![](/console.gif)
Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/bd/1bd319-cb0d-4ea8-aee5-32c967f4d20b/1/Pjp5IwspejfgJCAdFQhBSAOmn9U.roa
File: Pjp5IwspejfgJCAdFQhBSAOmn9U.roa (raw, json)
Hash identifier: H6iB++QyaW+ePLdGSkYTcCUpKKPf2jtFZPlTxtfclnE=
Subject key identifier: 3E:3A:79:23:0B:29:7A:37:E0:24:20:1D:15:08:41:48:03:A6:9F:D5
Certificate issuer: /CN=6e582ea417520f9300c6e0e15eccab41bfbe11b0
Certificate serial: 0491AA64
Authority key identifier: 6E:58:2E:A4:17:52:0F:93:00:C6:E0:E1:5E:CC:AB:41:BF:BE:11:B0
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/blgupBdSD5MAxuDhXsyrQb--EbA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/bd/1bd319-cb0d-4ea8-aee5-32c967f4d20b/1/Pjp5IwspejfgJCAdFQhBSAOmn9U.roa
Signing time: Sat 01 Jan 2022 10:55:05 +0000
ROA not before: Sat 01 Jan 2022 10:55:05 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 24631
IP address blocks: 194.150.70.0/24 maxlen: 24
194.9.80.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 76655204 (0x491aa64)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=6e582ea417520f9300c6e0e15eccab41bfbe11b0
Validity
Not Before: Jan 1 10:55:05 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=3e3a79230b297a37e024201d1508414803a69fd5
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a0:11:84:cf:00:3c:99:7b:c1:a0:00:fb:0c:05:
b3:7b:cd:ca:78:0d:ae:ad:2f:64:b7:ef:ca:9f:24:
f3:c5:3d:17:de:24:02:58:e0:19:f9:92:de:bd:b7:
cd:29:9e:19:0d:4b:7b:5b:c1:b8:13:d4:d6:52:b7:
75:b3:cd:c4:5b:b4:a3:d0:ec:3f:41:aa:72:58:0c:
ab:8b:09:67:f6:21:24:a5:54:e3:56:f9:72:ab:db:
e6:37:d6:37:f2:6d:98:90:4c:48:4b:46:86:3d:db:
5e:22:99:f1:6b:99:af:d9:e6:91:e0:e7:6a:26:43:
84:98:bd:eb:b6:57:ad:0e:77:1a:92:63:cc:2a:16:
4a:ec:ec:8a:0c:06:97:5d:c3:58:95:28:6c:79:e1:
f9:79:cc:0e:db:8a:cd:47:45:b6:e0:86:f7:cd:3c:
67:39:02:e7:44:a1:8e:26:02:86:d1:e5:27:94:44:
a7:c4:49:44:5c:d8:0a:06:f7:01:8c:b6:4b:6a:08:
2e:ae:4f:23:fd:bb:43:81:8e:2a:c0:9a:7c:2e:53:
9e:71:43:93:f0:ef:bb:68:2a:26:db:28:ef:7e:b6:
88:c4:a4:65:40:47:45:81:ff:cd:9e:ea:8f:94:19:
03:91:cf:6a:28:38:f2:56:a9:6b:40:23:59:41:18:
c1:6f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
3E:3A:79:23:0B:29:7A:37:E0:24:20:1D:15:08:41:48:03:A6:9F:D5
X509v3 Authority Key Identifier:
keyid:6E:58:2E:A4:17:52:0F:93:00:C6:E0:E1:5E:CC:AB:41:BF:BE:11:B0
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/blgupBdSD5MAxuDhXsyrQb--EbA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/bd/1bd319-cb0d-4ea8-aee5-32c967f4d20b/1/Pjp5IwspejfgJCAdFQhBSAOmn9U.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/bd/1bd319-cb0d-4ea8-aee5-32c967f4d20b/1/blgupBdSD5MAxuDhXsyrQb--EbA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
194.9.80.0/24
194.150.70.0/24
