![](/console.gif)
Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/91/6378bb-52ce-46af-959c-a9054928b544/1/GYGbPfo3SkQ0IF0Cyj49AHyd2Ag.roa
File: GYGbPfo3SkQ0IF0Cyj49AHyd2Ag.roa (raw, json)
Hash identifier: x++5c84xNDtEH72ns4KDS685wgBRYM47j2Wloes0QC0=
Subject key identifier: 19:81:9B:3D:FA:37:4A:44:34:20:5D:02:CA:3E:3D:00:7C:9D:D8:08
Certificate issuer: /CN=f6450d2d0213ee4c9f3181efeeb2d663fe0d365b
Certificate serial: 01879ED96A1B93E65E50D4B7FFDCD587935A
Authority key identifier: F6:45:0D:2D:02:13:EE:4C:9F:31:81:EF:EE:B2:D6:63:FE:0D:36:5B
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/9kUNLQIT7kyfMYHv7rLWY_4NNls.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/91/6378bb-52ce-46af-959c-a9054928b544/1/GYGbPfo3SkQ0IF0Cyj49AHyd2Ag.roa
Signing time: Thu 20 Apr 2023 13:27:41 +0000
ROA not before: Thu 20 Apr 2023 13:27:41 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 212609
IP address blocks: 194.15.151.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:87:9e:d9:6a:1b:93:e6:5e:50:d4:b7:ff:dc:d5:87:93:5a
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=f6450d2d0213ee4c9f3181efeeb2d663fe0d365b
Validity
Not Before: Apr 20 13:27:41 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=19819b3dfa374a4434205d02ca3e3d007c9dd808
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:85:0d:53:98:74:f5:d8:a6:c7:c5:ce:6b:99:0a:
c0:cc:16:e4:e5:90:fd:70:fe:b6:91:ac:de:b9:5e:
7b:ed:64:f0:62:d1:1f:73:74:4c:6a:f4:b0:fa:52:
a2:6b:00:76:93:2e:3e:70:3a:df:04:81:72:26:ad:
8c:c6:b5:ae:58:c3:2f:57:39:32:5e:22:58:8f:40:
76:50:70:26:43:de:ff:7d:d9:3b:9a:f7:2e:3e:fa:
60:5c:e0:de:42:62:59:d1:41:6a:ae:05:09:9a:fb:
d1:88:8b:c9:09:16:b7:b4:68:c0:4a:2f:6b:7c:c8:
be:7d:1f:39:34:50:63:9b:70:19:c1:6c:d5:4e:a4:
38:b4:bf:c4:ec:6d:7b:69:91:7f:22:96:2d:f7:9c:
b5:02:43:64:a2:db:aa:4d:14:2a:c5:2b:f6:da:d1:
bf:35:15:87:9d:63:c4:19:8c:26:1a:d5:3f:9d:cf:
3d:01:dd:55:b6:19:2f:c8:94:73:54:37:ca:f0:06:
a0:6e:da:28:12:33:cc:21:3c:6f:a1:5e:5d:d5:d7:
95:7f:f3:9f:d5:e4:c0:ed:f6:e0:cc:7b:fb:9a:d8:
a3:a3:29:87:54:b4:1c:e6:12:59:83:a3:44:4d:66:
32:02:dc:2a:86:d9:2a:38:1a:df:dd:f4:4c:bb:13:
39:81
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
19:81:9B:3D:FA:37:4A:44:34:20:5D:02:CA:3E:3D:00:7C:9D:D8:08
X509v3 Authority Key Identifier:
keyid:F6:45:0D:2D:02:13:EE:4C:9F:31:81:EF:EE:B2:D6:63:FE:0D:36:5B
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/9kUNLQIT7kyfMYHv7rLWY_4NNls.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/91/6378bb-52ce-46af-959c-a9054928b544/1/GYGbPfo3SkQ0IF0Cyj49AHyd2Ag.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/91/6378bb-52ce-46af-959c-a9054928b544/1/9kUNLQIT7kyfMYHv7rLWY_4NNls.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
194.15.151.0/24
Signature Algorithm: sha256WithRSAEncryption
61:c7:31:5e:d4:75:48:c5:0b:07:f9:52:af:a4:8f:dc:34:dd:
70:9f:78:8f:b5:5b:c2:86:1a:f1:8b:66:e7:00:34:8e:a3:36:
e1:a9:0f:83:67:bf:09:eb:dc:07:cf:13:0e:4f:18:fd:8d:2c:
a0:dd:ea:c4:01:4f:19:c9:53:b4:2c:d4:c7:83:48:71:bb:4a:
2d:86:fe:af:c8:82:26:73:a5:19:fc:07:92:9f:66:6b:32:15:
e7:41:7b:8e:98:96:3d:56:a8:ec:63:05:3b:e9:c1:6c:4a:44:
f8:a2:2a:a4:e0:5d:d1:5f:b0:e4:df:06:f3:f6:00:fa:7c:82:
e6:89:b6:71:fd:75:51:af:2c:e9:2a:d2:a6:79:c0:c1:f2:18:
b3:3a:30:d5:5d:06:b8:00:be:78:dc:ab:42:22:12:fa:5e:5a:
cc:b6:2a:d7:2e:23:31:41:fc:dc:87:b8:8f:a2:1d:e7:d1:b0:
9b:4c:1c:d8:2d:43:66:77:4a:15:7a:c1:3a:e0:99:e6:3e:59:
39:99:07:05:2a:f5:9a:d2:ab:4f:9d:6a:93:56:ce:67:6a:f2:
2c:35:83:b0:63:11:f2:e2:ad:e1:18:cb:d6:7d:b4:21:f3:b7:
a3:72:f9:14:fa:aa:4f:3e:e1:0a:e2:4c:fe:76:12:94:a1:cc:
3f:05:f1:6a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Feb 17 07:57:13 2025 by rpki-client