![](/console.gif)
Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b6/55fdf3-4d6a-4582-b9b8-4f8cfeb210d9/1/7H5h9big6gIJDG5_aBpZRywflZ0.roa
File: 7H5h9big6gIJDG5_aBpZRywflZ0.roa (raw, json)
Hash identifier: wClu7K/tR7OdO7kYL//1j/qwwAw7Bk5FHIFSqfCrIVw=
Subject key identifier: EC:7E:61:F5:B8:A0:EA:02:09:0C:6E:7F:68:1A:59:47:2C:1F:95:9D
Certificate issuer: /CN=c1461dbd7744837b8f9a3eacf60ed79d66980474
Certificate serial: 07CCCE22
Authority key identifier: C1:46:1D:BD:77:44:83:7B:8F:9A:3E:AC:F6:0E:D7:9D:66:98:04:74
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/wUYdvXdEg3uPmj6s9g7XnWaYBHQ.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/b6/55fdf3-4d6a-4582-b9b8-4f8cfeb210d9/1/7H5h9big6gIJDG5_aBpZRywflZ0.roa
Signing time: Wed 26 Jan 2022 21:26:45 +0000
ROA not before: Wed 26 Jan 2022 21:26:45 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 197595
IP address blocks: 193.187.91.0/24 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 130862626 (0x7ccce22)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=c1461dbd7744837b8f9a3eacf60ed79d66980474
Validity
Not Before: Jan 26 21:26:45 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=ec7e61f5b8a0ea02090c6e7f681a59472c1f959d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b8:ba:ee:6d:75:2d:ff:f6:98:4b:35:e6:1a:b3:
87:4a:c0:fe:3b:f7:95:a8:1a:b3:36:a0:72:07:33:
e2:8e:f2:bd:74:f5:8d:20:04:c3:3b:cd:65:38:13:
68:9f:ba:a1:b4:b1:62:df:be:2e:88:e1:fc:80:da:
6f:3b:07:1f:06:2b:31:2b:5a:af:54:5e:38:c7:b2:
63:04:e2:04:a2:33:30:c1:ce:3c:ce:ad:9c:e6:ff:
9a:93:27:0e:4d:94:b8:c9:c2:e2:56:f3:33:85:6f:
45:1a:5c:16:05:0b:94:b8:71:3a:fc:dd:b2:1c:b9:
e1:19:26:cf:6f:0f:f4:ac:4c:83:ab:01:1a:13:0d:
4f:09:7d:4a:20:1d:e8:3d:9a:00:fc:b0:76:1c:63:
cf:c0:3a:b9:41:aa:18:f2:57:f4:f3:8f:74:98:d6:
e1:ad:77:3b:96:d1:9e:9e:39:5b:87:ca:a8:12:7b:
0e:c6:11:aa:23:2f:54:53:77:18:1b:6c:21:74:be:
57:4b:61:ac:ba:9c:3f:62:df:16:d3:31:8d:72:16:
ef:89:c2:8a:67:ad:53:20:3b:ab:d5:89:d8:6a:24:
ae:a9:6b:6d:41:4d:aa:ba:55:16:15:28:9b:6d:7f:
93:72:f0:47:27:2d:a7:d6:46:78:d1:36:21:82:56:
b3:99
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
EC:7E:61:F5:B8:A0:EA:02:09:0C:6E:7F:68:1A:59:47:2C:1F:95:9D
X509v3 Authority Key Identifier:
keyid:C1:46:1D:BD:77:44:83:7B:8F:9A:3E:AC:F6:0E:D7:9D:66:98:04:74
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/wUYdvXdEg3uPmj6s9g7XnWaYBHQ.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b6/55fdf3-4d6a-4582-b9b8-4f8cfeb210d9/1/7H5h9big6gIJDG5_aBpZRywflZ0.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/b6/55fdf3-4d6a-4582-b9b8-4f8cfeb210d9/1/wUYdvXdEg3uPmj6s9g7XnWaYBHQ.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
193.187.91.0/24
Signature Algorithm: sha256WithRSAEncryption
08:b8:4b:f5:3f:5e:3c:37:43:fd:0f:f4:78:10:4a:ba:06:bc:
f9:e5:e7:a6:a5:03:00:81:78:27:66:ad:e8:1f:9a:48:2e:b9:
6f:e0:0f:48:17:3e:28:3b:f6:f9:fe:68:c5:04:b4:47:14:b0:
66:d4:c4:76:5b:6d:d8:ec:aa:ac:34:29:15:e0:c0:de:6b:ae:
ec:7a:60:b1:88:60:ac:9b:84:a7:63:d1:ec:f7:08:0b:33:64:
63:5e:64:da:6d:68:3c:b9:49:a6:15:41:4f:98:ad:d4:3b:30:
be:ec:af:c4:8f:23:f0:12:94:4a:24:fc:29:de:4f:ca:22:d5:
70:57:42:33:b4:e0:80:6a:4b:24:10:16:db:de:ce:ba:12:b7:
d3:02:29:60:d5:0b:43:72:b6:9c:36:a5:0e:fe:1e:7a:df:0b:
d6:4f:f8:4b:a3:8b:c2:a9:98:c8:c1:3f:fe:a3:f2:5d:65:3e:
ef:a2:5b:ab:da:44:43:40:b0:75:7d:c8:e7:5b:c3:0b:2b:da:
39:7b:f4:e3:b6:11:e6:3b:9b:c6:cc:40:2f:f1:89:ea:51:32:
05:ed:ec:66:82:91:b0:48:f5:de:18:e9:64:3a:58:bf:31:ce:
67:f6:ab:61:27:c9:ed:59:d0:4e:ea:1c:b6:c3:ce:0b:96:6c:
a0:9f:22:4f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Feb 17 07:32:50 2025 by rpki-client