Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/BOV2n_1T3Vu609ytlLsG8puVcsg.roa
File: BOV2n_1T3Vu609ytlLsG8puVcsg.roa (raw, json)
Hash identifier: rjtazpDGDlfl1mTl2lpf1e4B1G1a1XN74/SRtKgUE/s=
Subject key identifier: 04:E5:76:9F:FD:53:DD:5B:BA:D3:DC:AD:94:BB:06:F2:9B:95:72:C8
Certificate issuer: /CN=72047be15b275902dcf617dc3d0e16dc1f308022
Certificate serial: 018215BC7B1EAACB94DCBD2ED5F66802E1A3
Authority key identifier: 72:04:7B:E1:5B:27:59:02:DC:F6:17:DC:3D:0E:16:DC:1F:30:80:22
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/cgR74VsnWQLc9hfcPQ4W3B8wgCI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/BOV2n_1T3Vu609ytlLsG8puVcsg.roa
Signing time: Tue 19 Jul 2022 09:14:10 +0000
ROA not before: Tue 19 Jul 2022 09:14:10 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 2121
IP address blocks: 193.0.24.0/21 maxlen: 21
2001:67c:64::/48 maxlen: 48
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:82:15:bc:7b:1e:aa:cb:94:dc:bd:2e:d5:f6:68:02:e1:a3
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=72047be15b275902dcf617dc3d0e16dc1f308022
Validity
Not Before: Jul 19 09:14:10 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=04e5769ffd53dd5bbad3dcad94bb06f29b9572c8
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:81:11:c4:45:48:c0:97:9f:cc:68:34:ca:14:14:
3f:4f:db:ef:fa:0c:9f:b6:57:3d:dd:17:5a:f8:a0:
33:9a:d3:09:6d:2b:1e:37:90:90:1c:38:03:4b:43:
01:b7:67:32:93:ff:a6:9a:af:a5:ec:99:1c:52:4b:
f1:c7:32:99:ea:91:9b:ea:fe:24:b0:77:c5:07:e4:
0b:c6:07:bd:5c:85:e2:21:ac:11:07:75:35:17:2e:
87:f1:09:91:36:33:00:43:91:48:bb:70:29:78:a8:
7a:14:63:53:f1:45:a3:fa:89:1a:d3:40:05:56:d4:
19:ef:b3:a5:26:96:de:70:72:95:b1:8c:c0:64:0b:
96:dc:c6:be:ce:70:f4:72:a6:f4:64:e0:eb:a4:83:
42:44:5e:fd:0f:c1:55:c8:87:07:a0:43:28:1b:2a:
31:1e:8c:ac:d1:4d:58:6e:8b:8a:85:37:03:63:11:
54:10:19:47:fa:2e:61:4a:f2:38:b7:98:48:b8:3f:
08:93:6e:af:6c:54:db:bf:7e:7a:e0:fa:ae:b5:11:
0e:01:4c:21:79:55:f7:0b:e8:84:7f:2f:2d:b3:3a:
01:43:92:fb:5a:6f:8f:94:b5:f0:36:58:17:4c:61:
ab:fc:37:96:48:20:9c:f0:f6:55:86:83:bd:a0:6c:
f7:9d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
04:E5:76:9F:FD:53:DD:5B:BA:D3:DC:AD:94:BB:06:F2:9B:95:72:C8
X509v3 Authority Key Identifier:
keyid:72:04:7B:E1:5B:27:59:02:DC:F6:17:DC:3D:0E:16:DC:1F:30:80:22
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/cgR74VsnWQLc9hfcPQ4W3B8wgCI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/BOV2n_1T3Vu609ytlLsG8puVcsg.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/cgR74VsnWQLc9hfcPQ4W3B8wgCI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
193.0.24.0/21
IPv6:
2001:67c:64::/48
Signature Algorithm: sha256WithRSAEncryption
3e:18:00:54:cf:24:a1:4a:f4:31:86:61:4c:6e:b5:38:81:a4:
63:73:dd:bf:ba:2f:c5:74:17:0c:25:5d:fe:7e:e5:38:c8:78:
3f:95:1e:eb:be:94:85:05:f2:d1:ce:44:5b:83:eb:c7:6f:de:
90:35:43:95:d6:ca:7c:db:b1:02:51:2c:4c:f0:29:25:9d:5c:
29:65:3f:ed:5b:6a:94:91:7d:65:ab:ba:c4:db:79:86:46:9e:
dc:c0:e9:ca:5e:2e:9d:64:33:aa:0b:bc:df:12:db:0f:4e:c7:
f0:c0:7d:75:46:53:db:30:81:19:1a:94:42:2c:3b:ae:ef:8e:
15:4a:a4:29:73:23:a1:e6:97:ad:4c:75:3a:59:c9:97:3a:69:
6d:b0:f7:a7:57:f3:a1:f1:0a:1e:c2:23:2e:75:33:4c:11:9a:
85:e7:9e:5d:20:83:75:5c:c5:47:81:61:c9:27:0b:a5:cb:63:
bd:26:9a:12:83:5e:c2:db:16:24:6d:97:72:6e:f3:50:22:a1:
8b:a8:f8:b1:49:57:6d:b7:25:8d:0b:cb:71:85:e2:be:0d:f8:
ac:8b:64:d0:5a:15:3b:14:bd:ed:ae:93:4e:c8:18:f9:4f:fb:
7a:0c:a5:a0:2f:8f:76:bf:b6:54:79:05:ff:29:87:5d:7a:1d:
66:f7:e2:5d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu May 1 00:02:26 2025 by rpki-client