![](/console.gif)
Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d9/680b78-96af-4a85-ac02-943d03321326/1/tWW3ubAsytuOw9s94gPTsks6AlU.roa
File: tWW3ubAsytuOw9s94gPTsks6AlU.roa (raw, json)
Hash identifier: yeJnrxUEPkPYvKEDHUNpSAfXg8m2NoY0EdS93I13wSg=
Subject key identifier: B5:65:B7:B9:B0:2C:CA:DB:8E:C3:DB:3D:E2:03:D3:B2:4B:3A:02:55
Certificate issuer: /CN=2135c7f571eefeb67404ab6c45fd475551adaf1b
Certificate serial: 01942748758A82FF0CD4C9507B7912CDCE36
Authority key identifier: 21:35:C7:F5:71:EE:FE:B6:74:04:AB:6C:45:FD:47:55:51:AD:AF:1B
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/ITXH9XHu_rZ0BKtsRf1HVVGtrxs.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d9/680b78-96af-4a85-ac02-943d03321326/1/tWW3ubAsytuOw9s94gPTsks6AlU.roa
Signing time: Thu 02 Jan 2025 13:50:47 +0000
ROA not before: Thu 02 Jan 2025 13:50:47 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 205332
IP address blocks: 193.180.93.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:27:48:75:8a:82:ff:0c:d4:c9:50:7b:79:12:cd:ce:36
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2135c7f571eefeb67404ab6c45fd475551adaf1b
Validity
Not Before: Jan 2 13:50:47 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=b565b7b9b02ccadb8ec3db3de203d3b24b3a0255
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ac:57:43:c0:86:db:63:9b:81:50:3c:34:3b:f4:
00:84:e5:5c:5a:ae:d0:f4:6a:0f:17:3f:14:a3:8d:
d6:ff:32:40:5e:4f:46:22:59:4f:13:5c:b8:04:d5:
09:8e:44:ad:13:3f:4b:db:48:3a:85:88:38:e7:33:
d8:a7:13:8e:1e:68:59:5d:43:db:89:51:4c:c8:63:
43:7f:b6:47:9f:41:8e:e1:65:c1:0a:75:5e:d4:20:
f0:83:94:bf:c0:23:bd:2c:8d:fe:e4:61:9a:ab:4e:
b1:16:b6:fc:70:89:e2:92:f1:e3:9f:08:a8:26:56:
f0:79:0d:64:68:a7:38:71:e7:32:f3:5e:e7:cf:82:
11:8b:6e:23:ec:2d:03:a2:49:62:18:36:09:81:04:
63:a6:ce:51:a6:ae:5c:21:eb:c1:87:15:3b:a4:81:
d8:c5:82:82:16:55:ca:00:98:83:4b:39:da:b2:e3:
1a:93:c8:ad:e8:a6:cc:0f:ef:6d:c8:9e:f5:62:69:
8d:e2:d1:69:31:52:f7:3d:ab:08:11:26:47:13:98:
0e:a1:c4:e2:8b:c1:87:bd:27:f3:fb:b4:a8:83:25:
ac:d7:8b:ce:91:78:78:10:2a:92:24:f9:7d:36:6e:
16:f9:11:8b:9f:cf:2d:2d:d2:6b:fa:14:7d:b3:1c:
6f:fd
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B5:65:B7:B9:B0:2C:CA:DB:8E:C3:DB:3D:E2:03:D3:B2:4B:3A:02:55
X509v3 Authority Key Identifier:
keyid:21:35:C7:F5:71:EE:FE:B6:74:04:AB:6C:45:FD:47:55:51:AD:AF:1B
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ITXH9XHu_rZ0BKtsRf1HVVGtrxs.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d9/680b78-96af-4a85-ac02-943d03321326/1/tWW3ubAsytuOw9s94gPTsks6AlU.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/d9/680b78-96af-4a85-ac02-943d03321326/1/ITXH9XHu_rZ0BKtsRf1HVVGtrxs.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
193.180.93.0/24
Signature Algorithm: sha256WithRSAEncryption
39:eb:26:1c:90:07:6e:19:01:3b:5f:09:b0:cd:b4:1c:a7:05:
7c:69:d5:cf:93:dc:e0:b0:9d:85:ad:4e:a4:b9:1e:69:1f:ef:
d2:f1:17:c9:14:3b:da:31:45:9a:32:94:51:93:5d:66:d0:d3:
19:7f:2d:94:eb:b1:8c:61:07:b4:59:39:eb:dd:e1:ff:ff:9b:
54:7d:1f:1c:ee:52:f0:31:44:40:7a:60:5e:ba:c6:11:78:79:
d7:b2:bd:74:3d:14:92:a0:aa:16:0e:99:24:9b:79:36:6a:3f:
9e:31:90:3b:a9:a6:c0:97:29:8f:3a:42:66:d7:e8:2c:70:5f:
05:0e:76:14:7c:23:1d:9c:d9:40:cd:ca:2a:71:5f:88:2a:d5:
1c:9c:81:9b:9b:ee:80:d5:2f:72:81:97:e6:28:c5:70:33:bb:
ae:36:e5:3c:dc:8c:95:24:09:aa:c3:49:81:dd:95:8b:8c:89:
59:7a:46:8a:39:00:de:b1:03:5f:6e:a3:f7:78:08:95:a0:38:
76:7a:92:4b:40:02:22:c2:bc:65:76:43:ab:66:04:f3:2a:19:
97:7e:49:a3:8a:9e:52:db:14:ec:55:cf:e0:ba:d0:64:8e:24:
9b:fc:99:76:23:64:0c:ae:11:fd:0b:82:c7:17:2f:96:37:10:
8b:4b:63:a5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Feb 19 22:00:40 2025 by rpki-client