![](/console.gif)
Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ff/82a7d6-92a9-4204-9ae0-9a48ecf9e15e/1/Jjbc9_kEOiYADB4j351hNTD2ETM.roa
File: Jjbc9_kEOiYADB4j351hNTD2ETM.roa (raw, json)
Hash identifier: xv9/eEdxTYlOodBZGMHFYJxAuBVTzBcztXLyzfYrAoM=
Subject key identifier: 26:36:DC:F7:F9:04:3A:26:00:0C:1E:23:DF:9D:61:35:30:F6:11:33
Certificate issuer: /CN=da00e981953061972c896bd6d27738d083aadb0e
Certificate serial: 02A66004
Authority key identifier: DA:00:E9:81:95:30:61:97:2C:89:6B:D6:D2:77:38:D0:83:AA:DB:0E
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/2gDpgZUwYZcsiWvW0nc40IOq2w4.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ff/82a7d6-92a9-4204-9ae0-9a48ecf9e15e/1/Jjbc9_kEOiYADB4j351hNTD2ETM.roa
Signing time: Fri 07 Jan 2022 08:31:49 +0000
ROA not before: Fri 07 Jan 2022 08:31:49 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 207326
IP address blocks: 213.159.10.0/23 maxlen: 24
194.58.64.0/23 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 44457988 (0x2a66004)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=da00e981953061972c896bd6d27738d083aadb0e
Validity
Not Before: Jan 7 08:31:49 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=2636dcf7f9043a26000c1e23df9d613530f61133
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a2:a4:b5:af:71:fe:3d:82:b9:67:66:d6:8c:44:
6c:6a:67:a0:8e:d7:d4:04:04:10:37:ce:e2:89:0c:
ea:4a:2e:ad:8a:d2:6d:a8:e5:a2:c6:3d:44:8f:d7:
b7:8e:1e:9b:41:a4:91:01:4a:d5:69:8d:2a:6c:e2:
b1:04:25:7c:22:fc:a5:56:1d:30:a2:d2:c0:7a:5c:
c4:1d:ba:42:f4:c7:c4:7b:e9:c8:cf:44:8a:3f:93:
5c:1d:4a:1e:36:48:53:b5:85:54:a5:c5:63:10:db:
4a:8c:18:eb:6f:3b:b9:6b:a4:f4:50:74:aa:08:c8:
bc:e6:7b:d8:b0:71:79:30:af:dc:0a:fa:b9:54:46:
81:b7:05:cf:bb:3b:fa:76:06:1a:65:60:96:e1:f3:
0b:8d:57:6f:6d:ae:ef:75:e4:9e:28:98:9d:0b:cc:
b2:2f:31:30:80:5a:d9:be:44:ea:e8:e1:8e:ac:c1:
e3:73:bc:49:b0:5e:5a:d1:41:a9:fc:c4:75:da:e7:
2f:94:e8:f5:69:ab:6b:cb:8e:84:0b:e9:91:1b:b8:
bd:36:01:80:50:e7:1a:c6:bc:cf:da:fd:ea:4f:a4:
d2:63:d3:9b:4f:60:eb:71:b9:89:6d:bc:99:40:0d:
43:2a:1e:0f:d7:f4:c5:12:03:21:03:5f:65:c6:e7:
06:1d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
26:36:DC:F7:F9:04:3A:26:00:0C:1E:23:DF:9D:61:35:30:F6:11:33
X509v3 Authority Key Identifier:
keyid:DA:00:E9:81:95:30:61:97:2C:89:6B:D6:D2:77:38:D0:83:AA:DB:0E
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/2gDpgZUwYZcsiWvW0nc40IOq2w4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ff/82a7d6-92a9-4204-9ae0-9a48ecf9e15e/1/Jjbc9_kEOiYADB4j351hNTD2ETM.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/ff/82a7d6-92a9-4204-9ae0-9a48ecf9e15e/1/2gDpgZUwYZcsiWvW0nc40IOq2w4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
194.58.64.0/23
213.159.10.0/23
