Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/NMS39oqjWwjs8oficm2SgNmOZ8o.roa
File: NMS39oqjWwjs8oficm2SgNmOZ8o.roa (raw, json)
Hash identifier: NyEcVVFU++Uq+ib9Akl4P/jeGpR3HYOlVCvX047qeWA=
Subject key identifier: 34:C4:B7:F6:8A:A3:5B:08:EC:F2:87:E2:72:6D:92:80:D9:8E:67:CA
Certificate issuer: /CN=72047be15b275902dcf617dc3d0e16dc1f308022
Certificate serial: 01855F804FC57A982E23F487718F8AA6CE96
Authority key identifier: 72:04:7B:E1:5B:27:59:02:DC:F6:17:DC:3D:0E:16:DC:1F:30:80:22
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/cgR74VsnWQLc9hfcPQ4W3B8wgCI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/NMS39oqjWwjs8oficm2SgNmOZ8o.roa
Signing time: Thu 29 Dec 2022 20:08:42 +0000
ROA not before: Thu 29 Dec 2022 20:08:42 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 2121
IP address blocks: 193.0.24.0/21 maxlen: 21
2001:67c:64::/48 maxlen: 48
2001:67c:64:ffff:0:185:3dcc:d8f/128 maxlen: 128
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:85:5f:80:4f:c5:7a:98:2e:23:f4:87:71:8f:8a:a6:ce:96
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=72047be15b275902dcf617dc3d0e16dc1f308022
Validity
Not Before: Dec 29 20:08:42 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=34c4b7f68aa35b08ecf287e2726d9280d98e67ca
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:98:f8:25:74:d2:62:43:c4:4f:61:6e:6e:d8:65:
eb:17:90:6f:bb:b3:c7:e0:a2:61:51:e2:23:b9:85:
78:27:64:b9:8a:77:e7:eb:33:34:4f:cc:cb:d0:28:
e3:ac:77:17:0b:84:fa:3a:f7:f3:1f:b8:af:13:af:
dc:25:3c:7e:1b:73:a7:36:c3:d5:a9:08:3f:6b:64:
2d:a7:b3:d5:e4:af:61:87:5a:6c:f0:fa:24:05:f0:
61:84:00:b0:71:6f:7d:da:7c:91:a7:4d:ce:bf:67:
1a:18:aa:0d:e3:c7:db:3a:ae:44:d8:c6:dd:8a:83:
97:06:21:f3:7f:77:e6:10:4e:6e:04:91:31:c6:4f:
dd:f7:c6:24:fd:a5:b4:64:b5:12:c9:73:79:8f:e9:
5b:a6:e9:2a:44:35:95:3b:f8:ef:72:af:46:3a:f8:
6a:c8:e2:30:5b:ae:f1:8d:fa:6d:30:bc:3b:ea:11:
4c:b9:4d:f9:07:be:6e:90:e8:6f:7c:5f:d0:bf:08:
33:df:17:80:9c:6e:4e:aa:20:a5:51:f1:83:47:ff:
e4:3e:6f:d8:ab:aa:df:20:8c:b6:8a:d5:8e:65:b5:
ce:3b:50:89:c0:d5:70:08:2a:23:da:0e:fe:86:6e:
be:8e:34:80:6b:12:ea:b5:1e:00:db:5e:71:81:7c:
3c:a1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
34:C4:B7:F6:8A:A3:5B:08:EC:F2:87:E2:72:6D:92:80:D9:8E:67:CA
X509v3 Authority Key Identifier:
keyid:72:04:7B:E1:5B:27:59:02:DC:F6:17:DC:3D:0E:16:DC:1F:30:80:22
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/cgR74VsnWQLc9hfcPQ4W3B8wgCI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/NMS39oqjWwjs8oficm2SgNmOZ8o.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/cgR74VsnWQLc9hfcPQ4W3B8wgCI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
193.0.24.0/21
IPv6:
