![](/console.gif)
Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/96/81ebdd-dc9d-4d82-8d2f-e79aeae39940/1/_6pi0a_6gyJfxNrqI8JeOkVDIUo.roa
File: _6pi0a_6gyJfxNrqI8JeOkVDIUo.roa (raw, json)
Hash identifier: 6zsKWZH0RCsr10fR4okC72ABbQlUKsKi1MV3/0TejsM=
Subject key identifier: FF:AA:62:D1:AF:FA:83:22:5F:C4:DA:EA:23:C2:5E:3A:45:43:21:4A
Certificate issuer: /CN=715b900ab9fff1388a4f746a89ec41859ef4779e
Certificate serial: D57A41
Authority key identifier: 71:5B:90:0A:B9:FF:F1:38:8A:4F:74:6A:89:EC:41:85:9E:F4:77:9E
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/cVuQCrn_8TiKT3RqiexBhZ70d54.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/96/81ebdd-dc9d-4d82-8d2f-e79aeae39940/1/_6pi0a_6gyJfxNrqI8JeOkVDIUo.roa
Signing time: Sat 01 Jan 2022 01:53:33 +0000
ROA not before: Sat 01 Jan 2022 01:53:33 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 7029
IP address blocks: 86.106.22.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 13990465 (0xd57a41)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=715b900ab9fff1388a4f746a89ec41859ef4779e
Validity
Not Before: Jan 1 01:53:33 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=ffaa62d1affa83225fc4daea23c25e3a4543214a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e1:45:47:f6:47:5e:75:48:1c:fe:10:c7:80:47:
28:e1:bc:2f:3f:df:68:bc:6d:d4:17:ae:03:15:03:
e4:2a:f0:82:a6:6f:74:16:ca:10:b6:07:f7:b8:42:
32:db:d9:e9:ce:21:64:36:8f:60:85:ad:f4:94:c5:
03:f6:17:1e:d9:16:3d:8d:b9:87:2b:fd:bb:ea:ea:
e9:58:f1:20:b6:11:9a:5e:a4:d5:45:ea:1d:bf:c2:
a1:f1:37:f1:fe:46:3e:63:69:95:fd:73:d5:ee:aa:
45:18:1a:f1:fc:d8:2f:34:a4:94:9a:cc:04:63:69:
92:70:37:2a:dc:20:86:26:eb:30:76:b1:1c:94:f1:
9f:09:93:8e:71:50:57:a8:6f:97:ad:0f:02:b3:e3:
c1:a8:b6:c5:8d:a3:0b:1b:03:80:6a:da:8b:62:d7:
78:9d:ea:10:9d:be:ca:7e:bf:46:32:e4:6e:ba:48:
6c:3f:4e:7b:b6:30:34:68:9d:98:e1:25:9b:ac:9b:
80:31:4d:83:e9:bc:c5:46:3a:a6:f8:50:73:90:86:
b7:a6:7b:4e:0e:ef:e8:cf:d4:c4:a0:3c:92:fc:f3:
4d:a6:30:a4:d9:ec:38:40:69:76:eb:da:d3:70:51:
2f:3d:d2:e6:18:05:a7:eb:f8:cf:85:d8:01:1a:48:
90:47
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
FF:AA:62:D1:AF:FA:83:22:5F:C4:DA:EA:23:C2:5E:3A:45:43:21:4A
X509v3 Authority Key Identifier:
keyid:71:5B:90:0A:B9:FF:F1:38:8A:4F:74:6A:89:EC:41:85:9E:F4:77:9E
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/cVuQCrn_8TiKT3RqiexBhZ70d54.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/96/81ebdd-dc9d-4d82-8d2f-e79aeae39940/1/_6pi0a_6gyJfxNrqI8JeOkVDIUo.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/96/81ebdd-dc9d-4d82-8d2f-e79aeae39940/1/cVuQCrn_8TiKT3RqiexBhZ70d54.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
86.106.22.0/24
Signature Algorithm: sha256WithRSAEncryption
