![](/console.gif)
Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/af/c4e5ca-8aa5-4e64-a022-26ca148d07af/1/ANR1N0phBBL-nH1BncwUfgfVIGI.roa
File: ANR1N0phBBL-nH1BncwUfgfVIGI.roa (raw, json)
Hash identifier: zzsBBjRR/NHRAQ+8MHtxsj4A6glLzCV/J2ULyuvhouw=
Subject key identifier: 00:D4:75:37:4A:61:04:12:FE:9C:7D:41:9D:CC:14:7E:07:D5:20:62
Certificate issuer: /CN=6c4c7986b182ecc36ad74c535beae7299b35ce92
Certificate serial: 030D7D90
Authority key identifier: 6C:4C:79:86:B1:82:EC:C3:6A:D7:4C:53:5B:EA:E7:29:9B:35:CE:92
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/bEx5hrGC7MNq10xTW-rnKZs1zpI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/af/c4e5ca-8aa5-4e64-a022-26ca148d07af/1/ANR1N0phBBL-nH1BncwUfgfVIGI.roa
Signing time: Mon 14 Feb 2022 11:05:05 +0000
ROA not before: Mon 14 Feb 2022 11:05:05 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 49877
IP address blocks: 141.11.190.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 51215760 (0x30d7d90)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=6c4c7986b182ecc36ad74c535beae7299b35ce92
Validity
Not Before: Feb 14 11:05:05 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=00d475374a610412fe9c7d419dcc147e07d52062
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ce:b2:49:e5:c5:07:58:30:6f:d6:bc:45:c2:2b:
58:8f:53:86:fa:8c:7f:04:5a:c3:8e:43:a1:d3:71:
5d:1a:ff:3d:f2:0b:7d:45:fd:6d:26:9b:1b:4c:31:
e0:6c:f8:51:21:1a:6c:1a:9b:96:ff:f1:a5:6f:2c:
ef:66:6c:25:b2:bf:fa:02:7f:3e:00:1f:25:73:22:
bb:eb:97:84:24:ef:c8:35:3f:35:86:de:53:35:09:
d1:3c:95:8c:99:99:3d:41:51:90:ac:75:1e:98:e4:
eb:58:2a:b6:eb:83:13:e7:72:97:64:19:65:78:49:
bb:70:83:7a:6a:9f:91:5a:29:67:c1:9f:c7:bb:3b:
02:2d:e5:99:67:12:79:94:46:98:fe:a9:ba:be:16:
e2:68:7d:d4:ec:e5:51:d6:44:72:c6:56:f7:6e:98:
c7:9e:8e:e5:a7:bd:48:10:bf:32:57:b1:45:51:35:
11:56:a4:42:86:57:c7:57:d7:06:2d:a4:0e:6c:b1:
5f:6e:8f:c1:ae:cb:4d:ff:cf:f8:d8:ce:c1:03:9b:
77:56:93:17:d3:18:b2:af:16:d1:bd:52:aa:80:ed:
22:21:4d:cd:f7:90:b6:a8:ba:f1:7b:6c:f6:db:ee:
0a:de:61:5e:49:ab:b8:66:37:a5:ad:7c:74:ea:c2:
8e:59
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
00:D4:75:37:4A:61:04:12:FE:9C:7D:41:9D:CC:14:7E:07:D5:20:62
X509v3 Authority Key Identifier:
keyid:6C:4C:79:86:B1:82:EC:C3:6A:D7:4C:53:5B:EA:E7:29:9B:35:CE:92
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/bEx5hrGC7MNq10xTW-rnKZs1zpI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/af/c4e5ca-8aa5-4e64-a022-26ca148d07af/1/ANR1N0phBBL-nH1BncwUfgfVIGI.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/af/c4e5ca-8aa5-4e64-a022-26ca148d07af/1/bEx5hrGC7MNq10xTW-rnKZs1zpI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
141.11.190.0/24
Signature Algorithm: sha256WithRSAEncryption
