![](/console.gif)
Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/54/ab26a5-67b9-4667-855b-48af08004b5f/1/_emAxkaqUlAFmnCipg51xYWdDyg.roa
File: _emAxkaqUlAFmnCipg51xYWdDyg.roa (raw, json)
Hash identifier: H1eD6gNCIjauLGrErmILXRud9rbhazq1VP7KU0pSzEM=
Subject key identifier: FD:E9:80:C6:46:AA:52:50:05:9A:70:A2:A6:0E:75:C5:85:9D:0F:28
Certificate issuer: /CN=a44c267fa754cd6509e9f807273123bee96c525d
Certificate serial: 09BC5DB2
Authority key identifier: A4:4C:26:7F:A7:54:CD:65:09:E9:F8:07:27:31:23:BE:E9:6C:52:5D
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/pEwmf6dUzWUJ6fgHJzEjvulsUl0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/54/ab26a5-67b9-4667-855b-48af08004b5f/1/_emAxkaqUlAFmnCipg51xYWdDyg.roa
Signing time: Thu 10 Feb 2022 14:13:24 +0000
ROA not before: Thu 10 Feb 2022 14:13:24 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 200019
IP address blocks: 45.158.58.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 163339698 (0x9bc5db2)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=a44c267fa754cd6509e9f807273123bee96c525d
Validity
Not Before: Feb 10 14:13:24 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=fde980c646aa5250059a70a2a60e75c5859d0f28
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ca:19:d2:3f:7f:bf:40:05:e3:64:11:14:79:47:
34:d2:55:0a:d9:01:2b:91:0f:0d:e6:c9:0e:e2:3e:
3c:0c:ec:01:83:8d:54:a5:7a:6a:20:02:88:ac:bb:
86:78:f3:78:a2:39:eb:60:f2:df:0e:ab:bd:1d:27:
5c:08:c1:11:a5:fa:c7:7d:d0:31:d7:a5:60:6f:0e:
24:1d:22:99:73:39:be:11:14:c6:93:d5:f1:d3:bd:
eb:4c:25:87:be:3a:66:4f:82:0e:f5:ef:f6:33:86:
64:73:9b:9f:6d:e5:c9:d0:ed:bf:65:26:75:00:c5:
15:50:20:ed:18:b7:6a:2c:10:64:bd:1a:64:77:05:
22:c6:db:52:6d:0e:a9:9e:61:23:44:db:39:00:8c:
77:dc:fe:27:97:82:2f:20:55:5b:92:3d:6d:3d:2c:
9c:30:a3:2a:3a:e7:be:cc:63:57:48:bf:a5:93:86:
c9:19:cc:28:59:9f:53:a4:86:d5:8f:34:cb:7a:39:
aa:0e:0b:e7:47:5b:50:11:f9:b2:1f:16:53:7b:54:
fc:c2:97:16:ad:a7:c8:73:c2:41:96:49:1b:c4:cf:
f8:fd:28:4b:7a:b7:c9:01:b4:7b:f6:b8:f8:be:e6:
2a:48:a0:67:c5:1f:00:d9:3b:ce:d8:39:31:0a:85:
ac:df
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
FD:E9:80:C6:46:AA:52:50:05:9A:70:A2:A6:0E:75:C5:85:9D:0F:28
X509v3 Authority Key Identifier:
keyid:A4:4C:26:7F:A7:54:CD:65:09:E9:F8:07:27:31:23:BE:E9:6C:52:5D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/pEwmf6dUzWUJ6fgHJzEjvulsUl0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/54/ab26a5-67b9-4667-855b-48af08004b5f/1/_emAxkaqUlAFmnCipg51xYWdDyg.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/54/ab26a5-67b9-4667-855b-48af08004b5f/1/pEwmf6dUzWUJ6fgHJzEjvulsUl0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
45.158.58.0/24
Signature Algorithm: sha256WithRSAEncryption
5b:43:3f:f5:a4:4f:9a:62:09:7b:f7:86:5f:8d:1d:6b:4b:01:
f9:e2:c8:54:0f:e7:38:5a:62:53:aa:ac:79:ba:28:e2:19:13:
06:85:81:07:22:bc:49:20:da:38:6a:f0:00:ec:e4:a1:3d:79:
cd:9d:bb:e6:05:7f:b8:ff:59:07:79:78:2c:01:c6:78:c8:21:
54:d8:98:dd:72:ab:25:41:d2:7b:84:06:77:28:5e:da:cf:fc:
69:9f:ac:18:a2:0d:47:14:e9:bc:1b:e6:d7:42:1e:51:15:c8:
c5:1b:59:78:ab:3b:88:05:7a:0d:03:cc:5c:41:1c:75:91:fa:
4e:c4:d8:8b:8e:d0:4f:83:22:82:a7:0e:91:36:c8:7d:8a:f9:
c9:41:0b:29:84:f8:87:89:ae:c6:ff:6a:2f:c6:b9:44:c0:dd:
81:b0:3b:e3:5e:31:ea:98:05:44:15:84:7a:13:bc:dd:c5:91:
d3:99:e8:ce:59:d5:70:32:4b:c2:92:63:92:fa:07:49:91:3d:
44:79:dd:b8:a0:5a:84:58:f4:5e:b4:90:72:5c:11:41:b2:fd:
ea:14:b4:57:9b:01:eb:1e:e1:7b:4c:95:45:9d:3e:54:be:35:
14:fa:e9:43:d4:c0:cc:26:e6:0d:fe:b8:7c:a2:da:43:ab:45:
22:3b:1e:91
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Feb 17 07:53:13 2025 by rpki-client