![](/console.gif)
Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/eb/55057b-a27a-4876-a6c5-c150dffff7d6/1/Gv4nqIXSNaPWqBDRWUfEa1K-oZ4.roa
File: Gv4nqIXSNaPWqBDRWUfEa1K-oZ4.roa (raw, json)
Hash identifier: tCibCjhD6ShGpzBTuDYP9aCncJLHY271eyzQ4VOzSPA=
Subject key identifier: 1A:FE:27:A8:85:D2:35:A3:D6:A8:10:D1:59:47:C4:6B:52:BE:A1:9E
Certificate issuer: /CN=a61db78c7f21285866dab4a45a544dce559f43da
Certificate serial: 02D0C1E2
Authority key identifier: A6:1D:B7:8C:7F:21:28:58:66:DA:B4:A4:5A:54:4D:CE:55:9F:43:DA
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/ph23jH8hKFhm2rSkWlRNzlWfQ9o.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/eb/55057b-a27a-4876-a6c5-c150dffff7d6/1/Gv4nqIXSNaPWqBDRWUfEa1K-oZ4.roa
Signing time: Fri 06 May 2022 11:07:37 +0000
ROA not before: Fri 06 May 2022 11:07:37 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 200845
IP address blocks: 193.32.239.0/24 maxlen: 24
193.32.236.0/24 maxlen: 24
193.32.236.0/22 maxlen: 24
193.32.238.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 47235554 (0x2d0c1e2)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=a61db78c7f21285866dab4a45a544dce559f43da
Validity
Not Before: May 6 11:07:37 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=1afe27a885d235a3d6a810d15947c46b52bea19e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ce:71:01:b1:41:1b:22:a7:8d:ea:82:21:e5:6a:
ac:be:fa:21:b9:21:7c:21:48:7f:39:25:41:29:ad:
bf:f9:9e:66:67:7b:4d:fd:d4:32:32:2a:df:66:70:
dd:5d:77:99:cb:21:93:f0:d2:7c:22:2f:a3:0c:e5:
eb:38:07:b0:10:ac:28:fd:d3:9a:14:63:cc:cf:62:
80:3e:e0:b5:fe:01:e3:32:ea:20:c0:8e:17:5f:70:
9d:ad:05:52:15:d5:7a:9e:84:49:44:12:8e:cc:a5:
6a:8a:97:0a:50:b8:04:a2:df:19:10:9c:e2:03:4a:
23:57:48:48:3d:3f:59:e8:bb:3a:34:a6:09:bb:0e:
c3:04:5d:14:27:24:39:09:1e:1a:af:d4:b4:c4:bc:
aa:38:b8:32:fe:d0:a3:cf:ac:88:7e:63:9f:49:01:
bd:1a:d7:73:04:60:dd:1f:80:f1:8c:18:cc:d1:80:
91:35:eb:2b:c8:a7:eb:f9:d5:9a:d3:f4:36:1e:8a:
8e:bf:b7:b1:01:e6:35:ac:c0:92:4e:83:cf:3a:43:
59:a5:4b:ba:d0:5d:93:33:d7:3b:78:fa:3c:f8:b2:
9e:5c:9d:4f:57:7f:4b:7e:f8:fe:67:d5:66:c9:19:
7e:7d:33:97:af:34:a7:65:ef:65:38:ba:da:c5:ed:
e0:4f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
1A:FE:27:A8:85:D2:35:A3:D6:A8:10:D1:59:47:C4:6B:52:BE:A1:9E
X509v3 Authority Key Identifier:
keyid:A6:1D:B7:8C:7F:21:28:58:66:DA:B4:A4:5A:54:4D:CE:55:9F:43:DA
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ph23jH8hKFhm2rSkWlRNzlWfQ9o.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/eb/55057b-a27a-4876-a6c5-c150dffff7d6/1/Gv4nqIXSNaPWqBDRWUfEa1K-oZ4.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/eb/55057b-a27a-4876-a6c5-c150dffff7d6/1/ph23jH8hKFhm2rSkWlRNzlWfQ9o.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
