![](/console.gif)
Route Origin Authorization
$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/37411d6b-3615-4a86-8673-340ce2f226ee/1/326130373a353463353a313630303a3a2f34302d3438203d3e20313939373635.roa
File: 326130373a353463353a313630303a3a2f34302d3438203d3e20313939373635.roa (raw, json)
Hash identifier: wpR5j8qYy8Xwy32OwbcDIJsVtJ9H0EKkHYJ0+fiQ1dw=
Subject key identifier: 04:6D:33:EA:D1:ED:AF:46:44:51:E4:E6:AF:DC:1B:5F:32:EA:C6:2D
Certificate issuer: /CN=B9B7CB6C2D8180F3452B4A4F93D4105BADFF2431
Certificate serial: 28473B24D74FCEBCFCFC9E306DF53418A699DCEA
Authority key identifier: B9:B7:CB:6C:2D:81:80:F3:45:2B:4A:4F:93:D4:10:5B:AD:FF:24:31
Authority info access: rsync://rpki.zappiehost.com/repo/NORTHLAYER_UID_13864/0/B9B7CB6C2D8180F3452B4A4F93D4105BADFF2431.cer
Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/37411d6b-3615-4a86-8673-340ce2f226ee/1/326130373a353463353a313630303a3a2f34302d3438203d3e20313939373635.roa
Signing time: Wed 19 Apr 2023 00:19:31 +0000
ROA not before: Wed 19 Apr 2023 00:14:31 +0000
ROA not after: Wed 17 Apr 2024 00:19:31 +0000
asID: 199765
IP address blocks: 2a07:54c5:1600::/40 maxlen: 48
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
28:47:3b:24:d7:4f:ce:bc:fc:fc:9e:30:6d:f5:34:18:a6:99:dc:ea
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=B9B7CB6C2D8180F3452B4A4F93D4105BADFF2431
Validity
Not Before: Apr 19 00:14:31 2023 GMT
Not After : Apr 17 00:19:31 2024 GMT
Subject: CN=046D33EAD1EDAF464451E4E6AFDC1B5F32EAC62D
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c5:c2:be:46:e1:e6:dd:7a:98:3c:35:5d:43:8a:
67:3f:f4:79:3e:48:58:a1:8a:eb:3a:aa:89:69:0a:
b3:e7:fc:bc:a3:cc:8e:54:5d:05:02:36:e8:40:22:
be:6d:e4:20:0d:bd:cb:de:97:46:ab:d0:34:be:e5:
f6:f5:0a:fe:19:59:ba:58:f6:e4:08:df:6c:53:c0:
06:63:5d:1a:86:00:80:14:52:9f:c2:b5:0a:0f:d2:
82:98:58:ed:0e:0d:51:0e:7b:2e:27:71:91:ca:b0:
3b:49:b4:80:fe:99:71:cf:48:44:15:04:5f:97:d7:
af:7a:a9:b6:d6:fb:7c:48:59:64:d1:bb:56:d5:b0:
e0:fb:8b:5e:e7:f8:81:fe:5d:1d:4d:50:ce:60:5d:
e9:e8:42:ee:0c:76:71:00:92:74:38:ed:ab:50:6b:
b9:00:99:5f:9c:d9:df:41:ac:63:3a:bd:a3:45:20:
b8:c2:c7:3c:00:0e:e9:04:af:7a:2b:41:a1:b2:48:
d2:b3:33:30:ce:af:79:60:e3:1b:46:cb:8f:66:f1:
67:84:36:ed:9c:9e:8d:ee:06:e6:fa:e3:9a:cb:e0:
fd:e2:3a:72:96:5e:9b:e9:b0:b0:13:ba:ea:f9:01:
6e:db:19:f5:68:4d:ea:fd:2f:cf:f1:a4:bd:36:f1:
62:a3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
04:6D:33:EA:D1:ED:AF:46:44:51:E4:E6:AF:DC:1B:5F:32:EA:C6:2D
X509v3 Authority Key Identifier:
keyid:B9:B7:CB:6C:2D:81:80:F3:45:2B:4A:4F:93:D4:10:5B:AD:FF:24:31
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.paas.rpki.ripe.net/repository/37411d6b-3615-4a86-8673-340ce2f226ee/1/B9B7CB6C2D8180F3452B4A4F93D4105BADFF2431.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.zappiehost.com/repo/NORTHLAYER_UID_13864/0/B9B7CB6C2D8180F3452B4A4F93D4105BADFF2431.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/37411d6b-3615-4a86-8673-340ce2f226ee/1/326130373a353463353a313630303a3a2f34302d3438203d3e20313939373635.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a07:54c5:1600::/40
Signature Algorithm: sha256WithRSAEncryption
ce:e8:90:68:71:41:34:cd:01:71:f5:2d:e2:32:af:c4:aa:5e:
39:f0:a9:ff:69:e9:3e:95:1e:63:00:cf:38:a8:0e:fe:b8:ae:
9f:10:56:3d:89:6e:99:c5:6b:f2:9e:0a:11:1d:75:fe:8c:3a:
fb:41:9d:c5:30:06:2f:19:3b:a1:26:21:4a:ef:e2:e0:6c:32:
f1:18:01:69:8e:97:a0:3c:e2:92:2e:a6:77:28:dc:e4:d5:c4:
96:e6:69:f5:c9:14:de:e0:5b:de:3c:b3:b5:b5:d5:92:8a:c4:
4c:d9:18:ef:76:96:ea:83:56:83:93:2d:16:09:68:99:b2:d1:
c0:b2:82:b8:99:cb:56:28:fd:92:18:fa:52:58:15:06:29:24:
1b:d3:c7:1c:67:63:b8:7b:b9:03:87:fc:65:73:fc:a9:77:99:
b9:ff:e9:a7:de:82:ba:8a:65:a6:2d:55:4c:9c:bf:92:e9:7f:
e4:2c:71:35:37:c8:d3:07:9c:a4:c1:90:2c:b8:2a:4b:4a:8c:
ea:ec:61:b4:07:79:d5:ac:4d:81:d4:08:63:5b:44:f9:ad:5c:
a5:3d:a0:e9:cf:28:12:af:5d:ec:7f:e6:1a:75:0c:79:f8:70:
db:fb:be:0a:2f:01:71:ae:45:e9:96:3e:bd:12:a1:d4:ea:55:
af:52:94:22
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Feb 16 22:30:40 2025 by rpki-client