![](/console.gif)
Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/9e/fc19ea-cf80-4ce0-8e1b-0a955fa7d7b0/1/6DaUm7IqenPjUpsrcSWd43-DHLo.roa
File: 6DaUm7IqenPjUpsrcSWd43-DHLo.roa (raw, json)
Hash identifier: hJ4jZDXB97WR72LtTLAKizgPg4HMcon7WZHbymob8Ro=
Subject key identifier: E8:36:94:9B:B2:2A:7A:73:E3:52:9B:2B:71:25:9D:E3:7F:83:1C:BA
Certificate issuer: /CN=c94cb4226e6d24c1e0e9685788a5f9d594312cc0
Certificate serial: 02AD0204
Authority key identifier: C9:4C:B4:22:6E:6D:24:C1:E0:E9:68:57:88:A5:F9:D5:94:31:2C:C0
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/yUy0Im5tJMHg6WhXiKX51ZQxLMA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/9e/fc19ea-cf80-4ce0-8e1b-0a955fa7d7b0/1/6DaUm7IqenPjUpsrcSWd43-DHLo.roa
Signing time: Sat 11 Jun 2022 19:09:04 +0000
ROA not before: Sat 11 Jun 2022 19:09:04 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 56690
IP address blocks: 194.176.118.0/24 maxlen: 24
91.195.124.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 44892676 (0x2ad0204)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=c94cb4226e6d24c1e0e9685788a5f9d594312cc0
Validity
Not Before: Jun 11 19:09:04 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=e836949bb22a7a73e3529b2b71259de37f831cba
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bd:a0:aa:34:46:68:a1:06:f7:7c:35:fa:6d:cd:
82:8e:62:13:c5:05:9f:e7:cc:96:42:66:dc:5b:08:
94:b1:49:f9:fb:6f:62:49:0e:0f:ed:28:17:80:8a:
21:85:64:8f:3b:ae:2b:6f:6b:ed:52:6d:90:e7:d0:
d3:b3:5e:31:6c:a7:f3:c0:f1:d8:a9:56:33:23:d4:
86:50:d7:4a:03:7e:d9:4d:6f:cb:98:2d:9a:c1:1b:
97:06:b9:95:8d:ce:1c:02:5c:f9:de:c7:b3:9b:26:
6e:2a:fe:10:ef:67:5e:5e:17:16:28:3a:cf:f6:4f:
f8:3e:ca:94:7b:45:2c:33:7e:08:14:28:a6:73:86:
d4:11:75:c8:16:c1:77:8b:49:e2:27:85:7d:b2:a9:
51:9e:a3:94:40:f7:2e:8a:b1:9a:5a:02:9e:5a:7f:
f7:6e:80:45:8e:ac:64:5e:43:96:7a:af:4c:cc:bc:
af:c7:7d:fd:6a:f2:02:fa:ae:e9:78:d2:f4:b7:52:
0f:35:4a:e7:73:6c:34:89:f6:61:59:c6:21:1d:1b:
2c:30:ed:3b:aa:c5:c3:36:9b:a6:73:bd:0d:fd:47:
1b:a9:e9:3c:31:6a:06:5b:6c:25:8f:5f:af:e7:f2:
2b:d7:e4:30:01:fc:da:82:07:63:47:2f:6d:be:3e:
89:d3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E8:36:94:9B:B2:2A:7A:73:E3:52:9B:2B:71:25:9D:E3:7F:83:1C:BA
X509v3 Authority Key Identifier:
keyid:C9:4C:B4:22:6E:6D:24:C1:E0:E9:68:57:88:A5:F9:D5:94:31:2C:C0
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/yUy0Im5tJMHg6WhXiKX51ZQxLMA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/9e/fc19ea-cf80-4ce0-8e1b-0a955fa7d7b0/1/6DaUm7IqenPjUpsrcSWd43-DHLo.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/9e/fc19ea-cf80-4ce0-8e1b-0a955fa7d7b0/1/yUy0Im5tJMHg6WhXiKX51ZQxLMA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
91.195.124.0/24
194.176.118.0/24
Signature Algorithm: sha256WithRSAEncryption
bf:d1:1f:d2:87:82:d5:3d:51:9c:c1:c3:86:9c:3d:66:72:52:
5a:1b:79:d8:9b:9a:6b:94:b8:77:fb:4b:71:62:d0:d4:1f:6a:
83:d0:a4:60:fb:f5:c5:89:b6:00:f0:26:6b:be:bf:aa:c0:10:
0d:5c:77:e2:52:f0:91:88:0f:7d:8e:70:3d:57:03:5f:6c:62:
36:dc:26:e5:71:79:00:a5:d5:cf:6e:40:30:73:23:f8:b0:6e:
22:f8:50:d8:a5:2d:17:f9:9d:a5:a1:1c:8d:1e:5b:7b:17:e6:
0f:0c:4d:5d:b4:8d:96:23:4a:cd:43:13:58:34:b1:b4:35:03:
0d:2b:53:9e:94:68:5d:6f:84:c4:90:ae:dd:0e:1e:a4:73:42:
5c:93:45:ed:46:7e:a3:d6:60:fb:06:67:1b:dd:ae:4c:1a:7b:
1a:66:29:5c:f8:9b:9c:73:79:2c:9b:95:05:44:4b:78:57:06:
31:ca:ba:13:4d:b2:a6:b7:a7:3c:3a:cc:b8:0c:56:ba:a9:8f:
08:08:48:27:2d:55:49:19:dc:28:cb:0c:51:0e:90:a4:2a:8b:
ac:e4:f0:3d:9f:8a:ae:cf:38:c9:1d:80:54:98:60:79:57:cd:
19:b4:41:8c:93:5f:9f:ce:21:69:fe:d4:23:0c:25:22:fe:27:
ae:70:fd:07
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Feb 17 07:15:12 2025 by rpki-client