![](/console.gif)
Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/56/178025-c7d9-423f-a53b-e23f408d189b/1/q5jMBlWE5fV0Joag7aFGrFAl7mM.roa
File: q5jMBlWE5fV0Joag7aFGrFAl7mM.roa (raw, json)
Hash identifier: +KjUt/1NMSqukWwpgSDevJtXTXThXS56Q4x630gnnSM=
Subject key identifier: AB:98:CC:06:55:84:E5:F5:74:26:86:A0:ED:A1:46:AC:50:25:EE:63
Certificate issuer: /CN=fdb941f2f7c534080e0f777a7ae997992e11e1af
Certificate serial: 0383057A
Authority key identifier: FD:B9:41:F2:F7:C5:34:08:0E:0F:77:7A:7A:E9:97:99:2E:11:E1:AF
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/_blB8vfFNAgOD3d6eumXmS4R4a8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/56/178025-c7d9-423f-a53b-e23f408d189b/1/q5jMBlWE5fV0Joag7aFGrFAl7mM.roa
Signing time: Sat 01 Jan 2022 00:56:49 +0000
ROA not before: Sat 01 Jan 2022 00:56:49 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 51747
IP address blocks: 193.247.126.0/23 maxlen: 24
193.247.74.0/23 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 58918266 (0x383057a)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=fdb941f2f7c534080e0f777a7ae997992e11e1af
Validity
Not Before: Jan 1 00:56:49 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=ab98cc065584e5f5742686a0eda146ac5025ee63
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cf:a9:0a:e0:72:72:4b:31:f6:5f:d7:99:3e:5a:
21:f3:9a:86:a9:74:69:c7:ca:ad:5a:dc:dc:a4:6f:
82:3a:e7:ae:a6:da:73:01:73:7e:a2:3d:7e:fa:50:
aa:9f:3c:fa:39:6d:d7:e4:70:56:89:ef:e9:7c:4b:
07:df:88:87:39:94:5e:cb:ce:3e:b5:12:b8:7c:70:
73:7c:94:35:8a:32:d4:46:5e:33:8c:06:3e:0f:53:
8c:c6:58:ef:44:ec:87:eb:4d:63:72:ff:07:fd:ea:
1a:41:d1:32:53:49:38:f6:49:64:73:31:3e:79:c3:
b2:5e:8c:ae:9e:53:33:ea:a1:64:5e:75:eb:d6:5e:
ff:af:87:9b:0d:48:37:b0:9e:e2:85:7c:8c:bf:bc:
55:aa:35:ac:c8:9d:67:12:ae:02:76:b1:00:b3:85:
9e:17:c8:d0:d8:9d:0c:7a:33:32:10:0a:37:25:64:
26:15:27:f0:92:f8:27:90:95:95:e0:98:f2:de:a9:
ba:72:9c:3a:46:44:13:81:d0:1c:82:dd:d4:f2:8f:
7f:14:44:54:85:bb:d9:cf:7c:a7:79:a3:cb:81:11:
cd:36:4a:8e:e4:25:c3:b7:ce:bb:e7:35:93:25:2f:
ea:b2:8e:a0:23:d3:a8:04:93:fb:af:17:11:cd:3a:
33:a7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
AB:98:CC:06:55:84:E5:F5:74:26:86:A0:ED:A1:46:AC:50:25:EE:63
X509v3 Authority Key Identifier:
keyid:FD:B9:41:F2:F7:C5:34:08:0E:0F:77:7A:7A:E9:97:99:2E:11:E1:AF
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/_blB8vfFNAgOD3d6eumXmS4R4a8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/56/178025-c7d9-423f-a53b-e23f408d189b/1/q5jMBlWE5fV0Joag7aFGrFAl7mM.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/56/178025-c7d9-423f-a53b-e23f408d189b/1/_blB8vfFNAgOD3d6eumXmS4R4a8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
193.247.74.0/23
193.247.126.0/23
Signature Algorithm: sha256WithRSAEncryption
23:f8:c2:0b:4c:7b:04:8c:95:cb:5f:fc:fd:f3:93:40:29:63:
62:4a:eb:46:66:d6:5f:23:f5:7e:d9:31:f6:28:5c:a3:23:2d:
e0:91:1c:e8:ea:74:5e:87:5e:3a:89:4e:44:9c:9a:1f:bc:63:
85:92:08:5b:bf:44:6a:f3:a3:32:39:71:04:78:d0:75:77:75:
bf:11:fd:a6:47:7a:5e:97:9c:00:fd:34:5e:34:58:83:22:86:
47:03:26:46:49:64:72:48:ae:19:c9:3d:c9:40:c9:83:8d:bf:
f8:9c:1f:f4:91:3f:aa:c0:d6:40:6d:60:ad:11:0a:c7:36:09:
72:1f:bc:d8:57:ba:39:4b:14:f7:b2:cf:cd:6e:3b:7f:8b:7b:
be:98:94:78:08:20:4e:30:98:e1:91:6c:09:ba:db:40:02:b8:
39:19:80:13:42:a6:ef:16:cd:4c:bb:8d:b5:38:af:25:5d:49:
a1:b2:d4:29:d0:25:25:06:59:1a:8d:1d:51:e1:6b:f8:e3:9e:
ce:27:28:1a:c8:2a:c6:df:ff:93:1f:f0:3d:ca:0b:b7:70:a5:
8a:4e:30:6d:a4:8d:0c:fa:fb:ef:18:c2:06:07:84:45:f0:f4:
a8:4d:21:dd:9c:08:93:98:39:76:ea:50:a6:13:c6:64:4e:82:
0c:a8:19:c2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Feb 17 08:03:21 2025 by rpki-client