![](/console.gif)
Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b2/77f84a-0c87-4eab-bf2f-03972ccce6c1/1/eRlLfyEzbcQUnYzzYbXN3Tm_wAg.roa
File: eRlLfyEzbcQUnYzzYbXN3Tm_wAg.roa (raw, json)
Hash identifier: yyLm0nBaPo2A9AmENayUGCcsdN7G6Rlhs0uLrORY6+w=
Subject key identifier: 79:19:4B:7F:21:33:6D:C4:14:9D:8C:F3:61:B5:CD:DD:39:BF:C0:08
Certificate issuer: /CN=532a146d89e626e507e7ef7963add35a6eb72352
Certificate serial: 0183F4F5C8967BBA6C00E66369D0A8C81D59
Authority key identifier: 53:2A:14:6D:89:E6:26:E5:07:E7:EF:79:63:AD:D3:5A:6E:B7:23:52
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/UyoUbYnmJuUH5-95Y63TWm63I1I.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/b2/77f84a-0c87-4eab-bf2f-03972ccce6c1/1/eRlLfyEzbcQUnYzzYbXN3Tm_wAg.roa
Signing time: Thu 20 Oct 2022 10:34:51 +0000
ROA not before: Thu 20 Oct 2022 10:34:51 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 7018
IP address blocks: 194.63.145.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:83:f4:f5:c8:96:7b:ba:6c:00:e6:63:69:d0:a8:c8:1d:59
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=532a146d89e626e507e7ef7963add35a6eb72352
Validity
Not Before: Oct 20 10:34:51 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=79194b7f21336dc4149d8cf361b5cddd39bfc008
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:94:af:5c:a7:00:28:65:e0:d1:74:ba:65:a8:2d:
b5:ea:84:39:6f:ef:cc:9a:c5:4d:b9:54:44:41:90:
86:bd:aa:45:cc:0d:65:d0:af:9c:ac:b1:b5:a8:44:
9f:9b:16:e5:5d:e9:6c:ee:08:f4:9b:48:c8:af:63:
95:f2:24:63:d7:6c:90:51:55:60:a8:46:ae:25:83:
df:51:94:14:cc:e4:c1:16:63:e6:9e:5e:26:07:09:
e0:97:b6:cf:af:98:7b:02:e6:fb:c1:ea:f9:31:00:
ae:1a:7b:90:b2:2d:83:9e:51:2a:95:74:a8:bd:4f:
a3:25:73:3c:01:cf:ed:a5:d4:d9:c1:5d:41:4f:a8:
68:08:06:73:6d:28:6b:1c:9b:ec:1b:3e:9b:9e:e0:
16:fd:8f:36:79:9c:87:e3:ab:2c:29:1b:72:1f:3a:
75:82:03:61:4c:d3:e7:b5:a5:7a:e3:01:16:b8:68:
51:05:77:df:dc:8f:58:78:97:f8:49:39:f2:74:e1:
04:a1:5c:b3:31:58:31:37:2d:f5:45:fa:9a:2a:6b:
bb:e1:9f:68:a9:00:8a:03:a5:55:a4:5e:bf:4f:89:
98:56:93:d4:28:da:53:42:7d:bd:28:cc:05:80:26:
3b:27:47:0c:cc:43:39:e6:3c:be:0e:1f:64:bb:4e:
a5:4d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
79:19:4B:7F:21:33:6D:C4:14:9D:8C:F3:61:B5:CD:DD:39:BF:C0:08
X509v3 Authority Key Identifier:
keyid:53:2A:14:6D:89:E6:26:E5:07:E7:EF:79:63:AD:D3:5A:6E:B7:23:52
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/UyoUbYnmJuUH5-95Y63TWm63I1I.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b2/77f84a-0c87-4eab-bf2f-03972ccce6c1/1/eRlLfyEzbcQUnYzzYbXN3Tm_wAg.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/b2/77f84a-0c87-4eab-bf2f-03972ccce6c1/1/UyoUbYnmJuUH5-95Y63TWm63I1I.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
194.63.145.0/24
Signature Algorithm: sha256WithRSAEncryption
90:57:9d:5a:06:79:52:f3:e0:21:ce:a9:4d:71:a2:a2:f1:67:
cd:8a:53:49:bd:ec:5b:96:5f:87:6d:47:b8:0e:02:0f:6b:d2:
77:bc:4a:42:2b:c8:aa:86:88:1e:5a:c6:3f:29:d1:2f:e0:18:
85:f7:78:e3:b2:76:14:20:dd:6a:26:ae:3c:d8:46:3b:b3:d6:
1a:c8:50:47:08:4d:07:a9:9f:2d:d7:71:0c:8d:78:5e:d7:70:
6e:1d:47:98:d4:c3:52:5e:50:d2:f1:58:70:df:df:0e:8f:bc:
3a:e8:8e:aa:5c:1d:55:b0:2e:ca:41:f8:36:e7:39:eb:0a:4c:
9a:69:47:0c:af:f8:d4:70:d4:33:30:dc:a2:7e:78:6e:4e:a0:
ee:36:24:82:a2:8a:df:2a:41:09:1d:89:a9:93:ea:20:40:41:
66:d5:e8:d5:1d:7f:80:2b:95:a2:35:6a:f8:cc:76:56:68:af:
a0:88:85:d8:06:1c:58:77:1c:7b:30:df:41:03:ac:e3:69:97:
f0:72:80:b7:eb:75:ca:5e:c4:fc:7b:e9:70:1a:f5:24:9d:f4:
67:71:69:a7:49:3b:28:58:c7:7f:3f:97:09:29:02:51:ce:e9:
c6:99:52:c4:a3:da:ee:5f:ae:13:6b:f6:48:21:91:af:1b:99:
9e:14:62:4d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Feb 17 07:59:21 2025 by rpki-client