Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/64/f678bd-4fe0-4ae0-80d7-53f0788e1a1b/1/BOW96Lpt0xlVSo91KrHpze3uJSY.roa
File: BOW96Lpt0xlVSo91KrHpze3uJSY.roa (raw, json)
Hash identifier: BRHwZTJZnHoBUS0TmXwAbpkl69sQMNJfFtRP98NwTtU=
Subject key identifier: 04:E5:BD:E8:BA:6D:D3:19:55:4A:8F:75:2A:B1:E9:CD:ED:EE:25:26
Certificate issuer: /CN=dfd703b60ac6873256e6b4826ba27a9deeca2f0a
Certificate serial: 01856E5D77A5A6BDEF5C2A5913D24098F82B
Authority key identifier: DF:D7:03:B6:0A:C6:87:32:56:E6:B4:82:6B:A2:7A:9D:EE:CA:2F:0A
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/39cDtgrGhzJW5rSCa6J6ne7KLwo.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/64/f678bd-4fe0-4ae0-80d7-53f0788e1a1b/1/BOW96Lpt0xlVSo91KrHpze3uJSY.roa
Signing time: Sun 01 Jan 2023 17:24:57 +0000
ROA not before: Sun 01 Jan 2023 17:24:57 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 40028
IP address blocks: 2a0e:1c80:5::/48 maxlen: 48
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:85:6e:5d:77:a5:a6:bd:ef:5c:2a:59:13:d2:40:98:f8:2b
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=dfd703b60ac6873256e6b4826ba27a9deeca2f0a
Validity
Not Before: Jan 1 17:24:57 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=04e5bde8ba6dd319554a8f752ab1e9cdedee2526
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9a:59:3c:88:c2:98:2a:a4:29:2d:88:d9:26:84:
60:dd:40:c5:cb:74:96:1f:d9:4d:c8:df:23:68:b6:
44:6b:4c:18:cd:dc:d4:c1:51:55:16:8c:d9:43:4f:
2f:69:07:79:c0:f0:c8:58:c3:82:11:ab:42:a4:13:
90:9c:f6:01:52:51:db:58:68:9a:23:d4:4c:9a:7b:
be:b8:70:cf:41:33:ff:e1:7c:da:53:f5:9f:2c:5b:
b9:b6:36:f3:27:9d:70:7e:b2:b0:a2:21:ff:78:fb:
6e:a9:63:46:48:7e:93:26:d2:9a:5f:9a:7c:7c:90:
48:f5:3f:99:91:b4:73:e9:4b:f0:2a:43:c7:9a:0a:
d7:93:07:2c:8d:ac:25:88:0f:8d:ce:49:04:c7:9a:
57:70:a0:0a:a2:ca:09:1f:35:91:53:5b:df:64:a5:
be:ef:2f:56:e1:25:be:c3:00:2b:97:1a:8a:63:70:
d6:e3:9e:e0:f9:48:a6:36:d8:fa:9c:16:80:09:1b:
20:c7:d9:00:26:14:b0:fe:cc:83:ce:60:df:07:16:
c9:01:05:96:12:47:3f:c0:e4:0d:45:4b:17:67:4e:
19:11:85:d7:c3:15:de:69:77:bc:4c:43:17:f7:d8:
fc:80:36:f3:c8:5f:f9:60:ed:17:8a:43:f0:a4:4b:
e5:e1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
04:E5:BD:E8:BA:6D:D3:19:55:4A:8F:75:2A:B1:E9:CD:ED:EE:25:26
X509v3 Authority Key Identifier:
keyid:DF:D7:03:B6:0A:C6:87:32:56:E6:B4:82:6B:A2:7A:9D:EE:CA:2F:0A
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/39cDtgrGhzJW5rSCa6J6ne7KLwo.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/64/f678bd-4fe0-4ae0-80d7-53f0788e1a1b/1/BOW96Lpt0xlVSo91KrHpze3uJSY.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/64/f678bd-4fe0-4ae0-80d7-53f0788e1a1b/1/39cDtgrGhzJW5rSCa6J6ne7KLwo.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a0e:1c80:5::/48
Signature Algorithm: sha256WithRSAEncryption
52:fd:2d:d2:ab:80:4b:1c:e2:33:c7:07:25:1a:1c:0a:bc:36:
4f:8b:75:96:38:c2:2a:04:5f:ed:03:32:9f:f0:63:ab:a0:5c:
1f:df:d9:1c:6d:87:a5:cb:59:43:0a:76:75:3b:a9:89:8a:90:
8d:b0:fc:ba:2a:42:d6:f1:d3:31:d3:25:06:c5:10:f0:82:bc:
16:60:12:a9:ad:24:9b:75:d1:ac:ff:3a:19:ab:be:a7:3e:7a:
f5:d4:f3:34:80:bc:75:bd:af:90:1b:c0:c3:9b:f6:0b:c0:4b:
04:4d:c2:f4:81:ee:fb:9d:66:79:ca:c9:85:8d:5f:36:ed:fa:
20:63:e6:b7:b8:3f:0e:1b:a6:2a:1b:08:56:a7:ac:ad:a5:46:
96:67:32:96:d0:60:39:34:dd:0e:26:de:d0:51:66:ff:02:f1:
ff:9c:91:1c:72:53:24:f2:f6:4f:01:43:9e:d7:25:a1:4b:f9:
50:99:e6:aa:4b:54:cc:e9:1b:85:bb:96:c6:e3:da:2d:ce:3f:
71:42:21:8c:a4:3a:fb:4d:64:cb:ec:4a:9c:38:c4:78:76:8c:
ac:e5:8d:d2:a3:e6:89:9d:3d:b3:06:09:42:9b:a1:27:ee:23:
37:2f:de:36:19:eb:14:79:51:57:2b:b7:a2:4d:7b:d3:73:a0:
33:a4:9d:f8
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Apr 29 19:59:16 2025 by rpki-client