![](/console.gif)
Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/4a/c81669-2519-4da5-bd5d-1c2626590d28/1/F602yJbJarj8xC0BNPKIjDcMrZ4.roa
File: F602yJbJarj8xC0BNPKIjDcMrZ4.roa (raw, json)
Hash identifier: 3uqUpNVrx0dvpll7u76K+CQ1Pac+DZy3ir+jfS64HVU=
Subject key identifier: 17:AD:36:C8:96:C9:6A:B8:FC:C4:2D:01:34:F2:88:8C:37:0C:AD:9E
Certificate issuer: /CN=d53ece71ef6ebf55bb7b87e50665ba11fdc77f08
Certificate serial: 0339FC9D
Authority key identifier: D5:3E:CE:71:EF:6E:BF:55:BB:7B:87:E5:06:65:BA:11:FD:C7:7F:08
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/1T7Oce9uv1W7e4flBmW6Ef3Hfwg.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/4a/c81669-2519-4da5-bd5d-1c2626590d28/1/F602yJbJarj8xC0BNPKIjDcMrZ4.roa
Signing time: Sun 12 Jun 2022 22:02:04 +0000
ROA not before: Sun 12 Jun 2022 22:02:04 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 211585
IP address blocks: 185.29.166.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 54131869 (0x339fc9d)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=d53ece71ef6ebf55bb7b87e50665ba11fdc77f08
Validity
Not Before: Jun 12 22:02:04 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=17ad36c896c96ab8fcc42d0134f2888c370cad9e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b6:fc:1f:5d:9c:02:e4:c7:2b:7f:d4:69:a5:de:
48:52:f3:f0:20:a4:ed:ac:00:35:22:06:94:58:24:
80:d3:92:51:2c:63:18:6a:4c:0c:a8:f0:f8:00:fa:
7f:2e:2b:70:e3:41:29:82:b3:b9:b5:e1:ab:f4:dc:
49:f4:a6:0c:c4:8e:12:b6:65:1e:e4:23:2f:65:1b:
71:8b:2b:73:da:37:28:b6:15:38:0c:f6:34:b8:fb:
64:62:4d:83:a5:20:07:a2:f6:f8:cb:0c:82:49:b6:
6e:3e:f7:17:78:03:ff:10:f2:3b:46:df:94:f4:af:
e0:dd:18:f0:c0:31:1f:f3:57:3e:41:db:45:4b:f8:
26:6c:ab:77:bd:c8:ca:29:66:a5:7e:b9:e5:90:58:
13:be:8f:ae:5c:d2:5b:09:d4:ce:54:2d:60:fc:a7:
9c:68:55:4e:49:0c:f9:35:ce:b5:5e:fc:c9:d7:5d:
ac:e0:95:4a:9d:85:6f:af:b0:b0:4a:d5:61:80:c2:
68:97:54:3b:9c:12:a2:07:12:42:50:3d:bd:0e:3e:
6c:11:70:26:c0:bd:c8:fc:0c:f4:fb:3b:a7:3f:4b:
04:dc:6e:4b:26:cc:7a:61:43:b5:bd:cd:ba:ec:6a:
e2:6a:d6:48:9b:e0:fc:04:a1:9a:c8:46:3a:0d:ca:
15:bf
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
17:AD:36:C8:96:C9:6A:B8:FC:C4:2D:01:34:F2:88:8C:37:0C:AD:9E
X509v3 Authority Key Identifier:
keyid:D5:3E:CE:71:EF:6E:BF:55:BB:7B:87:E5:06:65:BA:11:FD:C7:7F:08
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/1T7Oce9uv1W7e4flBmW6Ef3Hfwg.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/4a/c81669-2519-4da5-bd5d-1c2626590d28/1/F602yJbJarj8xC0BNPKIjDcMrZ4.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/4a/c81669-2519-4da5-bd5d-1c2626590d28/1/1T7Oce9uv1W7e4flBmW6Ef3Hfwg.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.29.166.0/24
Signature Algorithm: sha256WithRSAEncryption
7c:9d:06:95:01:d8:a8:6d:87:f7:cb:ed:a2:a3:2d:ca:93:d2:
66:be:dd:53:46:69:c6:59:1e:51:10:8d:fb:25:ca:30:45:35:
d9:42:8d:48:2d:31:ca:6d:40:f0:10:7d:e5:1a:98:3e:5c:fa:
b7:37:7b:9b:20:93:2e:30:90:0f:f9:c1:78:30:03:49:e2:5b:
9d:23:2d:7a:0c:54:7e:86:57:e5:c6:d8:a7:58:29:66:ea:1a:
89:5b:86:8e:3a:1c:08:bf:2d:be:f1:d2:a4:f8:a0:6b:dc:d8:
cb:ba:b7:11:91:0a:2c:d9:b8:62:f2:17:9e:78:ff:7a:85:15:
f0:f3:7c:f1:84:86:dd:1b:ed:78:d5:49:d7:32:cb:15:23:83:
1b:eb:b5:df:d8:cb:98:e9:30:df:a9:be:a2:d5:29:88:33:e9:
a0:a9:e3:74:7b:82:dd:d1:94:8e:e5:37:0b:e1:61:fb:ca:72:
ca:2f:df:f6:48:0d:41:13:62:c9:db:a8:12:80:d7:92:04:56:
17:77:b8:5a:46:da:90:51:3c:57:70:ec:ae:7c:cf:09:aa:91:
5c:a4:42:4e:6a:97:24:04:41:de:7e:4b:d2:18:52:34:04:96:
6b:df:ce:f8:ab:ce:b3:29:56:56:21:09:2c:f4:11:56:e9:91:
f6:00:4b:27
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Feb 17 07:19:42 2025 by rpki-client