![](/console.gif)
Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c7/f0b09b-86b3-48b5-b71b-e0aa86d250e3/1/IABzXsegUMABCZ0PhHdO5Sc8-hg.roa
File: IABzXsegUMABCZ0PhHdO5Sc8-hg.roa (raw, json)
Hash identifier: z/fy6JNFC6OO/wrzCtqE0Dfl2YaBDqjhK3zHBylIA2c=
Subject key identifier: 20:00:73:5E:C7:A0:50:C0:01:09:9D:0F:84:77:4E:E5:27:3C:FA:18
Certificate issuer: /CN=db0ae651defb0666c22b2e5d7add5653487076af
Certificate serial: 021A75ED
Authority key identifier: DB:0A:E6:51:DE:FB:06:66:C2:2B:2E:5D:7A:DD:56:53:48:70:76:AF
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/2wrmUd77BmbCKy5det1WU0hwdq8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c7/f0b09b-86b3-48b5-b71b-e0aa86d250e3/1/IABzXsegUMABCZ0PhHdO5Sc8-hg.roa
Signing time: Sat 01 Jan 2022 04:56:49 +0000
ROA not before: Sat 01 Jan 2022 04:56:49 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 14618
IP address blocks: 193.105.212.0/24 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 35288557 (0x21a75ed)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=db0ae651defb0666c22b2e5d7add5653487076af
Validity
Not Before: Jan 1 04:56:49 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=2000735ec7a050c001099d0f84774ee5273cfa18
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cc:1a:d1:55:47:94:35:c6:13:4f:cb:d9:87:24:
21:1a:5f:70:2a:ae:03:f0:ef:c1:bd:9e:66:81:a1:
0b:7f:11:b2:78:f1:1a:33:f4:90:90:06:0f:86:fd:
a4:f5:5b:71:89:21:a8:a9:2a:00:1a:02:57:b5:c3:
f7:06:91:1d:fe:5e:df:a2:66:c8:68:60:a8:c6:42:
82:50:08:7f:4d:dc:1d:af:c1:c1:54:32:25:16:8c:
7d:e3:fc:62:e5:de:e1:86:40:34:ed:90:55:3f:0b:
1d:e6:82:07:1d:1a:ec:ff:38:3a:59:47:08:be:3d:
7b:64:27:c1:ee:cd:cd:99:bf:f2:c3:a2:cd:fb:07:
c6:0d:0b:c4:d2:98:73:fd:f5:5f:1f:23:25:b8:db:
57:35:9b:89:95:91:40:70:37:b7:ee:1f:f2:33:6e:
5a:7a:76:f3:cd:6d:2f:01:64:2d:b9:4d:05:1d:7c:
35:98:60:dc:4b:27:72:d0:cf:bb:d0:d8:4f:35:ce:
f9:b2:23:e3:c2:a3:60:c2:ba:dc:bd:e8:e5:75:83:
5e:db:14:8a:22:80:19:80:dd:65:8f:0a:2c:62:09:
8f:16:f6:04:48:35:37:8f:bb:80:0e:28:75:46:79:
eb:61:08:eb:3a:73:a9:58:dc:73:08:5f:61:ec:ef:
48:3b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
20:00:73:5E:C7:A0:50:C0:01:09:9D:0F:84:77:4E:E5:27:3C:FA:18
X509v3 Authority Key Identifier:
keyid:DB:0A:E6:51:DE:FB:06:66:C2:2B:2E:5D:7A:DD:56:53:48:70:76:AF
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/2wrmUd77BmbCKy5det1WU0hwdq8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c7/f0b09b-86b3-48b5-b71b-e0aa86d250e3/1/IABzXsegUMABCZ0PhHdO5Sc8-hg.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c7/f0b09b-86b3-48b5-b71b-e0aa86d250e3/1/2wrmUd77BmbCKy5det1WU0hwdq8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
193.105.212.0/24
Signature Algorithm: sha256WithRSAEncryption
81:d5:cb:a1:fa:04:44:10:ac:2a:48:8f:17:ed:66:47:5f:db:
7f:23:a9:7f:0d:98:ed:44:13:7b:bf:f2:2b:6e:02:05:9e:1c:
18:23:28:e3:27:21:0d:fe:47:b1:a0:0f:02:6f:1f:66:18:4f:
be:5c:a7:ae:5e:99:42:f3:d0:1f:1a:47:65:9b:a2:32:df:66:
c4:8e:76:a6:c2:c8:e0:0d:d6:f6:e1:1a:b9:b4:12:2c:f0:73:
5e:bb:2d:45:1f:66:57:df:53:b5:e1:4a:ab:ed:5a:fa:3a:13:
38:65:a2:a1:d1:6f:81:11:c9:0a:03:e6:cd:28:7a:1c:6f:84:
56:fa:9f:96:79:24:9d:f1:71:1c:60:98:b4:c3:fa:1c:a5:ff:
a9:f1:a1:f2:0c:c4:a7:fb:8c:f3:04:82:81:b5:2f:9f:9d:09:
6f:91:1e:2f:9f:3e:af:01:e2:9d:d6:64:dc:e8:83:7f:28:ab:
bf:60:6b:8d:cf:e6:3b:1a:d9:0b:f8:37:15:9f:e4:f6:ac:b8:
f1:b6:9a:44:4a:3a:0a:c9:71:a4:03:55:88:f5:df:62:03:56:
e1:22:5a:59:56:ca:10:33:aa:d7:d3:42:11:10:d0:a4:47:3a:
4c:f9:df:72:82:66:a3:70:d4:7f:7a:16:85:fa:bf:4c:e7:16:
56:fc:c5:32
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Feb 17 07:49:33 2025 by rpki-client