![](/console.gif)
Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/54/ab26a5-67b9-4667-855b-48af08004b5f/1/GDofiyripy71GH8wf_d6bqa825I.roa
File: GDofiyripy71GH8wf_d6bqa825I.roa (raw, json)
Hash identifier: riyWOoaciCgQmnSuV6d3VHwhf0XNAvHggPkbAfX2bL4=
Subject key identifier: 18:3A:1F:8B:2A:E2:A7:2E:F5:18:7F:30:7F:F7:7A:6E:A6:BC:DB:92
Certificate issuer: /CN=a44c267fa754cd6509e9f807273123bee96c525d
Certificate serial: 094EB1B6
Authority key identifier: A4:4C:26:7F:A7:54:CD:65:09:E9:F8:07:27:31:23:BE:E9:6C:52:5D
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/pEwmf6dUzWUJ6fgHJzEjvulsUl0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/54/ab26a5-67b9-4667-855b-48af08004b5f/1/GDofiyripy71GH8wf_d6bqa825I.roa
Signing time: Sat 01 Jan 2022 12:04:02 +0000
ROA not before: Sat 01 Jan 2022 12:04:02 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 39368
IP address blocks: 193.39.9.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 156152246 (0x94eb1b6)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=a44c267fa754cd6509e9f807273123bee96c525d
Validity
Not Before: Jan 1 12:04:02 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=183a1f8b2ae2a72ef5187f307ff77a6ea6bcdb92
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:99:49:34:d7:b8:b5:e8:b1:7f:4a:bc:68:34:3b:
06:f1:be:be:e2:a8:c4:91:72:00:b2:15:98:b1:00:
64:13:bd:16:61:9e:f5:0b:95:e5:f8:ee:72:26:06:
c2:c9:80:b6:4a:38:a7:4c:32:44:8a:26:1c:80:2a:
f4:35:4a:94:e0:5f:33:38:60:cc:07:79:d0:54:cb:
91:4b:b4:6b:0f:90:c6:b8:ee:97:df:74:d2:7d:30:
76:46:b0:58:17:0a:b1:fc:04:12:cd:d4:b3:c7:9d:
f4:15:62:b7:5e:c2:3c:8b:c0:bf:b0:e5:b9:84:0f:
1b:b8:8f:27:44:8a:04:f7:ff:ac:9c:b7:b5:aa:91:
10:68:f2:a0:b7:1e:fb:5d:9c:4e:d2:42:37:15:96:
0e:7e:f9:2a:76:d4:a0:b1:ef:83:e6:a1:ff:ca:6b:
97:d0:5e:0c:ca:4a:c6:1f:30:20:ea:c8:c1:75:e6:
c4:f2:8d:49:f4:9b:e0:b4:ad:98:34:da:9b:6e:03:
ee:a3:9f:f2:d5:5e:89:25:b8:86:3c:45:52:b8:5b:
ca:3b:1d:af:90:6a:b2:9b:80:ad:06:00:42:8a:73:
8e:82:22:67:f0:b2:c7:11:e8:a1:7b:d1:13:c3:27:
0b:36:2d:04:6c:f5:36:96:e0:60:36:ae:05:8a:6f:
75:09
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
18:3A:1F:8B:2A:E2:A7:2E:F5:18:7F:30:7F:F7:7A:6E:A6:BC:DB:92
X509v3 Authority Key Identifier:
keyid:A4:4C:26:7F:A7:54:CD:65:09:E9:F8:07:27:31:23:BE:E9:6C:52:5D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/pEwmf6dUzWUJ6fgHJzEjvulsUl0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/54/ab26a5-67b9-4667-855b-48af08004b5f/1/GDofiyripy71GH8wf_d6bqa825I.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/54/ab26a5-67b9-4667-855b-48af08004b5f/1/pEwmf6dUzWUJ6fgHJzEjvulsUl0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
193.39.9.0/24
Signature Algorithm: sha256WithRSAEncryption
0f:83:bb:66:c9:6a:ed:94:df:0f:fe:aa:4a:d1:84:e1:75:d5:
75:c6:18:e2:a5:c2:94:ef:58:24:a0:dd:fa:9c:74:39:92:5c:
62:a9:12:75:cc:92:cf:1d:73:c0:48:49:74:61:a5:30:90:72:
e7:35:c0:d6:70:e8:ec:ac:39:34:e4:74:4d:b7:80:de:72:5c:
31:34:24:fc:e0:20:20:87:c1:3a:08:5d:27:18:03:f4:3e:69:
09:e9:1f:17:37:51:08:5e:22:f0:e9:d0:30:17:b5:7a:fe:d1:
43:16:73:4d:51:bc:5c:09:09:3c:47:3e:dc:5d:7d:6e:78:af:
dd:74:af:ef:cb:85:08:57:d3:77:d9:58:a0:78:50:e9:f1:28:
e0:c9:dc:75:c8:44:9a:43:d1:4b:3b:50:6b:05:34:32:e1:6a:
d7:06:b9:7d:6f:72:d1:58:15:07:a1:81:c7:52:69:5d:f9:dd:
51:5b:f5:17:a0:df:fe:19:18:86:09:52:20:11:72:59:b1:d3:
40:bb:a7:d4:83:4a:33:40:39:ca:e9:e5:60:81:3e:dd:99:33:
2e:30:e2:7d:38:f3:18:41:1b:2b:06:69:b9:55:20:27:ba:38:
55:73:d5:4f:9f:81:4f:65:40:72:e2:20:a8:cc:55:91:2f:86:
3e:9a:95:c3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Feb 17 08:21:57 2025 by rpki-client