![](/console.gif)
Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/85/fe3aef-8fb4-4f6c-bc71-56c899c6f8d8/1/eXtbJcMiL7umCVOhbU2cv02OG-c.roa
File: eXtbJcMiL7umCVOhbU2cv02OG-c.roa (raw, json)
Hash identifier: I7lYSVWcBuTaq4bUDHYtkx5Wy8W7qtzns9UG2RG5Als=
Subject key identifier: 79:7B:5B:25:C3:22:2F:BB:A6:09:53:A1:6D:4D:9C:BF:4D:8E:1B:E7
Certificate issuer: /CN=a10d7de078447b5fb733ac6465682fab57ad8003
Certificate serial: 01856D13CAB2D009B7EFDBD7315E322C1759
Authority key identifier: A1:0D:7D:E0:78:44:7B:5F:B7:33:AC:64:65:68:2F:AB:57:AD:80:03
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/oQ194HhEe1-3M6xkZWgvq1etgAM.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/85/fe3aef-8fb4-4f6c-bc71-56c899c6f8d8/1/eXtbJcMiL7umCVOhbU2cv02OG-c.roa
Signing time: Sun 01 Jan 2023 11:24:51 +0000
ROA not before: Sun 01 Jan 2023 11:24:51 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 21058
IP address blocks: 80.83.161.0/24 maxlen: 24
80.83.162.0/24 maxlen: 24
80.83.163.0/24 maxlen: 24
80.83.164.0/24 maxlen: 24
80.83.165.0/24 maxlen: 24
80.83.166.0/24 maxlen: 24
80.83.160.0/24 maxlen: 24
80.83.168.0/24 maxlen: 24
80.83.169.0/24 maxlen: 24
80.83.170.0/24 maxlen: 24
80.83.171.0/24 maxlen: 24
80.83.172.0/24 maxlen: 24
80.83.167.0/24 maxlen: 24
80.83.175.0/24 maxlen: 24
80.83.173.0/24 maxlen: 24
80.83.174.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:85:6d:13:ca:b2:d0:09:b7:ef:db:d7:31:5e:32:2c:17:59
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=a10d7de078447b5fb733ac6465682fab57ad8003
Validity
Not Before: Jan 1 11:24:51 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=797b5b25c3222fbba60953a16d4d9cbf4d8e1be7
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d1:59:ec:35:30:24:50:12:dd:10:dc:9f:16:56:
fa:11:57:86:af:3a:d3:e8:65:4a:c2:25:5f:ed:5e:
7c:d5:ce:8f:f6:26:44:c3:e2:b4:3e:88:d5:d5:88:
36:85:1e:96:e5:11:9d:11:f5:47:f5:dd:c4:d3:2d:
c5:85:4e:51:22:59:dc:c6:b6:28:20:4f:86:b4:9b:
2e:7f:55:44:52:42:09:36:6f:06:4a:57:a5:66:de:
5e:e8:b8:39:57:62:a1:d1:78:cb:b8:bc:da:e1:d0:
a4:18:cb:42:5e:36:21:07:15:39:a9:20:81:d2:7f:
f1:af:65:74:90:b4:0d:e2:96:14:b2:4a:3c:1f:e3:
97:4c:4d:1a:a1:83:a7:c2:dd:29:98:e1:58:f7:ba:
d1:7b:cb:f0:75:03:47:d8:00:00:03:c0:d1:b7:fa:
2a:8b:62:69:68:a0:7a:0b:db:3a:90:db:d0:c8:85:
e2:57:c3:2d:84:ca:61:c6:d4:4a:95:01:4a:b1:60:
e1:e8:24:74:05:80:9b:ef:33:cd:ee:7b:50:28:ee:
d3:30:5b:cf:4b:30:06:77:c4:8e:48:fa:e7:13:71:
11:d0:15:96:42:d6:ac:db:c7:eb:45:75:61:98:02:
bd:95:12:dd:be:12:3f:46:44:4a:c4:0d:ce:29:34:
01:b7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
79:7B:5B:25:C3:22:2F:BB:A6:09:53:A1:6D:4D:9C:BF:4D:8E:1B:E7
X509v3 Authority Key Identifier:
keyid:A1:0D:7D:E0:78:44:7B:5F:B7:33:AC:64:65:68:2F:AB:57:AD:80:03
