![](/console.gif)
Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/69/5f2f0b-fd82-44fa-b634-52766b24baa4/1/bBgwBTkCKyCYa2AZ3r9ylufmQ4M.roa
File: bBgwBTkCKyCYa2AZ3r9ylufmQ4M.roa (raw, json)
Hash identifier: 0Lxu0bTOenBhOk96FaoukP/Sciaua+cOdCrLGXWMTIA=
Subject key identifier: 6C:18:30:05:39:02:2B:20:98:6B:60:19:DE:BF:72:96:E7:E6:43:83
Certificate issuer: /CN=546834e68890f3986a1b0457ce0f54ae03c2d76b
Certificate serial: 3A7B995B
Authority key identifier: 54:68:34:E6:88:90:F3:98:6A:1B:04:57:CE:0F:54:AE:03:C2:D7:6B
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/VGg05oiQ85hqGwRXzg9UrgPC12s.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/69/5f2f0b-fd82-44fa-b634-52766b24baa4/1/bBgwBTkCKyCYa2AZ3r9ylufmQ4M.roa
Signing time: Sat 01 Jan 2022 04:52:00 +0000
ROA not before: Sat 01 Jan 2022 04:52:00 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 60844
IP address blocks: 81.15.246.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 981178715 (0x3a7b995b)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=546834e68890f3986a1b0457ce0f54ae03c2d76b
Validity
Not Before: Jan 1 04:52:00 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=6c18300539022b20986b6019debf7296e7e64383
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c8:65:e9:1f:cd:b2:14:75:e2:cc:72:fd:06:2b:
67:98:fe:ed:e7:39:95:5c:ff:df:91:01:76:53:83:
e7:99:20:7a:da:02:4a:cb:c5:06:61:00:81:bf:af:
b2:1f:a3:30:78:3b:2b:39:05:0c:27:9c:68:c8:f5:
5c:84:35:ea:9b:60:58:a6:c2:03:f0:56:88:f8:92:
a1:db:6c:23:e4:cc:d4:c5:a1:c8:d8:4a:72:f5:74:
0b:24:83:c7:a0:cd:d5:15:45:09:bd:6e:d8:ef:ec:
c8:18:b5:f4:e4:4a:3b:3e:be:ee:38:7b:f3:89:22:
49:74:26:e0:81:8f:9a:9a:9c:6f:88:10:e2:63:02:
aa:77:ad:85:fe:22:9f:52:95:5e:fc:47:3f:71:22:
48:d1:d0:d2:95:eb:f9:bc:6e:ee:7b:33:c3:8b:98:
32:31:9a:e6:55:3a:f8:8d:fc:5e:34:7f:d1:8d:41:
57:13:30:a2:46:57:a0:75:02:1a:40:e6:70:16:60:
20:79:23:bc:ff:96:30:eb:21:79:08:4d:e5:16:0e:
db:fe:11:0d:cd:7f:00:d7:d4:be:9a:20:5d:47:f8:
1e:60:92:21:eb:cc:8e:d6:38:fe:76:2e:43:5e:4d:
84:9c:67:52:5f:ca:0b:5d:d6:0d:76:6a:57:1a:54:
07:0f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
6C:18:30:05:39:02:2B:20:98:6B:60:19:DE:BF:72:96:E7:E6:43:83
X509v3 Authority Key Identifier:
keyid:54:68:34:E6:88:90:F3:98:6A:1B:04:57:CE:0F:54:AE:03:C2:D7:6B
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/VGg05oiQ85hqGwRXzg9UrgPC12s.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/69/5f2f0b-fd82-44fa-b634-52766b24baa4/1/bBgwBTkCKyCYa2AZ3r9ylufmQ4M.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/69/5f2f0b-fd82-44fa-b634-52766b24baa4/1/VGg05oiQ85hqGwRXzg9UrgPC12s.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
81.15.246.0/24
Signature Algorithm: sha256WithRSAEncryption
17:d8:84:72:1d:3c:dc:57:dd:d8:e4:11:5d:19:b5:78:15:43:
1b:96:f1:f9:b0:b8:74:00:95:6f:6d:63:b5:9f:89:06:6e:61:
da:f5:84:5f:19:dd:b8:f1:57:60:94:13:e9:47:dc:f6:fb:57:
5e:44:99:b4:38:83:9f:e5:5e:65:f0:b5:ce:f9:57:c6:c8:af:
cb:1c:8d:2c:80:85:a0:46:48:c3:b0:63:40:e6:59:fd:8e:8b:
e1:2f:34:8f:d0:13:78:6a:9d:b2:be:28:88:8c:6c:2f:6d:8d:
2a:81:5c:b9:28:29:5d:62:35:3f:1f:34:63:70:11:04:44:b8:
c8:24:77:bd:a3:8d:ef:6d:07:f9:08:21:a7:35:fa:4d:77:bb:
e2:6d:90:0a:60:c2:b7:00:1f:2e:59:6a:9f:89:57:d9:98:cf:
82:28:f0:db:39:fe:81:6b:04:81:c2:bd:0a:da:84:1b:58:fd:
dc:79:9c:87:be:4e:c4:f1:bc:53:b8:ac:98:27:5d:5e:7a:08:
b6:6d:2e:d9:01:1e:55:16:01:96:ab:0b:08:8c:a5:b3:e5:a9:
ce:86:c6:4c:f6:1e:68:9c:cc:76:87:70:71:7b:35:f2:74:25:
ec:99:bb:69:7b:37:62:ec:a9:72:b5:64:10:0a:c0:ed:31:c5:
c0:54:36:43
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Feb 19 22:09:14 2025 by rpki-client