![](/console.gif)
Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/7d/083b6b-f74a-4e6c-8098-67673636bb10/1/uS7xbLf5my_2my7tC4oSKc00u48.roa
File: uS7xbLf5my_2my7tC4oSKc00u48.roa (raw, json)
Hash identifier: JHLp1nHNPeeJLh0ao+tk0nMadW2Soxq5KdA5D8Sxwjw=
Subject key identifier: B9:2E:F1:6C:B7:F9:9B:2F:F6:9B:2E:ED:0B:8A:12:29:CD:34:BB:8F
Certificate issuer: /CN=d7da8118018d7cb0efde6793788104873f47f45d
Certificate serial: 1800500A
Authority key identifier: D7:DA:81:18:01:8D:7C:B0:EF:DE:67:93:78:81:04:87:3F:47:F4:5D
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/19qBGAGNfLDv3meTeIEEhz9H9F0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/7d/083b6b-f74a-4e6c-8098-67673636bb10/1/uS7xbLf5my_2my7tC4oSKc00u48.roa
Signing time: Sat 01 Jan 2022 04:55:22 +0000
ROA not before: Sat 01 Jan 2022 04:55:22 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 31533
IP address blocks: 91.213.134.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 402673674 (0x1800500a)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=d7da8118018d7cb0efde6793788104873f47f45d
Validity
Not Before: Jan 1 04:55:22 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=b92ef16cb7f99b2ff69b2eed0b8a1229cd34bb8f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c8:1b:9e:46:df:b6:99:41:39:1e:9f:40:cb:e6:
6e:e8:0e:0b:13:98:1f:af:1c:d0:ab:b8:3b:aa:68:
30:39:be:77:0a:04:2f:09:21:21:46:bd:15:e0:3a:
46:b1:d6:34:48:47:2d:f6:ca:68:69:06:d7:b7:98:
64:bd:0a:a8:fe:4e:bb:ac:1c:68:2a:db:2d:01:f2:
1d:77:7f:86:f5:13:29:81:74:75:e6:49:9e:fe:3d:
54:d9:d4:04:bb:11:bf:c6:68:1a:92:a0:29:3e:68:
2e:4f:15:07:0c:8b:97:9c:0e:fd:99:8e:74:c1:d9:
ea:8f:82:92:df:3b:1f:2a:0b:24:f1:60:51:39:46:
b1:d9:c8:1e:ea:b5:b7:ad:d6:1c:ee:3c:0d:a5:69:
ae:a4:0d:19:a4:3d:c3:a8:cc:64:c9:23:f5:23:d8:
c5:e8:66:5a:f7:2a:e5:01:77:8c:02:98:6e:78:d8:
ee:16:33:09:ee:c2:1b:9e:cf:f4:9f:59:dc:6f:40:
f6:29:17:c9:d0:52:d0:71:99:32:4e:4e:97:37:9e:
57:93:68:24:42:4c:c2:2b:eb:e7:ed:b1:96:50:ef:
c9:77:12:59:38:33:31:35:a9:11:d7:af:a9:f4:1a:
f7:46:88:40:fe:ec:76:fb:8b:3c:45:3d:7d:81:be:
fd:25
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B9:2E:F1:6C:B7:F9:9B:2F:F6:9B:2E:ED:0B:8A:12:29:CD:34:BB:8F
X509v3 Authority Key Identifier:
keyid:D7:DA:81:18:01:8D:7C:B0:EF:DE:67:93:78:81:04:87:3F:47:F4:5D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/19qBGAGNfLDv3meTeIEEhz9H9F0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/7d/083b6b-f74a-4e6c-8098-67673636bb10/1/uS7xbLf5my_2my7tC4oSKc00u48.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/7d/083b6b-f74a-4e6c-8098-67673636bb10/1/19qBGAGNfLDv3meTeIEEhz9H9F0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
91.213.134.0/24
Signature Algorithm: sha256WithRSAEncryption
93:14:b5:d6:41:db:6c:9d:36:d1:24:af:a2:f7:78:e4:53:63:
9a:b2:3b:e9:5c:17:89:77:c2:ec:df:52:f8:bd:eb:bf:67:9c:
ce:12:a0:f1:1a:ce:8b:98:22:e5:f7:bf:8a:84:06:27:58:7a:
ae:7f:6f:90:00:b6:23:29:88:74:f6:76:e7:56:58:ce:8d:2f:
66:2d:57:50:06:36:7b:9e:2f:71:f9:de:35:e8:e2:3a:8a:19:
78:a9:6a:69:a8:29:5e:2b:3b:be:25:1e:6c:6f:8d:04:84:30:
92:54:14:70:33:fc:4f:68:ed:9f:19:c7:23:68:71:b8:3a:40:
bc:c7:81:58:9a:39:7f:44:cf:22:ee:67:36:32:09:e5:36:1e:
df:eb:19:04:3e:2e:e6:d7:c0:3e:1e:af:e1:59:ff:0f:b1:cf:
ae:3c:34:18:f8:48:a7:d3:0c:1a:4d:84:4d:12:37:57:0d:1b:
c6:96:fe:fd:89:86:62:08:d0:80:85:13:32:ba:fc:b7:91:b0:
de:51:f2:a8:9b:f8:cb:52:44:c6:83:75:e7:c7:88:2c:84:31:
23:57:ef:9d:56:e8:bf:d6:26:cf:b1:f1:89:27:ff:5d:41:f0:
30:be:f5:35:5a:2c:4c:7d:d2:ae:40:ce:c0:e6:e6:eb:2e:42:
38:6c:87:a9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Feb 17 07:20:06 2025 by rpki-client