![](/console.gif)
Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/54/193c71-c94a-416f-a186-416664f01a2c/1/ho95pplXrm78vNGY3JpIdFMolh0.roa
File: ho95pplXrm78vNGY3JpIdFMolh0.roa (raw, json)
Hash identifier: w9IGb0KTHNAUPzbQpKKi7w6AzA+LRsFDzoDwPvh8EPw=
Subject key identifier: 86:8F:79:A6:99:57:AE:6E:FC:BC:D1:98:DC:9A:48:74:53:28:96:1D
Certificate issuer: /CN=fb1157e81b7c9e43360a1cb50a31401175921808
Certificate serial: 0207FD14
Authority key identifier: FB:11:57:E8:1B:7C:9E:43:36:0A:1C:B5:0A:31:40:11:75:92:18:08
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/1-xFX6Bt8nkM2Chy1CjFAEXWSGAg.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/54/193c71-c94a-416f-a186-416664f01a2c/1/ho95pplXrm78vNGY3JpIdFMolh0.roa
Signing time: Fri 18 Mar 2022 09:11:21 +0000
ROA not before: Fri 18 Mar 2022 09:11:21 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 61317
IP address blocks: 193.108.102.0/23 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 34077972 (0x207fd14)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=fb1157e81b7c9e43360a1cb50a31401175921808
Validity
Not Before: Mar 18 09:11:21 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=868f79a69957ae6efcbcd198dc9a48745328961d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a2:7e:d7:06:51:2a:12:cb:8f:ee:0a:b5:2c:c4:
36:a0:9f:28:0a:b9:b9:24:0c:77:a9:1c:8f:00:3f:
e4:98:3b:75:09:03:7d:41:05:9e:0e:96:d1:1e:8e:
7e:0f:ba:23:60:ee:70:a5:97:04:2a:b8:bd:28:71:
82:f7:2f:7f:09:6f:d5:48:07:61:4c:91:f6:8a:74:
bc:e7:cc:be:88:64:c0:78:36:95:49:c0:ac:cf:11:
88:93:e3:a7:2a:ad:23:b1:89:36:c9:83:40:3c:07:
bd:06:7f:59:d5:2a:fb:3a:93:70:77:db:19:57:45:
d5:2b:83:68:5f:55:10:37:36:9b:ae:13:3d:bf:05:
3b:ee:f2:d1:e2:8e:c3:6d:73:53:85:76:50:37:74:
d6:be:ee:38:83:f4:48:56:e6:05:22:40:ff:7c:1d:
bb:f1:f0:3c:ea:05:9e:b7:49:6d:3c:b1:ba:0a:5a:
30:cd:5b:67:7d:9b:5c:d7:47:9a:97:47:3b:9b:0f:
c4:e5:7a:ee:2f:6f:4c:bd:35:9c:25:21:16:00:ce:
13:f1:c4:03:0b:a2:8b:a2:4a:ca:28:76:05:71:4d:
ac:70:07:fb:ed:ee:1a:d1:fa:b8:d9:2b:58:13:ae:
d5:be:40:8b:da:42:8f:f8:1b:e3:ad:56:49:49:68:
dc:ff
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
86:8F:79:A6:99:57:AE:6E:FC:BC:D1:98:DC:9A:48:74:53:28:96:1D
X509v3 Authority Key Identifier:
keyid:FB:11:57:E8:1B:7C:9E:43:36:0A:1C:B5:0A:31:40:11:75:92:18:08
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/1-xFX6Bt8nkM2Chy1CjFAEXWSGAg.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/54/193c71-c94a-416f-a186-416664f01a2c/1/ho95pplXrm78vNGY3JpIdFMolh0.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/54/193c71-c94a-416f-a186-416664f01a2c/1/1-xFX6Bt8nkM2Chy1CjFAEXWSGAg.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
193.108.102.0/23
Signature Algorithm: sha256WithRSAEncryption
