Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/FilzctGkeq_VwJsHctgiKfPyi5g.roa
File: FilzctGkeq_VwJsHctgiKfPyi5g.roa (raw, json)
Hash identifier: 3IFKRVmSmWxCvy6SwuisnER/l7hYGcCsbXY9RuHyDR8=
Subject key identifier: 16:29:73:72:D1:A4:7A:AF:D5:C0:9B:07:72:D8:22:29:F3:F2:8B:98
Certificate issuer: /CN=72047be15b275902dcf617dc3d0e16dc1f308022
Certificate serial: 85619CD3
Authority key identifier: 72:04:7B:E1:5B:27:59:02:DC:F6:17:DC:3D:0E:16:DC:1F:30:80:22
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/cgR74VsnWQLc9hfcPQ4W3B8wgCI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/FilzctGkeq_VwJsHctgiKfPyi5g.roa
Signing time: Thu 19 May 2022 07:09:18 +0000
ROA not before: Thu 19 May 2022 07:09:18 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 2121
IP address blocks: 193.0.24.0/21 maxlen: 21
2001:67c:64:ffff:0:180:a810:6542/128 maxlen: 128
2001:67c:64:ffff:0:180:466e:42dd/128 maxlen: 128
2001:67c:64::/48 maxlen: 48
2001:67c:64:ffff:0:180:8961:505f/128 maxlen: 128
2001:67c:64:ffff:0:180:457:1e3f/128 maxlen: 128
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 2237766867 (0x85619cd3)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=72047be15b275902dcf617dc3d0e16dc1f308022
Validity
Not Before: May 19 07:09:18 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=16297372d1a47aafd5c09b0772d82229f3f28b98
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ac:7e:ea:4c:4d:d0:be:3a:6c:f2:84:92:5a:e6:
e6:81:cd:73:f1:a7:b3:65:e3:23:ca:ce:70:8e:f5:
79:c7:7a:35:4d:7b:01:e8:9c:23:05:97:6e:e7:98:
00:be:6d:53:eb:f1:30:cd:58:19:8c:0e:e4:b4:ab:
e1:85:5a:9d:c9:38:52:df:7b:29:67:c0:3f:1b:1d:
ff:08:ca:d8:29:58:84:30:c2:38:c5:64:7d:d3:e7:
b3:81:e2:36:8f:dc:50:d5:6a:bc:e1:3c:92:bb:00:
b0:97:bc:5a:c4:37:98:e8:e2:37:97:33:26:48:3e:
c8:33:44:dd:4a:88:30:d2:08:60:03:e2:5a:16:2b:
24:c9:d2:5f:9c:7c:d1:a0:5b:1a:6a:db:8d:5a:00:
d7:ba:6c:15:38:99:40:44:3f:27:c6:f1:c5:92:b8:
13:23:45:be:76:e7:5a:0e:b2:3a:b6:dc:24:88:df:
47:c2:bd:39:21:ec:29:72:ad:88:79:fb:3d:f2:7a:
1e:6d:95:86:c8:ff:83:f4:71:34:a6:b4:24:de:1a:
2f:79:93:aa:c9:d6:04:b9:26:08:e8:d2:c5:e4:fc:
30:d8:b2:99:b0:0a:27:9b:26:4d:af:af:a2:b7:f2:
10:78:44:1d:1e:6b:6c:73:b5:2a:44:d5:62:1b:54:
a6:fd
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
16:29:73:72:D1:A4:7A:AF:D5:C0:9B:07:72:D8:22:29:F3:F2:8B:98
X509v3 Authority Key Identifier:
keyid:72:04:7B:E1:5B:27:59:02:DC:F6:17:DC:3D:0E:16:DC:1F:30:80:22
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/cgR74VsnWQLc9hfcPQ4W3B8wgCI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/FilzctGkeq_VwJsHctgiKfPyi5g.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/cgR74VsnWQLc9hfcPQ4W3B8wgCI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
193.0.24.0/21
IPv6:
2001:67c:64::/48
Signature Algorithm: sha256WithRSAEncryption
45:e0:ce:56:60:29:bb:de:dc:51:ce:00:85:2a:ed:c4:43:98:
5f:3e:f6:6a:f5:6f:66:28:ff:ba:27:21:80:1c:a2:2d:72:77:
cd:c1:d1:cb:e4:e5:12:69:6d:4d:37:79:91:eb:9b:ed:b4:9a:
08:f6:23:f9:a8:6b:cc:b2:0f:0e:75:2f:06:36:11:25:0c:3a:
6d:f6:2f:28:db:bd:34:73:d2:04:72:15:67:46:d4:2e:70:a7:
af:2a:db:4d:1a:fd:9e:cb:89:1e:5e:01:89:b7:f3:88:0d:c3:
6e:39:81:e4:87:72:74:ff:bb:34:7a:b2:24:64:e0:6b:30:23:
26:05:5c:13:4b:3a:52:82:7b:15:a5:f7:74:12:c9:30:9d:e3:
d0:f9:4d:ff:6d:0f:f2:eb:e1:fa:64:4b:b3:69:40:11:1f:82:
67:2f:28:7a:e8:f8:dc:f9:62:c9:d4:f8:57:d7:3e:2d:5e:79:
fc:62:4e:b2:74:9d:36:ed:69:96:75:0c:a4:d3:6d:08:2b:c6:
f4:1a:c0:c6:f3:f0:56:53:7e:ed:bd:60:25:1d:aa:c8:1d:ca:
fc:e9:88:49:b5:dd:b7:64:8f:7e:fa:58:54:5d:10:77:04:47:
f5:2c:5a:47:ed:7d:43:47:3a:19:1a:45:ab:0d:81:59:b4:d9:
4c:4f:56:3b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Jun 9 00:05:11 2025 by rpki-client