![](/console.gif)
Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/54/ab26a5-67b9-4667-855b-48af08004b5f/1/jTBcIMPa_cX6neLKOwOjbROvh_M.roa
File: jTBcIMPa_cX6neLKOwOjbROvh_M.roa (raw, json)
Hash identifier: 3ODK4oWVM6HVQiN8IjlmZRkqAyucMRwVcFcQTjCRyVg=
Subject key identifier: 8D:30:5C:20:C3:DA:FD:C5:FA:9D:E2:CA:3B:03:A3:6D:13:AF:87:F3
Certificate issuer: /CN=a44c267fa754cd6509e9f807273123bee96c525d
Certificate serial: 0182F0EC6EF5EB3990C86E664BAB6D3B89AD
Authority key identifier: A4:4C:26:7F:A7:54:CD:65:09:E9:F8:07:27:31:23:BE:E9:6C:52:5D
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/pEwmf6dUzWUJ6fgHJzEjvulsUl0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/54/ab26a5-67b9-4667-855b-48af08004b5f/1/jTBcIMPa_cX6neLKOwOjbROvh_M.roa
Signing time: Tue 30 Aug 2022 22:43:22 +0000
ROA not before: Tue 30 Aug 2022 22:43:22 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 34549
IP address blocks: 45.91.136.0/22 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:82:f0:ec:6e:f5:eb:39:90:c8:6e:66:4b:ab:6d:3b:89:ad
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=a44c267fa754cd6509e9f807273123bee96c525d
Validity
Not Before: Aug 30 22:43:22 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=8d305c20c3dafdc5fa9de2ca3b03a36d13af87f3
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cc:a4:18:7f:cc:bd:4c:fe:dc:db:5d:cc:f6:b2:
5e:43:78:27:35:0d:07:bb:d8:3a:93:45:f5:91:5d:
17:49:13:ec:fc:c4:83:ad:31:cc:cc:cc:d1:2a:ca:
d3:0e:05:f3:1f:79:73:0f:f5:67:12:86:76:fa:40:
d1:25:ce:21:f7:19:d5:3e:9b:81:71:24:f2:4d:d3:
eb:9a:7f:53:50:8c:f6:71:5d:07:a5:a8:0b:44:4c:
b2:d1:36:77:ee:bc:44:a6:d6:26:12:85:67:78:1b:
75:fb:48:cd:fa:61:60:07:88:0f:4a:95:84:23:7c:
2e:1d:d1:cc:10:a2:51:94:73:ad:33:8c:5e:e4:04:
ff:b0:c5:b8:94:79:2f:b2:04:b1:9b:d3:cd:d2:60:
b9:5c:41:4e:59:ff:bd:f0:eb:41:73:66:95:2d:c6:
0c:69:a8:5d:28:61:7b:55:d7:e8:aa:17:94:48:34:
00:52:d9:ca:9e:47:25:47:ec:1b:ac:47:0e:4e:79:
ea:32:6e:a1:b7:43:b1:96:6c:32:1f:ab:f8:3b:0d:
e7:be:7d:ae:b7:35:b0:43:55:fc:f6:b4:0b:5e:c0:
25:eb:26:99:8b:a0:a0:b3:ed:a7:09:36:bd:10:63:
50:5a:1b:00:02:14:63:ec:9d:4e:c4:aa:fe:92:3b:
11:63
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
8D:30:5C:20:C3:DA:FD:C5:FA:9D:E2:CA:3B:03:A3:6D:13:AF:87:F3
X509v3 Authority Key Identifier:
keyid:A4:4C:26:7F:A7:54:CD:65:09:E9:F8:07:27:31:23:BE:E9:6C:52:5D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/pEwmf6dUzWUJ6fgHJzEjvulsUl0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/54/ab26a5-67b9-4667-855b-48af08004b5f/1/jTBcIMPa_cX6neLKOwOjbROvh_M.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/54/ab26a5-67b9-4667-855b-48af08004b5f/1/pEwmf6dUzWUJ6fgHJzEjvulsUl0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
45.91.136.0/22
Signature Algorithm: sha256WithRSAEncryption
a8:58:c8:31:65:de:9f:9f:97:59:ce:8f:f8:85:95:6d:ca:e5:
52:a7:d0:af:52:dd:a4:4b:8b:e8:d7:a1:ba:4f:b8:b3:1c:6d:
e8:81:de:b7:74:91:f2:73:93:e6:af:a6:66:b4:23:69:5b:32:
19:c8:af:b8:56:d9:37:51:9e:ed:77:06:10:30:d4:4b:68:a5:
2b:33:95:5a:37:de:21:f7:e5:d3:11:e2:28:2f:fd:7c:c5:b9:
b5:4c:6a:89:d3:c3:3c:87:c5:42:21:a6:27:da:16:17:78:fa:
9c:f1:6f:35:13:33:9c:f1:09:b3:66:aa:40:c6:08:6b:da:0c:
05:b1:c5:e8:94:6d:21:62:fc:86:96:26:d4:7e:f0:9b:43:b0:
49:a9:fc:9c:ed:84:12:ec:f4:bc:1a:59:ae:3c:35:06:05:11:
64:bd:8d:dc:13:4e:93:92:b4:66:ea:18:23:86:4d:59:12:c1:
75:25:9a:fd:a0:86:80:4c:a9:1f:35:86:e2:c8:9c:6f:60:50:
a2:d1:61:b3:ec:50:97:28:ad:a2:f0:4d:f8:f4:40:14:5e:ab:
f4:07:c2:ca:0a:ad:0e:e1:45:dd:7a:d8:54:14:05:46:f4:53:
9f:79:93:76:ea:2f:86:06:a2:99:e8:07:5d:2b:54:f6:f8:aa:
f7:8b:a1:03
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Feb 17 08:09:36 2025 by rpki-client