![](/console.gif)
Route Origin Authorization
$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/37411d6b-3615-4a86-8673-340ce2f226ee/1/326130373a353463353a313530303a3a2f34302d3438203d3e20313939313737.roa
File: 326130373a353463353a313530303a3a2f34302d3438203d3e20313939313737.roa (raw, json)
Hash identifier: RA7WKlxozbOK9sx6bwqkV2UWCBCMNLUPqUfZb4rZGYQ=
Subject key identifier: D5:EC:15:07:08:D9:93:C7:12:1F:5D:8C:52:83:E6:F5:4A:5A:C4:A9
Certificate issuer: /CN=B9B7CB6C2D8180F3452B4A4F93D4105BADFF2431
Certificate serial: 184D0A0B712E81DDC44D4015603AD1DCDEF80171
Authority key identifier: B9:B7:CB:6C:2D:81:80:F3:45:2B:4A:4F:93:D4:10:5B:AD:FF:24:31
Authority info access: rsync://rpki.zappiehost.com/repo/NORTHLAYER_UID_13864/0/B9B7CB6C2D8180F3452B4A4F93D4105BADFF2431.cer
Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/37411d6b-3615-4a86-8673-340ce2f226ee/1/326130373a353463353a313530303a3a2f34302d3438203d3e20313939313737.roa
Signing time: Wed 19 Apr 2023 00:19:27 +0000
ROA not before: Wed 19 Apr 2023 00:14:27 +0000
ROA not after: Wed 17 Apr 2024 00:19:27 +0000
asID: 199177
IP address blocks: 2a07:54c5:1500::/40 maxlen: 48
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
18:4d:0a:0b:71:2e:81:dd:c4:4d:40:15:60:3a:d1:dc:de:f8:01:71
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=B9B7CB6C2D8180F3452B4A4F93D4105BADFF2431
Validity
Not Before: Apr 19 00:14:27 2023 GMT
Not After : Apr 17 00:19:27 2024 GMT
Subject: CN=D5EC150708D993C7121F5D8C5283E6F54A5AC4A9
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cf:0e:bc:ea:2f:7e:2c:2b:c5:eb:5d:b5:66:80:
44:62:f7:cb:76:75:ea:36:c4:03:82:17:d6:f2:4b:
da:d0:91:00:7c:93:b8:9a:00:fb:61:94:ce:9a:52:
e7:43:1e:12:71:62:27:ab:a9:0f:3f:7b:68:97:f0:
e9:dc:3d:07:24:40:21:f3:52:b5:0c:23:5e:de:30:
5c:23:0c:68:18:6a:25:8b:f6:57:db:ef:27:9d:fe:
82:4d:fe:d5:d4:32:c7:1f:d2:5d:e5:0f:52:1f:b7:
a3:09:7e:f9:bb:7e:5f:49:b2:4d:29:1c:6f:be:fe:
a9:b5:e9:5c:af:18:c5:d6:65:b9:7a:cf:8a:a4:11:
df:95:6b:73:ea:89:fe:25:d8:01:2b:2b:a7:34:6a:
68:c1:a8:a5:c8:b3:cd:5c:8b:54:7f:ec:72:5d:02:
94:b9:f7:68:57:6b:9b:b4:2a:53:c5:07:2d:75:de:
97:f0:80:b6:3a:1a:40:77:30:01:47:df:05:70:8b:
77:d0:4a:eb:4f:27:59:7d:1a:98:82:0d:d7:db:5c:
38:59:44:2d:12:aa:af:90:1b:43:58:74:ce:ef:dc:
8c:89:ff:0d:68:42:d9:ea:c7:84:1e:63:9e:f5:0f:
99:95:59:34:3b:4c:dc:11:b4:25:26:a8:9d:ab:39:
3e:e3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D5:EC:15:07:08:D9:93:C7:12:1F:5D:8C:52:83:E6:F5:4A:5A:C4:A9
X509v3 Authority Key Identifier:
keyid:B9:B7:CB:6C:2D:81:80:F3:45:2B:4A:4F:93:D4:10:5B:AD:FF:24:31
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.paas.rpki.ripe.net/repository/37411d6b-3615-4a86-8673-340ce2f226ee/1/B9B7CB6C2D8180F3452B4A4F93D4105BADFF2431.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.zappiehost.com/repo/NORTHLAYER_UID_13864/0/B9B7CB6C2D8180F3452B4A4F93D4105BADFF2431.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/37411d6b-3615-4a86-8673-340ce2f226ee/1/326130373a353463353a313530303a3a2f34302d3438203d3e20313939313737.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a07:54c5:1500::/40
Signature Algorithm: sha256WithRSAEncryption
92:c2:b8:ee:47:19:49:59:b5:74:76:bb:e0:ee:d6:5c:77:e1:
a0:2b:51:9c:70:ca:33:6b:a7:82:05:10:3d:2d:7c:ad:aa:ae:
7a:dd:df:54:82:3a:b1:c6:a0:77:e9:2f:d8:2c:64:4e:2f:98:
d2:c7:61:1e:08:3c:ba:52:7b:04:44:47:4c:8d:e4:1e:1b:5c:
ce:c2:0f:47:92:90:ee:97:36:6f:32:07:cf:35:8f:5d:2f:de:
1a:f7:8c:1a:23:61:9a:f6:ad:1d:85:23:ce:ae:a9:df:e0:70:
af:f9:1f:08:09:ba:58:85:92:08:fe:0f:6d:93:05:c5:10:31:
71:e0:d4:5e:e3:0a:9a:a3:7e:d0:54:fd:24:b6:9b:c3:3b:db:
18:a0:12:1b:05:25:c8:61:1e:9e:ff:17:51:80:e6:04:16:a8:
7a:10:c0:ae:fb:ed:16:1c:6f:a7:6b:ae:bc:a1:88:c9:1a:32:
d1:c1:7d:19:ac:f9:f2:f4:0e:25:00:19:02:55:43:61:ef:c0:
2e:b5:f5:38:1e:69:be:91:b6:ef:62:05:db:0a:e6:16:37:8d:
e0:e9:3c:30:fc:bf:52:32:63:39:67:6d:2a:9b:a2:5d:f5:7f:
4b:af:56:2f:6b:90:f5:c3:b4:92:95:f8:7a:92:70:ed:96:a5:
60:fa:c4:7f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Feb 16 22:15:42 2025 by rpki-client