Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/4b/62764b-9aa6-4f12-a71c-6bac34987019/1/ODK2IDRYWHaK5QxBvU53Tlbfr6Q.roa
File: ODK2IDRYWHaK5QxBvU53Tlbfr6Q.roa (raw, json)
Hash identifier: VeWDAQv1pLOx6n8EW/b0WMNNik0yrlfdMkw+XjqueUo=
Subject key identifier: 38:32:B6:20:34:58:58:76:8A:E5:0C:41:BD:4E:77:4E:56:DF:AF:A4
Certificate issuer: /CN=35c96065093998ba42cfba11bf0d17d3ac403d40
Certificate serial: 01867F8FD6AFFDA3C27067EE29F9AED87C7C
Authority key identifier: 35:C9:60:65:09:39:98:BA:42:CF:BA:11:BF:0D:17:D3:AC:40:3D:40
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/NclgZQk5mLpCz7oRvw0X06xAPUA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/4b/62764b-9aa6-4f12-a71c-6bac34987019/1/ODK2IDRYWHaK5QxBvU53Tlbfr6Q.roa
Signing time: Thu 23 Feb 2023 18:36:17 +0000
ROA not before: Thu 23 Feb 2023 18:36:17 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 393427
IP address blocks: 116.50.16.0/21 maxlen: 24
83.142.200.0/21 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:86:7f:8f:d6:af:fd:a3:c2:70:67:ee:29:f9:ae:d8:7c:7c
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=35c96065093998ba42cfba11bf0d17d3ac403d40
Validity
Not Before: Feb 23 18:36:17 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=3832b620345858768ae50c41bd4e774e56dfafa4
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:84:91:5a:8d:10:71:b6:81:ff:c9:ab:ef:6c:b6:
d8:a0:9d:3a:7d:3c:d9:24:b3:69:41:5d:a9:65:2d:
a1:91:1d:18:70:19:92:6a:8b:30:39:64:38:b4:3d:
34:49:68:87:21:6e:4a:bd:d0:7f:8e:24:a3:e0:d2:
51:1b:a2:48:cc:76:f3:4d:c0:c4:6e:bf:4b:58:e1:
7b:8a:f8:44:7d:e8:43:ab:a9:dd:0b:47:57:73:3b:
f5:88:6e:8f:54:1c:ab:3e:5a:ce:93:0d:4c:3e:e8:
29:f8:89:f8:52:4e:50:56:10:96:3a:9c:4e:e4:d7:
14:ed:09:03:c8:75:69:c1:15:38:55:4e:08:f7:d1:
48:90:67:25:67:9c:75:7e:0d:61:9b:0f:86:e5:b9:
58:d4:0a:4d:f9:65:fd:1c:54:0b:9b:d7:0c:23:d3:
78:6b:ce:fd:42:c2:dc:0f:ec:ae:f2:48:c7:ee:42:
c2:55:75:c7:0b:f1:f5:58:b2:e9:90:2c:5e:90:f1:
f4:6e:b8:3b:6c:08:72:fe:00:7f:f6:b8:25:16:11:
e8:52:14:fb:ba:5c:e6:2f:68:2c:1d:64:35:49:1b:
24:b4:36:f1:04:36:a1:e7:83:56:29:97:6a:e7:b6:
94:1d:21:ec:8c:98:27:4b:8a:20:71:ba:ff:2c:4d:
db:15
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
38:32:B6:20:34:58:58:76:8A:E5:0C:41:BD:4E:77:4E:56:DF:AF:A4
X509v3 Authority Key Identifier:
keyid:35:C9:60:65:09:39:98:BA:42:CF:BA:11:BF:0D:17:D3:AC:40:3D:40
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/NclgZQk5mLpCz7oRvw0X06xAPUA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/4b/62764b-9aa6-4f12-a71c-6bac34987019/1/ODK2IDRYWHaK5QxBvU53Tlbfr6Q.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/4b/62764b-9aa6-4f12-a71c-6bac34987019/1/NclgZQk5mLpCz7oRvw0X06xAPUA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
