Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/0e/b4d9d7-6703-4b06-b3ee-07510381420a/1/NezHS2GiTJJodkes0inI4O3E66M.roa
File: NezHS2GiTJJodkes0inI4O3E66M.roa (raw, json)
Hash identifier: NW+JESyj+DlEtcSGmbZoBxeD4vrTW9NlkuNuM81ruH8=
Subject key identifier: 35:EC:C7:4B:61:A2:4C:92:68:76:47:AC:D2:29:C8:E0:ED:C4:EB:A3
Certificate issuer: /CN=f651dc9875e35ec580c571fd0416f4d5f5d4158a
Certificate serial: 0476C608
Authority key identifier: F6:51:DC:98:75:E3:5E:C5:80:C5:71:FD:04:16:F4:D5:F5:D4:15:8A
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/9lHcmHXjXsWAxXH9BBb01fXUFYo.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/0e/b4d9d7-6703-4b06-b3ee-07510381420a/1/NezHS2GiTJJodkes0inI4O3E66M.roa
Signing time: Sat 01 Jan 2022 00:55:19 +0000
ROA not before: Sat 01 Jan 2022 00:55:19 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 29066
IP address blocks: 193.30.103.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 74892808 (0x476c608)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=f651dc9875e35ec580c571fd0416f4d5f5d4158a
Validity
Not Before: Jan 1 00:55:19 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=35ecc74b61a24c92687647acd229c8e0edc4eba3
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a2:38:59:ce:05:c8:7d:69:64:9d:0c:ac:7a:55:
20:39:6a:7c:37:9e:2c:f3:73:75:03:86:76:9b:cf:
43:5d:86:51:81:ab:42:4e:95:19:cb:56:c8:f6:bf:
86:66:77:53:28:e3:dc:bf:81:56:94:88:ab:32:a5:
7f:12:af:17:07:b8:39:30:3a:96:7c:93:b4:f7:33:
2a:60:95:c7:8e:eb:35:70:55:fd:c5:a2:dd:a7:ea:
4b:e1:a4:a3:14:97:a6:fc:4a:15:01:f2:c7:02:07:
64:7e:a6:fb:e7:15:88:51:a8:ba:06:5c:d3:03:a7:
66:88:e5:5f:89:f1:de:db:07:bc:4d:b7:87:01:e5:
00:33:19:fd:fd:b7:37:fd:d8:b7:09:24:c5:f5:1a:
50:20:eb:ba:94:0c:c1:4d:ac:83:66:02:d1:fa:53:
27:27:fe:b4:b1:00:38:82:ee:a5:64:63:c0:a9:5e:
78:22:7c:df:50:3c:2d:a4:50:b6:64:9b:5c:3e:8c:
4d:5f:c7:ac:ee:30:1a:e5:09:ad:7d:34:db:d9:47:
9b:62:72:0e:dc:7d:c3:58:3a:9c:73:0e:81:49:4f:
7f:cc:3b:29:3b:cd:14:69:28:e9:9c:5c:b1:92:0a:
f9:b5:9b:08:55:04:72:3e:45:63:a3:90:50:eb:cf:
d3:8b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
35:EC:C7:4B:61:A2:4C:92:68:76:47:AC:D2:29:C8:E0:ED:C4:EB:A3
X509v3 Authority Key Identifier:
keyid:F6:51:DC:98:75:E3:5E:C5:80:C5:71:FD:04:16:F4:D5:F5:D4:15:8A
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/9lHcmHXjXsWAxXH9BBb01fXUFYo.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/0e/b4d9d7-6703-4b06-b3ee-07510381420a/1/NezHS2GiTJJodkes0inI4O3E66M.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/0e/b4d9d7-6703-4b06-b3ee-07510381420a/1/9lHcmHXjXsWAxXH9BBb01fXUFYo.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
193.30.103.0/24
Signature Algorithm: sha256WithRSAEncryption
07:d4:63:71:82:a9:2f:af:98:89:f5:f9:96:ce:c9:a2:2d:57:
fb:f4:13:b0:d1:0a:8f:a9:25:f9:f1:47:47:3c:50:14:8e:c1:
e9:89:8d:e5:a6:c7:71:e8:a6:90:e7:d9:5e:bb:1f:20:43:88:
5b:5a:44:36:d8:1e:bf:f8:b3:55:10:87:3b:b4:b8:9b:3b:00:
37:48:a8:61:7b:61:6d:13:0b:d5:62:db:45:4a:dd:72:4a:05:
cd:73:3c:63:0e:78:90:46:7d:da:6e:31:63:99:b3:a3:49:f5:
64:99:37:12:9b:38:13:a2:0c:bc:e1:14:97:98:56:0c:3d:5f:
34:a7:bc:6a:24:2f:b0:af:c5:89:74:f1:bc:a8:80:ec:92:3c:
b0:38:07:85:7f:5c:7a:e5:06:26:77:3e:0a:9f:6a:b4:29:1b:
9f:2b:80:94:25:b8:ee:33:9a:2f:3f:ba:a8:49:ed:bf:8c:26:
ff:56:d3:9e:34:ab:5f:8e:92:df:4e:5d:17:f8:be:44:9b:a7:
aa:21:e9:d4:99:03:c4:07:74:96:6e:77:0a:a2:c5:b1:da:d6:
5d:51:28:38:fa:c9:fc:6f:b5:ec:a1:dc:01:3e:d3:0e:af:83:
8e:56:ad:b5:eb:c4:dc:62:56:13:ec:d0:9e:c3:7e:80:c6:7b:
d7:68:e3:5b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Feb 19 22:15:57 2025 by rpki-client