2b:ba:4f:13:a8:92:59:45:0a:92:0e:cb:aa:92:32:23:dc:c4:
89:1d:65:53:55:3c:d7:d4:f4:53:e7:c4:6d:a7:0b:a7:7e:f2:
bd:65:75:51:96:4c:dd:ed:fc:59:22:51:14:2a:81:40:bb:8e:
5b:a7:60:0e:e6:2d:3a:fc:ad:0f:72:48:50:50:7c:aa:d1:df:
36:ac:28:8b:e1:0f:72:2f:be:70:75:61:08:17:8c:7a:55:1f:
09:0e:23:c7:e9:53:49:29:e8:d3:cb:b0:c8:7d:62:c0:bb:79:
67:6f:a5:a0:80:84:d9:59:6e:33:5d:ca:c3:e3:36:2c:c6:fa:
a2:cd:3f:06:aa:a5:ce:db:5a:d8:44:42:f1:07:c1:32:9f:11:
f3:41:8f:cc:9e:c1:d5:1a:61:61:6a:be:aa:47:98:2f:23:43:
f6:59:d0:d7:da:bb:56:06:d7:f3:c6:89:dd:c7:79:4e:dc:49:
c9:99:fe:65:f7:21:86:4b:2d:29:98:a1:b0:09:6b:e7:df:f5:
72:d2:39:01:07:76:1a:0b:fd:b7:96:e8:fc:fc:ac:5a:7a:93:
1c:a1:94:1e:3a:07:4d:ca:0e:f2:be:ff:47:ff:fa:5a:4d:57:
e4:9d:c2:c7:75:fa:48:fc:69:3e:a7:8c:91:80:c5:5f:e0:ea:
23:99:94:8e
-----BEGIN CERTIFICATE-----
MIIE7zCCA9egAwIBAgIEANV6QTANBgkqhkiG9w0BAQsFADAzMTEwLwYDVQQDEyg3
MTViOTAwYWI5ZmZmMTM4OGE0Zjc0NmE4OWVjNDE4NTllZjQ3NzllMB4XDTIyMDEw
MTAxNTMzM1oXDTIzMDcwMTAwMDAwMFowMzExMC8GA1UEAxMoZmZhYTYyZDFhZmZh
ODMyMjVmYzRkYWVhMjNjMjVlM2E0NTQzMjE0YTCCASIwDQYJKoZIhvcNAQEBBQAD
ggEPADCCAQoCggEBAOFFR/ZHXnVIHP4Qx4BHKOG8Lz/faLxt1BeuAxUD5CrwgqZv
dBbKELYH97hCMtvZ6c4hZDaPYIWt9JTFA/YXHtkWPY25hyv9u+rq6VjxILYRml6k
1UXqHb/CofE38f5GPmNplf1z1e6qRRga8fzYLzSklJrMBGNpknA3KtwghibrMHax
HJTxnwmTjnFQV6hvl60PArPjwai2xY2jCxsDgGrai2LXeJ3qEJ2+yn6/RjLkbrpI
bD9Oe7YwNGidmOElm6ybgDFNg+m8xUY6pvhQc5CGt6Z7Tg7v6M/UxKA8kvzzTaYw
pNnsOEBpduva03BRLz3S5hgFp+v4z4XYARpIkEcCAwEAAaOCAgkwggIFMB0GA1Ud
DgQWBBT/qmLRr/qDIl/E2uojwl46RUMhSjAfBgNVHSMEGDAWgBRxW5AKuf/xOIpP
dGqJ7EGFnvR3njAOBgNVHQ8BAf8EBAMCB4AwZAYIKwYBBQUHAQEEWDBWMFQGCCsG
AQUFBzAChkhyc3luYzovL3Jwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxU
L2NWdVFDcm5fOFRpS1QzUnFpZXhCaFo3MGQ1NC5jZXIwgY0GCCsGAQUFBwELBIGA
MH4wfAYIKwYBBQUHMAuGcHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5
L0RFRkFVTFQvOTYvODFlYmRkLWRjOWQtNGQ4Mi04ZDJmLWU3OWFlYWUzOTk0MC8x
L182cGkwYV82Z3lKZnhOcnFJOEplT2tWRElVby5yb2EwgYEGA1UdHwR6MHgwdqB0
oHKGcHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvOTYv
ODFlYmRkLWRjOWQtNGQ4Mi04ZDJmLWU3OWFlYWUzOTk0MC8xL2NWdVFDcm5fOFRp
S1QzUnFpZXhCaFo3MGQ1NC5jcmwwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAf
BggrBgEFBQcBBwEB/wQQMA4wDAQCAAEwBgMEAFZqFjANBgkqhkiG9w0BAQsFAAOC
AQEAK7pPE6iSWUUKkg7LqpIyI9zEiR1lU1U819T0U+fEbacLp37yvWV1UZZM3e38
WSJRFCqBQLuOW6dgDuYtOvytD3JIUFB8qtHfNqwoi+EPci++cHVhCBeMelUfCQ4j
x+lTSSno08uwyH1iwLt5Z2+loICE2VluM13Kw+M2LMb6os0/Bqqlztta2ERC8QfB
Mp8R80GPzJ7B1RphYWq+qkeYLyND9lnQ19q7VgbX88aJ3cd5TtxJyZn+Zfchhkst
KZihsAlr59/1ctI5AQd2Ggv9t5bo/PysWnqTHKGUHjoHTcoO8r7/R//6Wk1X5J3C
x3X6SPxpPqeMkYDFX+DqI5mUjg==
-----END CERTIFICATE-----
Generated at Mon Feb 17 07:59:32 2025 by rpki-client