![](/console.gif)
Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e1/01f08c-065e-4ac1-8e80-b15e3f09e01b/1/R3lT-gTuGnDZeA96aEZQGFFOq_o.roa
File: R3lT-gTuGnDZeA96aEZQGFFOq_o.roa (raw, json)
Hash identifier: jGjkqK3So3KAtBAOEFdSRvrFV4KRi6t938Te18eLgog=
Subject key identifier: 47:79:53:FA:04:EE:1A:70:D9:78:0F:7A:68:46:50:18:51:4E:AB:FA
Certificate issuer: /CN=0c7161e622f63c0db8568d8cb4c4d7c0d9808346
Certificate serial: 01949CBC7F437A8516006FF08B57481626F1
Authority key identifier: 0C:71:61:E6:22:F6:3C:0D:B8:56:8D:8C:B4:C4:D7:C0:D9:80:83:46
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/DHFh5iL2PA24Vo2MtMTXwNmAg0Y.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/e1/01f08c-065e-4ac1-8e80-b15e3f09e01b/1/R3lT-gTuGnDZeA96aEZQGFFOq_o.roa
Signing time: Sat 25 Jan 2025 09:13:06 +0000
ROA not before: Sat 25 Jan 2025 09:13:06 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 208324
IP address blocks: 195.7.9.0/24 maxlen: 24
195.7.10.0/24 maxlen: 24
195.7.11.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:9c:bc:7f:43:7a:85:16:00:6f:f0:8b:57:48:16:26:f1
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=0c7161e622f63c0db8568d8cb4c4d7c0d9808346
Validity
Not Before: Jan 25 09:13:06 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=477953fa04ee1a70d9780f7a68465018514eabfa
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b1:bc:db:ac:ac:a9:45:81:a5:ac:13:06:20:60:
44:0d:62:b5:02:77:8a:4e:a5:c5:a4:a1:03:03:84:
33:6f:54:43:7c:66:7b:f9:16:2c:c2:1e:ad:eb:12:
55:c0:4a:3b:85:b5:c0:5c:9d:21:33:37:59:fc:07:
85:98:13:6a:db:54:a0:79:ed:7d:0e:a4:6d:50:54:
22:4a:9e:67:cc:73:29:3e:03:fc:9f:ce:f4:4e:dc:
66:3c:18:33:93:e6:72:b9:37:a6:ef:13:75:90:d3:
1b:9a:3d:48:8e:f3:35:d9:ad:b3:40:20:00:e2:7c:
73:b4:f5:4e:84:fb:40:47:7d:b9:68:5a:80:4d:a0:
50:41:81:d0:32:d2:26:88:8f:d2:21:64:ee:c7:d7:
2e:30:40:9d:f4:09:19:c2:d4:b2:f1:f5:ee:9f:9a:
4d:52:9b:a4:f2:86:89:06:e4:df:67:ff:9a:6f:91:
64:6c:0f:39:a7:36:06:d8:6e:de:3a:7c:fa:7e:7f:
da:f7:78:dd:7f:a2:12:c9:52:9b:b8:02:7d:6b:3b:
b8:ba:f1:70:58:92:41:fe:d6:6c:d4:f4:40:20:cd:
94:d1:7a:77:5d:7b:93:6b:de:5a:e0:13:af:4e:bb:
63:76:e8:8e:c7:6f:45:40:b0:d5:e2:f0:61:9a:3c:
9f:17
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
47:79:53:FA:04:EE:1A:70:D9:78:0F:7A:68:46:50:18:51:4E:AB:FA
X509v3 Authority Key Identifier:
keyid:0C:71:61:E6:22:F6:3C:0D:B8:56:8D:8C:B4:C4:D7:C0:D9:80:83:46
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/DHFh5iL2PA24Vo2MtMTXwNmAg0Y.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e1/01f08c-065e-4ac1-8e80-b15e3f09e01b/1/R3lT-gTuGnDZeA96aEZQGFFOq_o.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/e1/01f08c-065e-4ac1-8e80-b15e3f09e01b/1/DHFh5iL2PA24Vo2MtMTXwNmAg0Y.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
195.7.9.0-195.7.11.255
Signature Algorithm: sha256WithRSAEncryption
56:ee:4a:83:f0:22:ff:d1:b5:05:fd:c5:10:40:8c:49:e3:19:
68:4c:d7:e2:d2:bd:93:c2:98:77:66:2f:fd:55:82:d5:d6:ef:
0d:f1:92:65:c6:fa:7b:57:38:db:f5:76:71:af:aa:f8:3a:3f:
9f:88:41:2f:83:22:5f:14:e1:db:59:f1:3d:0c:ac:91:43:f5:
0c:d7:a5:06:c9:a7:3d:26:54:85:f5:6f:9e:1e:e7:e8:b9:ac:
9c:fd:3e:75:a3:2d:07:2b:38:5e:8c:e6:87:2e:25:35:78:ea:
63:15:cc:0f:20:90:f8:a0:c7:fe:33:e0:b7:80:54:6a:6a:78:
36:72:22:a9:48:cc:8d:a8:0b:a1:49:46:26:16:7c:1d:53:89:
51:64:8e:a3:5a:01:10:06:4e:ee:78:dd:6a:65:9f:ac:10:90:
00:8f:40:6d:96:69:66:19:7a:53:d5:51:5b:e8:af:ed:d6:98:
f1:a6:de:e0:4e:ee:f9:3e:4d:f7:4e:40:dd:36:76:9e:54:4f:
48:7c:d9:bb:13:a1:85:f9:71:0a:b9:c7:d5:64:95:f1:a4:10:
3d:64:41:05:50:bc:f6:9f:69:6d:63:87:d1:99:6c:38:4e:e6:
c4:e0:c8:c4:2e:be:ca:f0:b4:0e:32:a8:8b:cd:cc:b7:34:b0:
87:38:7d:2c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Feb 20 02:53:21 2025 by rpki-client