Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/FO_WTO2_7pBK0nPK12jsSfmvSfA.roa
File: FO_WTO2_7pBK0nPK12jsSfmvSfA.roa (raw, json)
Hash identifier: oF3ROyc9qBCGt65VjPFpY7p12ohGov5oUc87VOG5qAg=
Subject key identifier: 14:EF:D6:4C:ED:BF:EE:90:4A:D2:73:CA:D7:68:EC:49:F9:AF:49:F0
Certificate issuer: /CN=72047be15b275902dcf617dc3d0e16dc1f308022
Certificate serial: 0183185407914CCE798842721E90E59CD503
Authority key identifier: 72:04:7B:E1:5B:27:59:02:DC:F6:17:DC:3D:0E:16:DC:1F:30:80:22
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/cgR74VsnWQLc9hfcPQ4W3B8wgCI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/FO_WTO2_7pBK0nPK12jsSfmvSfA.roa
Signing time: Wed 07 Sep 2022 14:21:43 +0000
ROA not before: Wed 07 Sep 2022 14:21:43 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 2121
IP address blocks: 193.0.24.0/21 maxlen: 21
2001:67c:64:ffff:0:182:3f1d:a803/128 maxlen: 128
2001:67c:64::/48 maxlen: 48
2001:67c:64:ffff:0:182:7cb2:99d4/128 maxlen: 128
2001:67c:64:ffff:0:183:1279:659d/128 maxlen: 128
2001:67c:64:ffff:0:182:383f:6b78/128 maxlen: 128
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:83:18:54:07:91:4c:ce:79:88:42:72:1e:90:e5:9c:d5:03
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=72047be15b275902dcf617dc3d0e16dc1f308022
Validity
Not Before: Sep 7 14:21:43 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=14efd64cedbfee904ad273cad768ec49f9af49f0
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9b:70:1d:20:27:11:6f:be:31:c8:eb:fd:79:ab:
d6:2c:2e:95:38:fd:fa:74:6d:d8:ef:08:8f:4b:b0:
c4:0a:b9:88:5c:2c:3f:36:b8:b4:e5:0a:1c:52:23:
bb:f0:bf:6f:d7:35:29:64:6a:e0:1c:61:33:24:6a:
21:39:8a:57:49:2d:cb:0e:a2:da:11:4c:b8:00:ff:
15:7b:d8:72:f7:54:2a:16:9a:81:99:49:72:99:01:
e5:32:ec:a9:ab:7a:84:bb:90:24:ef:46:6b:0c:ce:
14:aa:90:da:9e:c9:2a:8d:2d:0f:ba:d3:73:84:a1:
08:fb:c8:46:c4:b0:f7:0d:86:4b:c0:4a:a1:72:43:
bc:ed:31:b8:be:f1:17:43:ad:46:b4:47:ac:3b:05:
df:b7:3c:d2:ef:49:fd:46:22:f9:38:87:61:bb:08:
5a:77:28:ee:9f:85:de:68:7d:5e:91:df:be:84:b8:
c8:22:51:a7:58:a2:9a:b9:8c:fd:6c:af:ac:52:fc:
47:4f:d1:1e:67:31:14:6f:6d:ea:3f:4f:63:2e:13:
96:c1:89:20:43:71:e6:ba:a4:aa:09:69:90:c2:c1:
91:d3:52:8f:94:97:33:da:f2:6d:d6:b3:65:ee:33:
a8:e9:b1:04:b3:58:55:5c:3e:98:c7:47:41:5a:f9:
2e:5d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
14:EF:D6:4C:ED:BF:EE:90:4A:D2:73:CA:D7:68:EC:49:F9:AF:49:F0
X509v3 Authority Key Identifier:
keyid:72:04:7B:E1:5B:27:59:02:DC:F6:17:DC:3D:0E:16:DC:1F:30:80:22
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/cgR74VsnWQLc9hfcPQ4W3B8wgCI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/FO_WTO2_7pBK0nPK12jsSfmvSfA.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/cgR74VsnWQLc9hfcPQ4W3B8wgCI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
193.0.24.0/21
IPv6:
2001:67c:64::/48
Signature Algorithm: sha256WithRSAEncryption
88:68:67:55:57:4e:b1:92:5f:17:12:62:ee:84:ac:8b:8a:3e:
a1:91:5a:47:05:90:32:3d:f1:f7:8a:d9:cb:4e:47:23:d5:e7:
d7:17:54:bb:38:43:ec:ca:f9:49:7d:e5:e3:67:2f:8a:01:9c:
56:60:b5:12:8d:f5:28:93:cf:c0:ce:ac:c0:d6:0d:0d:de:fd:
b9:ce:46:0c:76:4c:1e:68:f5:ed:c5:d0:67:49:d6:4a:ec:13:
75:b9:0f:c5:01:98:d9:f5:46:2c:7e:fc:75:0e:0d:ae:48:db:
8b:aa:8b:43:39:62:18:ba:f2:c7:85:7e:5f:50:35:81:6a:50:
1d:83:ca:6a:e9:e4:4f:6a:4a:f6:94:28:4a:19:53:8a:df:07:
b1:76:a1:14:56:72:95:50:0e:12:a9:49:e6:30:44:f0:38:7b:
7f:d4:82:30:6c:17:d2:1c:d2:d4:c5:94:da:ea:f3:49:e7:be:
ff:44:95:9a:59:36:93:9e:eb:99:d1:ce:aa:c6:65:cd:13:c2:
25:76:ec:b2:d1:61:a0:b8:d2:60:52:c9:ed:db:56:66:35:05:
af:40:27:c6:d3:a9:88:48:19:e7:b8:53:5d:33:cd:d0:85:28:
09:cb:2d:78:28:e8:dc:1c:bd:09:32:ff:3f:2d:f0:cb:94:d1:
b9:c2:4a:7e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri May 2 14:23:20 2025 by rpki-client