Signature Algorithm: sha256WithRSAEncryption
06:30:b5:55:7a:57:db:3d:55:67:a8:d8:2c:0b:01:aa:3e:bf:
d4:e2:1a:df:6f:d1:29:eb:02:f0:ba:d8:32:57:f7:3b:ca:1c:
19:4d:3e:07:86:e8:29:1f:96:16:34:db:42:fa:3d:24:bb:85:
2d:fa:5f:4b:aa:ae:b2:61:fe:87:16:af:63:7b:08:f2:d6:18:
e3:d2:70:f6:33:ed:45:49:ab:44:c7:db:85:19:bb:e8:e6:1f:
e1:1c:0a:95:91:47:d7:26:9a:b1:47:49:60:34:cf:f3:c7:f8:
2d:3b:88:a4:2e:90:80:39:0d:eb:23:f7:e1:90:bc:42:a8:a6:
33:a5:69:87:55:a9:0c:c8:6b:b8:f6:7b:99:ac:25:a1:1b:95:
66:73:4a:df:14:86:d7:80:ae:9e:27:e3:c5:f1:4d:9b:1d:54:
ed:8f:61:19:81:f2:09:eb:94:8e:54:9a:7a:e1:c9:dd:c5:2b:
92:0b:a5:c4:56:9f:4f:c3:77:5e:bc:6b:d5:2c:ee:a2:a5:aa:
4d:bc:9d:bc:b1:6d:66:c6:fc:ce:ce:b0:4a:a9:84:81:16:f6:
73:38:36:fc:29:bd:95:b4:3e:19:45:79:66:b8:ae:36:28:24:
b1:f9:cb:f5:64:1c:0a:48:22:0a:7e:33:79:e0:da:ef:c7:ea:
61:86:43:6d
-----BEGIN CERTIFICATE-----
MIIE9TCCA92gAwIBAgIEAqZgBDANBgkqhkiG9w0BAQsFADAzMTEwLwYDVQQDEyhk
YTAwZTk4MTk1MzA2MTk3MmM4OTZiZDZkMjc3MzhkMDgzYWFkYjBlMB4XDTIyMDEw
NzA4MzE0OVoXDTIzMDcwMTAwMDAwMFowMzExMC8GA1UEAxMoMjYzNmRjZjdmOTA0
M2EyNjAwMGMxZTIzZGY5ZDYxMzUzMGY2MTEzMzCCASIwDQYJKoZIhvcNAQEBBQAD
ggEPADCCAQoCggEBAKKkta9x/j2CuWdm1oxEbGpnoI7X1AQEEDfO4okM6kourYrS
bajlosY9RI/Xt44em0GkkQFK1WmNKmzisQQlfCL8pVYdMKLSwHpcxB26QvTHxHvp
yM9Eij+TXB1KHjZIU7WFVKXFYxDbSowY6287uWuk9FB0qgjIvOZ72LBxeTCv3Ar6
uVRGgbcFz7s7+nYGGmVgluHzC41Xb22u73XkniiYnQvMsi8xMIBa2b5E6ujhjqzB
43O8SbBeWtFBqfzEddrnL5To9Wmra8uOhAvpkRu4vTYBgFDnGsa8z9r96k+k0mPT
m09g63G5iW28mUANQyoeD9f0xRIDIQNfZcbnBh0CAwEAAaOCAg8wggILMB0GA1Ud
DgQWBBQmNtz3+QQ6JgAMHiPfnWE1MPYRMzAfBgNVHSMEGDAWgBTaAOmBlTBhlyyJ
a9bSdzjQg6rbDjAOBgNVHQ8BAf8EBAMCB4AwZAYIKwYBBQUHAQEEWDBWMFQGCCsG
AQUFBzAChkhyc3luYzovL3Jwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxU
LzJnRHBnWlV3WVpjc2lXdlcwbmM0MElPcTJ3NC5jZXIwgY0GCCsGAQUFBwELBIGA
MH4wfAYIKwYBBQUHMAuGcHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5
L0RFRkFVTFQvZmYvODJhN2Q2LTkyYTktNDIwNC05YWUwLTlhNDhlY2Y5ZTE1ZS8x
L0pqYmM5X2tFT2lZQURCNGozNTFoTlREMkVUTS5yb2EwgYEGA1UdHwR6MHgwdqB0
oHKGcHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvZmYv
ODJhN2Q2LTkyYTktNDIwNC05YWUwLTlhNDhlY2Y5ZTE1ZS8xLzJnRHBnWlV3WVpj
c2lXdlcwbmM0MElPcTJ3NC5jcmwwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAl
BggrBgEFBQcBBwEB/wQWMBQwEgQCAAEwDAMEAcI6QAMEAdWfCjANBgkqhkiG9w0B
AQsFAAOCAQEABjC1VXpX2z1VZ6jYLAsBqj6/1OIa32/RKesC8LrYMlf3O8ocGU0+
B4boKR+WFjTbQvo9JLuFLfpfS6qusmH+hxavY3sI8tYY49Jw9jPtRUmrRMfbhRm7
6OYf4RwKlZFH1yaasUdJYDTP88f4LTuIpC6QgDkN6yP34ZC8QqimM6Vph1WpDMhr
uPZ7mawloRuVZnNK3xSG14CunifjxfFNmx1U7Y9hGYHyCeuUjlSaeuHJ3cUrkgul
xFafT8N3Xrxr1SzuoqWqTbydvLFtZsb8zs6wSqmEgRb2czg2/Cm9lbQ+GUV5Zriu
NigksfnL9WQcCkgiCn4zeeDa78fqYYZDbQ==
-----END CERTIFICATE-----
Generated at Mon Feb 17 08:16:39 2025 by rpki-client