![](/console.gif)
Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/eb/6f232e-2275-44e9-91c0-c7397a2669a9/1/dZW4wk2QkNgKCEjiWl0SpNqIQ7E.roa
File: dZW4wk2QkNgKCEjiWl0SpNqIQ7E.roa (raw, json)
Hash identifier: x3ZstiTFIcFz/McMnJorZ0lapuKDd0nzA78hj0UFpYI=
Subject key identifier: 75:95:B8:C2:4D:90:90:D8:0A:08:48:E2:5A:5D:12:A4:DA:88:43:B1
Certificate issuer: /CN=4b3da6e99c666513a2cee5f0e0d3ab745f167dc3
Certificate serial: 07259560
Authority key identifier: 4B:3D:A6:E9:9C:66:65:13:A2:CE:E5:F0:E0:D3:AB:74:5F:16:7D:C3
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Sz2m6ZxmZROizuXw4NOrdF8WfcM.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/eb/6f232e-2275-44e9-91c0-c7397a2669a9/1/dZW4wk2QkNgKCEjiWl0SpNqIQ7E.roa
Signing time: Thu 19 May 2022 05:56:07 +0000
ROA not before: Thu 19 May 2022 05:56:07 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 23676
IP address blocks: 151.216.32.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 119903584 (0x7259560)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4b3da6e99c666513a2cee5f0e0d3ab745f167dc3
Validity
Not Before: May 19 05:56:07 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=7595b8c24d9090d80a0848e25a5d12a4da8843b1
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9b:22:0f:42:5b:bd:63:8a:65:1d:ce:62:29:8a:
91:a0:a9:6b:a3:5a:30:5a:f9:d0:ac:73:0d:8b:ea:
d9:68:76:40:76:51:75:70:98:0d:8b:6b:70:94:8a:
38:e9:69:54:3e:59:c0:51:e4:78:0a:7d:2d:c0:1b:
4b:f0:65:0c:a5:57:2e:21:a3:82:0f:99:8b:87:12:
f2:12:94:1a:9c:6a:91:9e:03:93:d3:33:f1:17:30:
c9:0c:14:48:0f:9b:9d:f4:17:5d:64:c0:1d:52:93:
77:c7:b6:8d:a0:1a:11:af:f6:5b:80:07:e7:91:4a:
a9:cb:75:d7:fa:74:f8:65:e4:56:28:f7:4c:bb:46:
a9:4e:63:b5:58:4f:49:d9:47:8e:0d:b9:09:71:ac:
8d:31:3b:1d:8b:71:b2:95:b0:f9:09:d8:f8:8b:22:
27:ae:fa:2c:8c:cc:dd:a3:f5:4f:91:2f:14:a7:18:
fb:d1:e2:02:8e:fe:b9:5f:ec:47:2f:48:04:c9:07:
e3:9c:e4:35:cb:15:4b:8e:3a:ad:1f:f2:5e:e8:02:
38:fa:c3:c8:b1:55:c3:59:7e:38:05:88:9c:7a:a8:
a8:7e:e6:29:67:d8:e0:45:c4:06:3d:8a:6e:ca:97:
75:e2:e3:67:c5:e6:99:38:31:92:a4:cb:2e:9c:dc:
07:6f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
75:95:B8:C2:4D:90:90:D8:0A:08:48:E2:5A:5D:12:A4:DA:88:43:B1
X509v3 Authority Key Identifier:
keyid:4B:3D:A6:E9:9C:66:65:13:A2:CE:E5:F0:E0:D3:AB:74:5F:16:7D:C3
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Sz2m6ZxmZROizuXw4NOrdF8WfcM.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/eb/6f232e-2275-44e9-91c0-c7397a2669a9/1/dZW4wk2QkNgKCEjiWl0SpNqIQ7E.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/eb/6f232e-2275-44e9-91c0-c7397a2669a9/1/Sz2m6ZxmZROizuXw4NOrdF8WfcM.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
151.216.32.0/24
Signature Algorithm: sha256WithRSAEncryption
5d:46:2e:af:46:20:1b:97:b9:9b:dc:39:d0:e9:97:7f:48:8a:
e0:2f:98:fb:9f:9c:fe:12:71:6e:b5:11:d6:fe:c2:65:41:e7:
70:14:be:47:3d:18:81:2f:27:7f:74:22:db:d1:42:fb:fc:bc:
ee:e0:8f:37:9a:b8:a3:33:31:a1:64:2f:e8:93:14:ee:ac:14:
c9:7b:4c:18:79:a6:04:18:61:ee:0a:3b:3f:4a:5c:fb:33:15:
1e:67:7e:0b:30:fb:8d:ca:ce:47:18:88:17:ba:79:c5:11:ac:
d4:47:51:30:ce:1f:43:dd:16:92:49:33:97:c3:c0:0c:ef:04:
ad:d7:6c:34:31:d2:cc:54:0d:c9:98:4d:b2:bc:36:f8:04:b9:
41:7f:fa:72:20:76:60:44:f4:4e:bf:7a:b3:08:ec:0d:5c:65:
91:8f:90:02:6b:f0:0c:96:ea:e1:d5:12:df:5d:ce:31:77:e1:
b0:a5:b6:47:28:05:cb:f3:d1:ee:c7:6c:c8:36:d2:27:a9:e1:
8f:92:e2:2d:e5:54:39:89:2c:76:28:cc:76:a5:35:28:1f:fa:
4a:f4:45:e7:09:f6:46:c2:65:95:62:35:f7:1e:e2:e8:b5:7d:
00:2a:db:f3:39:63:fc:57:53:d4:11:27:a5:04:a6:81:b4:2e:
8a:ad:1b:55
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Feb 17 07:19:37 2025 by rpki-client