![](/console.gif)
Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/dc/c8c0f5-042a-47eb-bb08-b7d30dae7172/1/wYn5dhXHo8i6_6NcYS2JJv10Jw0.roa
File: wYn5dhXHo8i6_6NcYS2JJv10Jw0.roa (raw, json)
Hash identifier: MDbfLUH+i+Gu51yDb3l+qJ3xCmGlmz6tixQsBVwB8uA=
Subject key identifier: C1:89:F9:76:15:C7:A3:C8:BA:FF:A3:5C:61:2D:89:26:FD:74:27:0D
Certificate issuer: /CN=5c9cf1e26175fffa6126798eca43812312c4414b
Certificate serial: 14782FA1
Authority key identifier: 5C:9C:F1:E2:61:75:FF:FA:61:26:79:8E:CA:43:81:23:12:C4:41:4B
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/XJzx4mF1__phJnmOykOBIxLEQUs.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/dc/c8c0f5-042a-47eb-bb08-b7d30dae7172/1/wYn5dhXHo8i6_6NcYS2JJv10Jw0.roa
Signing time: Mon 16 May 2022 08:39:29 +0000
ROA not before: Mon 16 May 2022 08:39:29 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 47414
IP address blocks: 217.19.6.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 343420833 (0x14782fa1)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=5c9cf1e26175fffa6126798eca43812312c4414b
Validity
Not Before: May 16 08:39:29 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=c189f97615c7a3c8baffa35c612d8926fd74270d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a0:0a:15:ae:10:b9:74:a8:6d:3d:26:3d:fd:c3:
2e:5b:3b:8d:81:c6:20:6e:10:d8:f1:a3:4c:5d:46:
97:0e:57:f4:53:1e:85:bb:49:03:57:f0:9e:43:ba:
8a:f6:c7:a2:d6:f7:2f:61:b3:d1:56:5c:42:e1:15:
18:84:36:3d:da:09:cf:4c:e3:f2:aa:b5:98:b8:5c:
4c:57:3f:e8:0b:c7:74:f6:7f:39:75:18:98:79:c2:
83:cc:09:1c:52:e8:72:57:8e:ea:29:53:7e:51:52:
d8:a8:bd:1c:ae:92:ef:6c:d4:d2:bf:5c:c3:f1:b6:
ee:15:33:90:3e:59:6e:f8:80:5d:52:6d:68:0b:5c:
06:78:a1:55:c7:63:ed:56:e7:d0:03:00:24:9e:e4:
b5:66:e0:13:88:8e:4a:e8:65:90:6f:29:35:fd:d3:
af:43:1e:23:51:5b:0b:7b:32:72:80:9b:b8:77:f9:
fd:84:97:a0:ec:44:49:e6:c9:69:43:37:35:2f:a9:
28:77:95:95:82:84:7d:3c:98:c7:0f:2d:94:ec:81:
a9:90:f6:89:2d:b2:70:de:df:81:f9:00:b7:fe:3b:
e7:16:f0:18:af:d5:58:69:b4:3e:81:10:3e:9e:44:
1b:e9:d3:64:57:ab:11:d6:1f:60:20:03:21:2e:81:
ae:bd
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C1:89:F9:76:15:C7:A3:C8:BA:FF:A3:5C:61:2D:89:26:FD:74:27:0D
X509v3 Authority Key Identifier:
keyid:5C:9C:F1:E2:61:75:FF:FA:61:26:79:8E:CA:43:81:23:12:C4:41:4B
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/XJzx4mF1__phJnmOykOBIxLEQUs.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/dc/c8c0f5-042a-47eb-bb08-b7d30dae7172/1/wYn5dhXHo8i6_6NcYS2JJv10Jw0.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/dc/c8c0f5-042a-47eb-bb08-b7d30dae7172/1/XJzx4mF1__phJnmOykOBIxLEQUs.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
217.19.6.0/24
Signature Algorithm: sha256WithRSAEncryption
28:e8:c1:eb:25:16:5c:0e:1a:57:31:e6:7f:ce:f8:e7:e1:65:
82:33:8e:7c:54:81:97:ca:69:74:f5:64:20:88:43:e1:f0:39:
a7:72:b5:4b:58:23:31:88:c2:31:fa:74:24:0f:bb:96:03:35:
25:b4:40:d0:27:1a:75:12:e0:e2:4a:79:98:58:54:1b:89:0b:
87:70:10:69:8d:60:c6:74:58:82:7b:76:90:0a:d5:49:9c:1d:
c5:3c:31:11:ad:31:d9:61:05:8c:eb:89:d0:0b:1b:b0:1d:30:
0c:a7:d8:4c:d1:7a:b9:74:34:1b:b3:cd:65:d7:1c:ac:f5:72:
00:60:8f:3c:7c:81:30:d8:36:ef:56:f0:bd:03:a8:b1:06:24:
7f:67:bc:8c:40:c2:17:b0:68:e9:01:e8:16:4d:a8:39:e6:ad:
ff:ad:a0:6f:ab:5c:14:45:ed:70:f0:bd:b3:11:c5:2c:f0:62:
8a:ab:e0:7c:29:62:e0:f7:f5:f3:36:cf:bd:56:f7:f3:7f:14:
95:39:14:ee:29:11:86:39:6c:61:27:73:1b:a6:e6:fb:18:2e:
d6:48:cb:1f:3f:a1:14:9b:87:93:f6:4a:f5:31:7f:eb:b0:c9:
01:32:d6:4c:24:c2:a2:6c:86:f3:a5:2b:35:30:1c:be:18:21:
93:19:00:87
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Feb 17 07:58:06 2025 by rpki-client