![](/console.gif)
Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/af/c4e5ca-8aa5-4e64-a022-26ca148d07af/1/BtaO_WMmjopXmMDHPJPtC7Vabhg.roa
File: BtaO_WMmjopXmMDHPJPtC7Vabhg.roa (raw, json)
Hash identifier: iPQsHQELIYNkGpbYQgs6gmtiuArutQp404eK+vifUFI=
Subject key identifier: 06:D6:8E:FD:63:26:8E:8A:57:98:C0:C7:3C:93:ED:0B:B5:5A:6E:18
Certificate issuer: /CN=6c4c7986b182ecc36ad74c535beae7299b35ce92
Certificate serial: 03F0DF5A
Authority key identifier: 6C:4C:79:86:B1:82:EC:C3:6A:D7:4C:53:5B:EA:E7:29:9B:35:CE:92
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/bEx5hrGC7MNq10xTW-rnKZs1zpI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/af/c4e5ca-8aa5-4e64-a022-26ca148d07af/1/BtaO_WMmjopXmMDHPJPtC7Vabhg.roa
Signing time: Tue 19 Apr 2022 09:16:27 +0000
ROA not before: Tue 19 Apr 2022 09:16:27 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 40676
IP address blocks: 141.11.160.0/24 maxlen: 24
141.11.185.0/24 maxlen: 24
141.11.16.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 66117466 (0x3f0df5a)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=6c4c7986b182ecc36ad74c535beae7299b35ce92
Validity
Not Before: Apr 19 09:16:27 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=06d68efd63268e8a5798c0c73c93ed0bb55a6e18
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9c:6c:6b:96:5f:13:47:cc:5e:3c:37:d6:b3:4a:
f7:25:37:3a:29:a8:c8:64:98:ca:a4:2c:9b:df:ee:
a7:83:e8:43:9a:a1:7f:98:79:be:fa:2f:f3:5e:83:
55:7d:3d:53:b9:fe:de:e8:a2:23:ae:48:28:2c:1a:
c3:0f:74:bf:af:f3:c1:bb:a3:61:16:21:9c:58:3f:
ae:3c:6c:7c:48:7b:28:82:65:46:03:93:ab:24:3d:
8f:cf:2e:13:c6:07:81:78:92:eb:87:80:98:08:67:
38:d2:54:44:52:bc:1d:05:c6:ab:73:c0:43:f7:a3:
dc:a7:72:0a:81:6a:8a:30:07:32:2b:8f:e0:24:d6:
5c:23:da:f0:71:30:2f:f1:76:f0:8e:90:a0:4a:74:
e1:1d:ee:01:3a:62:87:dd:22:90:d2:16:91:f2:9e:
7f:ab:b1:7e:f5:17:bb:b5:48:51:ed:fe:d2:ba:0a:
51:8c:af:c5:8d:b6:15:8a:b5:e8:dc:a1:40:02:fd:
4a:a0:a3:9d:e9:b2:29:bf:67:59:1b:da:1a:72:6f:
90:e6:32:43:e2:a9:26:82:31:4c:62:d1:db:92:31:
d2:63:7c:ca:0a:88:ae:cf:cc:2b:60:0a:f9:5f:79:
90:94:85:d8:fd:f0:e5:b3:14:be:7b:eb:57:a3:d5:
90:9d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
06:D6:8E:FD:63:26:8E:8A:57:98:C0:C7:3C:93:ED:0B:B5:5A:6E:18
X509v3 Authority Key Identifier:
keyid:6C:4C:79:86:B1:82:EC:C3:6A:D7:4C:53:5B:EA:E7:29:9B:35:CE:92
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/bEx5hrGC7MNq10xTW-rnKZs1zpI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/af/c4e5ca-8aa5-4e64-a022-26ca148d07af/1/BtaO_WMmjopXmMDHPJPtC7Vabhg.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/af/c4e5ca-8aa5-4e64-a022-26ca148d07af/1/bEx5hrGC7MNq10xTW-rnKZs1zpI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
141.11.16.0/24
141.11.160.0/24