83.142.200.0/21
116.50.16.0/21
Signature Algorithm: sha256WithRSAEncryption
37:15:8a:a5:aa:46:92:11:c7:e0:b1:e5:92:86:18:14:ee:61:
79:4b:59:79:78:4e:7e:f1:03:5d:0e:27:88:b8:d8:b8:f5:81:
5b:51:eb:b6:b6:8d:65:60:9e:a5:10:81:af:5b:20:ea:d8:d5:
c0:ef:64:7c:7a:7a:55:93:72:a5:06:60:fc:75:43:57:5c:a0:
ea:d4:11:d8:0e:4c:2d:a7:54:46:b7:4e:65:91:2a:be:32:f0:
14:d1:4c:be:4b:18:f8:71:93:b7:3a:ae:f1:a7:4a:8d:65:3c:
15:ab:9b:bb:4a:fe:28:59:92:9d:64:23:c7:15:8b:76:f5:f7:
52:81:33:14:58:18:50:b7:72:29:5b:fc:50:97:49:6a:ad:f6:
89:ff:f4:dc:60:dc:bd:4b:40:a6:cc:51:3e:3c:18:54:43:2d:
cb:68:6c:d0:7b:a2:67:54:cb:f8:c9:7f:83:dd:7f:15:92:c4:
75:d6:bc:3e:17:22:a5:95:f8:90:13:fb:88:2c:44:f7:d6:32:
36:89:20:36:04:93:e0:c6:4d:16:3c:aa:f6:00:28:49:6e:a7:
37:a1:85:90:ad:88:77:d7:ee:45:cf:1b:23:46:7b:f0:93:d5:
e6:5d:80:30:07:c8:ae:5f:73:ef:14:d1:38:ad:d5:7b:eb:94:
88:df:b3:3b
-----BEGIN CERTIFICATE-----
MIIFAzCCA+ugAwIBAgISAYZ/j9av/aPCcGfuKfmu2Hx8MA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDM1Yzk2MDY1MDkzOTk4YmE0MmNmYmExMWJmMGQxN2QzYWM0
MDNkNDAwHhcNMjMwMjIzMTgzNjE3WhcNMjQwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EygzODMyYjYyMDM0NTg1ODc2OGFlNTBjNDFiZDRlNzc0ZTU2ZGZhZmE0MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAhJFajRBxtoH/yavvbLbYoJ06fTzZ
JLNpQV2pZS2hkR0YcBmSaoswOWQ4tD00SWiHIW5KvdB/jiSj4NJRG6JIzHbzTcDE
br9LWOF7ivhEfehDq6ndC0dXczv1iG6PVByrPlrOkw1MPugp+In4Uk5QVhCWOpxO
5NcU7QkDyHVpwRU4VU4I99FIkGclZ5x1fg1hmw+G5blY1ApN+WX9HFQLm9cMI9N4
a879QsLcD+yu8kjH7kLCVXXHC/H1WLLpkCxekPH0brg7bAhy/gB/9rglFhHoUhT7
ulzmL2gsHWQ1SRsktDbxBDah54NWKZdq57aUHSHsjJgnS4ogcbr/LE3bFQIDAQAB
o4ICDzCCAgswHQYDVR0OBBYEFDgytiA0WFh2iuUMQb1Od05W36+kMB8GA1UdIwQY
MBaAFDXJYGUJOZi6Qs+6Eb8NF9OsQD1AMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvTmNsZ1pRazVtTHBDejdvUnZ3MFgwNnhBUFVBLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC80Yi82Mjc2NGItOWFhNi00ZjEyLWE3MWMt
NmJhYzM0OTg3MDE5LzEvT0RLMklEUllXSGFLNVF4QnZVNTNUbGJmcjZRLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC80Yi82Mjc2NGItOWFhNi00ZjEyLWE3MWMtNmJhYzM0OTg3MDE5
LzEvTmNsZ1pRazVtTHBDejdvUnZ3MFgwNnhBUFVBLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCUGCCsGAQUFBwEHAQH/BBYwFDASBAIAATAMAwQDU47IAwQD
dDIQMA0GCSqGSIb3DQEBCwUAA4IBAQA3FYqlqkaSEcfgseWShhgU7mF5S1l5eE5+
8QNdDieIuNi49YFbUeu2to1lYJ6lEIGvWyDq2NXA72R8enpVk3KlBmD8dUNXXKDq
1BHYDkwtp1RGt05lkSq+MvAU0Uy+Sxj4cZO3Oq7xp0qNZTwVq5u7Sv4oWZKdZCPH
FYt29fdSgTMUWBhQt3IpW/xQl0lqrfaJ//TcYNy9S0CmzFE+PBhUQy3LaGzQe6Jn
VMv4yX+D3X8VksR11rw+FyKllfiQE/uILET31jI2iSA2BJPgxk0WPKr2AChJbqc3
oYWQrYh31+5FzxsjRnvwk9XmXYAwB8iuX3PvFNE4rdV765SI37M7
-----END CERTIFICATE-----
Generated at Thu Apr 17 02:34:14 2025 by rpki-client