![](/console.gif)
Route Origin Authorization
$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/403a542c-5737-4bef-9c35-3d113c6eee37/0/39332e3132372e3230362e302f32342d3234203d3e20383334.roa
File: 39332e3132372e3230362e302f32342d3234203d3e20383334.roa (raw, json)
Hash identifier: EAJiYCaMCJUEbe/9/7hYjh0raeGvw74p6l0qdgnbCmA=
Subject key identifier: D3:79:4E:1A:D6:BA:6B:4A:BB:75:2F:5D:68:1F:90:C6:0A:98:CA:7D
Certificate issuer: /CN=5804d1e2b126006bfe5079636a6a8dde5b7fd9a6
Certificate serial: 7DD3E185F65BCBE2F2DAD66BB654988547F5C1FE
Authority key identifier: 58:04:D1:E2:B1:26:00:6B:FE:50:79:63:6A:6A:8D:DE:5B:7F:D9:A6
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/WATR4rEmAGv-UHljamqN3lt_2aY.cer
Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/403a542c-5737-4bef-9c35-3d113c6eee37/0/39332e3132372e3230362e302f32342d3234203d3e20383334.roa
Signing time: Wed 17 May 2023 11:00:06 +0000
ROA not before: Wed 17 May 2023 10:55:06 +0000
ROA not after: Wed 15 May 2024 11:00:06 +0000
asID: 834
IP address blocks: 93.127.206.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
7d:d3:e1:85:f6:5b:cb:e2:f2:da:d6:6b:b6:54:98:85:47:f5:c1:fe
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=5804d1e2b126006bfe5079636a6a8dde5b7fd9a6
Validity
Not Before: May 17 10:55:06 2023 GMT
Not After : May 15 11:00:06 2024 GMT
Subject: CN=D3794E1AD6BA6B4ABB752F5D681F90C60A98CA7D
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b2:47:9a:ca:ce:79:c5:d6:72:6a:53:f2:55:04:
f9:1a:f3:34:ea:2c:f0:3e:86:cd:ab:8f:0a:23:ba:
7e:bf:67:cf:af:0e:82:bb:25:84:82:22:2d:3f:63:
e8:eb:1b:53:56:af:fb:8b:2c:fc:cf:17:a4:8d:cb:
a3:f8:0c:51:b1:8d:c4:b4:34:7a:7b:96:51:bc:a5:
3d:8e:5d:50:08:51:4f:b8:e9:d3:f3:f6:41:e3:9d:
df:88:02:ed:83:bc:96:66:ec:47:dc:d4:8f:2f:3e:
1f:87:6e:f4:6f:2b:1b:39:03:b1:0f:8c:50:15:cd:
5f:7c:e5:a0:8b:f8:d2:d4:2a:eb:af:13:8e:fa:b0:
2b:1c:cd:e1:02:c6:2e:07:44:00:f9:f3:ba:e5:0f:
07:1e:36:89:3e:26:fb:23:85:57:2f:79:5d:ca:0c:
0c:b4:0c:b6:27:0e:26:70:d5:7e:11:5e:5d:97:71:
6f:3d:4a:47:70:26:f1:ca:0d:be:6f:36:8d:d1:dc:
a6:8d:e8:78:18:86:21:c2:9d:97:6b:4d:d7:7d:b1:
78:c1:ac:d0:b4:e0:f5:bb:aa:d0:77:9d:c7:9f:fd:
f3:14:07:93:0c:62:a7:f6:cc:36:4a:70:90:39:e6:
03:2f:5a:22:ea:3a:a1:1d:4f:59:57:7c:05:a9:ac:
76:c9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D3:79:4E:1A:D6:BA:6B:4A:BB:75:2F:5D:68:1F:90:C6:0A:98:CA:7D
X509v3 Authority Key Identifier:
keyid:58:04:D1:E2:B1:26:00:6B:FE:50:79:63:6A:6A:8D:DE:5B:7F:D9:A6
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.paas.rpki.ripe.net/repository/403a542c-5737-4bef-9c35-3d113c6eee37/0/5804D1E2B126006BFE5079636A6A8DDE5B7FD9A6.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/WATR4rEmAGv-UHljamqN3lt_2aY.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/403a542c-5737-4bef-9c35-3d113c6eee37/0/39332e3132372e3230362e302f32342d3234203d3e20383334.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
93.127.206.0/24
Signature Algorithm: sha256WithRSAEncryption
88:b1:9f:49:f5:82:6a:3d:dd:33:bc:4c:6a:9e:79:72:a2:79:
d7:82:91:03:24:f4:2e:bc:04:11:1c:78:32:c4:01:59:06:5f:
92:e5:72:a1:c4:ec:2f:32:29:06:f3:1d:5c:3e:1b:ea:e7:16:
bd:b3:3c:e6:5e:67:e6:f5:a6:b1:2e:07:c5:2b:20:a4:3e:13:
27:95:19:b5:a0:3f:28:84:83:48:66:3f:52:ef:dc:19:1e:91:
d3:2b:38:28:4f:60:d8:3f:e4:a1:a3:35:5f:23:20:a5:63:32:
9b:96:fb:f2:a1:eb:38:04:cb:15:0e:c3:07:8a:d9:45:de:48:
52:1c:50:e8:79:89:ba:06:1e:3c:1e:44:13:d6:61:8d:7f:58:
58:ab:26:23:33:d0:89:1e:cf:04:f8:8f:c1:03:fa:9f:50:ae:
c5:9d:bf:8e:3c:63:a7:18:7d:3c:59:a6:80:f3:dd:0d:5d:3b:
e1:e6:a8:16:8e:d0:ef:ed:32:2b:90:f5:fc:5b:fc:b6:d2:38:
0c:79:0a:dd:d3:4a:5f:4d:c0:02:b8:0e:cd:d0:11:65:9c:1f:
7f:03:ca:cd:ee:da:70:48:b3:5a:42:ac:0b:97:46:c0:31:8d:
a2:58:d4:e7:23:62:dc:0e:aa:f7:f2:0c:b0:5c:aa:0a:ef:47:
18:fa:37:cc
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Feb 16 21:49:10 2025 by rpki-client