![](/console.gif)
Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/eb/6f232e-2275-44e9-91c0-c7397a2669a9/1/5EcMjl4-cFt_AnXzDF01wCLvOr8.roa
File: 5EcMjl4-cFt_AnXzDF01wCLvOr8.roa (raw, json)
Hash identifier: y49Sv4C5glUCorlEb6INVSXCjFw4kF1WIygVkB6Zm6U=
Subject key identifier: E4:47:0C:8E:5E:3E:70:5B:7F:02:75:F3:0C:5D:35:C0:22:EF:3A:BF
Certificate issuer: /CN=4b3da6e99c666513a2cee5f0e0d3ab745f167dc3
Certificate serial: 063A4E4F
Authority key identifier: 4B:3D:A6:E9:9C:66:65:13:A2:CE:E5:F0:E0:D3:AB:74:5F:16:7D:C3
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Sz2m6ZxmZROizuXw4NOrdF8WfcM.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/eb/6f232e-2275-44e9-91c0-c7397a2669a9/1/5EcMjl4-cFt_AnXzDF01wCLvOr8.roa
Signing time: Tue 26 Apr 2022 04:51:10 +0000
ROA not before: Tue 26 Apr 2022 04:51:10 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 17660
IP address blocks: 151.216.34.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 104484431 (0x63a4e4f)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4b3da6e99c666513a2cee5f0e0d3ab745f167dc3
Validity
Not Before: Apr 26 04:51:10 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=e4470c8e5e3e705b7f0275f30c5d35c022ef3abf
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e6:f8:e6:c9:40:b3:82:f3:c0:80:bf:c7:f7:ee:
f3:49:ae:fd:73:ca:65:54:df:51:b9:0b:c4:6d:f5:
b1:65:98:64:c1:da:c9:5e:f5:de:d8:d1:f5:6c:78:
9d:31:c6:68:b2:b1:f5:d7:ba:26:08:3d:13:df:66:
51:f3:8f:91:c2:40:62:5b:47:c4:d1:77:ea:e1:a9:
02:4e:5f:41:26:63:8a:0a:1f:bc:b2:20:a5:06:4f:
ac:5c:d6:b5:8b:c6:f6:06:28:55:7c:ad:b7:45:3a:
7c:85:a3:ed:ac:5d:63:ea:9e:d2:f4:ce:a1:02:db:
05:79:f6:70:99:80:48:22:a4:83:5e:17:b6:88:b1:
91:71:e2:36:15:ab:01:05:13:02:1a:c4:e1:16:5a:
4b:24:86:dd:43:29:bb:e0:a7:28:25:dc:d3:1d:7e:
25:04:6d:03:24:bb:3b:38:f2:26:0d:c5:39:a7:60:
a5:fd:64:ce:09:e8:ef:3d:6d:5d:e2:1e:a7:ab:c0:
26:76:72:20:15:f4:0d:bf:bd:43:1a:bb:7b:88:0c:
b2:3a:ae:37:9a:70:eb:5b:81:ce:d7:ee:d3:e0:c7:
7e:f2:4f:a4:5c:93:a9:f7:3b:d3:c0:00:63:dd:71:
b3:cb:7f:3a:07:52:1d:8d:af:6f:0d:0a:a4:0d:11:
c7:b3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E4:47:0C:8E:5E:3E:70:5B:7F:02:75:F3:0C:5D:35:C0:22:EF:3A:BF
X509v3 Authority Key Identifier:
keyid:4B:3D:A6:E9:9C:66:65:13:A2:CE:E5:F0:E0:D3:AB:74:5F:16:7D:C3
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Sz2m6ZxmZROizuXw4NOrdF8WfcM.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/eb/6f232e-2275-44e9-91c0-c7397a2669a9/1/5EcMjl4-cFt_AnXzDF01wCLvOr8.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/eb/6f232e-2275-44e9-91c0-c7397a2669a9/1/Sz2m6ZxmZROizuXw4NOrdF8WfcM.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
151.216.34.0/24
Signature Algorithm: sha256WithRSAEncryption
45:8e:3a:3d:48:85:8c:12:3b:16:2e:11:e9:ab:7a:06:d3:6a:
cb:e1:01:ce:71:be:ca:42:c7:a1:02:43:c6:2a:be:58:d7:be:
bd:a6:83:03:06:00:ce:7f:1e:10:62:81:87:7c:69:13:dd:27:
cd:d4:31:2b:04:8d:f1:a1:ec:48:7e:31:b8:ac:cc:fc:a7:80:
f3:5a:53:c4:1a:48:53:1c:2e:1a:4a:b3:8d:6f:35:20:9f:ad:
fc:8a:35:23:08:29:95:de:d1:36:c2:e5:70:c4:d5:1b:72:9d:
40:23:7e:a0:d8:cd:32:2c:da:73:a7:9a:4b:dd:cb:62:37:73:
35:f0:cb:96:ab:15:25:10:9f:c0:c5:8b:8d:70:d1:fd:d4:32:
5d:1e:63:c8:ae:90:e2:b1:d4:17:8c:f9:0a:d9:fe:eb:ee:bf:
a4:fa:0c:0a:60:a7:d0:91:a8:6e:a9:b0:85:84:a9:8e:fb:d5:
6d:c4:3f:d6:48:23:b3:f2:b0:02:23:8b:df:20:5b:49:61:d5:
a5:58:dd:8c:72:40:38:e6:27:26:f4:49:b6:6e:48:73:a7:77:
b4:d3:6e:0a:74:62:9f:b1:6d:25:29:20:83:1a:77:45:1d:24:
85:89:1b:c1:51:ed:48:e5:4b:83:0c:b7:24:4c:17:30:bf:8e:
47:5e:9a:a5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Feb 17 07:42:24 2025 by rpki-client