![](/console.gif)
Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/bd/b4b509-4a06-4bc4-9384-53e410825676/1/t4di8BQad1o3PiH3889Mj46TCxA.roa
File: t4di8BQad1o3PiH3889Mj46TCxA.roa (raw, json)
Hash identifier: 679OHpQ0KXssXiIi4QZenYbhSxN8UUjTyZyBPG3Svo4=
Subject key identifier: B7:87:62:F0:14:1A:77:5A:37:3E:21:F7:F3:CF:4C:8F:8E:93:0B:10
Certificate issuer: /CN=4dbc0c0633cbef2e97fceac797633d4912f76f96
Certificate serial: 0183ABFF397E239393861B633F9C62D2311C
Authority key identifier: 4D:BC:0C:06:33:CB:EF:2E:97:FC:EA:C7:97:63:3D:49:12:F7:6F:96
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/TbwMBjPL7y6X_OrHl2M9SRL3b5Y.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/bd/b4b509-4a06-4bc4-9384-53e410825676/1/t4di8BQad1o3PiH3889Mj46TCxA.roa
Signing time: Thu 06 Oct 2022 06:32:53 +0000
ROA not before: Thu 06 Oct 2022 06:32:53 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 834
IP address blocks: 193.246.103.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:83:ab:ff:39:7e:23:93:93:86:1b:63:3f:9c:62:d2:31:1c
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4dbc0c0633cbef2e97fceac797633d4912f76f96
Validity
Not Before: Oct 6 06:32:53 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=b78762f0141a775a373e21f7f3cf4c8f8e930b10
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cb:45:17:c2:71:c9:fd:ef:25:94:12:4c:1c:70:
76:29:b8:0d:c2:be:ac:f2:8c:7c:43:8e:96:50:da:
5e:74:f1:2c:52:69:2a:d9:ac:db:0d:76:4f:8a:f7:
4f:5a:b6:1f:d2:b2:6b:d4:d3:f6:98:7c:d4:3d:09:
85:0f:b3:95:0d:dd:51:b9:c5:cf:5a:46:71:56:5e:
ea:91:7b:fb:61:87:16:b7:0c:c0:14:c5:7d:5b:66:
fe:ce:72:63:a1:2b:9a:f8:10:d3:c8:bc:41:32:92:
4a:9d:8d:66:e5:d5:7f:a6:7b:95:67:58:23:ad:3a:
da:5f:9c:4d:23:b3:d6:56:b2:86:a8:42:b4:0d:41:
fd:6f:6c:eb:ce:6d:0f:91:8b:3f:75:8d:8a:31:4b:
7e:f0:1a:4b:95:e9:33:68:49:7c:40:ac:05:6b:ab:
64:e5:bf:b9:8f:1a:66:6a:d1:2f:69:76:b7:f0:18:
f1:57:66:2a:bd:51:d8:cf:aa:e4:68:54:d0:08:6b:
f7:3e:04:ef:f3:47:56:63:22:b5:b9:dc:d6:f6:e7:
8a:7d:1e:15:c0:c0:40:97:46:16:e9:4a:4a:6e:51:
53:ae:07:d4:6e:97:29:36:a0:13:49:ba:53:a1:88:
c1:61:ab:4c:a8:a7:39:43:cf:0e:c8:56:42:b4:96:
9c:23
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B7:87:62:F0:14:1A:77:5A:37:3E:21:F7:F3:CF:4C:8F:8E:93:0B:10
X509v3 Authority Key Identifier:
keyid:4D:BC:0C:06:33:CB:EF:2E:97:FC:EA:C7:97:63:3D:49:12:F7:6F:96
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/TbwMBjPL7y6X_OrHl2M9SRL3b5Y.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/bd/b4b509-4a06-4bc4-9384-53e410825676/1/t4di8BQad1o3PiH3889Mj46TCxA.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/bd/b4b509-4a06-4bc4-9384-53e410825676/1/TbwMBjPL7y6X_OrHl2M9SRL3b5Y.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
193.246.103.0/24
Signature Algorithm: sha256WithRSAEncryption
ea:17:39:09:1f:6d:75:72:08:79:22:bf:5f:6e:39:74:53:4f:
0f:48:7a:a2:79:52:db:4b:94:22:43:0d:12:ef:02:86:27:db:
f4:bb:92:98:95:7d:ae:59:6c:78:76:ad:15:a2:36:0f:51:f6:
ed:09:93:48:03:ba:34:13:6a:02:79:df:e0:7b:03:a3:4a:bc:
e9:2a:da:57:bd:2b:11:38:fd:93:4a:72:8c:30:25:ea:72:3a:
1f:60:6b:46:18:12:ff:1e:4f:93:30:39:c0:59:6e:b1:e2:42:
27:0c:61:91:c0:f3:40:29:d6:9e:52:b4:98:9f:44:d3:a7:d2:
c9:dd:ed:a7:75:7b:ae:c7:d3:68:67:ef:f2:1a:0d:96:31:0e:
f1:8a:03:85:ab:b3:86:44:42:70:f7:0d:ec:c6:b8:ef:bf:85:
da:b6:ac:71:23:9e:f3:e0:ab:63:d2:15:46:fb:0d:d1:be:f0:
85:08:a7:de:53:3b:cb:99:b2:f5:c3:90:05:84:19:70:7a:14:
cc:ff:79:d9:4c:65:0c:2d:38:86:c1:78:a4:94:b7:61:da:c5:
ab:c6:99:99:82:ef:01:f0:b0:6f:27:08:a5:7a:d7:c0:83:89:
08:a0:c3:c7:27:ef:8d:23:27:c9:0a:dc:d7:b4:ca:cd:b8:4f:
6a:2c:a3:13
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Feb 17 08:19:18 2025 by rpki-client