2001:67c:64::/48
Signature Algorithm: sha256WithRSAEncryption
04:61:3d:e3:4c:14:50:32:42:40:5a:72:50:1f:d7:38:ff:68:
87:c7:f4:2f:89:7c:f2:21:80:9a:ea:ba:56:3c:c6:b4:2a:8d:
9e:58:9c:18:c0:a1:ca:e0:0c:76:83:0c:4b:d7:0f:4d:9f:ca:
35:24:d8:c9:13:cd:3a:b7:71:db:76:2a:7a:d4:a9:85:0c:ab:
a0:92:fc:96:7d:46:36:c9:c7:0a:eb:82:89:d9:4b:43:e3:4c:
cd:df:5c:23:a6:66:fc:f7:ea:54:a8:57:b0:7c:84:10:1b:5d:
cc:82:c3:cd:e9:8e:e5:6f:8e:30:b0:28:44:45:a1:a0:4e:02:
4b:cc:83:3f:90:c7:dc:a9:2d:be:15:ad:b6:06:0b:77:f9:d3:
65:00:bb:46:c3:9c:27:06:2b:2d:d8:12:00:3b:71:07:57:d6:
f7:48:fb:b5:0b:0c:ab:28:a3:7f:6e:e7:51:ba:1d:a6:a6:e0:
46:a6:bb:08:dc:28:5b:c6:1e:cb:bf:38:77:84:b1:a0:95:15:
b2:54:51:3e:2f:0e:ff:72:72:67:a4:37:d8:ab:c8:95:aa:86:
67:56:99:da:f2:16:98:4d:8b:e4:45:7e:a6:27:f4:1d:1d:6a:
a2:c2:d9:b8:d4:b7:7f:af:d2:6f:9b:28:fe:c9:96:4a:f9:63:
f3:09:4d:1b
-----BEGIN CERTIFICATE-----
MIIFDjCCA/agAwIBAgISAYVfgE/FepguI/SHcY+Kps6WMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDcyMDQ3YmUxNWIyNzU5MDJkY2Y2MTdkYzNkMGUxNmRjMWYz
MDgwMjIwHhcNMjIxMjI5MjAwODQyWhcNMjMwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EygzNGM0YjdmNjhhYTM1YjA4ZWNmMjg3ZTI3MjZkOTI4MGQ5OGU2N2NhMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAmPgldNJiQ8RPYW5u2GXrF5Bvu7PH
4KJhUeIjuYV4J2S5infn6zM0T8zL0CjjrHcXC4T6OvfzH7ivE6/cJTx+G3OnNsPV
qQg/a2Qtp7PV5K9hh1ps8PokBfBhhACwcW992nyRp03Ov2caGKoN48fbOq5E2Mbd
ioOXBiHzf3fmEE5uBJExxk/d98Yk/aW0ZLUSyXN5j+lbpukqRDWVO/jvcq9GOvhq
yOIwW67xjfptMLw76hFMuU35B75ukOhvfF/Qvwgz3xeAnG5OqiClUfGDR//kPm/Y
q6rfIIy2itWOZbXOO1CJwNVwCCoj2g7+hm6+jjSAaxLqtR4A215xgXw8oQIDAQAB
o4ICGjCCAhYwHQYDVR0OBBYEFDTEt/aKo1sI7PKH4nJtkoDZjmfKMB8GA1UdIwQY
MBaAFHIEe+FbJ1kC3PYX3D0OFtwfMIAiMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvY2dSNzRWc25XUUxjOWhmY1BRNFczQjh3Z0NJLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC81ZS83OTg0NDctMjFmNC00NWFiLTk5ZGMt
MWFiZTNhYzEwYWE2LzEvTk1TMzlvcWpXd2pzOG9maWNtMlNnTm1PWjhvLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC81ZS83OTg0NDctMjFmNC00NWFiLTk5ZGMtMWFiZTNhYzEwYWE2
LzEvY2dSNzRWc25XUUxjOWhmY1BRNFczQjh3Z0NJLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMDAGCCsGAQUFBwEHAQH/BCEwHzAMBAIAATAGAwQDwQAYMA8E
AgACMAkDBwAgAQZ8AGQwDQYJKoZIhvcNAQELBQADggEBAARhPeNMFFAyQkBaclAf
1zj/aIfH9C+JfPIhgJrqulY8xrQqjZ5YnBjAocrgDHaDDEvXD02fyjUk2MkTzTq3
cdt2KnrUqYUMq6CS/JZ9RjbJxwrrgonZS0PjTM3fXCOmZvz36lSoV7B8hBAbXcyC
w83pjuVvjjCwKERFoaBOAkvMgz+Qx9ypLb4VrbYGC3f502UAu0bDnCcGKy3YEgA7
cQdX1vdI+7ULDKsoo39u51G6Haam4EamuwjcKFvGHsu/OHeEsaCVFbJUUT4vDv9y
cmekN9iryJWqhmdWmdryFphNi+RFfqYn9B0daqLC2bjUt3+v0m+bKP7Jlkr5Y/MJ
TRs=
-----END CERTIFICATE-----
Generated at Wed Jun 11 11:05:26 2025 by rpki-client