Signature Algorithm: sha256WithRSAEncryption
c7:19:c7:6a:c0:8b:9e:61:24:e3:2d:dd:bc:b9:41:46:a6:d1:
eb:85:6a:08:e2:58:5b:ce:6c:fb:a5:e7:da:85:04:d8:27:9c:
f4:82:1f:7c:97:1a:46:69:c6:60:1b:7b:d1:e6:52:36:d0:a1:
2d:8b:bb:2e:df:ad:bf:9e:d1:64:18:6c:97:50:c6:0c:68:ba:
4a:bb:3b:47:7b:c1:d8:6b:93:68:42:5c:a2:cd:98:a4:a7:71:
bb:77:cc:ac:59:0c:d0:b0:f1:f1:3c:25:f6:3f:ae:9b:57:ba:
1a:38:e7:d9:27:3e:e0:56:0b:ca:d3:74:31:a0:d8:2a:9d:76:
ab:bf:45:18:31:eb:a7:d7:18:3b:4c:42:68:e9:92:e6:f0:2a:
74:10:32:6c:1a:97:67:03:e9:8a:69:be:02:a0:c8:14:3e:8d:
28:c3:25:96:46:85:e5:a4:c1:89:6e:6c:37:ef:55:3e:5c:66:
2f:42:5f:c3:69:a5:46:57:5d:64:d6:1c:89:2a:4e:02:d7:9e:
45:06:55:87:bd:23:13:7e:58:92:15:f1:d3:22:30:3a:05:12:
4c:3e:7b:70:c9:1f:60:0b:34:3d:dd:07:cc:62:fa:d1:67:83:
e6:d8:a9:72:1b:05:21:de:99:1a:fc:0d:20:85:e7:2e:6b:e6:
c0:6c:6e:52
-----BEGIN CERTIFICATE-----
MIIE9TCCA92gAwIBAgIEBJGqZDANBgkqhkiG9w0BAQsFADAzMTEwLwYDVQQDEyg2
ZTU4MmVhNDE3NTIwZjkzMDBjNmUwZTE1ZWNjYWI0MWJmYmUxMWIwMB4XDTIyMDEw
MTEwNTUwNVoXDTIzMDcwMTAwMDAwMFowMzExMC8GA1UEAxMoM2UzYTc5MjMwYjI5
N2EzN2UwMjQyMDFkMTUwODQxNDgwM2E2OWZkNTCCASIwDQYJKoZIhvcNAQEBBQAD
ggEPADCCAQoCggEBAKARhM8APJl7waAA+wwFs3vNyngNrq0vZLfvyp8k88U9F94k
AljgGfmS3r23zSmeGQ1Le1vBuBPU1lK3dbPNxFu0o9DsP0GqclgMq4sJZ/YhJKVU
41b5cqvb5jfWN/JtmJBMSEtGhj3bXiKZ8WuZr9nmkeDnaiZDhJi967ZXrQ53GpJj
zCoWSuzsigwGl13DWJUobHnh+XnMDtuKzUdFtuCG9808ZzkC50ShjiYChtHlJ5RE
p8RJRFzYCgb3AYy2S2oILq5PI/27Q4GOKsCafC5TnnFDk/Dvu2gqJtso7362iMSk
ZUBHRYH/zZ7qj5QZA5HPaig48lapa0AjWUEYwW8CAwEAAaOCAg8wggILMB0GA1Ud
DgQWBBQ+OnkjCyl6N+AkIB0VCEFIA6af1TAfBgNVHSMEGDAWgBRuWC6kF1IPkwDG
4OFezKtBv74RsDAOBgNVHQ8BAf8EBAMCB4AwZAYIKwYBBQUHAQEEWDBWMFQGCCsG
AQUFBzAChkhyc3luYzovL3Jwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxU
L2JsZ3VwQmRTRDVNQXh1RGhYc3lyUWItLUViQS5jZXIwgY0GCCsGAQUFBwELBIGA
MH4wfAYIKwYBBQUHMAuGcHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5
L0RFRkFVTFQvYmQvMWJkMzE5LWNiMGQtNGVhOC1hZWU1LTMyYzk2N2Y0ZDIwYi8x
L1BqcDVJd3NwZWpmZ0pDQWRGUWhCU0FPbW45VS5yb2EwgYEGA1UdHwR6MHgwdqB0
oHKGcHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvYmQv
MWJkMzE5LWNiMGQtNGVhOC1hZWU1LTMyYzk2N2Y0ZDIwYi8xL2JsZ3VwQmRTRDVN
QXh1RGhYc3lyUWItLUViQS5jcmwwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAl
BggrBgEFBQcBBwEB/wQWMBQwEgQCAAEwDAMEAMIJUAMEAMKWRjANBgkqhkiG9w0B
AQsFAAOCAQEAxxnHasCLnmEk4y3dvLlBRqbR64VqCOJYW85s+6Xn2oUE2Cec9IIf
fJcaRmnGYBt70eZSNtChLYu7Lt+tv57RZBhsl1DGDGi6Srs7R3vB2GuTaEJcos2Y
pKdxu3fMrFkM0LDx8Twl9j+um1e6Gjjn2Sc+4FYLytN0MaDYKp12q79FGDHrp9cY
O0xCaOmS5vAqdBAybBqXZwPpimm+AqDIFD6NKMMllkaF5aTBiW5sN+9VPlxmL0Jf
w2mlRlddZNYciSpOAteeRQZVh70jE35YkhXx0yIwOgUSTD57cMkfYAs0Pd0HzGL6
0WeD5tipchsFId6ZGvwNIIXnLmvmwGxuUg==
-----END CERTIFICATE-----
Generated at Mon Feb 17 08:12:16 2025 by rpki-client