![](/console.gif)
Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/50/84b507-942e-43d6-b430-873d5907b94a/1/oI-uyqvQHYPU05JDN_9mkOPpLa8.roa
File: oI-uyqvQHYPU05JDN_9mkOPpLa8.roa (raw, json)
Hash identifier: 0tP7uBV6jelqe3HWdJgh5MGSY+0Mnra0K40+VdSP6Tc=
Subject key identifier: A0:8F:AE:CA:AB:D0:1D:83:D4:D3:92:43:37:FF:66:90:E3:E9:2D:AF
Certificate issuer: /CN=4e99f4c2ebd4979bfd461530a38e23540bf9578d
Certificate serial: 011FA001
Authority key identifier: 4E:99:F4:C2:EB:D4:97:9B:FD:46:15:30:A3:8E:23:54:0B:F9:57:8D
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Tpn0wuvUl5v9RhUwo44jVAv5V40.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/50/84b507-942e-43d6-b430-873d5907b94a/1/oI-uyqvQHYPU05JDN_9mkOPpLa8.roa
Signing time: Mon 14 Feb 2022 09:19:10 +0000
ROA not before: Mon 14 Feb 2022 09:19:10 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 834
IP address blocks: 62.204.51.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 18849793 (0x11fa001)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4e99f4c2ebd4979bfd461530a38e23540bf9578d
Validity
Not Before: Feb 14 09:19:10 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=a08faecaabd01d83d4d3924337ff6690e3e92daf
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a0:c9:02:bb:ab:06:b6:9c:a4:7a:41:00:9d:95:
83:a4:1a:37:c8:1d:e0:4c:78:1d:6a:09:11:46:c2:
ba:46:d7:51:25:d0:4d:d9:cd:7b:62:74:4a:12:3b:
82:5d:4a:27:28:37:da:38:be:d5:b9:1b:9c:44:a4:
32:67:ba:c2:22:9d:16:c8:a1:b9:f3:33:9f:2f:50:
d1:b7:f6:ac:c0:91:2c:18:7f:17:8f:de:fd:60:a3:
dc:6b:6a:3a:1b:ea:2e:e2:31:4c:4f:1f:35:ba:74:
db:f4:66:89:a4:ef:0c:5a:72:e6:73:39:29:d9:b4:
0b:d7:a1:ed:48:f9:57:98:c5:2a:41:72:03:a3:cf:
b4:c5:82:dc:3a:91:dd:9b:52:cf:fe:b6:34:6d:30:
ee:65:7a:ee:03:d8:c5:e1:dd:80:78:92:74:1d:3b:
30:68:22:35:96:d4:d4:d9:d0:8f:2c:6e:31:cd:f2:
87:f0:19:77:0c:9a:3f:70:50:65:5a:51:c2:d0:51:
f0:ff:56:e4:03:61:37:25:ff:3d:ad:6f:83:1f:74:
28:3e:c3:72:f0:1f:a4:07:a0:ab:7f:4f:e8:31:6e:
94:bb:6b:f2:98:20:3e:73:10:e6:50:21:6f:23:9f:
14:e8:d6:8d:fd:37:f7:c2:8f:5a:17:f0:43:a7:ec:
4f:dd
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A0:8F:AE:CA:AB:D0:1D:83:D4:D3:92:43:37:FF:66:90:E3:E9:2D:AF
X509v3 Authority Key Identifier:
keyid:4E:99:F4:C2:EB:D4:97:9B:FD:46:15:30:A3:8E:23:54:0B:F9:57:8D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Tpn0wuvUl5v9RhUwo44jVAv5V40.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/50/84b507-942e-43d6-b430-873d5907b94a/1/oI-uyqvQHYPU05JDN_9mkOPpLa8.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/50/84b507-942e-43d6-b430-873d5907b94a/1/Tpn0wuvUl5v9RhUwo44jVAv5V40.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
62.204.51.0/24
Signature Algorithm: sha256WithRSAEncryption
