![](/console.gif)
Route Origin Authorization
$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/37411d6b-3615-4a86-8673-340ce2f226ee/6/326130363a396638343a313930303a3a2f34302d3438203d3e203630393030.roa
File: 326130363a396638343a313930303a3a2f34302d3438203d3e203630393030.roa (raw, json)
Hash identifier: ORYK2Gw+ahKZ8UjzCTeCja24NIygbWylecbxxFsZbbQ=
Subject key identifier: 06:07:50:6D:F9:A8:82:92:65:9E:C7:7D:CB:09:1C:58:D6:60:74:CA
Certificate issuer: /CN=C2270557E13BAA7CE7C4A8E0820CDFE3EA322249
Certificate serial: 231FB63564DAC9F0C9B1DC919B0C5350F40F2B5E
Authority key identifier: C2:27:05:57:E1:3B:AA:7C:E7:C4:A8:E0:82:0C:DF:E3:EA:32:22:49
Authority info access: rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/2/C2270557E13BAA7CE7C4A8E0820CDFE3EA322249.cer
Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/37411d6b-3615-4a86-8673-340ce2f226ee/6/326130363a396638343a313930303a3a2f34302d3438203d3e203630393030.roa
Signing time: Fri 26 May 2023 02:02:10 +0000
ROA not before: Fri 26 May 2023 01:57:10 +0000
ROA not after: Fri 24 May 2024 02:02:10 +0000
asID: 60900
IP address blocks: 2a06:9f84:1900::/40 maxlen: 48
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
23:1f:b6:35:64:da:c9:f0:c9:b1:dc:91:9b:0c:53:50:f4:0f:2b:5e
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=C2270557E13BAA7CE7C4A8E0820CDFE3EA322249
Validity
Not Before: May 26 01:57:10 2023 GMT
Not After : May 24 02:02:10 2024 GMT
Subject: CN=0607506DF9A88292659EC77DCB091C58D66074CA
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b4:94:25:f5:44:0d:df:1d:2b:38:1f:3c:e2:7c:
0e:2f:01:0c:d1:8c:2d:a4:b4:6e:83:51:43:44:a9:
69:59:90:93:f2:b2:90:c4:47:0f:36:db:37:19:9e:
ea:aa:4e:5f:b2:bc:38:ef:02:22:a9:5a:3c:77:b6:
4c:50:ab:12:f4:dc:ce:a5:d2:dc:42:1f:9c:8c:0b:
b5:b3:fb:d2:dc:61:43:cd:57:16:53:36:b4:a1:ad:
f5:dc:8f:51:dc:6c:28:1c:7f:7b:be:95:c5:4b:1f:
bf:ee:48:29:14:1d:88:7e:20:37:a9:0e:60:8f:2d:
5a:6d:e1:59:34:b0:7a:aa:70:62:7b:39:8d:89:6b:
39:07:59:77:b1:b5:6e:a2:7d:96:4f:5d:3c:bb:d5:
5b:f4:94:9b:58:42:79:83:df:54:40:4c:18:25:b2:
17:74:93:8d:7c:fd:bc:b9:0a:d6:5e:f3:0f:30:38:
e6:4f:b2:ba:29:b6:03:e6:b4:d9:bd:e7:72:58:12:
ba:ac:fc:3a:55:b7:3c:d6:44:52:49:fe:da:bf:e7:
03:5e:b7:c8:b4:46:65:3a:e8:f4:5f:bc:ac:2a:d8:
67:99:3f:8a:30:73:91:97:1a:77:3f:90:7c:b9:93:
88:5e:3b:6a:db:09:cc:e6:68:84:55:40:26:5a:3d:
be:59
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
06:07:50:6D:F9:A8:82:92:65:9E:C7:7D:CB:09:1C:58:D6:60:74:CA
X509v3 Authority Key Identifier:
keyid:C2:27:05:57:E1:3B:AA:7C:E7:C4:A8:E0:82:0C:DF:E3:EA:32:22:49
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.paas.rpki.ripe.net/repository/37411d6b-3615-4a86-8673-340ce2f226ee/6/C2270557E13BAA7CE7C4A8E0820CDFE3EA322249.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/2/C2270557E13BAA7CE7C4A8E0820CDFE3EA322249.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/37411d6b-3615-4a86-8673-340ce2f226ee/6/326130363a396638343a313930303a3a2f34302d3438203d3e203630393030.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a06:9f84:1900::/40
