![](/console.gif)
Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/69/5f2f0b-fd82-44fa-b634-52766b24baa4/1/e1EayWz0uAHl5eWWZbT1L-tpFds.roa
File: e1EayWz0uAHl5eWWZbT1L-tpFds.roa (raw, json)
Hash identifier: dGMVwkUz+lqm0+yzeDZIta94DzwS/qA8TRMINX6cJlk=
Subject key identifier: 7B:51:1A:C9:6C:F4:B8:01:E5:E5:E5:96:65:B4:F5:2F:EB:69:15:DB
Certificate issuer: /CN=546834e68890f3986a1b0457ce0f54ae03c2d76b
Certificate serial: 3A6D296A
Authority key identifier: 54:68:34:E6:88:90:F3:98:6A:1B:04:57:CE:0F:54:AE:03:C2:D7:6B
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/VGg05oiQ85hqGwRXzg9UrgPC12s.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/69/5f2f0b-fd82-44fa-b634-52766b24baa4/1/e1EayWz0uAHl5eWWZbT1L-tpFds.roa
Signing time: Sat 01 Jan 2022 04:51:51 +0000
ROA not before: Sat 01 Jan 2022 04:51:51 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 35463
IP address blocks: 82.177.224.0/20 maxlen: 20
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 980232554 (0x3a6d296a)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=546834e68890f3986a1b0457ce0f54ae03c2d76b
Validity
Not Before: Jan 1 04:51:51 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=7b511ac96cf4b801e5e5e59665b4f52feb6915db
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:aa:f7:c2:1b:2b:ab:f1:51:fa:84:d0:bd:40:d8:
3b:b4:ee:e6:3d:9e:d6:0c:4a:7d:bf:20:9f:6f:13:
e0:02:e4:f4:48:7f:1d:16:f2:9a:ab:58:17:bc:9f:
e5:67:6f:d2:45:48:e9:12:5d:2b:a7:68:df:bb:00:
50:0c:c2:d6:d9:4c:af:7b:a5:c4:35:6e:d3:8d:8f:
c4:f2:26:3f:e3:c0:35:96:3b:84:5e:12:6c:d7:e4:
7b:b0:94:cd:a4:3c:b7:94:e2:40:53:3e:a7:66:f3:
a2:82:5a:04:59:59:8a:21:24:0c:9d:82:c0:df:1d:
23:e9:d8:f7:1b:8f:f6:46:6d:2e:f7:30:50:72:9b:
33:79:21:c5:1b:a4:b8:75:99:6f:a7:26:84:11:78:
69:9e:b9:f3:9f:ca:5e:4c:ce:2c:c0:0a:07:4d:29:
b5:90:6d:18:fb:c9:86:b9:39:f7:86:11:80:22:44:
37:eb:a0:73:ff:43:ba:b6:1b:c2:d6:c0:cc:cb:2f:
b8:3b:6f:28:74:98:d4:2e:5e:0f:02:fe:72:37:28:
cc:ae:d4:0c:3e:4f:01:91:0f:40:0d:a9:cd:ff:30:
94:4b:58:a7:a0:f9:0a:a5:61:a5:fb:59:49:fd:da:
6e:b5:16:63:71:84:65:6d:42:14:ca:67:df:e1:31:
cf:c7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
7B:51:1A:C9:6C:F4:B8:01:E5:E5:E5:96:65:B4:F5:2F:EB:69:15:DB
X509v3 Authority Key Identifier:
keyid:54:68:34:E6:88:90:F3:98:6A:1B:04:57:CE:0F:54:AE:03:C2:D7:6B
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/VGg05oiQ85hqGwRXzg9UrgPC12s.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/69/5f2f0b-fd82-44fa-b634-52766b24baa4/1/e1EayWz0uAHl5eWWZbT1L-tpFds.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/69/5f2f0b-fd82-44fa-b634-52766b24baa4/1/VGg05oiQ85hqGwRXzg9UrgPC12s.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
82.177.224.0/20
Signature Algorithm: sha256WithRSAEncryption
99:3e:cd:a2:0c:65:52:f4:b6:96:54:0e:24:89:5d:7f:4b:9b:
5b:24:96:fc:b5:99:eb:b7:b9:29:f6:ee:d0:cc:20:25:3e:b4:
99:f0:bc:d3:bb:73:fd:1c:cd:70:5a:7b:0b:22:a0:17:b4:27:
e6:d4:0f:ab:21:27:f1:d4:d8:a4:91:6d:1f:f6:1a:eb:4f:98:
2a:54:ce:61:fd:b0:16:18:0a:bb:cb:c4:bb:c0:85:b4:f8:80:
b8:0c:58:3a:30:b8:3e:92:9c:ee:d2:45:13:0e:d7:e2:0d:a4:
16:04:06:2d:fd:b7:5f:5a:0b:69:63:d7:d9:b1:c0:d7:67:a2:
32:f9:d0:75:3d:33:b3:5f:eb:54:76:dc:5e:1c:be:34:0d:aa:
ec:82:97:6c:4a:98:7d:ea:e9:9a:39:4b:2f:5b:46:98:0d:a4:
20:9f:dd:b5:eb:22:2f:61:de:97:82:cc:de:f3:46:f8:c2:87:
13:c9:c3:26:0e:c8:5c:1c:b9:c5:fb:c5:74:55:51:03:cc:40:
44:9a:1b:2c:71:ee:e9:28:7c:fc:65:3f:a5:12:a0:b9:b3:0e:
99:14:be:16:ef:52:fb:ee:ac:bf:4b:ad:48:08:e6:81:e4:b4:
4b:02:9a:64:3d:ff:33:70:46:f5:a8:f8:d6:78:7e:13:f5:cf:
19:55:51:cc
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Feb 19 22:07:23 2025 by rpki-client