![](/console.gif)
Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/eb/6f232e-2275-44e9-91c0-c7397a2669a9/1/mBIqD19ao5KB0lKuIhreYGuBiQc.roa
File: mBIqD19ao5KB0lKuIhreYGuBiQc.roa (raw, json)
Hash identifier: 6pqKngdn7Y6cA8kfnRvMHb4Wsp98t5x8O6Zk0LDiWdE=
Subject key identifier: 98:12:2A:0F:5F:5A:A3:92:81:D2:52:AE:22:1A:DE:60:6B:81:89:07
Certificate issuer: /CN=4b3da6e99c666513a2cee5f0e0d3ab745f167dc3
Certificate serial: 09377223
Authority key identifier: 4B:3D:A6:E9:9C:66:65:13:A2:CE:E5:F0:E0:D3:AB:74:5F:16:7D:C3
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Sz2m6ZxmZROizuXw4NOrdF8WfcM.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/eb/6f232e-2275-44e9-91c0-c7397a2669a9/1/mBIqD19ao5KB0lKuIhreYGuBiQc.roa
Signing time: Tue 28 Jun 2022 05:25:20 +0000
ROA not before: Tue 28 Jun 2022 05:25:20 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 23676
IP address blocks: 151.216.32.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 154628643 (0x9377223)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4b3da6e99c666513a2cee5f0e0d3ab745f167dc3
Validity
Not Before: Jun 28 05:25:20 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=98122a0f5f5aa39281d252ae221ade606b818907
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8e:ac:2f:f4:6c:ce:07:05:a6:83:ad:14:18:74:
46:97:fc:67:f1:ef:2d:47:cd:2f:6e:ee:a8:bc:1d:
fc:ae:31:77:70:c1:e7:69:3b:0f:ff:02:47:1c:90:
68:04:2a:f4:cc:3d:49:52:9a:1a:d3:cb:79:61:b8:
a4:3d:7d:61:2b:bb:cf:2e:56:0d:aa:b7:a4:5e:0f:
b2:ae:08:4d:d6:d9:5d:93:8e:ec:fe:40:4a:3f:34:
9a:b1:8a:8d:a8:75:d6:42:31:91:01:bd:c1:c7:a4:
dd:9a:b9:88:86:4b:7e:c6:88:87:a2:5b:50:04:2e:
82:9e:49:5c:3f:7e:a2:27:93:74:1c:32:c7:35:1c:
41:a5:99:f4:ad:f3:e7:0b:f4:24:d6:4f:02:32:4a:
ed:e5:9a:c9:02:6a:3e:bc:9d:f4:56:3f:c1:37:bb:
71:6f:ab:d3:1d:93:9e:a1:82:76:64:ab:7e:9e:6b:
74:8e:4e:d5:a9:12:fc:2b:c1:d9:41:1e:6b:5a:b8:
eb:03:9d:16:9f:5b:70:73:69:09:f2:09:eb:c8:81:
1e:c9:76:e4:72:a3:dc:2d:b7:6b:24:41:f8:37:38:
84:e3:4b:99:7b:4a:87:97:fa:f7:70:15:7c:fd:56:
1e:bb:ae:b3:07:3d:71:0f:92:5b:7f:e2:dc:a3:30:
0f:65
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
98:12:2A:0F:5F:5A:A3:92:81:D2:52:AE:22:1A:DE:60:6B:81:89:07
X509v3 Authority Key Identifier:
keyid:4B:3D:A6:E9:9C:66:65:13:A2:CE:E5:F0:E0:D3:AB:74:5F:16:7D:C3
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Sz2m6ZxmZROizuXw4NOrdF8WfcM.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/eb/6f232e-2275-44e9-91c0-c7397a2669a9/1/mBIqD19ao5KB0lKuIhreYGuBiQc.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/eb/6f232e-2275-44e9-91c0-c7397a2669a9/1/Sz2m6ZxmZROizuXw4NOrdF8WfcM.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
151.216.32.0/24
Signature Algorithm: sha256WithRSAEncryption
03:89:dc:a3:a6:11:07:df:4e:98:d2:6d:79:af:9d:28:55:a1:
a0:52:c2:3c:d8:09:a2:a7:9e:51:a3:ae:27:2e:7a:f7:c3:6e:
0e:2c:fa:eb:39:3b:fb:43:63:6c:25:cd:63:04:48:87:29:37:
64:b6:2c:2f:51:68:27:09:06:68:7c:de:e1:e8:1f:1e:cf:88:
62:0f:b2:0e:3b:30:ff:3c:89:98:78:c4:25:36:c8:88:b9:59:
bc:77:11:47:08:cc:77:76:cf:61:6a:f9:fb:84:85:22:6a:fc:
f5:8b:17:0d:d6:98:4d:2c:90:2b:4c:bc:48:8d:4b:f1:ec:55:
d5:2d:3c:3e:6a:d8:32:55:94:a6:9b:18:bf:ba:fa:22:c1:2c:
3d:8d:19:d3:e2:0c:a0:2f:04:2b:a6:69:87:95:30:50:30:94:
81:0a:d4:5b:c5:1c:6d:af:ba:85:e3:fc:e5:ae:65:5c:12:1e:
5e:1c:06:ce:f7:1d:6d:19:e0:87:3a:ec:8e:3b:9d:bd:7e:8b:
93:62:d1:c5:ec:f0:65:16:b9:1e:32:41:6c:2b:01:a1:58:66:
d3:96:4f:9f:ea:7f:1c:a9:c9:85:28:c4:b4:1f:99:9f:f0:cd:
4b:0e:00:25:46:e7:c3:a2:d1:aa:55:8d:60:e7:5a:9f:90:c1:
cc:e3:2d:28
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Feb 17 07:19:41 2025 by rpki-client