![](/console.gif)
Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b1/5310da-6821-4673-9e98-9d6001f78a70/1/H_WWP7E5zagh_X5vltScpa3jVw8.roa
File: H_WWP7E5zagh_X5vltScpa3jVw8.roa (raw, json)
Hash identifier: mr8ZWrdDNN0cjrH6yk50fuvDOE9js5ZKFdrEfDNWQJc=
Subject key identifier: 1F:F5:96:3F:B1:39:CD:A8:21:FD:7E:6F:96:D4:9C:A5:AD:E3:57:0F
Certificate issuer: /CN=c4698585e5ebd11c969c7ed4a320edafc9d17822
Certificate serial: 0A3AA8A7
Authority key identifier: C4:69:85:85:E5:EB:D1:1C:96:9C:7E:D4:A3:20:ED:AF:C9:D1:78:22
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/xGmFheXr0RyWnH7UoyDtr8nReCI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/b1/5310da-6821-4673-9e98-9d6001f78a70/1/H_WWP7E5zagh_X5vltScpa3jVw8.roa
Signing time: Fri 08 Apr 2022 14:11:18 +0000
ROA not before: Fri 08 Apr 2022 14:11:18 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 58061
IP address blocks: 89.116.200.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 171616423 (0xa3aa8a7)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=c4698585e5ebd11c969c7ed4a320edafc9d17822
Validity
Not Before: Apr 8 14:11:18 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=1ff5963fb139cda821fd7e6f96d49ca5ade3570f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ca:2a:f1:2c:06:9d:67:13:3c:64:f2:2d:98:b3:
ae:2b:84:4e:39:f6:82:ab:40:47:69:be:a2:79:96:
e0:1a:3b:04:93:a8:7b:5b:ee:6b:67:bd:60:b3:e3:
00:db:30:c1:ea:fe:9f:e0:0e:cb:36:11:ae:29:f8:
53:ec:27:87:b6:19:36:84:ab:5b:48:eb:bb:a6:15:
2b:3e:9e:dd:2e:a4:32:f4:84:53:f3:4a:c3:b8:14:
e9:c1:71:db:fa:f9:7f:6f:bb:ea:a8:e0:b7:4e:21:
97:e4:3d:7c:b0:3d:b3:27:35:99:fa:3d:48:11:56:
06:d2:4d:a2:2d:50:01:a3:86:f9:2c:8f:33:66:fb:
79:0c:f5:e9:ea:53:d3:3c:4d:f3:35:7a:ab:a6:ca:
3f:6e:5a:e3:86:98:e3:2d:5d:fa:ff:d8:0b:f2:93:
b7:8e:63:3a:ce:1a:c9:47:ac:46:5e:1b:cb:4b:1e:
f7:e3:6d:8b:60:47:69:cd:79:93:c5:a3:cf:94:f3:
dc:db:c9:ad:f4:4e:7f:0f:15:b7:5c:0d:5b:b7:6e:
50:69:ce:0c:28:d0:26:58:8c:18:29:ea:65:75:1a:
71:2a:98:b2:b9:c6:c2:38:f8:a8:9d:32:dd:66:34:
8e:d3:00:3a:7b:9d:32:7b:7b:4c:aa:f3:ae:e9:8f:
0a:f7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
1F:F5:96:3F:B1:39:CD:A8:21:FD:7E:6F:96:D4:9C:A5:AD:E3:57:0F
X509v3 Authority Key Identifier:
keyid:C4:69:85:85:E5:EB:D1:1C:96:9C:7E:D4:A3:20:ED:AF:C9:D1:78:22
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/xGmFheXr0RyWnH7UoyDtr8nReCI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b1/5310da-6821-4673-9e98-9d6001f78a70/1/H_WWP7E5zagh_X5vltScpa3jVw8.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/b1/5310da-6821-4673-9e98-9d6001f78a70/1/xGmFheXr0RyWnH7UoyDtr8nReCI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
89.116.200.0/24
Signature Algorithm: sha256WithRSAEncryption
ae:66:88:34:48:dd:29:5e:c8:be:ba:6b:ea:0b:b1:7a:43:6c:
72:41:1c:7c:65:1b:20:41:14:62:aa:98:83:d2:71:61:dd:42:
9f:dd:e6:25:a5:24:38:ed:e3:97:d2:56:8d:ad:cb:b7:00:50:
5c:2a:c1:5d:70:92:d1:2d:55:29:38:4c:ae:04:59:76:0d:45:
49:de:75:fa:6a:f9:9d:43:e3:60:f1:ad:49:04:9d:71:67:e8:
d4:a5:4a:58:b7:24:9f:f0:a8:47:89:34:33:75:db:73:84:ec:
6f:95:26:05:db:66:aa:bd:72:af:29:ce:ef:78:c3:e0:cb:5c:
ae:55:75:66:28:ff:78:03:1e:98:95:8b:68:8c:81:6a:4e:72:
ac:c1:b3:6b:1e:43:d8:33:cb:a3:3c:ad:f7:6b:c6:f4:7a:0e:
08:af:f2:4d:87:ce:92:e6:ac:65:38:91:e9:e3:d2:c9:a2:e2:
9c:b9:89:7d:1b:47:49:18:99:ec:ef:2e:23:08:57:8d:03:34:
db:fd:09:7c:75:43:62:45:76:86:f3:14:6d:c9:d5:ed:3e:b6:
b8:53:c1:3a:34:50:7d:d8:ca:d8:3f:0f:f7:94:16:05:d8:95:
0d:5f:a0:97:16:ad:b0:2c:81:a6:7a:a4:5b:f3:eb:55:7c:d6:
16:59:17:f4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Feb 17 07:28:39 2025 by rpki-client