![](/console.gif)
Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c6/5da1dc-f4b5-4528-8caf-454f499e3107/1/IyUoQ_svjjntJ1J6-_J6WTPwXyU.roa
File: IyUoQ_svjjntJ1J6-_J6WTPwXyU.roa (raw, json)
Hash identifier: JGg8xt6/OClKk019oHrmNnk3SYmfOypvCnHFlpTvCAg=
Subject key identifier: 23:25:28:43:FB:2F:8E:39:ED:27:52:7A:FB:F2:7A:59:33:F0:5F:25
Certificate issuer: /CN=b760d60d705eeedf3f54c02fd11e7c18de904d2f
Certificate serial: 01064721
Authority key identifier: B7:60:D6:0D:70:5E:EE:DF:3F:54:C0:2F:D1:1E:7C:18:DE:90:4D:2F
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/t2DWDXBe7t8_VMAv0R58GN6QTS8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c6/5da1dc-f4b5-4528-8caf-454f499e3107/1/IyUoQ_svjjntJ1J6-_J6WTPwXyU.roa
Signing time: Mon 07 Mar 2022 17:31:15 +0000
ROA not before: Mon 07 Mar 2022 17:31:15 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 1239
IP address blocks: 146.19.159.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 17188641 (0x1064721)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=b760d60d705eeedf3f54c02fd11e7c18de904d2f
Validity
Not Before: Mar 7 17:31:15 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=23252843fb2f8e39ed27527afbf27a5933f05f25
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a8:fc:23:8c:d2:74:05:ef:10:c7:19:3b:bd:7c:
56:71:97:a4:a1:d7:9e:ad:ac:83:e2:e3:f3:65:6e:
74:75:ce:88:cb:69:86:bc:7a:54:45:9c:ee:da:54:
39:12:23:97:2d:09:bc:49:cf:02:68:87:0d:44:02:
68:00:8a:66:77:ef:69:5c:3a:ca:e5:5e:30:f5:0a:
b7:ec:6e:4a:f5:7e:ae:f5:54:62:71:8f:32:e9:66:
6a:fd:72:16:9e:d1:91:8b:a2:aa:7b:79:f8:9f:71:
06:57:31:f5:8d:bd:28:4c:83:5a:d4:de:17:c1:d4:
19:cd:54:43:17:29:15:97:03:34:5f:be:2c:71:c3:
92:d8:54:d5:c5:0f:46:9a:0f:cf:cb:42:06:58:9e:
6f:3c:2d:56:95:75:07:74:74:df:c1:1a:fd:06:24:
9b:7b:27:af:11:37:bf:05:05:b3:f6:da:f7:32:8e:
20:b2:ca:e6:a6:42:d1:eb:9e:1c:5b:86:e9:55:d9:
87:60:53:bb:64:8c:62:46:1b:6b:1e:13:49:93:7a:
b8:10:b0:2e:87:0f:59:7d:aa:9d:03:2f:62:7f:30:
74:e5:3d:57:d7:2c:4d:2d:bb:1f:a1:fc:be:37:c0:
3b:d3:c4:da:fb:68:12:66:20:79:6d:b4:aa:bd:6b:
21:39
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
23:25:28:43:FB:2F:8E:39:ED:27:52:7A:FB:F2:7A:59:33:F0:5F:25
X509v3 Authority Key Identifier:
keyid:B7:60:D6:0D:70:5E:EE:DF:3F:54:C0:2F:D1:1E:7C:18:DE:90:4D:2F
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/t2DWDXBe7t8_VMAv0R58GN6QTS8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c6/5da1dc-f4b5-4528-8caf-454f499e3107/1/IyUoQ_svjjntJ1J6-_J6WTPwXyU.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c6/5da1dc-f4b5-4528-8caf-454f499e3107/1/t2DWDXBe7t8_VMAv0R58GN6QTS8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
146.19.159.0/24
Signature Algorithm: sha256WithRSAEncryption
36:b5:d4:70:92:3c:49:f8:a7:10:f8:42:c9:b7:af:3b:07:29:
e0:06:31:e8:f1:9c:08:58:80:71:7e:09:2c:56:be:13:2b:34:
5e:3f:40:ca:a1:5e:3a:54:1a:2d:c9:f1:17:e9:fe:14:43:b4:
48:87:62:50:fd:4e:1e:1c:54:71:3d:d7:d0:f6:42:a0:1e:4f:
5c:6b:d4:80:e0:7f:06:52:6e:49:c3:c0:a2:72:46:08:1a:54:
31:89:cf:b7:3d:16:3d:b9:6f:e8:3d:f1:1e:5b:62:43:fe:20:
31:f3:b4:48:b4:49:7d:28:47:ff:08:7d:ed:42:82:e9:77:56:
82:06:bf:8b:13:a9:c5:46:f8:c5:8d:41:db:d6:7e:d1:c2:0d:
86:02:ee:9a:b9:5f:9a:f2:24:3a:54:45:d9:61:8d:09:1d:1c:
02:d2:fd:bf:60:e9:04:e8:b7:7d:c8:a3:fb:26:35:e6:69:b4:
0e:01:6f:a9:26:f3:4e:07:36:e7:c2:f5:e9:11:e4:2f:d9:0b:
ed:e1:a2:76:7d:36:75:09:a4:95:89:e7:48:1d:2d:a8:7c:69:
c3:b0:1a:93:72:3b:e6:6b:60:f5:61:88:f4:bb:5c:29:27:61:
96:6a:b5:39:86:7c:41:54:e2:c7:c4:be:c1:72:55:0f:5b:80:
7b:60:29:08
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Feb 17 08:05:46 2025 by rpki-client