Signature Algorithm: sha256WithRSAEncryption
72:89:13:4d:f1:91:f6:8f:ef:20:4f:8b:22:1d:b1:d0:53:f9:
20:9a:37:b5:ed:9d:95:c8:29:59:cd:18:09:dc:2d:a8:9a:4c:
7a:b9:78:1c:3d:50:fe:13:3a:74:06:20:eb:73:b7:68:61:5c:
61:01:37:a2:2e:af:88:72:1d:3b:b0:43:9e:3a:92:25:7a:bc:
eb:ea:1c:ac:fd:b8:ae:c8:78:3b:43:a6:92:ec:9b:59:75:f9:
50:56:43:b1:a3:62:ba:67:c1:1b:1a:76:ab:d2:d2:4a:e8:8c:
05:3b:40:b0:05:0a:71:3b:ca:3e:dc:75:c1:91:a7:59:61:49:
fe:15:ed:fd:d4:c4:37:cf:de:6a:6c:e3:3b:73:41:50:bf:57:
5d:1e:10:aa:c4:b7:04:c7:ef:2f:9e:e5:59:0d:77:de:b2:35:
5d:27:1a:ab:56:51:ac:ff:0c:50:65:8d:08:b3:10:58:a8:87:
b0:f4:d7:a3:14:95:64:d1:06:6f:1b:ff:83:c7:35:97:85:6a:
8f:4e:84:93:36:22:9c:01:e9:fc:13:ef:c6:78:9a:9b:c6:ad:
76:7f:8c:8c:52:7d:c8:98:4d:19:17:f5:12:7f:72:55:1f:c4:
0e:87:5c:ad:8c:94:4b:13:3a:a1:5d:35:ae:50:13:9d:45:5b:
bf:28:88:91
-----BEGIN CERTIFICATE-----
MIIFbTCCBFWgAwIBAgIUIx+2NWTayfDJsdyRmwxTUPQPK14wDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoQzIyNzA1NTdFMTNCQUE3Q0U3QzRBOEUwODIwQ0RGRTNF
QTMyMjI0OTAeFw0yMzA1MjYwMTU3MTBaFw0yNDA1MjQwMjAyMTBaMDMxMTAvBgNV
BAMTKDA2MDc1MDZERjlBODgyOTI2NTlFQzc3RENCMDkxQzU4RDY2MDc0Q0EwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQC0lCX1RA3fHSs4HzzifA4vAQzR
jC2ktG6DUUNEqWlZkJPyspDERw822zcZnuqqTl+yvDjvAiKpWjx3tkxQqxL03M6l
0txCH5yMC7Wz+9LcYUPNVxZTNrShrfXcj1HcbCgcf3u+lcVLH7/uSCkUHYh+IDep
DmCPLVpt4Vk0sHqqcGJ7OY2JazkHWXextW6ifZZPXTy71Vv0lJtYQnmD31RATBgl
shd0k418/by5CtZe8w8wOOZPsroptgPmtNm953JYErqs/DpVtzzWRFJJ/tq/5wNe
t8i0RmU66PRfvKwq2GeZP4owc5GXGnc/kHy5k4heO2rbCczmaIRVQCZaPb5ZAgMB
AAGjggJ3MIICczAdBgNVHQ4EFgQUBgdQbfmogpJlnsd9ywkcWNZgdMowHwYDVR0j
BBgwFoAUwicFV+E7qnznxKjgggzf4+oyIkkwDgYDVR0PAQH/BAQDAgeAMIGVBgNV
HR8EgY0wgYowgYeggYSggYGGf3JzeW5jOi8vcnN5bmMucGFhcy5ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvMzc0MTFkNmItMzYxNS00YTg2LTg2NzMtMzQwY2UyZjIy
NmVlLzYvQzIyNzA1NTdFMTNCQUE3Q0U3QzRBOEUwODIwQ0RGRTNFQTMyMjI0OS5j
cmwwgZMGCCsGAQUFBwEBBIGGMIGDMIGABggrBgEFBQcwAoZ0cnN5bmM6Ly9ycGtp
LXJwcy5hcmluLm5ldC9yZXBvc2l0b3J5LzhhODQ4YWRmODUwZDA2M2UwMTg1NzU1
YzkxYmUzZjlkLzIvQzIyNzA1NTdFMTNCQUE3Q0U3QzRBOEUwODIwQ0RGRTNFQTMy
MjI0OS5jZXIwgbUGCCsGAQUFBwELBIGoMIGlMIGiBggrBgEFBQcwC4aBlXJzeW5j
Oi8vcnN5bmMucGFhcy5ycGtpLnJpcGUubmV0L3JlcG9zaXRvcnkvMzc0MTFkNmIt
MzYxNS00YTg2LTg2NzMtMzQwY2UyZjIyNmVlLzYvMzI2MTMwMzYzYTM5NjYzODM0
M2EzMTM5MzAzMDNhM2EyZjM0MzAyZDM0MzgyMDNkM2UyMDM2MzAzOTMwMzAucm9h
MBgGA1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwIQYIKwYBBQUHAQcBAf8EEjAQMA4E
AgACMAgDBgAqBp+EGTANBgkqhkiG9w0BAQsFAAOCAQEAcokTTfGR9o/vIE+LIh2x
0FP5IJo3te2dlcgpWc0YCdwtqJpMerl4HD1Q/hM6dAYg63O3aGFcYQE3oi6viHId
O7BDnjqSJXq86+ocrP24rsh4O0OmkuybWXX5UFZDsaNiumfBGxp2q9LSSuiMBTtA
sAUKcTvKPtx1wZGnWWFJ/hXt/dTEN8/eamzjO3NBUL9XXR4QqsS3BMfvL57lWQ13
3rI1XScaq1ZRrP8MUGWNCLMQWKiHsPTXoxSVZNEGbxv/g8c1l4Vqj06EkzYinAHp
/BPvxniam8atdn+MjFJ9yJhNGRf1En9yVR/EDodcrYyUSxM6oV01rlATnUVbvyiI
kQ==
-----END CERTIFICATE-----
Generated at Sun Feb 16 22:25:21 2025 by rpki-client