![](/console.gif)
Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d7/eb239a-33c8-4dbd-bc96-3259496e7c5f/1/6i-68M1NZGva-Zq9C6VbzDMlLr8.roa
File: 6i-68M1NZGva-Zq9C6VbzDMlLr8.roa (raw, json)
Hash identifier: yEiQuMisHxNuJcPjSdB/ngM1YYr+27pVFsNP1ejbXAU=
Subject key identifier: EA:2F:BA:F0:CD:4D:64:6B:DA:F9:9A:BD:0B:A5:5B:CC:33:25:2E:BF
Certificate issuer: /CN=624039399017fa093dc8d503799f6ca403f0bd05
Certificate serial: 0582BB4D
Authority key identifier: 62:40:39:39:90:17:FA:09:3D:C8:D5:03:79:9F:6C:A4:03:F0:BD:05
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/YkA5OZAX-gk9yNUDeZ9spAPwvQU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d7/eb239a-33c8-4dbd-bc96-3259496e7c5f/1/6i-68M1NZGva-Zq9C6VbzDMlLr8.roa
Signing time: Fri 03 Jun 2022 15:26:20 +0000
ROA not before: Fri 03 Jun 2022 15:26:20 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 7029
IP address blocks: 45.95.212.0/22 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 92453709 (0x582bb4d)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=624039399017fa093dc8d503799f6ca403f0bd05
Validity
Not Before: Jun 3 15:26:20 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=ea2fbaf0cd4d646bdaf99abd0ba55bcc33252ebf
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8a:94:46:17:4c:9f:4e:5a:94:96:60:c2:0c:2f:
99:59:0d:34:e3:ea:88:03:05:f4:15:6f:ea:ac:74:
02:47:36:59:c6:b2:a8:7c:2f:64:cb:2f:1d:8e:b0:
5a:e0:df:b5:d7:ad:f5:16:d6:e5:0f:7a:43:a6:3a:
06:ff:d0:c8:7a:51:85:65:c6:ea:6c:a3:50:67:86:
df:2a:68:be:24:a8:d6:70:04:75:05:52:ba:7c:f7:
e2:3e:44:23:a9:49:65:6c:e7:90:e0:14:9b:d1:fa:
47:57:64:7d:b0:ad:3e:9a:54:24:c6:98:cc:fa:ef:
8b:06:72:b5:59:8f:25:97:41:49:50:13:c5:7b:c4:
71:a5:e0:51:7f:ec:db:9b:d2:f5:02:3d:fd:12:8d:
4f:fd:b2:bc:ec:97:4b:c2:c1:31:26:c1:3a:00:81:
e1:d1:20:76:da:ac:32:ac:69:e7:c7:18:71:95:5e:
c2:34:9f:6d:de:da:43:fc:c9:ce:86:a7:39:db:f1:
e6:24:65:3a:c6:f6:ec:a2:ba:33:ff:43:53:ef:bb:
07:49:9f:24:b3:5d:85:de:7f:f3:36:2d:e0:b3:67:
9d:4b:02:97:85:a5:ba:b1:00:3b:35:08:6b:ab:4a:
79:d0:e0:9e:f3:25:fd:41:38:59:34:57:43:8a:9d:
de:c9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
EA:2F:BA:F0:CD:4D:64:6B:DA:F9:9A:BD:0B:A5:5B:CC:33:25:2E:BF
X509v3 Authority Key Identifier:
keyid:62:40:39:39:90:17:FA:09:3D:C8:D5:03:79:9F:6C:A4:03:F0:BD:05
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/YkA5OZAX-gk9yNUDeZ9spAPwvQU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d7/eb239a-33c8-4dbd-bc96-3259496e7c5f/1/6i-68M1NZGva-Zq9C6VbzDMlLr8.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/d7/eb239a-33c8-4dbd-bc96-3259496e7c5f/1/YkA5OZAX-gk9yNUDeZ9spAPwvQU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
45.95.212.0/22
Signature Algorithm: sha256WithRSAEncryption
50:4e:25:89:10:68:63:c7:9c:1e:7a:05:9c:07:08:0f:bd:9c:
6f:3f:e8:4a:de:a6:78:27:0f:59:1c:9b:a0:af:75:b8:88:04:
76:d6:f6:4d:ac:d4:82:0c:ff:b2:76:25:22:71:3d:e5:d5:cf:
bb:b9:34:3e:27:f7:f0:f0:ea:8c:ea:54:5e:17:87:88:a2:07:
8f:02:ec:e7:86:4e:f4:5a:68:a5:8e:27:24:02:bc:4b:77:60:
eb:46:30:6e:54:ef:19:ba:08:e4:b9:df:da:6a:34:2c:86:ba:
ca:10:eb:b7:c9:6d:58:a8:19:ce:62:63:cc:8e:39:f4:2a:e6:
7b:c6:c5:3e:0a:7c:bd:a4:01:b8:da:ca:e6:6f:61:c8:d2:9f:
ea:f3:23:c1:1c:c2:5c:88:df:ff:6f:35:ea:57:60:7b:e5:13:
bd:41:7f:4f:db:a0:e1:53:a8:81:48:0a:ba:f8:f0:cb:b5:50:
a2:a7:89:83:e9:81:a1:12:cb:a9:7f:86:59:cd:b7:fe:ca:e4:
d3:25:cb:6d:ca:8a:5f:a6:97:aa:20:71:28:3c:b4:c3:f1:7c:
c8:b3:1e:29:7f:71:ee:bb:5c:90:a5:55:8c:07:4c:17:58:cb:
37:b2:d0:be:dc:98:09:e3:ad:0a:b2:84:dd:9a:66:03:49:85:
eb:b6:97:f2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Feb 17 07:33:53 2025 by rpki-client