![](/console.gif)
Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/6d/56a650-da30-4fe6-ac71-5e01194597db/1/ET00Q0BBBLsDU3gSLnrut3Ncujw.roa
File: ET00Q0BBBLsDU3gSLnrut3Ncujw.roa (raw, json)
Hash identifier: e7mcBA9BDx48yA319a9iJ4jDWsjv0XQRkE106WH+JGM=
Subject key identifier: 11:3D:34:43:40:41:04:BB:03:53:78:12:2E:7A:EE:B7:73:5C:BA:3C
Certificate issuer: /CN=866d6a188305a4dc18401aa20d4ce266fd30475e
Certificate serial: 02584B88
Authority key identifier: 86:6D:6A:18:83:05:A4:DC:18:40:1A:A2:0D:4C:E2:66:FD:30:47:5E
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/hm1qGIMFpNwYQBqiDUziZv0wR14.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/6d/56a650-da30-4fe6-ac71-5e01194597db/1/ET00Q0BBBLsDU3gSLnrut3Ncujw.roa
Signing time: Tue 26 Apr 2022 13:14:09 +0000
ROA not before: Tue 26 Apr 2022 13:14:09 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 22773
IP address blocks: 77.72.80.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 39340936 (0x2584b88)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=866d6a188305a4dc18401aa20d4ce266fd30475e
Validity
Not Before: Apr 26 13:14:09 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=113d3443404104bb035378122e7aeeb7735cba3c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:99:74:4a:74:46:e2:68:c1:f0:63:f7:57:c8:73:
f0:dd:96:b9:d8:c0:08:c2:b0:69:a4:18:ff:13:b4:
ad:a1:56:22:f4:58:73:1a:9f:8b:ac:fd:f3:a6:63:
3f:3e:d5:07:ab:2f:83:63:70:b9:0d:ce:c7:75:cf:
d5:83:4b:e7:2e:bc:34:c6:1c:53:4f:19:43:cd:c7:
0e:6d:38:bd:ec:af:e7:7a:cb:3c:1a:9f:a9:bd:bf:
37:35:ac:a0:96:63:e3:72:d2:2d:93:46:3a:13:7f:
c3:2d:97:0d:a6:03:1a:c8:00:e0:6d:4f:f1:f0:25:
d6:52:7d:ba:f7:8e:a6:01:65:c6:7a:68:28:51:50:
6e:c7:6a:56:62:4b:29:2a:4c:bd:28:ec:ef:c0:82:
fe:d1:5f:74:c9:7a:d7:ee:94:91:27:78:03:b5:4a:
14:b1:65:35:1f:ac:92:32:a5:38:30:ef:b6:f5:b9:
41:b8:a7:9b:7f:3b:6e:79:9d:af:cb:5d:c2:a5:64:
d7:52:09:94:2e:92:f2:7c:b4:a7:27:ff:8a:e6:b9:
23:eb:1a:20:59:6a:ae:91:02:a1:ee:55:11:c0:59:
36:ce:fd:d0:09:fd:4c:6f:da:f2:17:8c:67:3f:be:
1a:9e:69:ed:d8:6e:5d:b9:cb:22:91:9c:03:68:07:
db:3b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
11:3D:34:43:40:41:04:BB:03:53:78:12:2E:7A:EE:B7:73:5C:BA:3C
X509v3 Authority Key Identifier:
keyid:86:6D:6A:18:83:05:A4:DC:18:40:1A:A2:0D:4C:E2:66:FD:30:47:5E
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/hm1qGIMFpNwYQBqiDUziZv0wR14.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/6d/56a650-da30-4fe6-ac71-5e01194597db/1/ET00Q0BBBLsDU3gSLnrut3Ncujw.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/6d/56a650-da30-4fe6-ac71-5e01194597db/1/hm1qGIMFpNwYQBqiDUziZv0wR14.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
77.72.80.0/24
Signature Algorithm: sha256WithRSAEncryption
70:04:bc:eb:69:e6:c1:e4:2a:c4:a2:8b:f0:51:f8:26:97:b6:
55:2a:42:15:5c:ca:52:c8:56:80:b2:b4:a5:62:a9:ab:cf:2c:
4c:f3:8e:8c:b9:53:c3:fc:9e:b0:fb:54:9b:9b:72:dd:db:95:
20:22:6a:74:ec:e6:e6:8e:c4:cc:a9:64:eb:ec:03:7f:a6:59:
89:7d:fc:23:36:ce:a0:03:46:1e:6a:db:0e:ae:db:f2:be:57:
b2:ba:db:f1:e2:e3:ca:80:67:b1:1c:56:88:f0:42:4e:03:5e:
d1:0d:fa:6c:39:af:30:e0:f3:45:22:f1:bb:13:42:f9:36:6d:
ed:24:c7:f8:3a:ff:8d:73:d0:d7:03:82:31:42:76:4a:af:7e:
d8:42:6c:c3:12:33:e3:6b:b6:02:1a:3d:d8:10:d4:5c:eb:a0:
fa:6c:bc:54:99:fd:b6:df:b3:ee:cc:2a:ac:ab:4d:92:c1:b4:
6c:7e:d6:4b:bf:20:ea:9c:87:fe:4d:fa:48:bd:7b:67:03:32:
28:d8:0c:64:d8:24:b9:fb:2a:42:40:a1:a7:52:8c:b3:71:ac:
39:59:34:48:b4:6f:63:0e:b3:64:f7:5e:23:b9:a1:3a:c5:45:
36:73:0d:34:a4:44:58:bc:6a:d1:9e:f6:74:69:92:35:ad:2c:
ef:52:18:3e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Feb 17 07:33:03 2025 by rpki-client