193.32.236.0/22
Signature Algorithm: sha256WithRSAEncryption
31:2b:c0:75:6b:07:97:f3:65:9e:0e:63:73:9c:5e:5a:f1:d5:
49:86:21:47:13:6f:03:8b:79:55:6c:d5:40:d8:2d:90:54:2d:
89:99:bf:ee:71:d5:7f:a2:0b:16:38:06:1a:55:1f:75:29:ce:
24:2e:eb:d4:72:bf:6b:de:e9:e4:f6:8c:2c:c0:04:05:20:ae:
e1:39:a6:13:4d:bd:4e:54:47:36:5b:31:36:6d:d9:df:a1:df:
f6:a2:46:5d:96:78:8f:9b:c0:2c:91:da:9b:87:5f:90:ae:bf:
8c:c1:46:f9:7e:3c:4b:ce:f9:ae:1b:4c:fb:12:d3:9a:30:bf:
13:0b:f6:e5:84:33:d6:c9:2e:6f:60:de:87:56:ba:54:e0:1c:
7b:9c:28:da:e7:50:d5:c8:1c:03:77:ac:fa:a2:fb:b8:ee:5f:
7f:70:30:b6:09:9d:56:2b:13:90:74:f3:6c:ab:0b:81:8a:45:
04:d0:1f:4f:aa:a7:be:b8:57:85:c4:c5:f1:d0:2d:cf:64:df:
f1:27:4f:64:18:70:66:c4:5d:79:04:a6:85:8d:d2:a9:e9:fc:
65:03:dd:16:ed:80:94:4e:6d:9b:9d:fd:92:92:5d:6c:11:dc:
83:4b:ae:ff:4e:5e:c8:d3:31:40:51:0e:65:71:94:ff:f1:d4:
27:f5:f6:65
-----BEGIN CERTIFICATE-----
MIIE7zCCA9egAwIBAgIEAtDB4jANBgkqhkiG9w0BAQsFADAzMTEwLwYDVQQDEyhh
NjFkYjc4YzdmMjEyODU4NjZkYWI0YTQ1YTU0NGRjZTU1OWY0M2RhMB4XDTIyMDUw
NjExMDczN1oXDTIzMDcwMTAwMDAwMFowMzExMC8GA1UEAxMoMWFmZTI3YTg4NWQy
MzVhM2Q2YTgxMGQxNTk0N2M0NmI1MmJlYTE5ZTCCASIwDQYJKoZIhvcNAQEBBQAD
ggEPADCCAQoCggEBAM5xAbFBGyKnjeqCIeVqrL76IbkhfCFIfzklQSmtv/meZmd7
Tf3UMjIq32Zw3V13mcshk/DSfCIvowzl6zgHsBCsKP3TmhRjzM9igD7gtf4B4zLq
IMCOF19wna0FUhXVep6ESUQSjsylaoqXClC4BKLfGRCc4gNKI1dISD0/Wei7OjSm
CbsOwwRdFCckOQkeGq/UtMS8qji4Mv7Qo8+siH5jn0kBvRrXcwRg3R+A8YwYzNGA
kTXrK8in6/nVmtP0Nh6Kjr+3sQHmNazAkk6DzzpDWaVLutBdkzPXO3j6PPiynlyd
T1d/S374/mfVZskZfn0zl680p2XvZTi62sXt4E8CAwEAAaOCAgkwggIFMB0GA1Ud
DgQWBBQa/ieohdI1o9aoENFZR8RrUr6hnjAfBgNVHSMEGDAWgBSmHbeMfyEoWGba
tKRaVE3OVZ9D2jAOBgNVHQ8BAf8EBAMCB4AwZAYIKwYBBQUHAQEEWDBWMFQGCCsG
AQUFBzAChkhyc3luYzovL3Jwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxU
L3BoMjNqSDhoS0ZobTJyU2tXbFJOemxXZlE5by5jZXIwgY0GCCsGAQUFBwELBIGA
MH4wfAYIKwYBBQUHMAuGcHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5
L0RFRkFVTFQvZWIvNTUwNTdiLWEyN2EtNDg3Ni1hNmM1LWMxNTBkZmZmZjdkNi8x
L0d2NG5xSVhTTmFQV3FCRFJXVWZFYTFLLW9aNC5yb2EwgYEGA1UdHwR6MHgwdqB0
oHKGcHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvZWIv
NTUwNTdiLWEyN2EtNDg3Ni1hNmM1LWMxNTBkZmZmZjdkNi8xL3BoMjNqSDhoS0Zo
bTJyU2tXbFJOemxXZlE5by5jcmwwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAf
BggrBgEFBQcBBwEB/wQQMA4wDAQCAAEwBgMEAsEg7DANBgkqhkiG9w0BAQsFAAOC
AQEAMSvAdWsHl/Nlng5jc5xeWvHVSYYhRxNvA4t5VWzVQNgtkFQtiZm/7nHVf6IL
FjgGGlUfdSnOJC7r1HK/a97p5PaMLMAEBSCu4TmmE029TlRHNlsxNm3Z36Hf9qJG
XZZ4j5vALJHam4dfkK6/jMFG+X48S875rhtM+xLTmjC/Ewv25YQz1skub2Deh1a6
VOAce5wo2udQ1cgcA3es+qL7uO5ff3AwtgmdVisTkHTzbKsLgYpFBNAfT6qnvrhX
hcTF8dAtz2Tf8SdPZBhwZsRdeQSmhY3Sqen8ZQPdFu2AlE5tm539kpJdbBHcg0uu
/05eyNMxQFEOZXGU//HUJ/X2ZQ==
-----END CERTIFICATE-----
Generated at Mon Feb 17 07:14:55 2025 by rpki-client