141.11.185.0/24
Signature Algorithm: sha256WithRSAEncryption
59:c5:08:20:66:6f:6b:c0:21:25:ee:24:23:6f:ab:a3:fb:62:
d4:8a:fc:3a:e9:91:8f:2b:e4:16:16:91:98:d0:2a:c1:c8:a5:
85:38:95:cd:df:00:7f:06:e7:96:d3:51:a8:e3:a3:84:60:d7:
7d:6d:7c:99:8f:e1:8d:d2:d3:1f:1f:b8:d4:22:53:72:1a:3c:
58:fd:44:79:97:ee:c3:81:5a:e0:40:6f:1f:18:82:c5:ee:44:
84:ce:5c:29:98:ff:2a:57:af:68:fc:e5:78:8e:83:aa:93:51:
5d:ff:a9:ce:99:14:d0:86:b1:2e:27:a3:94:6a:eb:b5:35:c7:
8d:1d:e0:e2:9f:ae:e1:8a:08:f0:4d:30:2a:8a:ad:1f:a3:40:
9d:14:5a:d8:74:9f:87:4a:20:a3:bf:5c:67:be:3a:7d:7c:c8:
21:0f:1c:e2:76:60:a5:8a:fe:87:1b:89:ed:af:71:af:fe:fa:
89:3a:ab:81:d4:96:4b:d4:f3:ff:7c:ce:26:c0:bd:b9:49:a3:
f3:e5:59:e2:e0:d2:2c:5f:0e:b2:ca:e2:6c:8d:df:9d:7f:81:
5f:8d:55:ed:d3:ec:58:10:ac:15:a6:63:54:64:14:8c:8c:ac:
0b:6a:5a:eb:a1:cc:7e:76:41:44:90:55:9a:fc:c3:9e:7e:8a:
5e:6b:87:7c
-----BEGIN CERTIFICATE-----
MIIE+zCCA+OgAwIBAgIEA/DfWjANBgkqhkiG9w0BAQsFADAzMTEwLwYDVQQDEyg2
YzRjNzk4NmIxODJlY2MzNmFkNzRjNTM1YmVhZTcyOTliMzVjZTkyMB4XDTIyMDQx
OTA5MTYyN1oXDTIzMDcwMTAwMDAwMFowMzExMC8GA1UEAxMoMDZkNjhlZmQ2MzI2
OGU4YTU3OThjMGM3M2M5M2VkMGJiNTVhNmUxODCCASIwDQYJKoZIhvcNAQEBBQAD
ggEPADCCAQoCggEBAJxsa5ZfE0fMXjw31rNK9yU3OimoyGSYyqQsm9/up4PoQ5qh
f5h5vvov816DVX09U7n+3uiiI65IKCwaww90v6/zwbujYRYhnFg/rjxsfEh7KIJl
RgOTqyQ9j88uE8YHgXiS64eAmAhnONJURFK8HQXGq3PAQ/ej3KdyCoFqijAHMiuP
4CTWXCPa8HEwL/F28I6QoEp04R3uATpih90ikNIWkfKef6uxfvUXu7VIUe3+0roK
UYyvxY22FYq16NyhQAL9SqCjnemyKb9nWRvaGnJvkOYyQ+KpJoIxTGLR25Ix0mN8
ygqIrs/MK2AK+V95kJSF2P3w5bMUvnvrV6PVkJ0CAwEAAaOCAhUwggIRMB0GA1Ud
DgQWBBQG1o79YyaOileYwMc8k+0LtVpuGDAfBgNVHSMEGDAWgBRsTHmGsYLsw2rX
TFNb6ucpmzXOkjAOBgNVHQ8BAf8EBAMCB4AwZAYIKwYBBQUHAQEEWDBWMFQGCCsG
AQUFBzAChkhyc3luYzovL3Jwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxU
L2JFeDVockdDN01OcTEweFRXLXJuS1pzMXpwSS5jZXIwgY0GCCsGAQUFBwELBIGA
MH4wfAYIKwYBBQUHMAuGcHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5
L0RFRkFVTFQvYWYvYzRlNWNhLThhYTUtNGU2NC1hMDIyLTI2Y2ExNDhkMDdhZi8x
L0J0YU9fV01tam9wWG1NREhQSlB0QzdWYWJoZy5yb2EwgYEGA1UdHwR6MHgwdqB0
oHKGcHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvYWYv
YzRlNWNhLThhYTUtNGU2NC1hMDIyLTI2Y2ExNDhkMDdhZi8xL2JFeDVockdDN01O
cTEweFRXLXJuS1pzMXpwSS5jcmwwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAr
BggrBgEFBQcBBwEB/wQcMBowGAQCAAEwEgMEAI0LEAMEAI0LoAMEAI0LuTANBgkq
hkiG9w0BAQsFAAOCAQEAWcUIIGZva8AhJe4kI2+ro/ti1Ir8OumRjyvkFhaRmNAq
wcilhTiVzd8AfwbnltNRqOOjhGDXfW18mY/hjdLTHx+41CJTcho8WP1EeZfuw4Fa
4EBvHxiCxe5EhM5cKZj/KlevaPzleI6DqpNRXf+pzpkU0IaxLiejlGrrtTXHjR3g
4p+u4YoI8E0wKoqtH6NAnRRa2HSfh0ogo79cZ746fXzIIQ8c4nZgpYr+hxuJ7a9x
r/76iTqrgdSWS9Tz/3zOJsC9uUmj8+VZ4uDSLF8OssribI3fnX+BX41V7dPsWBCs
FaZjVGQUjIysC2pa66HMfnZBRJBVmvzDnn6KXmuHfA==
-----END CERTIFICATE-----
Generated at Mon Feb 17 07:32:58 2025 by rpki-client