Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/4b/62764b-9aa6-4f12-a71c-6bac34987019/1/w6zGnIuFAdEEjnbKJP35gDP19ms.roa
File: w6zGnIuFAdEEjnbKJP35gDP19ms.roa (raw, json)
Hash identifier: odMQEv6NgPEtvhgf7usMuwCYtFcLwpoaMQTooVCTba8=
Subject key identifier: C3:AC:C6:9C:8B:85:01:D1:04:8E:76:CA:24:FD:F9:80:33:F5:F6:6B
Certificate issuer: /CN=35c96065093998ba42cfba11bf0d17d3ac403d40
Certificate serial: 0185E5DC8988C56651A3F0761BE0F22921BE
Authority key identifier: 35:C9:60:65:09:39:98:BA:42:CF:BA:11:BF:0D:17:D3:AC:40:3D:40
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/NclgZQk5mLpCz7oRvw0X06xAPUA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/4b/62764b-9aa6-4f12-a71c-6bac34987019/1/w6zGnIuFAdEEjnbKJP35gDP19ms.roa
Signing time: Tue 24 Jan 2023 22:18:33 +0000
ROA not before: Tue 24 Jan 2023 22:18:33 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 393427
IP address blocks: 116.50.16.0/21 maxlen: 24
83.142.200.0/21 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:85:e5:dc:89:88:c5:66:51:a3:f0:76:1b:e0:f2:29:21:be
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=35c96065093998ba42cfba11bf0d17d3ac403d40
Validity
Not Before: Jan 24 22:18:33 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=c3acc69c8b8501d1048e76ca24fdf98033f5f66b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c2:3c:ae:45:21:4a:1b:a7:a0:a7:0f:92:c9:5d:
dd:94:c3:94:76:58:92:a7:8c:a1:82:af:9c:4d:74:
f8:1d:02:e6:e4:c4:05:34:6a:f4:70:ac:bc:49:6a:
e7:75:8e:f7:7f:5a:c5:3f:ea:b3:b0:da:8c:13:1a:
5b:ab:5f:8f:13:d9:00:99:bb:ba:75:11:f0:b7:dc:
8d:54:0f:49:ab:1c:4f:eb:88:60:ad:73:93:34:56:
6c:25:e6:68:73:3d:b4:50:f3:d2:20:01:05:d7:b5:
a1:3d:35:c6:5d:6f:3c:55:ff:e2:6d:ee:45:cb:bc:
c2:f4:ef:b7:1b:5a:b9:a4:25:07:20:b2:63:f0:7a:
1e:ce:59:e2:02:8b:2b:bc:5e:aa:7d:ef:b7:30:51:
e8:1c:e1:90:93:4d:9a:e1:11:8a:05:1f:3e:39:9d:
bc:95:d1:38:d1:12:97:b9:29:a8:25:5d:58:3e:e9:
a1:e5:c6:bf:a5:83:db:21:06:d8:5f:4c:ac:ef:6f:
84:49:3d:64:db:19:f6:0b:93:d1:b0:24:1c:2f:34:
f6:83:13:32:c0:3f:4f:e8:db:f9:71:44:90:6b:8d:
98:a4:58:db:b9:59:bd:50:8e:5e:f5:51:b3:3e:db:
6a:c2:e6:7d:89:5a:0c:f1:4e:66:b4:03:ab:73:7b:
37:11
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C3:AC:C6:9C:8B:85:01:D1:04:8E:76:CA:24:FD:F9:80:33:F5:F6:6B
X509v3 Authority Key Identifier:
keyid:35:C9:60:65:09:39:98:BA:42:CF:BA:11:BF:0D:17:D3:AC:40:3D:40
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/NclgZQk5mLpCz7oRvw0X06xAPUA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/4b/62764b-9aa6-4f12-a71c-6bac34987019/1/w6zGnIuFAdEEjnbKJP35gDP19ms.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/4b/62764b-9aa6-4f12-a71c-6bac34987019/1/NclgZQk5mLpCz7oRvw0X06xAPUA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
83.142.200.0/21
116.50.16.0/21
Signature Algorithm: sha256WithRSAEncryption
c6:06:55:49:e2:68:32:a3:bb:5f:a5:cb:c9:7d:c6:58:e7:47:
a9:c5:a5:b1:56:21:40:4b:ea:6d:f1:47:a7:69:95:ea:d1:81:
1b:72:e6:84:b3:87:13:7a:c1:1d:0d:fc:17:a1:15:18:a2:59:
5a:91:c2:a6:47:f2:b1:db:94:9b:ed:d8:4e:0f:2d:a7:bd:66:
32:20:81:a6:5f:5a:c1:96:cd:60:c2:01:3b:04:49:54:d9:bb:
e1:ab:ed:18:cc:25:46:cc:e8:0b:f6:0e:e2:c3:e9:5b:f9:7a:
c6:a9:df:80:e9:f4:d4:b3:6e:47:c9:69:ae:87:a9:c3:88:68:
ea:33:ba:4d:83:b1:44:0b:d9:ac:bc:0f:2b:fe:90:97:c7:85:
4c:e2:e5:f8:ba:0d:05:a0:2b:d5:0f:89:d1:e3:df:95:49:9f:
9d:60:84:c3:55:33:20:cc:b1:9d:ad:2a:cf:5f:38:eb:10:01:
57:46:3d:4a:58:f7:d1:7b:84:54:4e:2a:27:7b:8c:42:a2:6f:
ac:3e:8d:9f:02:50:fd:8b:c0:aa:63:6c:e5:06:9e:6f:d5:97:
fd:08:34:a6:ef:50:53:8c:b2:1e:d4:aa:2a:d0:15:37:6c:f9:
db:02:21:cd:e7:bc:e6:59:01:79:16:5d:28:7b:48:2a:de:48:
fb:c6:f8:dd
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Apr 17 02:31:28 2025 by rpki-client