![](/console.gif)
Route Origin Authorization
$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/403a542c-5737-4bef-9c35-3d113c6eee37/0/39332e3132372e3231372e302f32342d3234203d3e20383334.roa
File: 39332e3132372e3231372e302f32342d3234203d3e20383334.roa (raw, json)
Hash identifier: NZKaIk5DUZTwrIybC0tGQYH+FeMa3STUBjyNg8ohYVM=
Subject key identifier: 6E:76:94:8F:39:D4:82:70:8E:0A:B8:33:43:76:68:89:D9:D2:2B:82
Certificate issuer: /CN=5804d1e2b126006bfe5079636a6a8dde5b7fd9a6
Certificate serial: 26C53B419161AF3DF0C0ED721C70F2543AD9CA7B
Authority key identifier: 58:04:D1:E2:B1:26:00:6B:FE:50:79:63:6A:6A:8D:DE:5B:7F:D9:A6
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/WATR4rEmAGv-UHljamqN3lt_2aY.cer
Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/403a542c-5737-4bef-9c35-3d113c6eee37/0/39332e3132372e3231372e302f32342d3234203d3e20383334.roa
Signing time: Fri 31 Mar 2023 00:00:18 +0000
ROA not before: Thu 30 Mar 2023 23:55:18 +0000
ROA not after: Fri 29 Mar 2024 00:00:18 +0000
asID: 834
IP address blocks: 93.127.217.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
26:c5:3b:41:91:61:af:3d:f0:c0:ed:72:1c:70:f2:54:3a:d9:ca:7b
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=5804d1e2b126006bfe5079636a6a8dde5b7fd9a6
Validity
Not Before: Mar 30 23:55:18 2023 GMT
Not After : Mar 29 00:00:18 2024 GMT
Subject: CN=6E76948F39D482708E0AB83343766889D9D22B82
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:df:11:75:94:37:70:14:5a:bc:1b:61:e5:4d:27:
c8:8b:c8:dd:3b:97:79:48:e6:b5:43:9c:fb:ae:6a:
f9:07:fd:8b:e0:d8:f3:4b:e2:02:c5:7c:57:71:a1:
f9:ce:0d:f9:34:9e:da:23:62:5d:47:f2:85:f5:4f:
3f:72:23:78:11:e6:2c:ba:f2:54:e1:a6:f3:ba:49:
35:44:4e:1b:aa:5b:b6:d9:3e:e4:2b:bd:28:4b:8a:
cd:0a:c4:22:f2:4f:1d:36:f7:f0:cd:b2:15:4a:fa:
00:a3:4f:d3:6f:d5:ff:1a:47:8b:e6:33:44:96:33:
af:3b:8c:97:9a:0e:a6:9e:0f:6e:e2:e0:b8:69:16:
a1:4b:c0:04:50:de:ec:b6:2c:90:f7:9d:0a:fc:0a:
7d:c0:72:f0:18:fa:b6:73:8a:ac:b6:2a:07:67:6f:
8f:ae:94:6a:a8:67:13:c2:ec:15:e8:3c:dd:aa:56:
ff:f3:4e:ac:11:40:a4:57:0a:b4:ed:1e:4d:3d:86:
a5:08:c5:18:53:15:ca:a7:8b:e9:7c:95:aa:69:68:
a3:da:07:2b:28:eb:4d:a6:3d:44:82:95:4a:a1:31:
e1:6e:87:4c:51:f5:e0:e1:33:46:b2:d8:d7:28:ce:
2a:ac:f1:8c:a9:96:b4:2d:27:64:71:9c:b1:f7:80:
2e:27
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
6E:76:94:8F:39:D4:82:70:8E:0A:B8:33:43:76:68:89:D9:D2:2B:82
X509v3 Authority Key Identifier:
keyid:58:04:D1:E2:B1:26:00:6B:FE:50:79:63:6A:6A:8D:DE:5B:7F:D9:A6
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.paas.rpki.ripe.net/repository/403a542c-5737-4bef-9c35-3d113c6eee37/0/5804D1E2B126006BFE5079636A6A8DDE5B7FD9A6.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/WATR4rEmAGv-UHljamqN3lt_2aY.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/403a542c-5737-4bef-9c35-3d113c6eee37/0/39332e3132372e3231372e302f32342d3234203d3e20383334.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
93.127.217.0/24
Signature Algorithm: sha256WithRSAEncryption
2d:61:93:b6:07:5c:18:5d:26:70:eb:7e:43:f8:70:71:c8:00:
34:82:0b:ea:dc:ad:2b:2b:2d:9c:41:3f:f9:2f:61:9d:5e:db:
22:01:79:87:31:29:18:d8:a1:f4:3b:4b:5d:95:1e:f2:f8:d7:
74:12:26:da:ce:ca:0e:7a:1a:81:e1:c2:57:37:8f:9f:39:c0:
b0:30:56:b4:a5:71:53:75:30:10:da:20:db:3e:07:87:62:68:
48:0a:e7:05:45:5d:5e:5e:1c:91:2a:fc:cd:b7:76:75:5f:df:
c5:ee:c8:65:43:75:23:ae:94:0c:f6:b9:f0:71:75:a9:4b:ea:
1d:2c:f5:5f:cd:db:f4:89:2f:b4:a1:ba:16:35:ad:88:af:24:
1f:f6:2d:53:aa:0d:63:72:65:55:eb:df:5d:0e:10:80:79:ed:
fb:9e:70:bd:b0:ac:df:69:52:a0:37:25:76:bd:71:43:ef:02:
8d:33:c3:05:a6:3f:ed:8a:b9:25:df:36:3b:4b:60:b8:10:22:
a1:79:92:ee:a8:a6:f6:0b:e9:7a:fc:fd:b7:db:e8:a1:56:d7:
e1:32:e8:ee:4f:ea:9d:c9:b1:bb:29:0b:72:cd:41:00:d8:f9:
d7:97:1e:fe:55:6f:c7:9e:a0:80:b8:e6:ee:6e:66:88:b5:7d:
96:f4:60:57
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Feb 16 21:45:33 2025 by rpki-client