Route Origin Authorization
$ rpki-client -vvf nostromo.heficed.net/repo/1123852/0/3139332e32392e3235312e302f32342d3234203d3e20323030303139.roa
File: 3139332e32392e3235312e302f32342d3234203d3e20323030303139.roa (raw, json)
Hash identifier: +zso4UhoaevuDGbBSbeVa5AU8erYNa71y32aC0Se61E=
Subject key identifier: 59:97:DC:7C:F7:4B:BF:45:45:F8:03:7F:27:B5:74:50:D6:D5:B4:57
Certificate issuer: /CN=d5aec3ea5f91c20b6ceb3ce70da8cb8a8a5b30b0
Certificate serial: 47001166F94737CB0680DA159CDA37AB7F922D96
Authority key identifier: D5:AE:C3:EA:5F:91:C2:0B:6C:EB:3C:E7:0D:A8:CB:8A:8A:5B:30:B0
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/1a7D6l-Rwgts6zznDajLiopbMLA.cer
Subject info access: rsync://nostromo.heficed.net/repo/1123852/0/3139332e32392e3235312e302f32342d3234203d3e20323030303139.roa
Signing time: Mon 10 Jan 2022 11:25:12 +0000
ROA not before: Mon 10 Jan 2022 11:20:12 +0000
ROA not after: Tue 10 Jan 2023 11:25:12 +0000
asID: 200019
IP address blocks: 193.29.251.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
47:00:11:66:f9:47:37:cb:06:80:da:15:9c:da:37:ab:7f:92:2d:96
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=d5aec3ea5f91c20b6ceb3ce70da8cb8a8a5b30b0
Validity
Not Before: Jan 10 11:20:12 2022 GMT
Not After : Jan 10 11:25:12 2023 GMT
Subject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
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a2:d2:00:3d:b6:7d:c3:3b:ff:08:c6:b0:d9:1f:
39:0a:03:59:8a:85:03:de:df:4f:9e:49:c7:36:2f:
9e:59:8a:15:2e:3a:20:8e:0a:17:b4:69:de:c6:e7:
04:1b:ca:8b:d5:3f:83:0a:37:71:81:74:0e:f3:88:
39:bc:de:1b:08:dc:79:74:6c:bd:59:f8:9c:8f:e4:
cc:4d:90:08:db:4b:a9:0d:7b:fb:cf:58:8d:1c:45:
5f:81:2b:69:58:ed:e7:8c:6f:94:f6:5d:ed:4f:1e:
ab:14:69:ff:16:d1:e5:62:31:53:8d:8b:51:33:c5:
c2:8e:08:24:ce:45:d0:ee:4e:ef:d8:43:86:5a:61:
bb:62:2b:26:ec:be:ed:ee:48:83:96:94:ab:cf:09:
db:dc:41:ad:10:3e:f8:64:16:ab:2c:7b:c3:21:4a:
ee:dc:f2:a0:6e:79:66:d9:95:56:58:9f:f7:db:d4:
72:c8:40:12:94:f0:ab:6a:26:3c:24:b3:3a:4a:8b:
69:60:43:e5:9a:05:c3:1a:80:df:cd:f0:a3:74:11:
87:20:d1:32:75:05:b9:fd:ea:78:44:67:44:75:a1:
13:03:76:d3:f9:49:88:1a:bb:4c:26:86:c0:66:c9:
ed:87:74:c0:d9:8e:aa:ea:12:fa:8c:b2:7b:71:6c:
74:cf
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
59:97:DC:7C:F7:4B:BF:45:45:F8:03:7F:27:B5:74:50:D6:D5:B4:57
X509v3 Authority Key Identifier:
keyid:D5:AE:C3:EA:5F:91:C2:0B:6C:EB:3C:E7:0D:A8:CB:8A:8A:5B:30:B0
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://nostromo.heficed.net/repo/1123852/0/D5AEC3EA5F91C20B6CEB3CE70DA8CB8A8A5B30B0.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/1a7D6l-Rwgts6zznDajLiopbMLA.cer
Subject Information Access:
Signed Object - URI:rsync://nostromo.heficed.net/repo/1123852/0/3139332e32392e3235312e302f32342d3234203d3e20323030303139.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
193.29.251.0/24
Signature Algorithm: sha256WithRSAEncryption
00:94:a8:b2:b1:16:d3:8f:11:21:40:5c:0c:c6:e2:52:8a:0e:
a8:c4:73:87:85:79:64:65:de:4a:11:20:9b:4a:17:d9:6e:09:
56:00:87:d1:41:20:8f:0f:38:3a:45:4e:fc:66:dc:1f:c2:52:
4a:27:76:52:55:cc:45:53:e1:8a:c2:28:0c:b4:e0:1c:c2:fa:
17:aa:65:9d:96:33:c5:cd:41:79:f0:65:7f:70:3e:9a:cd:f3:
d4:73:40:fd:7a:72:3d:70:46:a8:77:2b:40:77:38:9a:ca:c5:
d1:20:3c:f1:1a:57:d0:63:e8:46:90:79:81:d5:d3:f4:5f:4e:
b5:b9:41:0a:57:78:af:57:0f:6a:24:a8:0b:8d:5c:d8:31:a8:
10:d4:7f:af:3f:12:67:9c:40:90:2a:d3:78:97:79:67:24:a0:
bb:fe:67:05:05:1f:d9:85:4a:12:65:60:ed:57:51:55:21:86:
92:73:4e:b3:d3:f8:a8:a2:c4:77:c2:f7:dd:a8:08:69:8c:d4:
47:1b:96:9c:9c:6d:05:49:4a:55:76:54:e1:78:6c:9a:74:48:
54:23:de:36:45:2d:7b:a7:17:5a:ff:4e:fd:ba:12:10:57:70:
93:6e:b5:f6:58:62:11:a2:44:54:80:06:69:dd:cb:9d:b9:ed:
9e:9f:56:36
-----BEGIN CERTIFICATE-----
MIIG2TCCBcGgAwIBAgIURwARZvlHN8sGgNoVnNo3q3+SLZYwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoZDVhZWMzZWE1ZjkxYzIwYjZjZWIzY2U3MGRhOGNiOGE4
YTViMzBiMDAeFw0yMjAxMTAxMTIwMTJaFw0yMzAxMTAxMTI1MTJaMIICLTGCAikw
ggIlBgNVBAMTggIcMzA4MjAxMEEwMjgyMDEwMTAwQTJEMjAwM0RCNjdEQzMzQkZG
MDhDNkIwRDkxRjM5MEEwMzU5OEE4NTAzREVERjRGOUU0OUM3MzYyRjlFNTk4QTE1
MkUzQTIwOEUwQTE3QjQ2OURFQzZFNzA0MUJDQThCRDUzRjgzMEEzNzcxODE3NDBF
RjM4ODM5QkNERTFCMDhEQzc5NzQ2Q0JENTlGODlDOEZFNENDNEQ5MDA4REI0QkE5
MEQ3QkZCQ0Y1ODhEMUM0NTVGODEyQjY5NThFREU3OEM2Rjk0RjY1REVENEYxRUFC
MTQ2OUZGMTZEMUU1NjIzMTUzOEQ4QjUxMzNDNUMyOEUwODI0Q0U0NUQwRUU0RUVG
RDg0Mzg2NUE2MUJCNjIyQjI2RUNCRUVERUU0ODgzOTY5NEFCQ0YwOURCREM0MUFE
MTAzRUY4NjQxNkFCMkM3QkMzMjE0QUVFRENGMkEwNkU3OTY2RDk5NTU2NTg5RkY3
REJENDcyQzg0MDEyOTRGMEFCNkEyNjNDMjRCMzNBNEE4QjY5NjA0M0U1OUEwNUMz
MUE4MERGQ0RGMEEzNzQxMTg3MjBEMTMyNzUwNUI5RkRFQTc4NDQ2NzQ0NzVBMTEz
MDM3NkQzRjk0OTg4MUFCQjRDMjY4NkMwNjZDOUVEODc3NEMwRDk4RUFBRUExMkZB
OENCMjdCNzE2Qzc0Q0YwMjAzMDEwMDAxMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8A
MIIBCgKCAQEAotIAPbZ9wzv/CMaw2R85CgNZioUD3t9PnknHNi+eWYoVLjogjgoX
tGnexucEG8qL1T+DCjdxgXQO84g5vN4bCNx5dGy9Wficj+TMTZAI20upDXv7z1iN
HEVfgStpWO3njG+U9l3tTx6rFGn/FtHlYjFTjYtRM8XCjggkzkXQ7k7v2EOGWmG7
Yism7L7t7kiDlpSrzwnb3EGtED74ZBarLHvDIUru3PKgbnlm2ZVWWJ/329RyyEAS
lPCraiY8JLM6SotpYEPlmgXDGoDfzfCjdBGHINEydQW5/ep4RGdEdaETA3bT+UmI
GrtMJobAZsnth3TA2Y6q6hL6jLJ7cWx0zwIDAQABo4IB5zCCAeMwHQYDVR0OBBYE
FFmX3Hz3S79FRfgDfye1dFDW1bRXMB8GA1UdIwQYMBaAFNWuw+pfkcILbOs85w2o
y4qKWzCwMA4GA1UdDwEB/wQEAwIHgDBpBgNVHR8EYjBgMF6gXKBahlhyc3luYzov
L25vc3Ryb21vLmhlZmljZWQubmV0L3JlcG8vMTEyMzg1Mi8wL0Q1QUVDM0VBNUY5
MUMyMEI2Q0VCM0NFNzBEQThDQjhBOEE1QjMwQjAuY3JsMGQGCCsGAQUFBwEBBFgw
VjBUBggrBgEFBQcwAoZIcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRvcnkv
REVGQVVMVC8xYTdENmwtUndndHM2enpuRGFqTGlvcGJNTEEuY2VyMIGEBggrBgEF
BQcBCwR4MHYwdAYIKwYBBQUHMAuGaHJzeW5jOi8vbm9zdHJvbW8uaGVmaWNlZC5u
ZXQvcmVwby8xMTIzODUyLzAvMzEzOTMzMmUzMjM5MmUzMjM1MzEyZTMwMmYzMjM0
MmQzMjM0MjAzZDNlMjAzMjMwMzAzMDMxMzkucm9hMBgGA1UdIAEB/wQOMAwwCgYI
KwYBBQUHDgIwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgABMAYDBADBHfswDQYJKoZI
hvcNAQELBQADggEBAACUqLKxFtOPESFAXAzG4lKKDqjEc4eFeWRl3koRIJtKF9lu
CVYAh9FBII8PODpFTvxm3B/CUkondlJVzEVT4YrCKAy04BzC+heqZZ2WM8XNQXnw
ZX9wPprN89RzQP16cj1wRqh3K0B3OJrKxdEgPPEaV9Bj6EaQeYHV0/RfTrW5QQpX
eK9XD2okqAuNXNgxqBDUf68/EmecQJAq03iXeWckoLv+ZwUFH9mFShJlYO1XUVUh
hpJzTrPT+KiixHfC992oCGmM1EcblpycbQVJSlV2VOF4bJp0SFQj3jZFLXunF1r/
Tv26EhBXcJNutfZYYhGiRFSABmndy5257Z6fVjY=
-----END CERTIFICATE-----
Generated at Wed Jul 19 23:13:54 2023 by rpki-client on console-ams.rpki-client.org