![](/console.gif)
Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/af/c4e5ca-8aa5-4e64-a022-26ca148d07af/1/gWGbzs-34PuMLRbuOyIykkZZXYk.roa
File: gWGbzs-34PuMLRbuOyIykkZZXYk.roa (raw, json)
Hash identifier: s0QsCtRM5GKlOCrmLJlLPxyT/tMoQsQ+/Bw/dNVgZ6U=
Subject key identifier: 81:61:9B:CE:CF:B7:E0:FB:8C:2D:16:EE:3B:22:32:92:46:59:5D:89
Certificate issuer: /CN=6c4c7986b182ecc36ad74c535beae7299b35ce92
Certificate serial: 0503B602
Authority key identifier: 6C:4C:79:86:B1:82:EC:C3:6A:D7:4C:53:5B:EA:E7:29:9B:35:CE:92
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/bEx5hrGC7MNq10xTW-rnKZs1zpI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/af/c4e5ca-8aa5-4e64-a022-26ca148d07af/1/gWGbzs-34PuMLRbuOyIykkZZXYk.roa
Signing time: Thu 09 Jun 2022 15:06:02 +0000
ROA not before: Thu 09 Jun 2022 15:06:02 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 200019
IP address blocks: 141.11.152.0/22 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 84129282 (0x503b602)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=6c4c7986b182ecc36ad74c535beae7299b35ce92
Validity
Not Before: Jun 9 15:06:02 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=81619bcecfb7e0fb8c2d16ee3b22329246595d89
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:88:9b:fc:aa:53:4b:2a:78:36:22:45:c7:c2:8b:
7e:d8:ba:40:5d:e7:92:79:0c:8c:5a:20:69:eb:71:
ae:1a:8b:bd:6e:be:2b:9b:ef:5b:2d:76:84:64:18:
76:c3:9e:af:1b:e4:99:d1:24:d3:3e:da:07:d0:d6:
ef:d0:6d:7b:fe:f3:19:be:53:29:52:5b:97:f1:e3:
fb:79:73:a6:1a:e2:34:39:18:ba:ea:38:01:2d:5a:
2c:da:6b:2c:e2:47:cd:63:99:6b:a1:56:88:d5:da:
ce:7f:74:8d:a1:ad:5f:a2:18:51:4a:48:38:a7:b9:
68:7f:96:0d:31:d7:ea:e3:1d:85:64:40:4f:d3:86:
24:82:94:d2:d2:0c:65:ac:3a:e3:fa:c9:97:3d:bf:
cf:1d:05:b7:e3:21:b7:2b:ad:66:95:ac:18:7c:0e:
7b:ff:f8:f5:a7:5e:04:5e:55:d1:44:b7:b1:0b:da:
1c:f8:b5:02:c4:c7:84:aa:d9:46:26:07:36:25:ea:
0a:72:ba:3d:4c:ee:ef:a7:61:ea:bf:da:4c:92:26:
6c:37:d2:90:f7:5c:2e:64:65:07:09:4d:36:fd:d2:
be:a4:8e:78:9b:c8:8a:a7:b7:a2:6d:43:d7:ea:13:
ca:9a:d1:c4:ec:b2:01:44:21:81:4f:95:b8:b5:05:
b7:7d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
81:61:9B:CE:CF:B7:E0:FB:8C:2D:16:EE:3B:22:32:92:46:59:5D:89
X509v3 Authority Key Identifier:
keyid:6C:4C:79:86:B1:82:EC:C3:6A:D7:4C:53:5B:EA:E7:29:9B:35:CE:92
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/bEx5hrGC7MNq10xTW-rnKZs1zpI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/af/c4e5ca-8aa5-4e64-a022-26ca148d07af/1/gWGbzs-34PuMLRbuOyIykkZZXYk.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/af/c4e5ca-8aa5-4e64-a022-26ca148d07af/1/bEx5hrGC7MNq10xTW-rnKZs1zpI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
141.11.152.0/22
Signature Algorithm: sha256WithRSAEncryption
0a:1e:b9:de:f9:d5:79:2c:f1:44:ef:af:f4:c7:6c:16:4a:b5:
ef:74:ae:c1:57:f0:3d:4e:6b:70:be:cc:d1:13:8b:78:8b:10:
fa:d0:09:db:8b:f4:15:a8:80:06:c5:7e:ae:59:92:97:4c:ec:
70:45:e8:cb:37:ac:c0:d6:26:af:6b:b0:ad:51:4a:93:ea:59:
89:ce:58:67:f1:93:cc:25:61:c2:a8:12:0e:91:22:0a:4c:aa:
45:d3:f4:3a:66:e0:78:3c:04:f4:90:97:81:87:7f:a6:1a:82:
7e:97:9d:98:3d:10:6f:ed:f4:27:bf:c9:6c:bb:7c:3a:84:8e:
aa:c9:03:b5:36:cc:0b:f8:9d:7e:01:c2:a4:8f:6f:ee:33:fe:
35:33:67:db:68:50:ed:33:09:46:99:e5:44:ad:41:07:67:46:
44:a2:df:eb:90:db:bb:d7:dc:1d:e9:b3:f1:ab:63:22:e0:b6:
45:d3:cd:2b:47:d4:fb:4a:e0:0d:98:95:d6:a5:b4:67:74:f8:
15:2b:77:da:a8:59:c6:1f:91:c5:0b:35:e0:2a:28:02:87:e6:
0f:e0:78:53:50:5e:ad:55:4b:76:04:aa:7d:94:7b:ad:c7:7b:
50:ff:e2:38:e9:d2:ba:df:74:24:15:bf:ec:8b:f3:ae:a3:9f:
41:bc:35:d0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Feb 17 07:35:34 2025 by rpki-client