![](/console.gif)
Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f0/5a3374-220d-4dc6-8900-2a3ffb7a218a/1/jTggmcA7NMM2TsJuA3fVpEBEBUQ.roa
File: jTggmcA7NMM2TsJuA3fVpEBEBUQ.roa (raw, json)
Hash identifier: xiqy96MHSJ3+aC1vVu8l/B4N0EU9EgIqqO2tDLBDwrs=
Subject key identifier: 8D:38:20:99:C0:3B:34:C3:36:4E:C2:6E:03:77:D5:A4:40:44:05:44
Certificate issuer: /CN=33980d41e32a5616382e906840264945af02d67e
Certificate serial: DF8D8B
Authority key identifier: 33:98:0D:41:E3:2A:56:16:38:2E:90:68:40:26:49:45:AF:02:D6:7E
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/M5gNQeMqVhY4LpBoQCZJRa8C1n4.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/f0/5a3374-220d-4dc6-8900-2a3ffb7a218a/1/jTggmcA7NMM2TsJuA3fVpEBEBUQ.roa
Signing time: Sat 01 Jan 2022 04:55:01 +0000
ROA not before: Sat 01 Jan 2022 04:55:01 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 211193
IP address blocks: 94.103.177.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 14650763 (0xdf8d8b)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=33980d41e32a5616382e906840264945af02d67e
Validity
Not Before: Jan 1 04:55:01 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=8d382099c03b34c3364ec26e0377d5a440440544
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:85:96:7c:15:9e:15:65:aa:74:1b:24:29:20:bd:
21:34:1b:b6:05:cf:89:5f:81:ec:2e:52:65:80:10:
a2:46:69:59:92:e5:ec:10:76:79:8e:86:ba:9d:f5:
6d:eb:75:17:fa:88:7a:c9:c3:f6:41:25:64:aa:95:
2e:8a:e2:19:cc:f0:cc:9b:65:c6:2e:f0:d8:09:44:
ae:7c:27:ee:31:ca:09:ba:94:ba:6a:3d:5e:62:d8:
64:20:02:29:f8:e6:bb:3d:43:36:2b:74:c6:99:6c:
1a:96:94:d8:29:ec:35:eb:ba:c8:cc:83:d4:19:28:
af:e7:a4:67:a4:c6:b1:14:4c:00:b7:9d:63:b7:7b:
27:dd:a2:b2:57:b5:ae:5b:06:70:86:83:77:eb:9a:
21:59:d1:7f:a2:7a:ea:d4:15:39:58:a9:61:b1:d9:
bc:5e:d1:e5:11:45:a8:0f:96:e9:c0:a7:1c:20:f8:
17:73:71:60:35:9e:6c:9b:f7:51:29:20:29:66:1d:
41:2b:6e:30:4d:3b:c6:d0:9c:ed:df:f2:80:84:50:
88:7c:5e:f0:59:51:08:82:60:bb:51:e2:e2:ac:23:
a3:57:c6:de:26:0d:9d:89:98:06:61:10:4f:88:ab:
d6:c7:c7:07:4f:c5:75:8b:13:89:5e:9a:60:d2:98:
c9:3d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
8D:38:20:99:C0:3B:34:C3:36:4E:C2:6E:03:77:D5:A4:40:44:05:44
X509v3 Authority Key Identifier:
keyid:33:98:0D:41:E3:2A:56:16:38:2E:90:68:40:26:49:45:AF:02:D6:7E
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/M5gNQeMqVhY4LpBoQCZJRa8C1n4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f0/5a3374-220d-4dc6-8900-2a3ffb7a218a/1/jTggmcA7NMM2TsJuA3fVpEBEBUQ.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/f0/5a3374-220d-4dc6-8900-2a3ffb7a218a/1/M5gNQeMqVhY4LpBoQCZJRa8C1n4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
94.103.177.0/24
Signature Algorithm: sha256WithRSAEncryption
5f:6c:30:11:ae:a3:c8:38:f1:8b:f9:58:fc:21:8f:56:5a:c0:
dc:1d:b6:39:7e:3f:77:7a:b8:38:c9:99:5f:17:94:80:28:e3:
d3:b9:9f:35:23:05:4d:43:70:b4:19:b7:ea:00:32:0d:b2:21:
49:51:dd:1f:0d:13:cf:dc:99:32:de:2c:0a:a8:f0:35:02:3c:
af:1b:33:b3:b5:cf:dd:f9:08:1b:3e:a1:f1:45:64:14:ff:11:
c9:a8:5e:c7:d6:e6:05:bf:bf:d9:c1:b5:1f:66:ef:12:21:32:
ab:77:c5:48:2f:26:94:00:df:0a:2f:46:3b:ed:82:dd:41:f6:
ed:62:d0:17:87:34:e5:96:9b:c2:d1:ef:fe:19:90:bf:f0:06:
31:3e:37:f3:f6:60:89:b1:13:d9:ac:ce:f6:e8:92:d4:d1:dc:
d6:ee:be:bd:3d:6e:0a:a2:5e:e9:7e:3d:9d:62:85:ec:62:a9:
32:91:67:b8:df:57:e8:1d:e5:5d:45:0c:99:7f:f9:76:7b:b2:
b8:59:93:d6:0a:62:b1:a3:b9:45:8b:e2:9e:a2:f3:a9:3c:58:
fa:55:69:e7:e6:ad:ef:d3:ef:aa:30:7e:74:67:74:a0:04:64:
90:b3:f6:a9:59:f7:45:fb:71:62:85:34:0a:a9:65:f8:a4:7f:
0a:ee:dc:6e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Feb 17 07:15:59 2025 by rpki-client