04 Jul 2022 19:43:25 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 7018
IP address blocks: 88.218.80.0/24 maxlen: 24
176.118.188.0/23 maxlen: 24
95.214.83.0/24 maxlen: 24
185.177.76.0/24 maxlen: 24
185.177.77.0/24 maxlen: 24
77.83.22.0/23 maxlen: 24
77.83.20.0/23 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 70054657 (0x42cf301)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=8e747481f2c98fbb70dca8d65c23de4fca37583d
Validity
Not Before: Jul 4 19:43:25 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=7342089e413856ef71edd5fca1c18546b406845b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ba:8c:13:ea:1a:7b:0c:0e:a1:8c:93:4e:94:15:
08:d7:be:87:49:ee:fa:a7:b1:78:ea:b0:0f:60:5b:
3d:23:b1:a7:45:ef:0f:58:79:fc:fc:20:5b:60:bb:
6e:5c:4f:42:5f:ac:38:a6:d9:41:8a:5d:f7:f9:44:
bb:46:64:b6:13:2d:82:1f:87:fb:a6:1d:21:57:c0:
e4:04:55:4d:3a:c7:fd:e8:6c:b6:9c:33:5e:3b:e4:
a8:52:65:17:f6:70:e2:df:1b:e9:aa:2b:e4:67:ec:
03:5a:61:fb:1f:54:6d:5e:5f:4e:75:ba:cf:c3:cf:
6d:33:cc:77:7d:a9:5e:40:b9:ad:66:37:51:56:68:
14:5b:06:84:9c:fd:22:92:18:7f:78:fd:db:fd:09:
fb:7d:2d:25:06:64:e4:6f:4d:8b:69:96:f6:02:ab:
37:23:d3:04:20:24:de:42:64:58:52:e6:52:7a:1d:
f4:0c:1f:d0:c7:66:b6:e9:f0:f7:e1:02:d5:88:dd:
fb:a0:e2:c5:71:07:6c:5c:67:ff:25:7a:ad:e8:11:
e9:a9:10:d6:e2:ac:e2:a0:77:29:52:cd:84:e2:f8:
df:c3:22:91:e6:39:e8:3f:7e:c4:c4:2b:16:0d:55:
f8:ff:e1:9c:7e:d3:04:91:c4:6b:7a:ef:71:3e:ac:
a1:07
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
73:42:08:9E:41:38:56:EF:71:ED:D5:FC:A1:C1:85:46:B4:06:84:5B
X509v3 Authority Key Identifier:
keyid:8E:74:74:81:F2:C9:8F:BB:70:DC:A8:D6:5C:23:DE:4F:CA:37:58:3D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/jnR0gfLJj7tw3KjWXCPeT8o3WD0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/49/40db6b-da85-4c9d-a948-6521d395f132/1/c0IInkE4Vu9x7dX8ocGFRrQGhFs.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/49/40db6b-da85-4c9d-a948-6521d395f132/1/jnR0gfLJj7tw3KjWXCPeT8o3WD0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
77.83.20.0/22
88.218.80.0/24
95.214.83.0/24
176.118.188.0/23
185.177.76.0/23
Signature Algorithm: sha256WithRSAEncryption
32:4c:b3:56:e5:e2:80:f4:38:4c:8f:ec:ea:33:de:65:f4:57:
0e:0c:22:25:a6:22:e3:29:18:3e:e1:fc:25:20:a9:39:89:14:
50:a9:20:4c:ee:40:3d:65:64:4c:ef:9b:b2:c4:57:a8:21:40:
cb:02:dd:db:4a:e5:2b:5d:d0:b2:0e:46:2f:ac:9d:4a:c0:5b:
74:70:1f:c0:9c:fb:cb:bd:4b:c4:9e:0b:56:b5:2e:65:db:95:
