![](/console.gif)
Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f5/c89c9e-8623-4572-af80-7e51a2cdf813/1/bDY9PlWBP1g2LEPCFITRQ7wlGf0.roa
File: bDY9PlWBP1g2LEPCFITRQ7wlGf0.roa (raw, json)
Hash identifier: tvf1CYHxve3JbVP+7RBldGDIba86U9g5BApbsYFpXHM=
Subject key identifier: 6C:36:3D:3E:55:81:3F:58:36:2C:43:C2:14:84:D1:43:BC:25:19:FD
Certificate issuer: /CN=073e9e3a85d4509a36b6527687a84a7b115460b7
Certificate serial: 074397F9
Authority key identifier: 07:3E:9E:3A:85:D4:50:9A:36:B6:52:76:87:A8:4A:7B:11:54:60:B7
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Bz6eOoXUUJo2tlJ2h6hKexFUYLc.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/f5/c89c9e-8623-4572-af80-7e51a2cdf813/1/bDY9PlWBP1g2LEPCFITRQ7wlGf0.roa
Signing time: Sat 01 Jan 2022 01:54:13 +0000
ROA not before: Sat 01 Jan 2022 01:54:13 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 196704
IP address blocks: 195.88.130.0/23 maxlen: 23
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 121870329 (0x74397f9)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=073e9e3a85d4509a36b6527687a84a7b115460b7
Validity
Not Before: Jan 1 01:54:13 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=6c363d3e55813f58362c43c21484d143bc2519fd
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e6:cc:c0:a6:d4:8e:96:59:f5:82:0c:d6:80:54:
68:f8:85:ee:68:72:a3:e4:a8:21:9f:52:ef:db:57:
6e:81:55:5a:f5:d0:f3:e7:a7:ff:4c:14:e4:0b:22:
bc:64:4b:d8:88:37:56:e6:6e:96:4e:11:39:5b:77:
96:48:95:ab:cb:ea:81:7f:3b:0d:73:e4:b2:e4:71:
d8:f1:64:cc:13:70:da:b2:32:b2:9d:58:af:38:5d:
91:4c:c6:79:a0:e9:c2:50:7e:31:37:7a:1f:b8:69:
64:0d:ad:47:9b:c8:2f:17:ad:99:87:47:92:bb:70:
08:90:2f:ac:43:75:d1:1f:27:5d:af:25:64:02:5d:
5c:39:4f:d2:42:65:52:86:66:e6:68:d1:6b:3c:0c:
bb:d6:ad:f0:26:78:2e:ae:69:5c:e6:d6:f8:b1:18:
87:6e:de:ad:28:9e:7e:aa:18:f9:2c:36:92:2d:90:
bd:ec:5b:16:39:19:70:e0:5e:eb:0b:82:25:f6:45:
88:d6:71:d5:8d:81:e9:8d:c5:c4:67:6a:31:a2:8c:
1a:3d:34:90:71:8d:4e:ab:79:eb:83:ce:2f:30:75:
d6:37:6b:70:11:1e:87:79:0e:f1:f1:16:cd:5c:be:
18:b7:9e:5c:a7:2c:32:59:3f:28:42:24:ed:6f:02:
4a:7b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
6C:36:3D:3E:55:81:3F:58:36:2C:43:C2:14:84:D1:43:BC:25:19:FD
X509v3 Authority Key Identifier:
keyid:07:3E:9E:3A:85:D4:50:9A:36:B6:52:76:87:A8:4A:7B:11:54:60:B7
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Bz6eOoXUUJo2tlJ2h6hKexFUYLc.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f5/c89c9e-8623-4572-af80-7e51a2cdf813/1/bDY9PlWBP1g2LEPCFITRQ7wlGf0.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/f5/c89c9e-8623-4572-af80-7e51a2cdf813/1/Bz6eOoXUUJo2tlJ2h6hKexFUYLc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
195.88.130.0/23
Signature Algorithm: sha256WithRSAEncryption
8f:3b:4f:26:7f:d4:54:db:99:cc:cb:29:fb:2c:95:f6:b9:4c:
f3:03:d8:7c:4d:5a:34:b6:47:8b:83:f3:60:44:69:61:c1:47:
44:a4:be:3e:e8:ad:eb:c6:7b:42:5a:68:88:9d:ba:5b:db:b5:
99:bf:a6:49:bc:ef:29:98:a2:44:10:3e:0a:db:83:2b:96:1a:
9e:3b:73:2d:d8:68:83:61:ce:73:16:a1:c3:f2:89:30:38:f1:
5f:1f:80:51:90:4e:0d:18:d9:26:10:6e:82:c9:e6:31:c1:f9:
e6:91:31:62:ef:78:53:fd:54:7d:f0:c0:5b:10:f0:bd:a1:e9:
33:e5:37:1d:39:f3:d3:d9:f2:00:8b:6b:17:a0:73:fa:e5:04:
ab:2d:46:54:bb:4e:dd:4e:c5:53:71:ef:48:42:6a:81:fb:13:
69:72:c8:53:25:9c:16:fd:2d:34:eb:88:cb:a4:19:cc:1f:1e:
e8:08:11:c5:5e:bb:57:63:6a:49:07:d1:24:f9:92:67:0a:8c:
db:b9:00:4b:2a:2a:ba:32:5c:48:76:97:07:00:ca:fa:e1:34:
8e:28:4b:85:57:23:63:7c:59:ce:fe:88:08:a6:10:2f:08:c6:
93:90:a0:c0:d5:73:84:20:bb:80:c2:4c:7b:db:14:b2:af:f5:
7e:1f:02:c6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Feb 17 07:17:46 2025 by rpki-client