![](/console.gif)
Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/59/95fd62-fe39-4d9d-8ccb-6ce09552b9a3/1/ZP5tNM3IwV_1Kds9VuoXUQkzgg0.roa
File: ZP5tNM3IwV_1Kds9VuoXUQkzgg0.roa (raw, json)
Hash identifier: VXUHVSQ9ROtaJPuLpybRY8wyn8pZqLYsg4MgVKlzpdk=
Subject key identifier: 64:FE:6D:34:CD:C8:C1:5F:F5:29:DB:3D:56:EA:17:51:09:33:82:0D
Certificate issuer: /CN=098547627a2b2dea6d080af231430be8a8e69740
Certificate serial: 554975
Authority key identifier: 09:85:47:62:7A:2B:2D:EA:6D:08:0A:F2:31:43:0B:E8:A8:E6:97:40
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/CYVHYnorLeptCAryMUML6Kjml0A.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/59/95fd62-fe39-4d9d-8ccb-6ce09552b9a3/1/ZP5tNM3IwV_1Kds9VuoXUQkzgg0.roa
Signing time: Sat 01 Jan 2022 01:51:21 +0000
ROA not before: Sat 01 Jan 2022 01:51:21 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 61317
IP address blocks: 146.255.184.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 5589365 (0x554975)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=098547627a2b2dea6d080af231430be8a8e69740
Validity
Not Before: Jan 1 01:51:21 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=64fe6d34cdc8c15ff529db3d56ea17510933820d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cc:0e:1a:a5:aa:b7:ca:5c:96:83:d9:c7:25:3f:
fc:94:63:59:e0:d7:73:ab:0b:20:0d:2a:64:89:06:
5f:e5:63:3e:b0:f0:a8:3b:48:0c:74:b8:01:8b:51:
95:d6:95:63:21:c7:01:05:34:6f:5d:1b:a2:ff:f2:
e1:b2:34:bf:bc:b4:b4:b0:47:45:cd:e8:7d:a8:b5:
0d:41:8e:25:d6:58:43:33:03:4c:a9:19:62:4e:2b:
ed:bf:a0:7e:4c:1c:63:b7:ce:bb:cc:0a:b7:55:bb:
dc:89:b6:8c:97:bc:34:6b:69:b8:d3:78:53:16:ed:
e2:92:68:e3:8b:d0:ba:90:8e:74:a5:58:ff:c5:2d:
2f:74:69:cf:95:ca:6c:b5:51:80:03:ab:bb:0c:02:
06:d6:d6:86:57:1a:e9:c7:be:86:80:c8:b7:b8:9a:
f4:ee:76:db:51:6e:4a:8d:45:88:b5:f5:cb:b2:f6:
95:5e:28:b8:95:38:ab:c8:f2:ce:e7:46:98:66:1e:
b2:3d:1a:8e:c7:77:03:5e:38:ef:e4:0a:1f:07:9c:
a4:7a:87:cb:f2:3b:31:3d:b1:cf:48:8a:bb:1c:19:
13:43:5c:8d:f8:4b:c3:c6:08:b8:5a:f1:3a:6e:47:
3c:8d:2d:a5:cf:15:25:be:fb:ed:42:a6:de:13:ee:
fe:3d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
64:FE:6D:34:CD:C8:C1:5F:F5:29:DB:3D:56:EA:17:51:09:33:82:0D
X509v3 Authority Key Identifier:
keyid:09:85:47:62:7A:2B:2D:EA:6D:08:0A:F2:31:43:0B:E8:A8:E6:97:40
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/CYVHYnorLeptCAryMUML6Kjml0A.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/59/95fd62-fe39-4d9d-8ccb-6ce09552b9a3/1/ZP5tNM3IwV_1Kds9VuoXUQkzgg0.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/59/95fd62-fe39-4d9d-8ccb-6ce09552b9a3/1/CYVHYnorLeptCAryMUML6Kjml0A.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
146.255.184.0/24
Signature Algorithm: sha256WithRSAEncryption
