![](/console.gif)
Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a8/63a610-3306-462e-8899-10630e74f174/1/goOTNgaDUfHr__lmF3-FCNLP5fA.roa
File: goOTNgaDUfHr__lmF3-FCNLP5fA.roa (raw, json)
Hash identifier: LmUC+pHMdgcM+yxrKWJaDuTonK/6HsHWG0pgNnZXIyM=
Subject key identifier: 82:83:93:36:06:83:51:F1:EB:FF:F9:66:17:7F:85:08:D2:CF:E5:F0
Certificate issuer: /CN=0529e4de4bc11fed9101a50824aaa4e2638aba6a
Certificate serial: 0593B068
Authority key identifier: 05:29:E4:DE:4B:C1:1F:ED:91:01:A5:08:24:AA:A4:E2:63:8A:BA:6A
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/BSnk3kvBH-2RAaUIJKqk4mOKumo.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/a8/63a610-3306-462e-8899-10630e74f174/1/goOTNgaDUfHr__lmF3-FCNLP5fA.roa
Signing time: Fri 17 Jun 2022 10:30:44 +0000
ROA not before: Fri 17 Jun 2022 10:30:44 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 211261
IP address blocks: 185.146.67.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 93565032 (0x593b068)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=0529e4de4bc11fed9101a50824aaa4e2638aba6a
Validity
Not Before: Jun 17 10:30:44 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=82839336068351f1ebfff966177f8508d2cfe5f0
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cf:d5:a7:74:14:c1:2b:50:d0:49:08:e6:00:ae:
8c:08:93:15:00:4b:80:18:8f:de:cf:d1:f7:b6:c0:
b8:eb:82:2a:c0:f6:50:59:53:a4:0c:4a:05:61:e8:
4d:e2:f9:43:ed:d6:f8:dd:61:93:6f:c3:b2:4e:d2:
0e:0b:02:82:53:8b:b2:c6:9c:5f:df:3b:99:2c:72:
89:c4:8a:53:46:9a:7c:5d:31:74:03:f3:ec:3c:17:
12:db:a3:64:9b:af:35:15:73:3d:a4:ae:49:2c:cc:
0c:db:e9:e7:1f:c6:3f:f0:03:ab:47:89:fc:91:9b:
68:33:c4:87:8d:58:68:4d:95:61:91:e4:13:72:37:
3f:d1:62:a4:1e:08:6c:98:01:05:d1:3a:70:24:b5:
bd:21:0a:b2:31:63:e9:11:4d:c9:c8:51:3b:44:e9:
b4:cc:89:29:30:e7:5b:d7:75:2d:c5:df:27:63:3d:
3e:6a:0b:ab:31:de:c8:9e:fb:53:a1:f3:3a:4c:b0:
82:c9:e3:17:a6:f5:99:f0:70:a5:34:02:c7:fd:e9:
93:11:43:a3:b9:d9:40:d4:fa:d8:89:63:dc:40:04:
57:b5:c4:bb:85:28:58:57:ac:43:8d:a2:d0:9f:24:
55:8f:99:f4:8a:d8:a3:5e:01:26:2a:22:9d:81:bf:
39:0b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
82:83:93:36:06:83:51:F1:EB:FF:F9:66:17:7F:85:08:D2:CF:E5:F0
X509v3 Authority Key Identifier:
keyid:05:29:E4:DE:4B:C1:1F:ED:91:01:A5:08:24:AA:A4:E2:63:8A:BA:6A
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/BSnk3kvBH-2RAaUIJKqk4mOKumo.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a8/63a610-3306-462e-8899-10630e74f174/1/goOTNgaDUfHr__lmF3-FCNLP5fA.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/a8/63a610-3306-462e-8899-10630e74f174/1/BSnk3kvBH-2RAaUIJKqk4mOKumo.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.146.67.0/24
Signature Algorithm: sha256WithRSAEncryption
c8:e6:0f:7a:a7:70:c1:89:38:12:73:64:72:16:41:26:63:ba:
5d:37:fe:32:32:4e:f1:14:54:57:0c:a2:b7:c4:0e:fa:f0:af:
d9:02:cc:4e:4d:04:5a:d0:d6:f7:7a:ba:aa:d8:e3:54:4c:0f:
f7:e5:a5:7c:8f:80:e8:2b:bd:e3:67:af:42:69:ad:60:17:99:
00:f7:3a:90:54:8c:77:09:2b:eb:7c:15:16:18:f6:a1:09:81:
cc:c1:8f:b4:dc:22:77:d1:ba:5b:af:97:73:a8:52:81:3a:fe:
c7:ae:d4:9a:b8:aa:12:3f:7e:91:e0:f8:5d:e2:f9:bd:cc:de:
30:ff:eb:62:32:08:62:a6:aa:2c:3e:98:9b:32:3c:21:12:6a:
71:42:79:d6:d9:d2:06:62:6d:58:ec:07:31:0a:63:90:9e:4f:
b7:c3:08:4d:a8:27:4b:cb:35:ac:f2:90:5d:0a:a7:d0:33:19:
25:5b:b3:a2:3a:7d:56:75:38:0c:fd:57:16:76:ec:7f:b5:7d:
6c:be:86:a2:21:a5:e1:dd:69:ae:fb:b0:2d:c8:ca:d3:63:e1:
d6:88:d1:46:a0:06:15:2b:1c:d7:e1:d9:36:85:54:72:19:02:
66:00:1d:da:6b:6e:6d:41:be:f3:29:fd:40:33:42:bf:10:cf:
d9:c4:47:8d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Feb 17 07:25:44 2025 by rpki-client