![](/console.gif)
Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e1/935f3f-6e39-4568-9995-3cc45a773fe1/1/CyAS2XIveHpxWUBQUQDkLQ5pDHY.roa
File: CyAS2XIveHpxWUBQUQDkLQ5pDHY.roa (raw, json)
Hash identifier: U5DI1R6fAHFBodCSAZJSl3+ZFxS+wcWJv6ywvvGFE7A=
Subject key identifier: 0B:20:12:D9:72:2F:78:7A:71:59:40:50:51:00:E4:2D:0E:69:0C:76
Certificate issuer: /CN=7808aed6cfccf3daaf44fc4dca90ea513213908c
Certificate serial: 06889C0A
Authority key identifier: 78:08:AE:D6:CF:CC:F3:DA:AF:44:FC:4D:CA:90:EA:51:32:13:90:8C
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/eAiu1s_M89qvRPxNypDqUTITkIw.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/e1/935f3f-6e39-4568-9995-3cc45a773fe1/1/CyAS2XIveHpxWUBQUQDkLQ5pDHY.roa
Signing time: Sat 01 Jan 2022 12:56:30 +0000
ROA not before: Sat 01 Jan 2022 12:56:30 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 210718
IP address blocks: 193.105.177.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 109616138 (0x6889c0a)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=7808aed6cfccf3daaf44fc4dca90ea513213908c
Validity
Not Before: Jan 1 12:56:30 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=0b2012d9722f787a715940505100e42d0e690c76
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:f0:53:5c:f6:42:29:36:a3:98:d2:81:69:ac:7b:
8f:38:99:9b:df:62:92:b9:50:79:49:a0:1b:1f:70:
63:72:15:a0:5c:52:c1:aa:8a:ed:26:31:70:d9:17:
5e:b8:80:c0:02:eb:5c:16:df:eb:e9:b4:d6:a0:ad:
97:e3:27:87:2d:80:20:ed:f8:17:b9:55:bd:9a:ef:
ce:49:ce:ab:31:a7:d9:f0:e5:62:db:66:b7:31:66:
dc:d1:9a:e1:ec:0f:23:95:ae:5b:1a:f3:83:07:7e:
03:41:69:46:60:84:ff:11:10:01:8f:49:d3:27:66:
eb:d9:08:f4:c4:a8:26:2b:96:bf:4c:af:55:03:54:
47:89:d6:9e:76:76:35:51:c4:52:98:a8:fb:24:7c:
33:0e:a5:39:de:cb:cb:38:28:15:78:8d:bb:e3:06:
d6:da:b6:d4:52:3e:24:65:18:c7:21:5d:cf:d5:a0:
9c:24:15:cb:b2:3b:a4:7e:ae:be:5c:37:06:a2:b0:
ee:c9:64:40:14:a0:d6:df:07:b8:2c:5c:b9:45:78:
f1:27:43:e7:64:a1:6d:50:89:2b:80:9a:97:bc:89:
8e:cc:01:ef:9b:19:d6:3c:d3:f1:4c:8e:de:2c:e1:
49:04:58:a2:2c:70:02:be:b4:f5:3b:34:ed:ae:a6:
ed:39
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
0B:20:12:D9:72:2F:78:7A:71:59:40:50:51:00:E4:2D:0E:69:0C:76
X509v3 Authority Key Identifier:
keyid:78:08:AE:D6:CF:CC:F3:DA:AF:44:FC:4D:CA:90:EA:51:32:13:90:8C
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/eAiu1s_M89qvRPxNypDqUTITkIw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e1/935f3f-6e39-4568-9995-3cc45a773fe1/1/CyAS2XIveHpxWUBQUQDkLQ5pDHY.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/e1/935f3f-6e39-4568-9995-3cc45a773fe1/1/eAiu1s_M89qvRPxNypDqUTITkIw.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
193.105.177.0/24
Signature Algorithm: sha256WithRSAEncryption
0a:9b:f4:fb:d6:cf:65:29:0a:06:04:e7:5b:3f:fc:eb:e3:72:
50:be:1c:77:c0:fd:a0:e9:ff:f7:54:8f:56:bc:74:91:07:26:
ee:93:41:82:e9:10:8b:10:a2:40:d9:ab:1c:6a:1a:79:70:c0:
d9:85:9c:93:7a:3e:7f:6d:f1:af:1e:f8:6a:43:72:fe:1f:4a:
d6:3c:97:17:d2:a8:c3:d2:54:27:29:7e:6f:6a:2b:63:60:34:
d8:92:7b:4b:0c:16:a0:0a:b5:4a:5a:da:51:f4:03:6e:f7:c9:
5b:ba:da:40:c0:2e:23:f1:e2:f0:8a:b4:8e:ad:6a:58:a3:9b:
d0:1e:cb:ca:c3:35:3c:f9:91:5a:5e:c8:1d:17:f7:f6:34:39:
4b:d1:a1:44:2b:a6:58:27:34:fc:91:7c:83:6d:f1:54:e6:3e:
6f:b7:78:bc:9f:c8:35:50:2c:0a:ff:78:d2:70:66:a0:42:f8:
23:59:5d:99:74:2c:a8:88:16:62:11:ae:53:2f:9d:26:22:c9:
f3:5c:78:50:62:77:28:23:c3:22:41:58:32:ef:96:f1:df:1f:
39:7b:20:3a:04:7c:f4:d7:6a:30:24:4c:d5:57:5d:45:35:bc:
b4:23:35:29:0c:1e:71:65:20:11:75:e7:b2:74:80:3d:22:32:
d2:83:ee:5c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Feb 17 07:36:57 2025 by rpki-client