Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/1b/e3826d-5ada-4e43-9084-1ba695faef25/1/Nootmr_1fD6DdEiatPiPGuH10S8.roa
File: Nootmr_1fD6DdEiatPiPGuH10S8.roa (raw, json)
Hash identifier: Iq+mDaKD0pEih7QU9s0tMTAbnr2OC0dHlN8xlYA9ft0=
Subject key identifier: 36:8A:2D:9A:BF:F5:7C:3E:83:74:48:9A:B4:F8:8F:1A:E1:F5:D1:2F
Certificate issuer: /CN=b39ecd24f321988deb7c19dca052a4e3c49b60ea
Certificate serial: 019421B24CABA59F378119A3149571509B79
Authority key identifier: B3:9E:CD:24:F3:21:98:8D:EB:7C:19:DC:A0:52:A4:E3:C4:9B:60:EA
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/s57NJPMhmI3rfBncoFKk48SbYOo.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/1b/e3826d-5ada-4e43-9084-1ba695faef25/1/Nootmr_1fD6DdEiatPiPGuH10S8.roa
Signing time: Wed 01 Jan 2025 11:48:40 +0000
ROA not before: Wed 01 Jan 2025 11:48:40 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 48435
IP address blocks: 193.169.78.0/23 maxlen: 23
195.42.112.0/23 maxlen: 23
195.42.112.0/24 maxlen: 24
195.42.113.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:21:b2:4c:ab:a5:9f:37:81:19:a3:14:95:71:50:9b:79
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=b39ecd24f321988deb7c19dca052a4e3c49b60ea
Validity
Not Before: Jan 1 11:48:40 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=368a2d9abff57c3e8374489ab4f88f1ae1f5d12f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:be:a0:60:6f:d2:f1:1a:8d:75:b7:b7:ef:f1:bf:
81:7c:dc:9e:95:6a:ff:e1:4b:ec:27:af:68:e0:3a:
59:eb:7f:45:5b:21:3c:20:29:25:2f:2b:93:6e:18:
b9:d5:e3:d4:ea:03:c3:8e:0e:4d:a2:65:33:36:e9:
52:e0:12:4b:05:9f:58:d8:af:2d:98:bb:02:a1:ad:
4b:90:17:83:be:f2:df:55:0a:78:ad:56:c5:38:17:
54:5f:89:0a:2a:3c:a7:45:d4:ab:00:81:a1:85:1b:
98:4e:02:04:37:e0:59:a4:0d:63:23:44:f2:3e:26:
d5:ea:f6:dd:df:a6:0e:f9:40:a4:63:43:a7:9f:74:
7a:d8:81:99:3c:3b:b8:d4:33:8e:b0:d2:82:0a:04:
e9:31:8f:51:9d:cd:ce:4e:b6:93:e1:50:90:e1:ae:
97:9d:94:40:6a:a4:3f:c9:ab:5d:84:24:72:a5:97:
53:c2:f5:10:4a:21:d7:cb:c7:f6:80:d2:c3:86:16:
69:dc:29:be:da:2d:16:0d:a1:e0:27:23:f0:af:66:
3c:e0:b2:a7:bb:18:2d:44:ca:ad:e2:c6:bb:b7:86:
8d:2d:7b:cc:0f:f0:0f:55:d3:71:90:32:db:ef:20:
cd:f9:80:83:eb:62:42:8e:f3:b8:b2:7f:2d:81:06:
d5:9b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
36:8A:2D:9A:BF:F5:7C:3E:83:74:48:9A:B4:F8:8F:1A:E1:F5:D1:2F
X509v3 Authority Key Identifier:
keyid:B3:9E:CD:24:F3:21:98:8D:EB:7C:19:DC:A0:52:A4:E3:C4:9B:60:EA
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/s57NJPMhmI3rfBncoFKk48SbYOo.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/1b/e3826d-5ada-4e43-9084-1ba695faef25/1/Nootmr_1fD6DdEiatPiPGuH10S8.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/1b/e3826d-5ada-4e43-9084-1ba695faef25/1/s57NJPMhmI3rfBncoFKk48SbYOo.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
193.169.78.0/23
195.42.112.0/23
Signature Algorithm: sha256WithRSAEncryption
5a:ee:08:a9:75:d0:64:1e:a2:e6:35:1c:2c:87:ad:b7:e1:e7:
d0:32:e1:79:f6:57:e9:b4:21:c6:3e:50:23:42:1b:12:63:6c:
16:2c:94:1f:02:6f:c1:9c:31:6b:4c:6a:43:3a:ca:ba:54:8d:
d8:fc:fb:87:e5:eb:6b:8c:8e:28:4b:0e:a5:f0:09:8a:21:a8:
ea:a7:48:fa:26:00:c5:6d:0f:56:32:c2:92:12:ea:fd:60:35:
42:3b:ea:6d:e1:52:31:69:7e:8e:db:9e:9b:09:7d:e2:bb:56:
c9:12:95:e6:33:31:f3:f6:22:a5:10:03:42:f4:e5:05:c9:49:
f7:c6:00:81:54:4d:38:48:29:6b:bb:c6:1d:8b:a9:18:b8:ec:
a5:02:5b:cd:dd:e9:e7:93:04:41:af:8a:48:d7:72:24:02:8d:
e3:08:47:ea:df:8b:44:4c:99:bd:5d:85:dd:62:e4:10:46:fc:
b2:90:b8:3c:68:08:38:90:e4:d2:8e:3b:23:06:44:b9:ea:9e:
f3:f1:78:18:d2:d1:9c:73:62:c3:8f:ca:02:a3:5f:52:90:49:
07:c7:86:66:45:97:6d:ad:90:18:7b:f2:0e:8b:bc:68:7b:df:
81:ac:4b:e5:35:b7:e3:5c:01:7c:96:3c:e9:02:27:85:ec:7f:
a1:aa:31:52
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Feb 19 22:13:41 2025 by rpki-client