![](/console.gif)
Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/eb/6f232e-2275-44e9-91c0-c7397a2669a9/1/HgPsdmNmg0O_zOX7LfTC0_fve4Y.roa
File: HgPsdmNmg0O_zOX7LfTC0_fve4Y.roa (raw, json)
Hash identifier: cFeqByOmyQFGupuNLwlRBDWpYtbLHNAkcy3Scl6RRBI=
Subject key identifier: 1E:03:EC:76:63:66:83:43:BF:CC:E5:FB:2D:F4:C2:D3:F7:EF:7B:86
Certificate issuer: /CN=4b3da6e99c666513a2cee5f0e0d3ab745f167dc3
Certificate serial: 0639FAF4
Authority key identifier: 4B:3D:A6:E9:9C:66:65:13:A2:CE:E5:F0:E0:D3:AB:74:5F:16:7D:C3
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Sz2m6ZxmZROizuXw4NOrdF8WfcM.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/eb/6f232e-2275-44e9-91c0-c7397a2669a9/1/HgPsdmNmg0O_zOX7LfTC0_fve4Y.roa
Signing time: Tue 26 Apr 2022 04:50:54 +0000
ROA not before: Tue 26 Apr 2022 04:50:54 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 55722
IP address blocks: 151.216.33.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 104463092 (0x639faf4)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4b3da6e99c666513a2cee5f0e0d3ab745f167dc3
Validity
Not Before: Apr 26 04:50:54 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=1e03ec7663668343bfcce5fb2df4c2d3f7ef7b86
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b0:70:82:5c:72:f1:aa:02:45:60:10:1b:6e:18:
89:29:87:82:ba:e2:24:01:8f:de:88:10:25:9c:cb:
a0:42:6b:71:b1:0f:fe:16:dc:e7:96:fe:df:bf:87:
20:e4:e5:5e:a6:c4:c3:78:93:cb:c5:40:9f:3e:1e:
30:9b:60:fd:f2:23:a6:44:9b:75:5d:cc:0b:13:02:
4f:d6:13:06:50:1a:9f:ae:aa:52:9b:09:4b:8f:24:
10:c3:6c:6a:82:55:f6:c8:79:34:b5:6b:30:7a:a5:
52:5f:f8:1b:01:5e:60:f9:71:62:63:01:12:5c:a1:
df:03:c3:67:d6:46:f6:81:64:b4:75:41:ca:48:f3:
ed:f4:49:89:c2:4d:9d:93:39:9d:3f:be:8b:11:23:
2c:04:3a:da:6c:37:48:ba:08:b6:32:3e:51:31:91:
49:c3:b3:b1:d1:6b:e3:07:f1:d9:0c:96:9a:b0:31:
07:e8:93:29:dc:5d:d8:12:07:c7:24:6c:bf:71:6e:
0e:14:9d:85:9c:5d:b2:dd:f4:71:84:84:7f:7c:b3:
3d:8a:73:41:f3:3f:48:3b:5c:ad:0c:b7:e1:92:50:
ad:98:79:42:2e:c1:2e:93:11:41:07:bc:65:0e:be:
b9:06:eb:be:66:7d:4f:b3:ad:3b:6d:1e:ae:75:37:
ea:91
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
1E:03:EC:76:63:66:83:43:BF:CC:E5:FB:2D:F4:C2:D3:F7:EF:7B:86
X509v3 Authority Key Identifier:
keyid:4B:3D:A6:E9:9C:66:65:13:A2:CE:E5:F0:E0:D3:AB:74:5F:16:7D:C3
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Sz2m6ZxmZROizuXw4NOrdF8WfcM.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/eb/6f232e-2275-44e9-91c0-c7397a2669a9/1/HgPsdmNmg0O_zOX7LfTC0_fve4Y.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/eb/6f232e-2275-44e9-91c0-c7397a2669a9/1/Sz2m6ZxmZROizuXw4NOrdF8WfcM.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
151.216.33.0/24
Signature Algorithm: sha256WithRSAEncryption
98:38:81:60:ec:9e:82:a2:2b:e1:53:a7:48:1e:9e:83:df:33:
bf:cb:8c:f6:ac:1c:d6:48:0c:9b:60:9d:04:be:8f:d2:31:c1:
7b:a0:4c:ab:5c:1d:9a:09:a9:94:a3:1e:4b:13:7d:27:d3:2f:
b8:e9:4d:a3:f4:93:9c:e7:1b:24:33:ab:16:c8:2d:3a:2c:31:
5f:f6:43:f4:1b:24:ef:3c:47:37:7b:14:1a:a0:a5:db:d5:5b:
51:fa:80:3b:32:c6:6c:27:14:0d:64:d8:27:80:6d:40:10:5e:
8d:ee:5e:39:af:6a:d4:26:2f:77:05:e0:fe:b9:88:35:1d:9c:
7a:74:fe:c7:5a:0c:9e:c4:fb:58:ce:a0:7b:d5:c5:6f:19:c9:
1a:6e:ee:1a:62:17:9c:6a:06:da:c9:34:2d:94:a9:b9:ec:a3:
d7:36:c6:12:50:09:d9:57:39:60:d1:5f:e2:ae:6c:b0:3e:39:
c5:58:87:dc:e5:80:95:21:ea:cd:49:ef:52:69:c5:37:37:7f:
42:e6:a3:af:2b:ae:fa:a0:0e:1a:98:d0:25:12:1b:75:e5:90:
7a:1f:53:33:42:f7:4f:7c:e0:15:db:5d:99:55:3d:84:3a:4b:
ca:74:ba:06:3d:51:13:cf:63:f7:a4:9a:41:b0:20:cd:34:58:
0a:c5:77:e3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Feb 17 07:47:09 2025 by rpki-client