![](/console.gif)
Route Origin Authorization
$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/37411d6b-3615-4a86-8673-340ce2f226ee/1/326130373a353463353a313330303a3a2f34302d3438203d3e20323034383537.roa
File: 326130373a353463353a313330303a3a2f34302d3438203d3e20323034383537.roa (raw, json)
Hash identifier: +543ipTeMIqG2YFRYTzy4xXMHeNDvZ7IgspSOIm6QE8=
Subject key identifier: 2C:61:21:97:D1:FB:06:BB:58:59:8C:D7:36:82:BD:93:DB:FC:BF:3E
Certificate issuer: /CN=B9B7CB6C2D8180F3452B4A4F93D4105BADFF2431
Certificate serial: 03AC0AABFC9DC4C58500BB3046EFD5E22B6C46D3
Authority key identifier: B9:B7:CB:6C:2D:81:80:F3:45:2B:4A:4F:93:D4:10:5B:AD:FF:24:31
Authority info access: rsync://rpki.zappiehost.com/repo/NORTHLAYER_UID_13864/0/B9B7CB6C2D8180F3452B4A4F93D4105BADFF2431.cer
Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/37411d6b-3615-4a86-8673-340ce2f226ee/1/326130373a353463353a313330303a3a2f34302d3438203d3e20323034383537.roa
Signing time: Wed 19 Apr 2023 00:19:32 +0000
ROA not before: Wed 19 Apr 2023 00:14:32 +0000
ROA not after: Wed 17 Apr 2024 00:19:32 +0000
asID: 204857
IP address blocks: 2a07:54c5:1300::/40 maxlen: 48
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
03:ac:0a:ab:fc:9d:c4:c5:85:00:bb:30:46:ef:d5:e2:2b:6c:46:d3
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=B9B7CB6C2D8180F3452B4A4F93D4105BADFF2431
Validity
Not Before: Apr 19 00:14:32 2023 GMT
Not After : Apr 17 00:19:32 2024 GMT
Subject: CN=2C612197D1FB06BB58598CD73682BD93DBFCBF3E
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:94:58:39:27:3b:d5:9e:e3:ea:b9:c7:9f:9b:d3:
c3:f2:cd:1b:dc:22:31:13:c8:bc:34:98:8f:0f:b7:
e7:f8:e4:d9:90:08:f3:fe:0e:7b:56:d8:a2:22:b5:
a1:51:2a:e4:ab:41:f8:36:c0:4b:f9:45:7b:01:7c:
ef:75:58:31:42:ac:5d:27:b6:86:f1:b5:2c:fb:5b:
51:39:0f:06:30:b9:1e:56:64:d2:58:69:e3:80:7b:
a4:ea:ba:16:f9:27:6e:57:2c:32:ee:61:54:75:ae:
48:2a:04:c4:5f:b6:54:96:33:95:19:cc:66:6a:ed:
a5:37:84:6a:de:65:c6:3b:0e:26:80:99:ac:75:6c:
66:59:5b:b8:bb:47:8a:8c:3b:e2:90:4f:7d:06:c0:
9b:24:fd:08:92:4a:56:03:cb:2d:d4:b7:91:19:8d:
20:a7:5c:03:f4:a7:b2:cb:70:45:93:4b:e6:6f:18:
9a:14:b2:02:b0:88:73:29:17:e6:08:03:2a:c3:29:
f1:65:e4:6c:72:ac:1b:05:f0:c9:5a:35:f7:5f:84:
d7:f4:3b:f5:c8:ed:33:7a:c9:ee:97:d1:7c:b7:c8:
d0:5b:6d:49:45:98:6a:4d:bc:f6:25:60:f3:92:74:
5b:26:ed:17:f2:fa:1a:ff:fe:4f:6b:18:27:d0:ca:
59:23
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
2C:61:21:97:D1:FB:06:BB:58:59:8C:D7:36:82:BD:93:DB:FC:BF:3E
X509v3 Authority Key Identifier:
keyid:B9:B7:CB:6C:2D:81:80:F3:45:2B:4A:4F:93:D4:10:5B:AD:FF:24:31
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.paas.rpki.ripe.net/repository/37411d6b-3615-4a86-8673-340ce2f226ee/1/B9B7CB6C2D8180F3452B4A4F93D4105BADFF2431.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.zappiehost.com/repo/NORTHLAYER_UID_13864/0/B9B7CB6C2D8180F3452B4A4F93D4105BADFF2431.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/37411d6b-3615-4a86-8673-340ce2f226ee/1/326130373a353463353a313330303a3a2f34302d3438203d3e20323034383537.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a07:54c5:1300::/40
Signature Algorithm: sha256WithRSAEncryption
4f:af:fb:df:94:4a:2e:d8:76:91:2e:63:c3:7a:50:46:78:39:
fd:e3:7f:f1:a2:9b:0c:f3:40:a4:00:5c:68:7c:cf:b2:27:64:
3f:05:31:80:43:44:53:c3:73:fa:20:53:ed:bc:17:fc:ad:ef:
10:b4:3a:23:e1:5f:96:e6:d5:ff:94:a2:2f:64:23:49:b4:bc:
56:8f:46:23:b8:32:ad:c7:2a:8f:d4:a1:0b:38:f9:79:5f:13:
a2:47:6a:da:32:9a:08:87:88:6f:e1:7f:a0:1e:94:64:38:6c:
05:ca:5b:b5:23:b0:1b:0f:46:25:9b:81:11:da:9b:4f:d1:cc:
60:9a:ac:f1:95:11:d7:8d:85:4f:5a:b1:12:01:e5:2d:f3:ff:
5b:b8:07:2a:86:ce:f3:19:49:4f:5b:dd:69:f3:6c:84:7c:c2:
ea:1a:0a:f3:88:d7:39:92:ec:38:e2:b0:ef:4b:85:ee:7a:4d:
c9:a5:1e:0d:21:4a:cc:42:4f:6d:34:d3:14:4f:7f:ef:71:34:
ff:3a:4b:40:2f:0e:f2:cf:57:9f:26:3a:14:f2:cf:57:2b:6c:
e5:54:af:d8:cd:07:68:bc:9a:57:4d:bb:a8:bb:dd:eb:85:9f:
07:98:42:60:fa:e8:55:3b:f6:31:95:93:4a:eb:01:00:5a:55:
81:47:2b:54
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Feb 16 22:12:04 2025 by rpki-client