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/oQ194HhEe1-3M6xkZWgvq1etgAM.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/85/fe3aef-8fb4-4f6c-bc71-56c899c6f8d8/1/eXtbJcMiL7umCVOhbU2cv02OG-c.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/85/fe3aef-8fb4-4f6c-bc71-56c899c6f8d8/1/oQ194HhEe1-3M6xkZWgvq1etgAM.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
80.83.160.0/20
Signature Algorithm: sha256WithRSAEncryption
15:95:05:a9:cf:91:4c:19:a4:57:03:59:59:b7:a1:f7:ef:7f:
23:c4:53:c2:e2:46:22:9a:e8:9c:28:a1:9e:46:73:1e:31:56:
62:0a:67:3d:86:96:e3:10:99:27:55:f7:03:c6:d7:c5:64:fb:
02:07:19:6c:ea:5a:00:92:c6:fc:b8:67:25:4d:d7:cc:f0:a3:
5c:fa:29:01:c8:79:04:16:4d:3a:7f:dd:9b:a7:5b:9d:e2:60:
68:29:2b:a3:53:df:b0:ec:78:b2:12:6d:63:25:13:c7:cc:ec:
61:b7:c0:1d:fa:ec:2d:e1:3b:73:b7:ee:8c:f1:62:82:f2:5a:
f0:4c:08:97:b4:4a:75:75:23:e6:50:6c:20:e2:02:9a:2f:f0:
e0:2b:59:54:9e:dc:dc:0c:94:62:09:f2:e1:a2:a6:ef:04:6a:
a3:80:0f:75:02:c5:72:4d:06:a5:11:29:59:5d:33:de:69:93:
e5:7d:01:ab:2f:98:71:61:60:c4:97:88:cd:0a:47:a2:26:25:
b6:87:4a:77:8b:e8:3b:b3:5e:5e:ab:0d:14:a9:37:47:5a:6d:
13:6b:b9:c8:c0:66:99:14:b5:8e:69:aa:71:c9:70:67:16:b7:
d7:35:ab:02:57:fc:b5:d2:26:a9:80:e2:4a:94:54:3c:02:94:
46:55:5e:2a
-----BEGIN CERTIFICATE-----
MIIE/TCCA+WgAwIBAgISAYVtE8qy0Am379vXMV4yLBdZMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGExMGQ3ZGUwNzg0NDdiNWZiNzMzYWM2NDY1NjgyZmFiNTdh
ZDgwMDMwHhcNMjMwMTAxMTEyNDUxWhcNMjQwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
Eyg3OTdiNWIyNWMzMjIyZmJiYTYwOTUzYTE2ZDRkOWNiZjRkOGUxYmU3MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA0VnsNTAkUBLdENyfFlb6EVeGrzrT
6GVKwiVf7V581c6P9iZEw+K0PojV1Yg2hR6W5RGdEfVH9d3E0y3FhU5RIlncxrYo
IE+GtJsuf1VEUkIJNm8GSlelZt5e6Lg5V2Kh0XjLuLza4dCkGMtCXjYhBxU5qSCB
0n/xr2V0kLQN4pYUsko8H+OXTE0aoYOnwt0pmOFY97rRe8vwdQNH2AAAA8DRt/oq
i2JpaKB6C9s6kNvQyIXiV8MthMphxtRKlQFKsWDh6CR0BYCb7zPN7ntQKO7TMFvP
SzAGd8SOSPrnE3ER0BWWQtas28frRXVhmAK9lRLdvhI/RkRKxA3OKTQBtwIDAQAB
o4ICCTCCAgUwHQYDVR0OBBYEFHl7WyXDIi+7pglToW1NnL9NjhvnMB8GA1UdIwQY
MBaAFKENfeB4RHtftzOsZGVoL6tXrYADMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvb1ExOTRIaEVlMS0zTTZ4a1pXZ3ZxMWV0Z0FNLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC84NS9mZTNhZWYtOGZiNC00ZjZjLWJjNzEt
NTZjODk5YzZmOGQ4LzEvZVh0YkpjTWlMN3VtQ1ZPaGJVMmN2MDJPRy1jLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC84NS9mZTNhZWYtOGZiNC00ZjZjLWJjNzEtNTZjODk5YzZmOGQ4
LzEvb1ExOTRIaEVlMS0zTTZ4a1pXZ3ZxMWV0Z0FNLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQEUFOgMA0G
CSqGSIb3DQEBCwUAA4IBAQAVlQWpz5FMGaRXA1lZt6H3738jxFPC4kYimuicKKGe
RnMeMVZiCmc9hpbjEJknVfcDxtfFZPsCBxls6loAksb8uGclTdfM8KNc+ikByHkE
Fk06f92bp1ud4mBoKSujU9+w7HiyEm1jJRPHzOxht8Ad+uwt4Ttzt+6M8WKC8lrw
TAiXtEp1dSPmUGwg4gKaL/DgK1lUntzcDJRiCfLhoqbvBGqjgA91AsVyTQalESlZ
XTPeaZPlfQGrL5hxYWDEl4jNCkeiJiW2h0p3i+g7s15eqw0UqTdHWm0Ta7nIwGaZ
FLWOaapxyXBnFrfXNasCV/y10iapgOJKlFQ8ApRGVV4q
-----END CERTIFICATE-----
Generated at Mon Feb 17 07:59:40 2025 by rpki-client