Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/0e/d0a3e1-5544-4970-bf45-0ddd44d3305d/1/NVMA_FeR2igfgbngYq628mGiXic.roa
File: NVMA_FeR2igfgbngYq628mGiXic.roa (raw, json)
Hash identifier: IDs5q8MTsObjpctn3BO3ige3qDf1Kzdz34G7ZQHwHKM=
Subject key identifier: 35:53:00:FC:57:91:DA:28:1F:81:B9:E0:62:AE:B6:F2:61:A2:5E:27
Certificate issuer: /CN=79226d806aac82979bf4ac1c78213563f8055efe
Certificate serial: 0184D27C2237F3FBE9AF24D33A7BBDFD8883
Authority key identifier: 79:22:6D:80:6A:AC:82:97:9B:F4:AC:1C:78:21:35:63:F8:05:5E:FE
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/eSJtgGqsgpeb9KwceCE1Y_gFXv4.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/0e/d0a3e1-5544-4970-bf45-0ddd44d3305d/1/NVMA_FeR2igfgbngYq628mGiXic.roa
Signing time: Fri 02 Dec 2022 10:57:41 +0000
ROA not before: Fri 02 Dec 2022 10:57:41 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 15954
IP address blocks: 193.247.214.0/23 maxlen: 23
193.247.194.0/23 maxlen: 23
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:84:d2:7c:22:37:f3:fb:e9:af:24:d3:3a:7b:bd:fd:88:83
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=79226d806aac82979bf4ac1c78213563f8055efe
Validity
Not Before: Dec 2 10:57:41 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=355300fc5791da281f81b9e062aeb6f261a25e27
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b6:b6:85:50:d5:8e:2e:88:74:18:b7:8c:ad:45:
8e:25:99:61:59:1d:59:72:ac:c1:0c:01:8d:b2:c2:
65:51:69:17:78:74:00:0c:e5:c3:11:29:eb:85:ad:
25:4d:b7:13:66:87:62:fb:14:9f:0b:34:31:40:80:
81:d0:80:e8:0e:53:60:9a:a7:18:bf:2b:28:1b:d6:
a5:0b:68:b6:ab:37:ee:b7:e0:76:28:25:05:0b:4e:
b8:fb:24:cd:30:2b:22:d5:f9:4a:b5:41:33:ca:07:
16:9b:df:b5:8d:94:77:8c:5b:ac:c1:7e:67:cd:26:
7e:b9:e8:42:39:db:6f:4a:02:23:9d:89:26:be:06:
d7:94:cf:77:ee:f2:ee:7f:49:1a:ab:bf:5f:2b:ed:
c2:4d:62:13:ab:b0:bd:fc:af:a3:9c:3d:6b:8e:62:
16:05:c8:4e:c2:f0:e9:e4:b8:3a:6e:1c:38:2c:07:
e4:07:c9:d2:e7:a3:73:8c:79:cf:2a:0f:6f:72:79:
45:2d:14:d6:f8:fe:d1:31:86:b3:83:7a:b2:47:9e:
4e:e5:b5:38:91:71:2e:02:08:b5:71:11:7f:0f:ad:
a6:d6:94:42:a5:03:8c:e2:65:c5:e6:5d:59:fb:45:
6f:a8:9a:2b:ab:50:95:dc:00:89:7d:7b:7f:9c:c6:
1a:99
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
35:53:00:FC:57:91:DA:28:1F:81:B9:E0:62:AE:B6:F2:61:A2:5E:27
X509v3 Authority Key Identifier:
keyid:79:22:6D:80:6A:AC:82:97:9B:F4:AC:1C:78:21:35:63:F8:05:5E:FE
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/eSJtgGqsgpeb9KwceCE1Y_gFXv4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/0e/d0a3e1-5544-4970-bf45-0ddd44d3305d/1/NVMA_FeR2igfgbngYq628mGiXic.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/0e/d0a3e1-5544-4970-bf45-0ddd44d3305d/1/eSJtgGqsgpeb9KwceCE1Y_gFXv4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
193.247.194.0/23
193.247.214.0/23
Signature Algorithm: sha256WithRSAEncryption
35:ab:44:75:7f:b3:23:30:3a:97:a6:15:02:7f:5f:30:f2:86:
8d:8e:46:5a:d0:06:88:d8:10:b6:a7:21:3c:00:e3:39:ad:4d:
63:90:0f:d5:36:ae:2b:e8:9d:4e:69:98:16:4f:b6:44:03:3c:
15:0b:8e:d0:91:bd:45:7d:fd:25:bb:1c:2c:09:9c:58:8e:18:
25:0c:02:ce:a5:ee:e7:54:c3:f8:9a:91:17:99:b8:ab:80:0b:
f4:eb:3e:79:b1:76:28:08:ce:94:29:9a:81:9d:15:c6:67:7a:
d4:64:2b:25:a8:96:b3:07:5c:2b:e3:d9:27:9d:76:5e:08:01:
1d:00:a9:07:3a:06:ff:50:b0:13:af:00:1f:63:35:34:dd:96:
92:55:43:88:78:6c:31:b8:1e:a2:cd:2c:2d:1a:01:91:00:37:
86:a0:e0:c2:20:bf:38:a1:78:7d:d3:ca:3f:b9:d7:e6:f9:23:
4d:77:db:31:df:6e:47:45:28:d7:65:d2:7c:1e:25:fd:7c:1b:
c7:bd:02:6f:0f:7a:d1:03:8a:97:d4:0e:08:06:b8:93:b9:8c:
ad:37:0f:d6:5e:27:42:a5:fd:9f:64:9b:9e:29:c7:61:a1:50:
6e:8f:3b:4c:3b:80:81:9a:0b:1e:55:f8:65:ad:0a:1a:0c:91:
ac:e8:fe:96
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 18:53:08 2024 by rpki-client on console-ams.rpki-client.org