![](/console.gif)
Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f9/5aacf3-bbc9-43c4-86f0-54f6e52f547b/1/Ft4pGkb6UARTcgbG4FlSKUHYnLs.roa
File: Ft4pGkb6UARTcgbG4FlSKUHYnLs.roa (raw, json)
Hash identifier: lRPXfkm1+YCBURh/UB7HM1ZsDgLft9OFypQizv47bfc=
Subject key identifier: 16:DE:29:1A:46:FA:50:04:53:72:06:C6:E0:59:52:29:41:D8:9C:BB
Certificate issuer: /CN=4b23b06d60ec3e76b4920b2b64141fa3af6e5fbb
Certificate serial: 02CDE2
Authority key identifier: 4B:23:B0:6D:60:EC:3E:76:B4:92:0B:2B:64:14:1F:A3:AF:6E:5F:BB
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/SyOwbWDsPna0kgsrZBQfo69uX7s.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/f9/5aacf3-bbc9-43c4-86f0-54f6e52f547b/1/Ft4pGkb6UARTcgbG4FlSKUHYnLs.roa
Signing time: Fri 11 Mar 2022 14:07:02 +0000
ROA not before: Fri 11 Mar 2022 14:07:02 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 21495
IP address blocks: 195.242.183.0/24 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 183778 (0x2cde2)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4b23b06d60ec3e76b4920b2b64141fa3af6e5fbb
Validity
Not Before: Mar 11 14:07:02 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=16de291a46fa5004537206c6e059522941d89cbb
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a0:0a:5a:36:14:0f:43:df:8d:18:94:04:5a:39:
ff:5e:cf:f5:38:2f:bd:d7:c1:e3:de:66:ea:22:e2:
27:97:87:00:ff:ee:49:be:f6:e8:98:72:64:d8:e5:
8c:be:77:46:9d:8b:57:c9:80:14:c4:61:a1:57:d8:
5a:70:a7:fc:b9:67:f0:49:ab:7f:98:aa:76:60:81:
61:f6:af:94:4b:77:fb:57:20:1f:47:34:a7:9e:07:
99:63:12:21:b1:63:a4:20:21:29:65:89:64:78:47:
04:28:b3:59:f7:a5:0e:bb:70:ed:f2:00:d9:6b:f2:
11:ea:44:94:f0:0d:cd:bb:d7:fa:af:5c:28:60:96:
dc:19:d0:e9:f8:5d:0d:53:13:61:94:e1:89:d2:a6:
57:bd:e4:ad:ee:48:49:fa:2d:ac:15:bf:b6:40:72:
d4:47:fc:9e:b9:b5:83:04:31:e9:f8:e9:98:57:af:
d4:d5:ba:fd:73:d5:2f:58:47:fb:2e:b5:46:1d:09:
c6:4b:1e:24:b9:5f:1f:e1:57:f6:42:8b:28:8e:7d:
f2:f4:c6:eb:1e:11:f5:d8:d2:6c:e8:0a:dd:51:8b:
37:f1:9f:31:c5:96:89:23:9a:3a:0c:57:69:4e:ff:
e6:06:68:7c:50:bb:38:21:c8:7b:7d:1a:34:8b:aa:
c5:9f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
16:DE:29:1A:46:FA:50:04:53:72:06:C6:E0:59:52:29:41:D8:9C:BB
X509v3 Authority Key Identifier:
keyid:4B:23:B0:6D:60:EC:3E:76:B4:92:0B:2B:64:14:1F:A3:AF:6E:5F:BB
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/SyOwbWDsPna0kgsrZBQfo69uX7s.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f9/5aacf3-bbc9-43c4-86f0-54f6e52f547b/1/Ft4pGkb6UARTcgbG4FlSKUHYnLs.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/f9/5aacf3-bbc9-43c4-86f0-54f6e52f547b/1/SyOwbWDsPna0kgsrZBQfo69uX7s.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
195.242.183.0/24
Signature Algorithm: sha256WithRSAEncryption
89:0b:62:21:e8:d4:4d:a0:62:43:ed:75:94:73:e7:ca:18:c0:
cc:40:65:32:8f:24:5a:53:ca:0b:a1:83:6d:14:65:e2:14:3c:
6c:f7:ae:27:4b:f4:ef:59:24:44:a0:9a:28:ca:4c:37:75:99:
38:30:e6:d9:3d:9d:f4:1e:03:da:96:5e:90:f1:96:0b:91:f1:
e2:0f:72:82:30:c9:06:79:7c:49:c0:63:32:7e:50:dc:69:d6:
e6:08:ba:f6:5e:f9:c2:68:9c:fe:db:1c:40:81:ca:d1:41:6e:
37:47:2e:8e:ec:79:36:c2:ec:e7:41:2a:ba:d7:01:af:7d:96:
f0:35:b6:5f:1e:23:5e:cc:23:8c:d0:f6:f1:66:45:16:ec:86:
3b:55:3d:13:28:c6:60:ce:bb:69:04:8c:21:cf:88:68:65:35:
c7:59:6f:fc:8d:e4:a6:93:13:4e:c2:d0:de:f4:a3:d8:8d:00:
8f:ff:9c:04:d9:91:ae:c4:34:04:1a:b8:6e:52:25:28:ff:94:
14:f4:53:8f:fe:9a:6d:30:26:55:ee:62:71:2f:ae:ca:17:6e:
83:fb:43:6f:34:26:9e:39:66:6d:4f:e0:ab:7f:6d:ac:8e:a1:
4b:0e:5b:a6:68:ad:e3:98:95:57:59:14:09:6a:fc:c9:42:0f:
fc:33:92:5e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Feb 20 02:48:51 2025 by rpki-client