![](/console.gif)
Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e8/30b225-a165-4fc3-9342-b337f7e90915/1/QbHCJf5e_tz5ubWPpXuwdd0G-mI.roa
File: QbHCJf5e_tz5ubWPpXuwdd0G-mI.roa (raw, json)
Hash identifier: vPWbQ5Wsx5QTepIurNqCkxFHD0NuPtVbNGYrfzSQu4E=
Subject key identifier: 41:B1:C2:25:FE:5E:FE:DC:F9:B9:B5:8F:A5:7B:B0:75:DD:06:FA:62
Certificate issuer: /CN=b146b28951a21163dc9651b54c23936fccacf47b
Certificate serial: 44BF64AB
Authority key identifier: B1:46:B2:89:51:A2:11:63:DC:96:51:B5:4C:23:93:6F:CC:AC:F4:7B
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/sUayiVGiEWPcllG1TCOTb8ys9Hs.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/e8/30b225-a165-4fc3-9342-b337f7e90915/1/QbHCJf5e_tz5ubWPpXuwdd0G-mI.roa
Signing time: Sat 01 Jan 2022 14:57:22 +0000
ROA not before: Sat 01 Jan 2022 14:57:22 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 58282
IP address blocks: 5.179.94.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 1153393835 (0x44bf64ab)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=b146b28951a21163dc9651b54c23936fccacf47b
Validity
Not Before: Jan 1 14:57:22 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=41b1c225fe5efedcf9b9b58fa57bb075dd06fa62
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bf:8a:9a:c1:5e:5e:27:e0:e7:5d:a6:15:3c:a5:
af:77:f8:71:ad:66:55:01:68:87:76:ee:fd:fd:a5:
98:e8:c2:6b:1a:45:26:85:ff:a0:cf:0c:07:8b:f9:
13:ac:a6:1e:aa:b0:e2:b4:70:3f:57:cc:45:f0:9b:
01:af:38:d8:cf:9d:d2:72:f6:f8:05:92:9f:4b:d2:
2e:94:3c:9c:b2:24:cf:65:70:86:5c:65:b5:d9:a1:
9d:cb:da:e5:d3:5e:cf:92:6e:11:e5:dc:a3:f0:08:
04:cd:ea:ca:34:8c:87:ce:92:86:e4:26:1b:a6:c5:
45:30:7d:26:3d:40:1f:62:61:8f:c1:c9:c6:2e:92:
ed:a4:2d:27:72:db:ab:db:61:1d:e5:81:4e:15:ac:
dc:bc:e9:f3:83:98:9b:e2:a6:2d:17:50:21:32:66:
f5:e7:cd:7d:e9:43:6e:6e:50:1c:2d:5f:d5:79:d0:
62:d2:0b:fd:03:9e:ef:f1:4d:8b:55:6b:91:cb:01:
7d:2e:d2:ca:62:37:e8:d1:3d:29:97:3a:0a:03:72:
fe:6c:3e:07:ca:fc:dc:12:3f:73:68:95:55:9c:90:
25:fe:95:2b:e5:60:e0:17:19:53:00:d1:5e:58:df:
db:bd:4b:e9:99:7a:41:bf:4f:ed:c1:21:00:85:25:
25:89
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
41:B1:C2:25:FE:5E:FE:DC:F9:B9:B5:8F:A5:7B:B0:75:DD:06:FA:62
X509v3 Authority Key Identifier:
keyid:B1:46:B2:89:51:A2:11:63:DC:96:51:B5:4C:23:93:6F:CC:AC:F4:7B
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/sUayiVGiEWPcllG1TCOTb8ys9Hs.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e8/30b225-a165-4fc3-9342-b337f7e90915/1/QbHCJf5e_tz5ubWPpXuwdd0G-mI.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/e8/30b225-a165-4fc3-9342-b337f7e90915/1/sUayiVGiEWPcllG1TCOTb8ys9Hs.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
5.179.94.0/24
Signature Algorithm: sha256WithRSAEncryption
