![](/console.gif)
Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/6d/f9430b-7e2c-455c-8b87-34999c2c376c/1/0Rt0kG5gpnjrCC5t1hjg6h7iyws.roa
File: 0Rt0kG5gpnjrCC5t1hjg6h7iyws.roa (raw, json)
Hash identifier: 1G+KMplhBiqUxrBW6fDVW9c9IGbudvxPnrDYTmctGTM=
Subject key identifier: D1:1B:74:90:6E:60:A6:78:EB:08:2E:6D:D6:18:E0:EA:1E:E2:CB:0B
Certificate issuer: /CN=6b86b72971a41739cddd23c82e63e11bb6ca9cef
Certificate serial: 0566DC99
Authority key identifier: 6B:86:B7:29:71:A4:17:39:CD:DD:23:C8:2E:63:E1:1B:B6:CA:9C:EF
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/a4a3KXGkFznN3SPILmPhG7bKnO8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/6d/f9430b-7e2c-455c-8b87-34999c2c376c/1/0Rt0kG5gpnjrCC5t1hjg6h7iyws.roa
Signing time: Sat 01 Jan 2022 09:06:24 +0000
ROA not before: Sat 01 Jan 2022 09:06:24 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 207358
IP address blocks: 2001:678:c50::/48 maxlen: 48
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 90627225 (0x566dc99)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=6b86b72971a41739cddd23c82e63e11bb6ca9cef
Validity
Not Before: Jan 1 09:06:24 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=d11b74906e60a678eb082e6dd618e0ea1ee2cb0b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d4:d8:f2:e2:82:19:44:2d:1a:42:42:57:87:cc:
e3:f5:49:0a:54:f0:d1:e2:69:6c:be:ec:df:ec:7d:
77:15:73:0b:ca:ce:6a:bd:82:85:35:80:4c:64:9c:
fc:87:f0:9e:60:49:4c:47:95:75:04:72:97:9a:45:
3f:88:77:b3:b7:57:2a:8e:90:01:cf:c0:8f:33:5c:
94:7e:c1:be:f8:7f:bc:3a:69:fd:fa:f4:a9:5f:72:
81:20:1d:b3:06:f4:5a:a8:d6:a0:dc:f9:6a:8d:36:
64:ab:80:22:f9:39:64:67:a5:0e:44:e8:17:3c:5b:
85:ac:72:67:91:89:0b:2b:02:fe:e1:25:68:e3:1c:
6e:1c:06:34:3a:93:6b:2b:78:96:69:0e:72:88:61:
66:5f:d0:73:b9:bc:38:83:f7:54:a3:f9:1a:e7:c4:
2e:73:63:15:b7:67:ba:94:8d:ac:63:ff:b8:27:08:
d6:8b:89:d5:fa:e4:6d:a7:14:c6:0a:08:72:db:ee:
14:96:0d:65:c0:02:b9:a8:7a:fb:b8:79:fa:87:a0:
41:8f:3d:d5:fc:0c:6b:8f:ec:5a:18:25:0d:f0:54:
5e:15:b6:24:93:a2:c8:d7:3f:60:cd:18:7c:46:6a:
1b:e3:21:ee:86:cc:4c:9b:99:ba:2a:2f:f0:43:03:
b1:a3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D1:1B:74:90:6E:60:A6:78:EB:08:2E:6D:D6:18:E0:EA:1E:E2:CB:0B
X509v3 Authority Key Identifier:
keyid:6B:86:B7:29:71:A4:17:39:CD:DD:23:C8:2E:63:E1:1B:B6:CA:9C:EF
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/a4a3KXGkFznN3SPILmPhG7bKnO8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/6d/f9430b-7e2c-455c-8b87-34999c2c376c/1/0Rt0kG5gpnjrCC5t1hjg6h7iyws.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/6d/f9430b-7e2c-455c-8b87-34999c2c376c/1/a4a3KXGkFznN3SPILmPhG7bKnO8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2001:678:c50::/48
Signature Algorithm: sha256WithRSAEncryption
4c:82:09:d8:c7:ca:92:42:1e:33:1f:34:49:db:bf:2e:cd:16:
9a:db:00:dd:48:49:82:11:9a:3c:d5:1c:3e:0a:9b:d0:34:eb:
b9:0d:7d:d1:43:bc:56:28:0f:11:48:9b:3f:45:26:ed:e3:91:
07:90:24:07:6d:6b:36:fe:c5:04:ed:d8:22:8a:b4:36:07:0a:
50:e7:48:51:5e:f2:b1:e3:7f:3b:fb:4b:fe:83:70:66:3c:0c:
36:6b:b6:a0:ba:db:98:7b:33:87:72:db:de:22:f6:cc:45:c7:
93:4e:89:3a:87:5b:c9:51:3b:ef:24:30:5d:7d:e7:29:d9:28:
82:cc:c1:9c:bb:18:1f:28:00:81:00:61:10:0c:b8:a8:f4:e3:
fc:06:9d:e1:5a:5a:d6:e5:99:05:80:4d:1a:4a:d4:5f:97:cd:
2e:88:c5:a6:10:4b:75:c5:6e:c8:46:15:0c:2e:48:ae:c5:cf:
e8:e0:b8:4a:11:85:91:13:c6:cb:8d:fa:79:71:80:55:9b:ff:
40:a2:2d:50:8b:a8:75:3c:b7:50:c8:d7:a7:e7:af:ca:55:5a:
94:ce:ac:79:7e:7c:9e:e5:cb:d3:31:84:f8:c4:c3:d0:75:3b:
cd:38:6a:8b:d7:45:92:3d:6e:8a:62:38:09:30:c0:15:73:75:
3f:30:c2:40
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Feb 17 07:40:33 2025 by rpki-client