Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d9/b9ed6c-e8c5-431e-b188-f5200f549377/1/NXGee85ErSqoPHit0HbEI9RiTXA.roa
File: NXGee85ErSqoPHit0HbEI9RiTXA.roa (raw, json)
Hash identifier: mrQojEodQoPywO1DCX1hNHlcS314pUQ+hShQlzfdTpc=
Subject key identifier: 35:71:9E:7B:CE:44:AD:2A:A8:3C:78:AD:D0:76:C4:23:D4:62:4D:70
Certificate issuer: /CN=fe0c9f30e3b46d50b8d1bf79b9d1db84f25134ba
Certificate serial: 018CC49314E11269A8C94E5C8C795BFB52CF
Authority key identifier: FE:0C:9F:30:E3:B4:6D:50:B8:D1:BF:79:B9:D1:DB:84:F2:51:34:BA
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/_gyfMOO0bVC40b95udHbhPJRNLo.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d9/b9ed6c-e8c5-431e-b188-f5200f549377/1/NXGee85ErSqoPHit0HbEI9RiTXA.roa
Signing time: Mon 01 Jan 2024 10:30:22 +0000
ROA not before: Mon 01 Jan 2024 10:30:22 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 12874
IP address blocks: 193.26.22.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8c:c4:93:14:e1:12:69:a8:c9:4e:5c:8c:79:5b:fb:52:cf
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=fe0c9f30e3b46d50b8d1bf79b9d1db84f25134ba
Validity
Not Before: Jan 1 10:30:22 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=35719e7bce44ad2aa83c78add076c423d4624d70
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cb:b9:75:6f:9e:92:52:5d:5b:c6:4f:49:3e:b3:
ad:64:61:b0:33:04:c5:08:79:55:30:2a:ef:36:c3:
53:06:cd:71:87:04:9c:9a:80:64:b3:04:aa:9d:d0:
3b:83:a4:01:e5:6c:59:7c:c3:86:8f:a8:58:15:4e:
fe:0a:7f:36:2f:42:af:9f:58:9a:9b:d8:49:79:9b:
a1:bb:06:1c:ec:53:5d:bc:0a:56:48:80:eb:bd:b8:
61:bc:4b:95:8b:c9:50:0a:49:ec:a8:a7:89:df:46:
6b:e2:ec:d1:f7:f8:36:05:7a:8d:58:b9:c8:95:92:
ab:1b:6e:8c:e5:a3:67:5e:c2:d7:2f:e7:62:00:87:
ff:e1:db:f8:d0:9c:e7:57:00:83:61:e8:de:b0:c0:
9e:a5:bf:0e:dc:54:67:17:ae:87:8d:77:2b:f1:13:
bb:b5:64:b6:f4:85:e3:27:08:64:fd:c1:be:ea:56:
d9:32:0e:4e:2e:a7:e4:0c:50:e0:4d:9a:f2:0e:b0:
0e:27:29:03:3c:5d:ca:97:2d:33:17:3f:ca:3c:78:
c0:d2:83:d8:a9:89:d5:d1:46:04:5d:46:7e:b0:fc:
7b:78:e2:74:12:36:34:cc:34:4e:76:c4:5b:36:33:
20:3e:78:77:fa:4f:a4:02:b4:46:06:37:74:ba:d3:
9d:57
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
35:71:9E:7B:CE:44:AD:2A:A8:3C:78:AD:D0:76:C4:23:D4:62:4D:70
X509v3 Authority Key Identifier:
keyid:FE:0C:9F:30:E3:B4:6D:50:B8:D1:BF:79:B9:D1:DB:84:F2:51:34:BA
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/_gyfMOO0bVC40b95udHbhPJRNLo.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d9/b9ed6c-e8c5-431e-b188-f5200f549377/1/NXGee85ErSqoPHit0HbEI9RiTXA.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/d9/b9ed6c-e8c5-431e-b188-f5200f549377/1/_gyfMOO0bVC40b95udHbhPJRNLo.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
193.26.22.0/24
Signature Algorithm: sha256WithRSAEncryption
4f:47:10:8a:bf:31:d3:57:a1:97:90:e4:8a:8e:19:d3:1a:73:
c4:82:e5:fa:f4:51:d4:d1:aa:41:fa:6e:ab:58:e2:0a:9d:36:
1b:9c:fc:f1:b1:ec:66:6e:ca:0d:d6:e8:e5:1a:06:f7:e6:e9:
67:0c:91:26:b8:3e:6c:e9:f1:85:73:31:34:1f:b9:8a:b1:5b:
33:df:d8:87:3f:a5:b0:76:69:5e:92:cf:4e:87:3d:d1:36:6c:
56:45:7f:eb:52:a2:29:4c:a2:72:92:28:39:22:7d:f7:1a:93:
e5:8f:38:3f:7f:78:37:16:f1:bc:e0:30:c2:d7:c7:1d:9e:42:
ac:87:46:cf:d2:cf:1c:ab:16:ec:a0:3a:90:6f:fb:57:d3:db:
fe:65:f3:58:05:9a:35:2c:cd:92:a9:b5:f7:d1:04:d8:62:b3:
29:dc:f1:96:ac:85:fc:9f:48:94:6b:cc:a0:f3:65:de:35:2d:
89:29:09:86:0c:11:90:60:97:b9:b8:1e:59:a6:ec:0d:f5:89:
cc:bb:88:54:19:76:e6:35:ac:96:70:dc:65:da:98:7b:59:a3:
15:28:30:33:d8:6e:be:68:62:9e:07:ba:54:3d:2a:61:92:43:
9f:17:56:7f:62:96:36:94:3a:d9:10:65:0e:bf:6d:0b:9f:56:
ed:ed:96:7a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Feb 17 07:15:23 2025 by rpki-client