![](/console.gif)
Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a0/29a016-f614-4bc3-9362-5ee30989b6eb/1/UwUTZAJnMvJP6VnkzHC0Uh0pEKY.roa
File: UwUTZAJnMvJP6VnkzHC0Uh0pEKY.roa (raw, json)
Hash identifier: C4k3lDPwvLNaFUHOIozNkug71hQ+DUjeo2/eAbptufI=
Subject key identifier: 53:05:13:64:02:67:32:F2:4F:E9:59:E4:CC:70:B4:52:1D:29:10:A6
Certificate issuer: /CN=ef738909f94d9968436bb4e09a2d47cc7901733c
Certificate serial: 018CC8DF883D79BE7C692D225EFFDA49B0FB
Authority key identifier: EF:73:89:09:F9:4D:99:68:43:6B:B4:E0:9A:2D:47:CC:79:01:73:3C
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/73OJCflNmWhDa7Tgmi1HzHkBczw.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/a0/29a016-f614-4bc3-9362-5ee30989b6eb/1/UwUTZAJnMvJP6VnkzHC0Uh0pEKY.roa
Signing time: Tue 02 Jan 2024 06:32:21 +0000
ROA not before: Tue 02 Jan 2024 06:32:21 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 204333
IP address blocks: 185.255.121.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8c:c8:df:88:3d:79:be:7c:69:2d:22:5e:ff:da:49:b0:fb
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=ef738909f94d9968436bb4e09a2d47cc7901733c
Validity
Not Before: Jan 2 06:32:21 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=53051364026732f24fe959e4cc70b4521d2910a6
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bf:4d:ac:e7:be:04:3f:d7:f6:8f:25:38:a9:6d:
e4:f6:cb:87:13:6f:3f:cb:af:ab:84:b0:fd:58:8e:
73:c2:20:40:00:8b:4a:d8:1d:5c:cb:c8:b5:7d:08:
53:32:2c:15:1a:cd:dc:d8:eb:87:49:c8:66:b8:dd:
11:8d:69:bf:1b:6e:f5:ff:fa:13:37:1d:a2:2c:04:
43:36:6c:0c:36:f5:e3:d6:43:98:97:d4:1f:a6:4e:
26:6f:7b:9a:02:8a:ff:f1:11:b1:86:c6:d0:43:e1:
97:f0:5e:8a:34:6c:67:81:21:df:b8:9c:ec:42:40:
74:c1:d5:88:2d:fd:bd:41:00:d1:26:5f:90:0f:14:
7a:ce:23:0a:74:b7:da:82:fb:bd:76:9e:95:51:1f:
eb:75:3b:bb:23:10:4a:bf:17:67:8a:e2:7b:c9:4b:
b2:e9:4b:83:41:7c:2a:12:8d:00:06:a7:ee:33:ec:
af:9e:0c:6d:d3:de:43:fd:e8:4c:06:64:9d:ad:7f:
26:c9:f6:d1:06:3a:60:b2:60:1d:42:e6:6e:7b:21:
4e:f8:1f:86:e8:47:5c:5b:b8:57:0f:d2:92:4a:5f:
dd:f4:b2:c0:5b:1b:fa:7a:23:89:49:21:0f:42:24:
96:f2:fc:a4:84:9a:30:ad:89:82:94:a3:73:0e:71:
b1:45
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
53:05:13:64:02:67:32:F2:4F:E9:59:E4:CC:70:B4:52:1D:29:10:A6
X509v3 Authority Key Identifier:
keyid:EF:73:89:09:F9:4D:99:68:43:6B:B4:E0:9A:2D:47:CC:79:01:73:3C
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/73OJCflNmWhDa7Tgmi1HzHkBczw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a0/29a016-f614-4bc3-9362-5ee30989b6eb/1/UwUTZAJnMvJP6VnkzHC0Uh0pEKY.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/a0/29a016-f614-4bc3-9362-5ee30989b6eb/1/73OJCflNmWhDa7Tgmi1HzHkBczw.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.255.121.0/24