69:f4:f8:65:6d:f3:38:30:3c:64:ac:0f:10:ac:3d:db:53:6a:
fb:f2:d3:3d:35:5a:b1:52:9a:82:b5:49:ce:a2:2f:5a:90:4a:
3a:e4:44:b1:24:db:54:04:40:66:da:d3:bd:4e:4e:2f:e3:7c:
4c:ed:57:e6:e5:cc:e3:37:bd:1f:d5:55:63:21:86:30:19:45:
27:fd:5f:84:5d:88:39:f1:af:dd:99:cf:7e:06:75:98:9d:6e:
94:0c:99:3d:13:67:72:b8:d1:05:c5:d7:f5:c7:16:82:9b:27:
d0:fd:66:64:47:44:02:84:da:b1:aa:8d:54:42:72:a9:ce:da:
5a:33:46:aa:b8:0e:bf:fe:48:d1:b6:4a:b3:2e:14:22:ab:9c:
d7:61:39:00:2b:78:ba:60:b5:2b:b8:2c:71:5d:5d:0d:6b:ec:
7b:b9:73:8d:4c:6a:be:d3:e6:71:a4:b1:83:3d:05:97:6f:5a:
af:98:8d:44:ed:43:34:bc:41:e4:17:15:5f:25:b6:56:37:b7:
97:82:04:66:ec:29:2c:8c:3e:13:1b:29:82:c1:1e:c1:9a:31:
29:8a:40:aa:67:61:13:6e:88:4b:f6:8a:b0:8b:ee:e2:d1:d4:
93:0a:14:52:0d:a4:da:6c:02:bf:47:b2:82:83:1b:81:e8:57:
c9:ea:8d:19
-----BEGIN CERTIFICATE-----
MIIE8TCCA9mgAwIBAgIEAgf9FDANBgkqhkiG9w0BAQsFADAzMTEwLwYDVQQDEyhm
YjExNTdlODFiN2M5ZTQzMzYwYTFjYjUwYTMxNDAxMTc1OTIxODA4MB4XDTIyMDMx
ODA5MTEyMVoXDTIzMDcwMTAwMDAwMFowMzExMC8GA1UEAxMoODY4Zjc5YTY5OTU3
YWU2ZWZjYmNkMTk4ZGM5YTQ4NzQ1MzI4OTYxZDCCASIwDQYJKoZIhvcNAQEBBQAD
ggEPADCCAQoCggEBAKJ+1wZRKhLLj+4KtSzENqCfKAq5uSQMd6kcjwA/5Jg7dQkD
fUEFng6W0R6Ofg+6I2DucKWXBCq4vShxgvcvfwlv1UgHYUyR9op0vOfMvohkwHg2
lUnArM8RiJPjpyqtI7GJNsmDQDwHvQZ/WdUq+zqTcHfbGVdF1SuDaF9VEDc2m64T
Pb8FO+7y0eKOw21zU4V2UDd01r7uOIP0SFbmBSJA/3wdu/HwPOoFnrdJbTyxugpa
MM1bZ32bXNdHmpdHO5sPxOV67i9vTL01nCUhFgDOE/HEAwuii6JKyih2BXFNrHAH
++3uGtH6uNkrWBOu1b5Ai9pCj/gb461WSUlo3P8CAwEAAaOCAgswggIHMB0GA1Ud
DgQWBBSGj3mmmVeubvy80Zjcmkh0UyiWHTAfBgNVHSMEGDAWgBT7EVfoG3yeQzYK
HLUKMUARdZIYCDAOBgNVHQ8BAf8EBAMCB4AwZQYIKwYBBQUHAQEEWTBXMFUGCCsG
AQUFBzAChklyc3luYzovL3Jwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxU
LzEteEZYNkJ0OG5rTTJDaHkxQ2pGQUVYV1NHQWcuY2VyMIGNBggrBgEFBQcBCwSB
gDB+MHwGCCsGAQUFBzALhnByc3luYzovL3Jwa2kucmlwZS5uZXQvcmVwb3NpdG9y
eS9ERUZBVUxULzU0LzE5M2M3MS1jOTRhLTQxNmYtYTE4Ni00MTY2NjRmMDFhMmMv
MS9obzk1cHBsWHJtNzh2TkdZM0pwSWRGTW9saDAucm9hMIGCBgNVHR8EezB5MHeg
daBzhnFyc3luYzovL3Jwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxULzU0
LzE5M2M3MS1jOTRhLTQxNmYtYTE4Ni00MTY2NjRmMDFhMmMvMS8xLXhGWDZCdDhu
a00yQ2h5MUNqRkFFWFdTR0FnLmNybDAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4C
MB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQBwWxmMA0GCSqGSIb3DQEBCwUA
A4IBAQBp9PhlbfM4MDxkrA8QrD3bU2r78tM9NVqxUpqCtUnOoi9akEo65ESxJNtU
BEBm2tO9Tk4v43xM7Vfm5czjN70f1VVjIYYwGUUn/V+EXYg58a/dmc9+BnWYnW6U
DJk9E2dyuNEFxdf1xxaCmyfQ/WZkR0QChNqxqo1UQnKpztpaM0aquA6//kjRtkqz
LhQiq5zXYTkAK3i6YLUruCxxXV0Na+x7uXONTGq+0+ZxpLGDPQWXb1qvmI1E7UM0
vEHkFxVfJbZWN7eXggRm7CksjD4TGymCwR7BmjEpikCqZ2ETbohL9oqwi+7i0dST
ChRSDaTabAK/R7KCgxuB6FfJ6o0Z
-----END CERTIFICATE-----
Generated at Mon Feb 17 08:02:55 2025 by rpki-client