![](/console.gif)
Route Origin Authorization
$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/39b226e2-7512-4bab-bec3-13e453abc2b7/2/326130613a363034303a613130353a3a2f34382d3438203d3e2038303735.roa
File: 326130613a363034303a613130353a3a2f34382d3438203d3e2038303735.roa (raw, json)
Hash identifier: xFnzpqLzzvf/PanLemFFWLoCscoBXsdXfsv7X1TI1rY=
Subject key identifier: 12:8F:50:6D:70:2D:2A:1C:61:55:12:89:80:46:96:D7:F6:A6:D3:7E
Certificate issuer: /CN=F9BEEC0A996497A611BBD137E4EF0B0D574C78D3
Certificate serial: 0B3ECB39A3A60802675CF86A48D32B8C4C519F6B
Authority key identifier: F9:BE:EC:0A:99:64:97:A6:11:BB:D1:37:E4:EF:0B:0D:57:4C:78:D3
Authority info access: rsync://cloudie-repo.rpki.app/repo/CLOUDIE-RPKI/0/F9BEEC0A996497A611BBD137E4EF0B0D574C78D3.cer
Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/39b226e2-7512-4bab-bec3-13e453abc2b7/2/326130613a363034303a613130353a3a2f34382d3438203d3e2038303735.roa
Signing time: Sat 05 Aug 2023 21:41:49 +0000
ROA not before: Sat 05 Aug 2023 21:36:49 +0000
ROA not after: Sat 03 Aug 2024 21:41:49 +0000
asID: 8075
IP address blocks: 2a0a:6040:a105::/48 maxlen: 48
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
0b:3e:cb:39:a3:a6:08:02:67:5c:f8:6a:48:d3:2b:8c:4c:51:9f:6b
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F9BEEC0A996497A611BBD137E4EF0B0D574C78D3
Validity
Not Before: Aug 5 21:36:49 2023 GMT
Not After : Aug 3 21:41:49 2024 GMT
Subject: CN=128F506D702D2A1C61551289804696D7F6A6D37E
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cf:6d:3e:3b:9e:f2:8b:3a:d7:b6:f8:ca:ac:b2:
45:51:ba:c6:75:4f:74:be:2d:4a:eb:0b:2f:b0:e1:
db:13:e9:77:48:1c:1c:93:bd:64:1a:e2:0d:1d:63:
fa:88:00:b9:eb:b5:89:75:39:32:ad:b2:ef:92:d3:
96:fe:31:0c:db:89:a0:fe:54:2d:91:03:ac:f7:20:
39:a7:70:03:13:07:ba:54:65:00:1d:c7:d9:03:e7:
2e:a4:5d:35:9f:d5:3e:ce:d4:c9:ef:02:e0:f2:b4:
9b:a4:f3:28:6b:84:1a:f0:7d:91:3a:9c:f9:5d:2a:
15:6a:17:3c:9c:18:b3:87:70:cb:4e:bb:31:cb:e1:
77:7c:a1:cc:71:40:66:3b:8c:5a:62:c3:0f:b3:25:
9a:49:72:a1:4c:c9:ed:92:ba:9e:34:53:1a:09:51:
9a:9f:a3:bf:85:ae:10:45:c8:53:8a:b9:8c:da:6c:
ae:c9:5c:22:d9:7e:33:c6:a1:ec:eb:59:99:8f:f2:
bb:0d:61:4f:d5:56:be:20:a5:cb:5e:1b:9a:36:fe:
10:de:bd:34:99:dd:52:71:9f:15:90:fa:27:14:bc:
f8:e5:8b:31:0c:c6:ec:cc:9d:a9:33:ef:7a:8d:79:
b5:e6:80:c8:fc:ad:7a:4e:9a:43:3b:0e:51:f0:f4:
0d:31
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
12:8F:50:6D:70:2D:2A:1C:61:55:12:89:80:46:96:D7:F6:A6:D3:7E
X509v3 Authority Key Identifier:
keyid:F9:BE:EC:0A:99:64:97:A6:11:BB:D1:37:E4:EF:0B:0D:57:4C:78:D3
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.paas.rpki.ripe.net/repository/39b226e2-7512-4bab-bec3-13e453abc2b7/2/F9BEEC0A996497A611BBD137E4EF0B0D574C78D3.crl
Authority Information Access:
CA Issuers - URI:rsync://cloudie-repo.rpki.app/repo/CLOUDIE-RPKI/0/F9BEEC0A996497A611BBD137E4EF0B0D574C78D3.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/39b226e2-7512-4bab-bec3-13e453abc2b7/2/326130613a363034303a613130353a3a2f34382d3438203d3e2038303735.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a0a:6040:a105::/48
Signature Algorithm: sha256WithRSAEncryption
63:ed:93:0a:8a:5b:87:3b:e0:39:9e:e6:b6:67:b0:25:8d:c4:
0f:d4:e5:6a:b5:14:3a:7e:fc:28:e8:23:10:c7:57:fc:1d:af:
86:d0:24:2f:dc:71:2a:ab:52:71:af:61:94:74:09:8f:80:4f:
2e:c6:bb:42:b4:7c:fe:30:26:aa:c7:b0:5f:d0:d5:08:30:23:
11:ca:16:ba:57:e7:43:18:63:a2:11:34:a9:44:55:98:db:d0:
44:fa:57:6c:d8:33:8c:be:dc:61:03:dd:5b:e2:75:31:32:a0:
ab:d7:86:e9:01:43:ca:21:be:74:d0:57:e2:3b:a4:18:89:08:
a2:61:08:5d:91:44:5f:ce:0c:09:9a:72:ba:c0:26:87:14:a9:
55:43:3a:a7:32:f1:26:bc:90:6b:1f:c6:eb:cd:5e:dd:3e:f8:
89:9d:07:52:9b:e7:c1:a2:65:9c:ce:bc:cb:c5:5a:19:b8:19:
14:19:69:77:c3:74:82:46:eb:0e:e1:9d:76:0d:73:52:83:dd:
63:c4:dd:6e:80:21:2e:d4:57:c7:92:27:2a:2a:25:8b:78:63:
d9:2a:11:de:1d:1b:95:e1:ac:11:c0:97:de:d2:94:8b:73:0b:
00:d1:21:f0:cb:64:01:b1:75:6f:af:28:6c:d8:dd:0e:26:a8:
37:d2:b2:90
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Feb 16 22:35:04 2025 by rpki-client