Signature Algorithm: sha256WithRSAEncryption
31:63:82:fb:aa:0d:05:f4:6f:be:66:04:82:a2:56:19:42:02:
2f:43:2d:22:f0:d2:aa:54:3f:5a:4e:6c:2e:d0:94:8c:d7:56:
6c:e7:55:76:35:a5:3f:35:bf:f1:13:30:f0:75:9d:a3:10:03:
6c:98:ec:11:2f:9c:71:90:ac:3c:9f:79:6e:93:37:c6:3d:57:
22:98:17:15:fd:79:50:a3:7f:18:35:00:c8:67:fb:b1:64:02:
31:67:a9:02:d4:42:a9:b8:ea:d4:4b:2b:dc:8a:cd:8c:7e:4d:
63:5d:5e:b6:20:f7:0b:68:d8:f2:31:62:e4:a2:08:29:6f:82:
9f:16:c8:d9:a2:97:79:1d:76:a5:0c:62:d5:99:c5:d1:2d:31:
07:ce:b1:6f:f0:51:b7:84:b0:5f:3d:da:e8:00:01:79:2d:9f:
95:0c:0f:59:0e:09:18:f3:dd:cb:82:a9:c5:f5:c1:dd:3f:75:
67:2d:fb:05:48:4b:7e:38:06:54:d2:c7:26:13:0d:7b:f9:52:
87:c6:85:91:33:63:e9:fe:93:cb:78:05:58:11:97:8c:25:c1:
68:7d:4f:12:ed:d1:56:d7:88:25:7f:7e:79:d9:8a:76:fd:9a:
28:45:6d:59:b3:6a:86:59:14:4c:c9:5e:be:59:2f:8d:c2:29:
c8:cd:7a:f4
-----BEGIN CERTIFICATE-----
MIIE/TCCA+WgAwIBAgISAYzI34g9eb58aS0iXv/aSbD7MA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGVmNzM4OTA5Zjk0ZDk5Njg0MzZiYjRlMDlhMmQ0N2NjNzkw
MTczM2MwHhcNMjQwMTAyMDYzMjIxWhcNMjUwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
Eyg1MzA1MTM2NDAyNjczMmYyNGZlOTU5ZTRjYzcwYjQ1MjFkMjkxMGE2MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAv02s574EP9f2jyU4qW3k9suHE28/
y6+rhLD9WI5zwiBAAItK2B1cy8i1fQhTMiwVGs3c2OuHSchmuN0RjWm/G271//oT
Nx2iLARDNmwMNvXj1kOYl9Qfpk4mb3uaAor/8RGxhsbQQ+GX8F6KNGxngSHfuJzs
QkB0wdWILf29QQDRJl+QDxR6ziMKdLfagvu9dp6VUR/rdTu7IxBKvxdniuJ7yUuy
6UuDQXwqEo0ABqfuM+yvngxt095D/ehMBmSdrX8myfbRBjpgsmAdQuZueyFO+B+G
6EdcW7hXD9KSSl/d9LLAWxv6eiOJSSEPQiSW8vykhJowrYmClKNzDnGxRQIDAQAB
o4ICCTCCAgUwHQYDVR0OBBYEFFMFE2QCZzLyT+lZ5MxwtFIdKRCmMB8GA1UdIwQY
MBaAFO9ziQn5TZloQ2u04JotR8x5AXM8MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvNzNPSkNmbE5tV2hEYTdUZ21pMUh6SGtCY3p3LmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9hMC8yOWEwMTYtZjYxNC00YmMzLTkzNjIt
NWVlMzA5ODliNmViLzEvVXdVVFpBSm5NdkpQNlZua3pIQzBVaDBwRUtZLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9hMC8yOWEwMTYtZjYxNC00YmMzLTkzNjItNWVlMzA5ODliNmVi
LzEvNzNPSkNmbE5tV2hEYTdUZ21pMUh6SGtCY3p3LmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAuf95MA0G
CSqGSIb3DQEBCwUAA4IBAQAxY4L7qg0F9G++ZgSColYZQgIvQy0i8NKqVD9aTmwu
0JSM11Zs51V2NaU/Nb/xEzDwdZ2jEANsmOwRL5xxkKw8n3lukzfGPVcimBcV/XlQ
o38YNQDIZ/uxZAIxZ6kC1EKpuOrUSyvcis2Mfk1jXV62IPcLaNjyMWLkoggpb4Kf
FsjZopd5HXalDGLVmcXRLTEHzrFv8FG3hLBfPdroAAF5LZ+VDA9ZDgkY893LgqnF
9cHdP3VnLfsFSEt+OAZU0scmEw17+VKHxoWRM2Pp/pPLeAVYEZeMJcFofU8S7dFW
14glf3552Yp2/ZooRW1Zs2qGWRRMyV6+WS+NwinIzXr0
-----END CERTIFICATE-----
Generated at Mon Feb 17 07:50:22 2025 by rpki-client