93:ef:be:af:fe:1b:ae:e1:29:35:90:48:a1:0c:4c:d1:88:20:
51:03:3b:51:0a:b6:5b:6e:60:07:d2:e8:13:41:ba:87:d8:1c:
1f:d4:a8:2d:e8:2d:84:59:98:25:a8:af:46:c7:30:fd:b1:db:
75:f5:6e:76:51:2a:b7:fc:88:6a:b3:35:c0:37:9e:78:55:c6:
10:6f:4e:f1:51:af:6e:b1:33:0a:e8:92:61:48:68:18:48:28:
cc:f1:54:c2:6a:9c:48:38:42:2b:2b:a3:b6:6b:0b:99:3e:a7:
c3:66:3d:53:06:be:33:d0:17:2d:81:fc:a7:a3:4d:19:fc:40:
40:98:78:05:d4:40:46:f9:71:c5:48:81:af:f3:3a:25:41:b2:
f6:e8:54:2c:de:62:89:de:8b:1d:2a:f2:e8:63:87:87:f3:05:
6c:c5:47:98:52:6a:b2:c3:45:0d:10:a8:96:cb:05:b6:37:f8:
db:c9:db:2c:d1:13:7e:14:8e:9c:ac:db:27:8e:46:f5:31:7f:
13:e4:5e:aa:9e:b3:7f:90:d5:8d:3f:8b:cd:52:55:55:d6:bd:
21:fe:2c:6b:67:0c:94:5c:20:01:bd:0e:c9:92:96:ef:e3:27:
fe:c7:05:a0:9e:e1:16:e9:04:97:d1:35:52:74:4b:d7:cf:82:
c2:99:bc:83
-----BEGIN CERTIFICATE-----
MIIE7zCCA9egAwIBAgIEAw19kDANBgkqhkiG9w0BAQsFADAzMTEwLwYDVQQDEyg2
YzRjNzk4NmIxODJlY2MzNmFkNzRjNTM1YmVhZTcyOTliMzVjZTkyMB4XDTIyMDIx
NDExMDUwNVoXDTIzMDcwMTAwMDAwMFowMzExMC8GA1UEAxMoMDBkNDc1Mzc0YTYx
MDQxMmZlOWM3ZDQxOWRjYzE0N2UwN2Q1MjA2MjCCASIwDQYJKoZIhvcNAQEBBQAD
ggEPADCCAQoCggEBAM6ySeXFB1gwb9a8RcIrWI9ThvqMfwRaw45DodNxXRr/PfIL
fUX9bSabG0wx4Gz4USEabBqblv/xpW8s72ZsJbK/+gJ/PgAfJXMiu+uXhCTvyDU/
NYbeUzUJ0TyVjJmZPUFRkKx1Hpjk61gqtuuDE+dyl2QZZXhJu3CDemqfkVopZ8Gf
x7s7Ai3lmWcSeZRGmP6pur4W4mh91OzlUdZEcsZW926Yx56O5ae9SBC/MlexRVE1
EVakQoZXx1fXBi2kDmyxX26Pwa7LTf/P+NjOwQObd1aTF9MYsq8W0b1SqoDtIiFN
zfeQtqi68Xts9tvuCt5hXkmruGY3pa18dOrCjlkCAwEAAaOCAgkwggIFMB0GA1Ud
DgQWBBQA1HU3SmEEEv6cfUGdzBR+B9UgYjAfBgNVHSMEGDAWgBRsTHmGsYLsw2rX
TFNb6ucpmzXOkjAOBgNVHQ8BAf8EBAMCB4AwZAYIKwYBBQUHAQEEWDBWMFQGCCsG
AQUFBzAChkhyc3luYzovL3Jwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxU
L2JFeDVockdDN01OcTEweFRXLXJuS1pzMXpwSS5jZXIwgY0GCCsGAQUFBwELBIGA
MH4wfAYIKwYBBQUHMAuGcHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5
L0RFRkFVTFQvYWYvYzRlNWNhLThhYTUtNGU2NC1hMDIyLTI2Y2ExNDhkMDdhZi8x
L0FOUjFOMHBoQkJMLW5IMUJuY3dVZmdmVklHSS5yb2EwgYEGA1UdHwR6MHgwdqB0
oHKGcHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvYWYv
YzRlNWNhLThhYTUtNGU2NC1hMDIyLTI2Y2ExNDhkMDdhZi8xL2JFeDVockdDN01O
cTEweFRXLXJuS1pzMXpwSS5jcmwwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAf
BggrBgEFBQcBBwEB/wQQMA4wDAQCAAEwBgMEAI0LvjANBgkqhkiG9w0BAQsFAAOC
AQEAk+++r/4bruEpNZBIoQxM0YggUQM7UQq2W25gB9LoE0G6h9gcH9SoLegthFmY
JaivRscw/bHbdfVudlEqt/yIarM1wDeeeFXGEG9O8VGvbrEzCuiSYUhoGEgozPFU
wmqcSDhCKyujtmsLmT6nw2Y9Uwa+M9AXLYH8p6NNGfxAQJh4BdRARvlxxUiBr/M6
JUGy9uhULN5iid6LHSry6GOHh/MFbMVHmFJqssNFDRColssFtjf428nbLNETfhSO
nKzbJ45G9TF/E+Reqp6zf5DVjT+LzVJVVda9If4sa2cMlFwgAb0OyZKW7+Mn/scF
oJ7hFukEl9E1UnRL18+Cwpm8gw==
-----END CERTIFICATE-----
Generated at Mon Feb 17 07:31:01 2025 by rpki-client