a2:5b:32:52:ca:20:01:4b:a9:26:2c:db:d0:0b:f0:c7:e3:63:
72:68:0a:4e:71:6b:16:df:b8:ad:1e:51:14:e5:01:55:ea:6d:
b6:de:bb:97:67:46:5f:2d:f7:94:79:1c:f7:33:27:04:e9:21:
8e:49:63:49:45:44:20:00:a7:e0:be:2f:15:cf:ba:82:1e:f6:
81:a4:85:c2:03:84:31:f1:a8:bc:a3:6d:3a:12:18:bd:23:d7:
f8:80:62:9b:87:5e:b0:a3:05:7c:fd:1c:64:95:23:53:50:9e:
ca:e7:58:14:18:84:7b:b3:e8:b8:18:4c:e5:7d:6f:54:de:64:
8b:50:2a:7d:33:69:d0:1a:db:b1:ac:dc:46:9d:84:50:73:c8:
38:87:59:46:02:32:5a:b8:0d:2d:e1:6e:5c:4c:da:8f:2f:dd:
14:62:fd:8a:8e:3c:c5:62:e7:5a:4e:bd:51:22:a7:38:e3:61:
62:8f:9c:ce:ab:52:3b:1c:c9:8f:9c:b1:5a:2a:7f:cb:c8:df:
4a:36:fc:21:d8:51:6d:f6:00:d9:14:8f:87:43:57:75:5c:b2:
50:3e:32:fd:43:a8:c5:55:58:05:8f:33:60:c6:ca:e8:35:2d:
90:e7:56:4a:c8:47:fa:36:ab:d1:ea:46:c0:de:c5:34:23:66:
fd:b1:58:ec
-----BEGIN CERTIFICATE-----
MIIE7jCCA9agAwIBAgIDVUl1MA0GCSqGSIb3DQEBCwUAMDMxMTAvBgNVBAMTKDA5
ODU0NzYyN2EyYjJkZWE2ZDA4MGFmMjMxNDMwYmU4YThlNjk3NDAwHhcNMjIwMTAx
MDE1MTIxWhcNMjMwNzAxMDAwMDAwWjAzMTEwLwYDVQQDEyg2NGZlNmQzNGNkYzhj
MTVmZjUyOWRiM2Q1NmVhMTc1MTA5MzM4MjBkMIIBIjANBgkqhkiG9w0BAQEFAAOC
AQ8AMIIBCgKCAQEAzA4apaq3ylyWg9nHJT/8lGNZ4NdzqwsgDSpkiQZf5WM+sPCo
O0gMdLgBi1GV1pVjIccBBTRvXRui//LhsjS/vLS0sEdFzeh9qLUNQY4l1lhDMwNM
qRliTivtv6B+TBxjt867zAq3VbvcibaMl7w0a2m403hTFu3ikmjji9C6kI50pVj/
xS0vdGnPlcpstVGAA6u7DAIG1taGVxrpx76GgMi3uJr07nbbUW5KjUWItfXLsvaV
Xii4lTiryPLO50aYZh6yPRqOx3cDXjjv5AofB5ykeofL8jsxPbHPSIq7HBkTQ1yN
+EvDxgi4WvE6bkc8jS2lzxUlvvvtQqbeE+7+PQIDAQABo4ICCTCCAgUwHQYDVR0O
BBYEFGT+bTTNyMFf9SnbPVbqF1EJM4INMB8GA1UdIwQYMBaAFAmFR2J6Ky3qbQgK
8jFDC+io5pdAMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEFBQcBAQRYMFYwVAYIKwYB
BQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQv
Q1lWSFlub3JMZXB0Q0FyeU1VTUw2S2ptbDBBLmNlcjCBjQYIKwYBBQUHAQsEgYAw
fjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRvcnkv
REVGQVVMVC81OS85NWZkNjItZmUzOS00ZDlkLThjY2ItNmNlMDk1NTJiOWEzLzEv
WlA1dE5NM0l3Vl8xS2RzOVZ1b1hVUWt6Z2cwLnJvYTCBgQYDVR0fBHoweDB2oHSg
coZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRvcnkvREVGQVVMVC81OS85
NWZkNjItZmUzOS00ZDlkLThjY2ItNmNlMDk1NTJiOWEzLzEvQ1lWSFlub3JMZXB0
Q0FyeU1VTUw2S2ptbDBBLmNybDAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMB8G
CCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAkv+4MA0GCSqGSIb3DQEBCwUAA4IB
AQCiWzJSyiABS6kmLNvQC/DH42NyaApOcWsW37itHlEU5QFV6m223ruXZ0ZfLfeU
eRz3MycE6SGOSWNJRUQgAKfgvi8Vz7qCHvaBpIXCA4Qx8ai8o206Ehi9I9f4gGKb
h16wowV8/RxklSNTUJ7K51gUGIR7s+i4GEzlfW9U3mSLUCp9M2nQGtuxrNxGnYRQ
c8g4h1lGAjJauA0t4W5cTNqPL90UYv2KjjzFYudaTr1RIqc442Fij5zOq1I7HMmP
nLFaKn/LyN9KNvwh2FFt9gDZFI+HQ1d1XLJQPjL9Q6jFVVgFjzNgxsroNS2Q51ZK
yEf6NqvR6kbA3sU0I2b9sVjs
-----END CERTIFICATE-----
Generated at Mon Feb 17 07:23:56 2025 by rpki-client