6d:9a:b7:1b:27:97:79:07:1c:04:e6:42:fc:45:b0:2f:9d:aa:
89:28:a5:fc:08:90:fc:af:e1:0e:6c:39:25:8f:7a:dc:40:a1:
6a:bc:da:8f:22:d3:42:cf:da:d2:25:1b:fd:3b:f1:60:5d:b7:
9e:1d:4d:32:f3:75:ca:63:8f:fb:80:62:ee:18:5b:32:0e:62:
fa:5c:02:5a:fb:c0:cb:1e:de:b7:a0:21:d7:2d:6d:7d:37:ec:
22:9d:5e:97:59:5b:09:55:fb:fd:b4:2e:92:6a:f5:a4:d7:0b:
00:3e:7b:c1:65:93:7b:d1:e0:4e:9e:b7:98:c6:36:1b:be:91:
4c:a9:ef:4f:a7:eb:a2:ba:2e:f3:76:e4:d2:ce:fc:38:1e:1c:
ca:21:5d:3a:cd:6a:db:ad:d2:d4:f0:9f:62:ba:b5:31:04:6b:
64:3f:c4:69:c9:ab:a9:cd:99:7c:42:c7:50:56:fc:1b:82:1a:
b6:34:ff:5a:37:28:49:70:f1:aa:8f:3f:26:eb:d7:11:25:97:
4e:2e:5e:c5:83:a5:97:b0:0d:13:78:a7:90:3a:2a:ac:6f:2d:
90:e0:68:cd:49:7f:ee:e4:45:ad:d8:30:4c:16:f5:44:4b:a8:
c2:bb:32:26:f6:a5:95:21:1f:5c:a6:77:12:60:4a:2e:d4:e3:
cf:4c:bb:ed
-----BEGIN CERTIFICATE-----
MIIE7zCCA9egAwIBAgIERL9kqzANBgkqhkiG9w0BAQsFADAzMTEwLwYDVQQDEyhi
MTQ2YjI4OTUxYTIxMTYzZGM5NjUxYjU0YzIzOTM2ZmNjYWNmNDdiMB4XDTIyMDEw
MTE0NTcyMloXDTIzMDcwMTAwMDAwMFowMzExMC8GA1UEAxMoNDFiMWMyMjVmZTVl
ZmVkY2Y5YjliNThmYTU3YmIwNzVkZDA2ZmE2MjCCASIwDQYJKoZIhvcNAQEBBQAD
ggEPADCCAQoCggEBAL+KmsFeXifg512mFTylr3f4ca1mVQFoh3bu/f2lmOjCaxpF
JoX/oM8MB4v5E6ymHqqw4rRwP1fMRfCbAa842M+d0nL2+AWSn0vSLpQ8nLIkz2Vw
hlxltdmhncva5dNez5JuEeXco/AIBM3qyjSMh86ShuQmG6bFRTB9Jj1AH2Jhj8HJ
xi6S7aQtJ3Lbq9thHeWBThWs3Lzp84OYm+KmLRdQITJm9efNfelDbm5QHC1f1XnQ
YtIL/QOe7/FNi1VrkcsBfS7SymI36NE9KZc6CgNy/mw+B8r83BI/c2iVVZyQJf6V
K+Vg4BcZUwDRXljf271L6Zl6Qb9P7cEhAIUlJYkCAwEAAaOCAgkwggIFMB0GA1Ud
DgQWBBRBscIl/l7+3Pm5tY+le7B13Qb6YjAfBgNVHSMEGDAWgBSxRrKJUaIRY9yW
UbVMI5NvzKz0ezAOBgNVHQ8BAf8EBAMCB4AwZAYIKwYBBQUHAQEEWDBWMFQGCCsG
AQUFBzAChkhyc3luYzovL3Jwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxU
L3NVYXlpVkdpRVdQY2xsRzFUQ09UYjh5czlIcy5jZXIwgY0GCCsGAQUFBwELBIGA
MH4wfAYIKwYBBQUHMAuGcHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5
L0RFRkFVTFQvZTgvMzBiMjI1LWExNjUtNGZjMy05MzQyLWIzMzdmN2U5MDkxNS8x
L1FiSENKZjVlX3R6NXViV1BwWHV3ZGQwRy1tSS5yb2EwgYEGA1UdHwR6MHgwdqB0
oHKGcHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvZTgv
MzBiMjI1LWExNjUtNGZjMy05MzQyLWIzMzdmN2U5MDkxNS8xL3NVYXlpVkdpRVdQ
Y2xsRzFUQ09UYjh5czlIcy5jcmwwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAf
BggrBgEFBQcBBwEB/wQQMA4wDAQCAAEwBgMEAAWzXjANBgkqhkiG9w0BAQsFAAOC
AQEAbZq3GyeXeQccBOZC/EWwL52qiSil/AiQ/K/hDmw5JY963ECharzajyLTQs/a
0iUb/TvxYF23nh1NMvN1ymOP+4Bi7hhbMg5i+lwCWvvAyx7et6Ah1y1tfTfsIp1e
l1lbCVX7/bQukmr1pNcLAD57wWWTe9HgTp63mMY2G76RTKnvT6frorou83bk0s78
OB4cyiFdOs1q263S1PCfYrq1MQRrZD/Eacmrqc2ZfELHUFb8G4IatjT/WjcoSXDx
qo8/JuvXESWXTi5exYOll7ANE3inkDoqrG8tkOBozUl/7uRFrdgwTBb1REuowrsy
JvallSEfXKZ3EmBKLtTjz0y77Q==
-----END CERTIFICATE-----
Generated at Thu Jun 6 17:57:57 2024 by rpki-client on console-fra.rpki-client.org