![](/console.gif)
Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/eb/6f232e-2275-44e9-91c0-c7397a2669a9/1/U6K2ISQwnRkoOmt2p7B_8IBHrvc.roa
File: U6K2ISQwnRkoOmt2p7B_8IBHrvc.roa (raw, json)
Hash identifier: r0dkyCoF3gBZsBaZQZhCtStyA5jRKh+9vl4fHvoy/FY=
Subject key identifier: 53:A2:B6:21:24:30:9D:19:28:3A:6B:76:A7:B0:7F:F0:80:47:AE:F7
Certificate issuer: /CN=4b3da6e99c666513a2cee5f0e0d3ab745f167dc3
Certificate serial: 05852DE2
Authority key identifier: 4B:3D:A6:E9:9C:66:65:13:A2:CE:E5:F0:E0:D3:AB:74:5F:16:7D:C3
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Sz2m6ZxmZROizuXw4NOrdF8WfcM.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/eb/6f232e-2275-44e9-91c0-c7397a2669a9/1/U6K2ISQwnRkoOmt2p7B_8IBHrvc.roa
Signing time: Fri 01 Apr 2022 14:44:25 +0000
ROA not before: Fri 01 Apr 2022 14:44:25 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 3970
IP address blocks: 151.216.4.0/24 maxlen: 24
2001:7fc:2::/48 maxlen: 48
2001:7fc:3::/48 maxlen: 48
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 92614114 (0x5852de2)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4b3da6e99c666513a2cee5f0e0d3ab745f167dc3
Validity
Not Before: Apr 1 14:44:25 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=53a2b62124309d19283a6b76a7b07ff08047aef7
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a2:2b:ea:81:95:a8:eb:f6:42:f3:46:b8:63:e1:
ff:84:ec:e0:e2:bb:37:e1:f9:66:1a:04:06:a9:bf:
1f:7a:87:b9:86:35:8a:04:55:24:85:30:d7:9f:e6:
34:e3:5c:cd:26:44:af:b8:70:4e:84:b8:80:da:0b:
d9:5e:59:6c:b1:3b:eb:1e:13:d6:c9:06:74:2f:e8:
0d:5a:47:38:b1:4d:1d:3f:8e:27:54:31:47:8d:42:
9c:af:14:c2:fd:68:98:b0:05:76:39:02:de:e2:92:
60:4c:94:f4:20:88:d6:03:fb:2c:8d:55:65:4c:86:
9d:14:2e:22:14:40:51:25:86:b1:e8:7f:8a:63:54:
26:d7:b8:de:0a:c0:52:ff:76:e3:92:8f:f6:67:9e:
df:d7:0f:4f:83:0b:90:4b:2c:c4:43:fd:b4:ba:1a:
7a:6d:83:12:71:5c:02:76:fc:b6:cf:c1:fb:4a:89:
ca:c1:10:71:c0:af:ca:44:56:45:83:fb:69:20:a1:
c3:a4:d7:f1:40:98:33:20:1a:9e:40:54:67:96:ca:
bd:e3:a5:ca:5a:20:e2:26:77:37:5e:52:78:67:a5:
b4:da:3d:4d:be:db:5a:77:bc:36:a6:ed:32:23:84:
2c:58:cf:9b:25:bf:c4:06:69:ab:03:bf:ba:c9:62:
e1:51
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
53:A2:B6:21:24:30:9D:19:28:3A:6B:76:A7:B0:7F:F0:80:47:AE:F7
X509v3 Authority Key Identifier:
keyid:4B:3D:A6:E9:9C:66:65:13:A2:CE:E5:F0:E0:D3:AB:74:5F:16:7D:C3
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Sz2m6ZxmZROizuXw4NOrdF8WfcM.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/eb/6f232e-2275-44e9-91c0-c7397a2669a9/1/U6K2ISQwnRkoOmt2p7B_8IBHrvc.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/eb/6f232e-2275-44e9-91c0-c7397a2669a9/1/Sz2m6ZxmZROizuXw4NOrdF8WfcM.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
151.216.4.0/24
IPv6:
2001:7fc:2::/47
Signature Algorithm: sha256WithRSAEncryption
1e:17:fa:9a:e4:48:5a:d1:d8:13:d6:00:d9:0c:12:a4:2b:47:
ab:e0:cd:f5:33:f8:78:fb:92:7c:a6:df:23:0e:0d:22:99:17:
0b:b7:67:79:eb:ac:4d:2b:20:44:b5:e4:5e:53:86:81:8b:3f:
8b:05:5f:cd:d1:9d:e7:bf:25:94:a6:3d:b7:15:34:6e:2d:71:
ed:4d:5b:25:19:38:1c:bd:05:f0:2b:2b:87:c0:48:bc:61:5f:
7d:7d:ed:b5:24:30:19:ab:11:f8:26:23:70:f0:27:a5:f2:d9:
f2:2f:77:4a:b1:e4:3b:88:31:ee:ef:62:56:ad:17:59:69:5e:
87:f0:ce:02:86:80:18:14:32:99:ee:6d:d3:5e:53:15:ca:02:
b2:f0:68:11:c8:d4:6f:68:dc:f6:11:c5:b4:c2:71:3f:20:80:
57:29:3a:c0:6c:84:a8:1d:f7:fd:24:50:64:ba:04:3b:60:ed:
73:e3:bd:df:44:af:b9:08:d5:fe:b8:57:8a:4e:32:18:4e:45:
ce:fc:2f:9a:6d:ff:92:70:4d:8b:36:86:49:c2:f3:1f:9e:23:
f8:a9:67:fd:1b:9f:1a:bd:5a:c8:56:e0:3e:91:87:52:67:34:
6b:37:f1:03:07:4c:d2:7e:2b:80:ec:a4:1c:bc:98:e3:2f:2a:
a9:75:32:9c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Feb 17 07:18:48 2025 by rpki-client