![](/console.gif)
Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/8f/e64398-9601-4b7c-b783-079ba0570f75/1/7hTCk6I75_paDXISQtaJSZk_yuE.roa
File: 7hTCk6I75_paDXISQtaJSZk_yuE.roa (raw, json)
Hash identifier: n2EyP13Pn+ZQmNFFVsGqhEK7YsRZFu8rrRyGk7J2rls=
Subject key identifier: EE:14:C2:93:A2:3B:E7:FA:5A:0D:72:12:42:D6:89:49:99:3F:CA:E1
Certificate issuer: /CN=a29d9751f3675f51332734da68ea960260045b12
Certificate serial: 0183196B46802435087FC5BC5BF597ABDD7B
Authority key identifier: A2:9D:97:51:F3:67:5F:51:33:27:34:DA:68:EA:96:02:60:04:5B:12
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/op2XUfNnX1EzJzTaaOqWAmAEWxI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/8f/e64398-9601-4b7c-b783-079ba0570f75/1/7hTCk6I75_paDXISQtaJSZk_yuE.roa
Signing time: Wed 07 Sep 2022 19:26:44 +0000
ROA not before: Wed 07 Sep 2022 19:26:44 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 7018
IP address blocks: 93.185.144.0/21 maxlen: 32
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:83:19:6b:46:80:24:35:08:7f:c5:bc:5b:f5:97:ab:dd:7b
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=a29d9751f3675f51332734da68ea960260045b12
Validity
Not Before: Sep 7 19:26:44 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=ee14c293a23be7fa5a0d721242d68949993fcae1
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:88:f9:47:0d:31:2a:6e:52:f0:fd:b9:47:b0:34:
64:a3:d0:eb:a4:18:fa:24:ed:2d:f6:68:01:1e:59:
06:44:86:9e:af:bc:2c:63:3e:09:f0:a3:b3:d3:e4:
52:0d:e0:d5:e6:fb:96:bf:6f:7c:78:08:8b:9f:de:
ca:81:68:c8:8f:0a:50:70:d2:77:b6:9f:30:68:1b:
5f:55:3d:ec:2d:0c:22:3c:8f:33:c6:92:98:ea:c9:
10:ab:d4:90:80:ae:22:f1:fe:62:f6:a4:8b:fe:3f:
2c:80:21:40:e5:86:0e:81:1d:31:11:b4:fc:2d:44:
c3:f9:f3:6a:68:58:6a:b4:b4:fa:6b:f9:ba:41:82:
98:ae:88:4b:94:a4:4f:b2:7f:63:bc:66:7c:eb:8a:
46:e2:ce:c1:40:f0:6f:2c:f2:c1:11:97:7f:a5:d9:
40:95:08:a4:72:a8:0a:2d:1a:47:b9:dd:07:69:6a:
34:13:57:a9:5c:44:9f:e8:c2:43:ac:52:8f:32:d2:
40:d7:e3:6b:3a:cd:3e:db:81:7d:51:4c:34:93:64:
ba:38:30:45:1c:cd:d4:49:3d:d6:21:bc:16:45:2f:
58:6b:33:46:52:b1:5c:35:04:2a:29:09:f1:19:ef:
a0:28:dd:9a:72:92:5a:29:e5:e3:60:f9:c2:27:73:
14:45
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
EE:14:C2:93:A2:3B:E7:FA:5A:0D:72:12:42:D6:89:49:99:3F:CA:E1
X509v3 Authority Key Identifier:
keyid:A2:9D:97:51:F3:67:5F:51:33:27:34:DA:68:EA:96:02:60:04:5B:12
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/op2XUfNnX1EzJzTaaOqWAmAEWxI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/8f/e64398-9601-4b7c-b783-079ba0570f75/1/7hTCk6I75_paDXISQtaJSZk_yuE.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/8f/e64398-9601-4b7c-b783-079ba0570f75/1/op2XUfNnX1EzJzTaaOqWAmAEWxI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
93.185.144.0/21
Signature Algorithm: sha256WithRSAEncryption
5e:fe:d4:76:f4:4b:62:47:a1:53:cb:5c:e1:92:e4:94:ca:ab:
8c:1b:f6:e2:cd:ff:28:06:13:6e:4a:4a:b2:12:a8:58:2b:9a:
e9:01:ef:54:43:a9:e0:17:6d:09:0a:4d:62:e0:44:c0:1b:3b:
fb:a4:9d:c7:0a:d6:73:92:ef:64:66:92:fa:db:db:24:a3:37:
3a:b8:26:c2:f1:fa:dc:01:22:0d:c0:36:b1:31:85:3e:67:d1:
e9:1f:f1:84:5a:11:18:5e:7d:35:52:95:66:17:aa:1e:cc:b1:
95:f5:37:11:88:f0:cc:e0:2a:a6:7c:11:9b:dd:e6:9c:e8:13:
4c:c0:c5:00:92:d9:e7:37:f0:68:eb:46:5a:19:d9:e9:d4:e8:
19:37:06:f4:b3:43:85:62:2f:22:24:39:93:1b:29:22:e7:0d:
77:37:a6:e4:23:f7:3b:69:84:a6:86:35:1a:61:6e:95:08:3f:
96:4d:86:3d:ae:af:d3:55:c1:b9:f4:9f:ad:f1:94:c3:68:9a:
53:06:1a:b4:e6:67:65:13:2b:af:b9:9a:7e:d2:3b:26:94:09:
e8:0c:01:56:c0:98:fa:80:7a:47:d4:d2:f8:c7:b4:70:23:cf:
dc:3a:56:1f:31:af:f5:39:e5:cc:4f:d5:59:55:38:47:e1:95:
51:e6:29:ff
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Feb 17 07:39:48 2025 by rpki-client