Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/19/5dd7b1-e337-404d-b764-ddb0b148e46b/1/Npme--RI1hMfUWN1xjkQ3sh427A.roa
File: Npme--RI1hMfUWN1xjkQ3sh427A.roa (raw, json)
Hash identifier: zfG1MdaGlkMx8fDmyMPGS2rnvZUVvKFGPi6a1qQveB8=
Subject key identifier: 36:99:9E:FB:E4:48:D6:13:1F:51:63:75:C6:39:10:DE:C8:78:DB:B0
Certificate issuer: /CN=9cb96ce59c59557530f0eaa44c664503d9c401ed
Certificate serial: 019387F0911B2A4F64BE06D22BF2FBFD69F3
Authority key identifier: 9C:B9:6C:E5:9C:59:55:75:30:F0:EA:A4:4C:66:45:03:D9:C4:01:ED
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/nLls5ZxZVXUw8OqkTGZFA9nEAe0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/19/5dd7b1-e337-404d-b764-ddb0b148e46b/1/Npme--RI1hMfUWN1xjkQ3sh427A.roa
Signing time: Mon 02 Dec 2024 15:15:10 +0000
ROA not before: Mon 02 Dec 2024 15:15:10 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 13903
IP address blocks: 193.29.148.0/23 maxlen: 23
193.29.149.0/24 maxlen: 24
193.29.158.0/23 maxlen: 23
193.29.159.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:93:87:f0:91:1b:2a:4f:64:be:06:d2:2b:f2:fb:fd:69:f3
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=9cb96ce59c59557530f0eaa44c664503d9c401ed
Validity
Not Before: Dec 2 15:15:10 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=36999efbe448d6131f516375c63910dec878dbb0
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e5:e0:51:f2:d2:de:e4:55:8e:06:63:02:75:a9:
29:a8:7c:e5:8b:a5:8c:df:26:e1:a9:64:17:b7:7e:
2e:eb:29:66:6b:c9:84:52:6a:d1:ad:ae:4c:a5:d2:
48:62:7c:65:bd:53:4c:a0:25:ef:6c:05:c8:5f:1e:
79:18:8a:44:da:6b:53:78:da:e3:fc:38:ac:ac:13:
33:3d:ff:8e:e5:34:e6:81:d2:dd:8a:45:0e:b2:3b:
7b:40:16:47:eb:68:8d:5b:0b:68:2e:05:0c:ba:e6:
c4:b0:cc:17:7e:aa:44:dd:38:ee:d5:90:17:5c:26:
b7:b3:86:06:7e:d7:58:91:f7:7e:80:cf:dc:e1:44:
55:89:e3:1f:44:d5:f8:fc:f5:dd:f3:64:61:40:33:
4c:22:5a:14:47:56:88:c7:6c:35:79:f9:29:0b:99:
6c:ea:7f:7d:df:d5:80:08:09:aa:0e:bd:61:41:74:
1d:ba:17:fb:d0:43:80:b7:0e:fd:bf:93:a1:61:32:
c2:97:cb:e5:42:f6:56:38:d0:fd:69:62:a9:ed:60:
69:f9:38:f8:9f:4b:13:83:ab:1c:1f:5d:48:a2:e5:
a6:cb:c5:58:11:2c:52:82:1b:e1:d8:fc:9c:ad:75:
6a:c0:29:86:1f:51:43:cc:db:e3:5c:39:22:54:83:
88:ab
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
36:99:9E:FB:E4:48:D6:13:1F:51:63:75:C6:39:10:DE:C8:78:DB:B0
X509v3 Authority Key Identifier:
keyid:9C:B9:6C:E5:9C:59:55:75:30:F0:EA:A4:4C:66:45:03:D9:C4:01:ED
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/nLls5ZxZVXUw8OqkTGZFA9nEAe0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/19/5dd7b1-e337-404d-b764-ddb0b148e46b/1/Npme--RI1hMfUWN1xjkQ3sh427A.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/19/5dd7b1-e337-404d-b764-ddb0b148e46b/1/nLls5ZxZVXUw8OqkTGZFA9nEAe0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
193.29.148.0/23
193.29.158.0/23
Signature Algorithm: sha256WithRSAEncryption
22:ca:5a:a4:a8:04:38:9a:45:14:a5:11:04:5a:4e:91:4d:5a:
09:fc:74:dd:05:34:95:dc:25:c2:f5:46:77:fb:32:fb:48:75:
08:f3:dc:f5:8e:3c:27:7f:99:5e:aa:53:95:9e:2a:3b:69:a0:
f2:f5:3b:23:88:98:f5:3d:03:98:26:08:4f:6c:8b:17:99:51:
bd:1c:b7:f2:c0:fe:1a:0d:ea:02:bb:13:2d:98:3b:d5:65:b3:
7c:29:0c:ec:ac:dc:25:49:41:63:80:af:84:8c:91:78:1c:a0:
be:3b:bd:d9:e1:d8:d2:96:32:28:49:ec:ee:ca:22:38:c3:dd:
36:e6:b7:8c:9b:1e:d9:a3:ef:1a:ea:2b:83:f7:9f:90:84:93:
b6:59:20:60:5e:68:96:1d:4e:aa:16:5b:b0:88:7b:9b:7c:85:
2a:91:74:4d:cd:08:95:32:5b:d9:d3:51:16:e2:3d:86:95:34:
10:57:89:2f:18:b9:99:e5:77:a3:e3:ba:84:03:32:7a:46:94:
e8:63:e0:c8:ea:a4:66:1a:ea:4f:44:ee:24:d3:53:19:4c:d6:
c0:45:16:9b:bf:4c:ce:65:35:c7:3f:01:9c:84:b8:e1:e5:c8:
1c:73:62:87:d4:d7:e9:68:a2:b9:0b:33:73:d6:0b:69:ad:80:
2a:30:e2:a1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Dec 25 21:25:45 2024 by rpki-client on console.sobornost.net