![](/console.gif)
Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/55/e5f7e9-80f9-4317-b21e-8336fec488f3/1/L_zNGCBGEDj9N3rMQTMrFIV782w.roa
File: L_zNGCBGEDj9N3rMQTMrFIV782w.roa (raw, json)
Hash identifier: iEnQGxNkOXhcD3/Y51bb+xH867h+cusqokd1iOCi7KQ=
Subject key identifier: 2F:FC:CD:18:20:46:10:38:FD:37:7A:CC:41:33:2B:14:85:7B:F3:6C
Certificate issuer: /CN=170ef71a422a2f0fe91160579a4050618d8baf10
Certificate serial: 035E3973
Authority key identifier: 17:0E:F7:1A:42:2A:2F:0F:E9:11:60:57:9A:40:50:61:8D:8B:AF:10
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Fw73GkIqLw_pEWBXmkBQYY2LrxA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/55/e5f7e9-80f9-4317-b21e-8336fec488f3/1/L_zNGCBGEDj9N3rMQTMrFIV782w.roa
Signing time: Sat 01 Jan 2022 05:54:36 +0000
ROA not before: Sat 01 Jan 2022 05:54:36 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 206150
IP address blocks: 46.244.31.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 56506739 (0x35e3973)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=170ef71a422a2f0fe91160579a4050618d8baf10
Validity
Not Before: Jan 1 05:54:36 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=2ffccd1820461038fd377acc41332b14857bf36c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9c:58:8b:f1:20:ff:3a:4d:21:6a:3a:89:9d:0b:
cc:40:2a:31:bc:d0:c8:a5:25:86:41:81:37:b8:06:
b0:44:82:57:05:47:5a:65:46:57:ad:d2:30:8b:c3:
56:1f:b3:b0:73:98:17:23:2a:f0:8e:d3:e5:e1:16:
21:51:fc:0d:aa:59:1a:80:39:75:17:19:04:e2:db:
d2:85:86:0f:7b:6d:3c:30:e5:57:2f:41:fb:fd:f5:
c3:87:f9:40:17:16:9f:4f:13:13:8f:ef:f2:42:20:
00:ff:c4:78:76:86:a4:d1:c6:16:bf:ba:59:06:1e:
0e:4d:63:52:fc:17:7a:54:44:3d:b0:e7:28:31:a9:
a7:b5:61:06:6d:51:9b:34:21:a7:cd:9a:0d:5a:47:
ab:7b:f2:36:93:f2:a0:b2:ac:48:5e:8c:d8:8b:38:
e5:23:38:b2:ba:54:9a:80:3c:07:ff:f4:b1:5b:a3:
23:9c:16:24:d4:c8:ac:f0:e9:60:03:6f:0e:73:b1:
36:e2:60:dc:59:95:c8:96:a0:b1:7c:4f:b2:dc:28:
ce:70:3e:59:f4:e9:a0:64:82:20:d5:1b:b1:fe:a0:
fb:b5:8c:88:91:b4:dc:97:be:59:67:45:bc:c3:b8:
6c:27:0a:9b:55:c6:be:31:57:61:45:bc:b2:1a:36:
91:01
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
2F:FC:CD:18:20:46:10:38:FD:37:7A:CC:41:33:2B:14:85:7B:F3:6C
X509v3 Authority Key Identifier:
keyid:17:0E:F7:1A:42:2A:2F:0F:E9:11:60:57:9A:40:50:61:8D:8B:AF:10
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Fw73GkIqLw_pEWBXmkBQYY2LrxA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/55/e5f7e9-80f9-4317-b21e-8336fec488f3/1/L_zNGCBGEDj9N3rMQTMrFIV782w.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/55/e5f7e9-80f9-4317-b21e-8336fec488f3/1/Fw73GkIqLw_pEWBXmkBQYY2LrxA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
46.244.31.0/24
Signature Algorithm: sha256WithRSAEncryption
4f:81:87:9d:5d:af:ec:b3:da:06:de:d6:cf:21:cc:2c:1d:b7:
47:f1:72:d8:f7:60:75:d3:37:42:94:3f:da:06:ce:b5:82:c6:
26:e9:21:ca:11:67:c2:aa:5d:62:bc:e7:7d:87:9d:1a:d1:35:
6b:89:59:bb:d9:8c:e0:8a:80:36:8a:59:2e:66:6b:33:a9:2e:
fc:cc:cd:a4:ae:26:5a:4a:6c:73:3d:9e:c1:2d:54:00:ce:ba:
45:44:65:9a:14:57:4f:d4:7a:59:68:e4:da:a3:99:65:ce:aa:
38:ae:72:3f:7d:60:ef:d6:da:ce:6a:81:bb:2d:9a:b9:3c:09:
20:8f:56:7b:79:d3:5f:b9:64:23:f0:04:fd:56:be:dd:e8:e1:
96:64:73:95:7d:94:fd:44:d6:45:0c:d8:42:1c:a7:d0:b3:58:
82:ad:ca:61:dc:18:f3:69:95:18:3c:12:9c:0e:6e:44:f6:5a:
40:f2:c9:01:c8:9a:80:4b:b4:8d:ca:fc:c0:4c:b3:8a:2e:4d:
85:7f:89:f1:95:24:7c:ef:89:18:cb:99:3f:df:80:b5:f8:ed:
f1:0e:8d:ff:2d:68:26:96:88:f6:f4:4a:9e:da:c7:d0:2f:61:
d2:06:44:5c:ff:9f:48:e6:7f:0e:3f:09:73:a4:68:44:d3:ca:
ca:1c:1c:3e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Feb 17 07:51:02 2025 by rpki-client