3e:a0:16:1f:86:1f:a6:24:44:a1:f8:0b:a2:be:d9:8e:d4:0f:
d4:89:15:50:23:a5:a2:bc:da:ae:ba:c1:33:23:8a:8f:d1:4e:
e9:9b:62:f2:35:f3:d4:cf:5c:8f:6c:3c:81:aa:53:f9:7b:8c:
68:86:ea:42:a5:fa:4c:b5:21:16:78:d5:ba:f3:d8:d3:23:1f:
42:c1:4f:13:f5:d2:6c:2e:2d:d9:51:1b:c3:2c:6e:b4:f3:df:
75:30:57:25:21:8d:f4:88:a6:d3:3b:62:40:8b:55:3d:f9:aa:
a7:84:35:05:ab:d0:a8:d6:d6:3b:c5:13:24:06:c1:8f:d0:09:
be:f2:6c:79:89:f4:6f:b3:72:82:c3:c5:fd:c5:b4:bf:5f:06:
15:fd:97:99:a8:cd:92:e3:62:cb:56:a7:07:68:7b:bb:18:56:
d1:1c:25:ec:26:0a:63:72:96:8e:6f:82:96:94:9c:15:8b:f8:
ad:43:0e:e3:bc:42:7a:96:b8:0e:e5:17:b6:90:18:7c:08:90:
90:76:17:b4:e7:b9:ed:ec:bd:7b:78:9b:f3:98:76:35:b1:61:
f0:14:22:35:44:b5:92:28:9a:ce:0a:88:1e:63:0a:8b:bb:e3:
c1:3d:d8:71:69:d5:ea:e7:70:08:2d:ac:a2:cf:0a:7a:20:ec:
73:a3:25:92
-----BEGIN CERTIFICATE-----
MIIE7zCCA9egAwIBAgIEAR+gATANBgkqhkiG9w0BAQsFADAzMTEwLwYDVQQDEyg0
ZTk5ZjRjMmViZDQ5NzliZmQ0NjE1MzBhMzhlMjM1NDBiZjk1NzhkMB4XDTIyMDIx
NDA5MTkxMFoXDTIzMDcwMTAwMDAwMFowMzExMC8GA1UEAxMoYTA4ZmFlY2FhYmQw
MWQ4M2Q0ZDM5MjQzMzdmZjY2OTBlM2U5MmRhZjCCASIwDQYJKoZIhvcNAQEBBQAD
ggEPADCCAQoCggEBAKDJArurBracpHpBAJ2Vg6QaN8gd4Ex4HWoJEUbCukbXUSXQ
TdnNe2J0ShI7gl1KJyg32ji+1bkbnESkMme6wiKdFsihufMzny9Q0bf2rMCRLBh/
F4/e/WCj3GtqOhvqLuIxTE8fNbp02/RmiaTvDFpy5nM5Kdm0C9eh7Uj5V5jFKkFy
A6PPtMWC3DqR3ZtSz/62NG0w7mV67gPYxeHdgHiSdB07MGgiNZbU1NnQjyxuMc3y
h/AZdwyaP3BQZVpRwtBR8P9W5ANhNyX/Pa1vgx90KD7DcvAfpAegq39P6DFulLtr
8pggPnMQ5lAhbyOfFOjWjf0398KPWhfwQ6fsT90CAwEAAaOCAgkwggIFMB0GA1Ud
DgQWBBSgj67Kq9Adg9TTkkM3/2aQ4+ktrzAfBgNVHSMEGDAWgBROmfTC69SXm/1G
FTCjjiNUC/lXjTAOBgNVHQ8BAf8EBAMCB4AwZAYIKwYBBQUHAQEEWDBWMFQGCCsG
AQUFBzAChkhyc3luYzovL3Jwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxU
L1RwbjB3dXZVbDV2OVJoVXdvNDRqVkF2NVY0MC5jZXIwgY0GCCsGAQUFBwELBIGA
MH4wfAYIKwYBBQUHMAuGcHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5
L0RFRkFVTFQvNTAvODRiNTA3LTk0MmUtNDNkNi1iNDMwLTg3M2Q1OTA3Yjk0YS8x
L29JLXV5cXZRSFlQVTA1SkROXzlta09QcExhOC5yb2EwgYEGA1UdHwR6MHgwdqB0
oHKGcHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvNTAv
ODRiNTA3LTk0MmUtNDNkNi1iNDMwLTg3M2Q1OTA3Yjk0YS8xL1RwbjB3dXZVbDV2
OVJoVXdvNDRqVkF2NVY0MC5jcmwwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAf
BggrBgEFBQcBBwEB/wQQMA4wDAQCAAEwBgMEAD7MMzANBgkqhkiG9w0BAQsFAAOC
AQEAPqAWH4YfpiREofgLor7ZjtQP1IkVUCOlorzarrrBMyOKj9FO6Zti8jXz1M9c
j2w8gapT+XuMaIbqQqX6TLUhFnjVuvPY0yMfQsFPE/XSbC4t2VEbwyxutPPfdTBX
JSGN9Iim0ztiQItVPfmqp4Q1BavQqNbWO8UTJAbBj9AJvvJseYn0b7NygsPF/cW0
v18GFf2XmajNkuNiy1anB2h7uxhW0Rwl7CYKY3KWjm+ClpScFYv4rUMO47xCepa4
DuUXtpAYfAiQkHYXtOe57ey9e3ib85h2NbFh8BQiNUS1kiiazgqIHmMKi7vjwT3Y
cWnV6udwCC2sos8KeiDsc6Mlkg==
-----END CERTIFICATE-----
Generated at Mon Feb 17 08:09:37 2025 by rpki-client