78:96:1f:d8:c6:2e:76:8a:26:ff:c9:1d:00:65:68:30:bd:e9:
e9:eb:9a:f3:40:af:ae:a3:f9:4f:7f:ae:dc:fd:4b:c8:f2:1f:
66:16:3f:17:a5:8b:ed:91:2a:ba:26:02:85:c5:a6:34:1f:c4:
0e:db:6f:81:ca:6b:f9:c9:71:e4:b3:1f:45:08:2a:17:49:69:
9f:c4:19:c3:4d:e0:f4:0c:16:83:44:c4:00:14:58:77:4f:ab:
ba:a3:53:d4:3a:98:af:79:1f:85:dc:27:19:39:ed:18:de:c0:
9d:fc:66:35:d1:3b:07:45:d2:bc:de:6d:48:d1:45:8f:6a:7f:
9b:c3:2f:6f:6e:07:f2:c9:00:ba:65:34:91:d9:12:d4:32:5f:
0f:a4:22:05:f2:42:4e:8d:b8:b5:47:32:ac:d6:96:79:7a:89:
3c:b7:80:dc
-----BEGIN CERTIFICATE-----
MIIFBzCCA++gAwIBAgIEBCzzATANBgkqhkiG9w0BAQsFADAzMTEwLwYDVQQDEyg4
ZTc0NzQ4MWYyYzk4ZmJiNzBkY2E4ZDY1YzIzZGU0ZmNhMzc1ODNkMB4XDTIyMDcw
NDE5NDMyNVoXDTIzMDcwMTAwMDAwMFowMzExMC8GA1UEAxMoNzM0MjA4OWU0MTM4
NTZlZjcxZWRkNWZjYTFjMTg1NDZiNDA2ODQ1YjCCASIwDQYJKoZIhvcNAQEBBQAD
ggEPADCCAQoCggEBALqME+oaewwOoYyTTpQVCNe+h0nu+qexeOqwD2BbPSOxp0Xv
D1h5/PwgW2C7blxPQl+sOKbZQYpd9/lEu0ZkthMtgh+H+6YdIVfA5ARVTTrH/ehs
tpwzXjvkqFJlF/Zw4t8b6aor5GfsA1ph+x9UbV5fTnW6z8PPbTPMd32pXkC5rWY3
UVZoFFsGhJz9IpIYf3j92/0J+30tJQZk5G9Ni2mW9gKrNyPTBCAk3kJkWFLmUnod
9Awf0Mdmtunw9+EC1Yjd+6DixXEHbFxn/yV6regR6akQ1uKs4qB3KVLNhOL438Mi
keY56D9+xMQrFg1V+P/hnH7TBJHEa3rvcT6soQcCAwEAAaOCAiEwggIdMB0GA1Ud
DgQWBBRzQgieQThW73Ht1fyhwYVGtAaEWzAfBgNVHSMEGDAWgBSOdHSB8smPu3Dc
qNZcI95PyjdYPTAOBgNVHQ8BAf8EBAMCB4AwZAYIKwYBBQUHAQEEWDBWMFQGCCsG
AQUFBzAChkhyc3luYzovL3Jwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxU
L2puUjBnZkxKajd0dzNLaldYQ1BlVDhvM1dEMC5jZXIwgY0GCCsGAQUFBwELBIGA
MH4wfAYIKwYBBQUHMAuGcHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5
L0RFRkFVTFQvNDkvNDBkYjZiLWRhODUtNGM5ZC1hOTQ4LTY1MjFkMzk1ZjEzMi8x
L2MwSUlua0U0VnU5eDdkWDhvY0dGUnJRR2hGcy5yb2EwgYEGA1UdHwR6MHgwdqB0
oHKGcHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvNDkv
NDBkYjZiLWRhODUtNGM5ZC1hOTQ4LTY1MjFkMzk1ZjEzMi8xL2puUjBnZkxKajd0
dzNLaldYQ1BlVDhvM1dEMC5jcmwwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjA3
BggrBgEFBQcBBwEB/wQoMCYwJAQCAAEwHgMEAk1TFAMEAFjaUAMEAF/WUwMEAbB2
vAMEAbmxTDANBgkqhkiG9w0BAQsFAAOCAQEAMkyzVuXigPQ4TI/s6jPeZfRXDgwi
JaYi4ykYPuH8JSCpOYkUUKkgTO5APWVkTO+bssRXqCFAywLd20rlK13Qsg5GL6yd
SsBbdHAfwJz7y71LxJ4LVrUuZduVeJYf2MYudoom/8kdAGVoML3p6eua80CvrqP5
T3+u3P1LyPIfZhY/F6WL7ZEquiYChcWmNB/EDttvgcpr+clx5LMfRQgqF0lpn8QZ
w03g9AwWg0TEABRYd0+ruqNT1DqYr3kfhdwnGTntGN7AnfxmNdE7B0XSvN5tSNFF
j2p/m8Mvb24H8skAumU0kdkS1DJfD6QiBfJCTo24tUcyrNaWeXqJPLeA3A==
-----END CERTIFICATE-----
Generated at Mon Feb 17 07:31:44 2025 by rpki-client