Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/BOwn7ImfVW2t_h0IS0kZL6BhnoY.roa
File: BOwn7ImfVW2t_h0IS0kZL6BhnoY.roa (raw, json)
Hash identifier: 46/srwasM5nlXblarkwEuLkoPzW0H4SNiAIHPHUbawk=
Subject key identifier: 04:EC:27:EC:89:9F:55:6D:AD:FE:1D:08:4B:49:19:2F:A0:61:9E:86
Certificate issuer: /CN=72047be15b275902dcf617dc3d0e16dc1f308022
Certificate serial: 0182F367CDFB14AFE58A309D355C58FA48D8
Authority key identifier: 72:04:7B:E1:5B:27:59:02:DC:F6:17:DC:3D:0E:16:DC:1F:30:80:22
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/cgR74VsnWQLc9hfcPQ4W3B8wgCI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/BOwn7ImfVW2t_h0IS0kZL6BhnoY.roa
Signing time: Wed 31 Aug 2022 10:17:22 +0000
ROA not before: Wed 31 Aug 2022 10:17:22 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 2121
IP address blocks: 193.0.24.0/21 maxlen: 21
2001:67c:64:ffff:0:182:3f1d:a803/128 maxlen: 128
2001:67c:64::/48 maxlen: 48
2001:67c:64:ffff:0:182:7cb2:99d4/128 maxlen: 128
2001:67c:64:ffff:0:182:383f:6b78/128 maxlen: 128
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:82:f3:67:cd:fb:14:af:e5:8a:30:9d:35:5c:58:fa:48:d8
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=72047be15b275902dcf617dc3d0e16dc1f308022
Validity
Not Before: Aug 31 10:17:22 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=04ec27ec899f556dadfe1d084b49192fa0619e86
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b5:17:5e:1e:56:1c:94:1c:cc:0d:ea:ec:a8:5f:
02:0a:3d:c0:fa:6b:58:69:7d:a9:6c:e6:80:57:36:
7b:32:3b:c6:0f:f5:f4:99:e3:60:80:ac:35:6a:27:
96:c9:ac:1d:83:7b:ed:64:5b:c2:78:5e:70:b5:9b:
02:f1:9d:f2:90:75:42:37:13:21:f4:91:a5:c2:ae:
a4:7e:5e:2b:b9:3f:5e:b7:fa:71:fd:17:25:91:d8:
ff:87:65:d7:c8:0d:cb:84:44:e0:0b:50:a4:bc:f7:
a3:a2:17:89:ee:60:0d:87:d9:5f:70:3c:87:49:48:
c5:7d:3d:f4:cc:94:7a:ec:13:5f:7f:8f:bb:3d:da:
93:7c:8f:a1:70:ec:f4:9c:ea:8d:7d:53:7a:7b:1f:
b4:44:b0:fc:f5:ea:d3:d9:c7:29:fd:81:48:01:8e:
15:e8:24:de:ef:42:96:c8:78:51:db:1c:a5:3c:e2:
39:f1:f0:74:ed:0c:78:5e:6f:7e:ac:6a:98:12:05:
6b:41:f5:ad:93:aa:f2:a0:d3:69:93:1f:9e:d7:fa:
05:fc:74:07:72:c2:ec:96:df:6b:df:64:be:02:65:
54:cc:97:9e:b2:c9:c6:67:ac:70:55:ee:36:f0:fc:
ac:e4:8e:09:f4:a1:2d:53:b1:d2:4d:37:5d:0d:90:
d9:df
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
04:EC:27:EC:89:9F:55:6D:AD:FE:1D:08:4B:49:19:2F:A0:61:9E:86
X509v3 Authority Key Identifier:
keyid:72:04:7B:E1:5B:27:59:02:DC:F6:17:DC:3D:0E:16:DC:1F:30:80:22
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/cgR74VsnWQLc9hfcPQ4W3B8wgCI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/BOwn7ImfVW2t_h0IS0kZL6BhnoY.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/cgR74VsnWQLc9hfcPQ4W3B8wgCI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
193.0.24.0/21
IPv6:
2001:67c:64::/48
Signature Algorithm: sha256WithRSAEncryption
12:a8:37:8f:d9:60:f9:1c:95:75:79:26:c2:43:72:32:79:c5:
5c:c9:d1:2e:38:d4:11:40:e1:6c:e2:46:0c:6a:0b:92:cd:bf:
8c:a6:67:46:c8:a7:17:fd:17:f4:59:52:fb:4a:c6:f2:fb:53:
4a:2e:38:45:4d:0e:eb:a9:b3:08:aa:65:e6:05:72:04:d6:59:
d5:ab:98:53:ad:85:65:3a:4e:c0:d5:15:1e:05:f0:fc:f3:a1:
d6:db:77:b6:7b:07:39:79:92:13:96:2f:0d:aa:c3:41:f7:27:
1a:6f:e8:3c:06:01:8e:f5:84:a2:4e:86:e9:77:80:f9:ff:ff:
9f:46:69:d3:a0:a9:2c:ab:6d:77:e4:a7:c4:5c:94:f9:36:bf:
c9:ea:b1:86:2d:f5:db:37:41:fb:f2:58:d4:00:6e:f7:11:17:
ff:ff:73:76:a4:6f:4a:3c:da:89:55:74:f1:f8:01:53:d3:50:
ed:ba:87:00:25:14:7e:e8:be:66:4b:cf:04:6d:a3:18:14:38:
92:9b:81:69:56:bd:70:52:01:41:51:35:37:5b:3a:0a:ff:c6:
21:2b:08:07:64:3f:9c:cf:8c:b2:50:a8:76:c2:f6:78:31:61:
d7:e0:0a:76:db:9c:c3:a4:48:78:5d:57:71:89:d3:f4:c6:25:
dd:90:a4:e8
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Apr 30 17:32:27 2025 by rpki-client