Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/njNBs4T-4wmmc0gM9NTyDB1o6v4.roa
File: njNBs4T-4wmmc0gM9NTyDB1o6v4.roa (raw, json)
Hash identifier: KErZuIvAv9Pr1JeeTQAkVdYMxVvutV7d5aBHVR3jxnI=
Subject key identifier: 9E:33:41:B3:84:FE:E3:09:A6:73:48:0C:F4:D4:F2:0C:1D:68:EA:FE
Certificate issuer: /CN=72047be15b275902dcf617dc3d0e16dc1f308022
Certificate serial: 01897449E5420466A4A195DB6139C415B323
Authority key identifier: 72:04:7B:E1:5B:27:59:02:DC:F6:17:DC:3D:0E:16:DC:1F:30:80:22
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/cgR74VsnWQLc9hfcPQ4W3B8wgCI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/njNBs4T-4wmmc0gM9NTyDB1o6v4.roa
Signing time: Thu 20 Jul 2023 17:12:27 +0000
ROA not before: Thu 20 Jul 2023 17:12:27 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 2121
IP address blocks: 193.0.24.0/21 maxlen: 21
2001:67c:64:ffff:0:186:d20f:1e28/128 maxlen: 128
2001:67c:64:ffff:0:186:a1c7:a442/128 maxlen: 128
2001:67c:64:ffff:0:186:92f9:8437/128 maxlen: 128
2001:67c:64:ffff:0:186:59e5:727c/128 maxlen: 128
2001:67c:64:ffff:0:188:5fe2:b396/128 maxlen: 128
2001:67c:64:ffff:0:186:6f5a:adbb/128 maxlen: 128
2001:67c:64:ffff:0:186:7ecd:cc90/128 maxlen: 128
2001:67c:64:ffff:0:187:4695:a68a/128 maxlen: 128
2001:67c:64:ffff:0:186:6e7e:de02/128 maxlen: 128
2001:67c:64:ffff:0:186:9e58:8c82/128 maxlen: 128
2001:67c:64:ffff:0:188:7858:a003/128 maxlen: 128
2001:67c:64:ffff:0:186:cfe9:cd16/128 maxlen: 128
2001:67c:64:ffff:0:187:fa9a:b088/128 maxlen: 128
2001:67c:64::/48 maxlen: 48
2001:67c:64:ffff:0:186:c678:c9dc/128 maxlen: 128
2001:67c:64:ffff:0:187:b2b8:a7dd/128 maxlen: 128
2001:67c:64:ffff:0:186:620c:ed81/128 maxlen: 128
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:89:74:49:e5:42:04:66:a4:a1:95:db:61:39:c4:15:b3:23
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=72047be15b275902dcf617dc3d0e16dc1f308022
Validity
Not Before: Jul 20 17:12:27 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=9e3341b384fee309a673480cf4d4f20c1d68eafe
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a1:e5:d1:73:6d:90:34:80:3e:18:a8:90:d4:6f:
dd:a0:cd:36:67:f4:4a:42:cf:76:75:3d:23:a5:fe:
74:5b:59:00:ba:07:f1:6c:cf:15:42:e1:75:a7:3e:
32:bb:23:b9:00:5d:7b:cf:51:fb:9f:44:d5:20:c2:
41:35:f6:51:4b:1b:d1:64:e5:bf:90:65:53:09:24:
c4:e6:af:c6:e0:43:99:ef:a3:97:22:35:a1:e4:53:
e5:30:be:d8:19:b0:a7:ff:4d:a6:0c:42:46:a2:a6:
87:cc:ca:01:8d:18:38:d5:e4:29:28:56:cd:ea:b7:
db:74:4a:c4:27:27:b1:ee:14:91:1a:9e:42:4c:e6:
f5:ee:92:75:05:37:f1:8f:70:64:b7:1e:a1:97:4c:
e5:51:27:39:d4:a8:65:83:36:8f:d5:89:f4:f7:76:
7b:73:9c:18:3f:b2:4c:5c:47:a7:70:bf:97:13:0f:
01:1e:d0:b0:00:bf:2f:c0:d8:b2:ce:0b:0b:b5:14:
27:0c:42:f0:10:bb:ce:42:2c:b9:80:75:76:c4:46:
cc:64:bd:5b:ad:f9:c7:66:c5:a4:f2:8d:2a:98:f3:
ec:7f:63:2c:92:48:0f:b2:14:42:d1:3c:bc:b2:5d:
4f:52:93:0f:e2:1c:6e:57:21:c6:2f:2e:05:df:e7:
91:db
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
9E:33:41:B3:84:FE:E3:09:A6:73:48:0C:F4:D4:F2:0C:1D:68:EA:FE
X509v3 Authority Key Identifier:
keyid:72:04:7B:E1:5B:27:59:02:DC:F6:17:DC:3D:0E:16:DC:1F:30:80:22
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/cgR74VsnWQLc9hfcPQ4W3B8wgCI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/njNBs4T-4wmmc0gM9NTyDB1o6v4.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/cgR74VsnWQLc9hfcPQ4W3B8wgCI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
193.0.24.0/21
IPv6:
2001:67c:64::/48
Signature Algorithm: sha256WithRSAEncryption
29:6a:13:dc:f4:32:e7:d2:df:d3:7d:25:87:41:76:29:c1:ea:
26:80:94:5d:2d:37:f2:a2:3d:19:cb:68:b6:28:a1:26:f2:c9:
90:ec:d8:0b:8c:60:f2:0f:15:c1:af:d6:55:9a:d8:b1:ca:ab:
17:5f:03:7c:25:ba:27:89:bb:c7:a2:1f:8e:ae:85:c9:89:2e:
32:ea:aa:ca:9d:78:0a:24:a0:75:2d:1b:c3:cd:6e:9f:36:64:
44:be:d2:b4:fd:91:22:64:67:13:c9:00:a4:2d:38:f9:be:46:
41:f2:13:30:0f:5a:7e:dc:6d:28:2c:44:d7:f4:d3:4f:36:26:
7b:41:60:4c:63:a6:39:38:e4:ef:53:02:a2:cb:d2:33:da:92:
e4:35:a9:7b:e0:20:fd:ad:06:3c:a7:9f:62:e8:a5:d0:40:64:
3e:28:2a:da:9e:9a:82:75:3c:8c:33:98:5d:56:29:d3:46:35:
73:9a:e0:6e:1b:b7:5f:c5:c0:27:54:f8:01:ee:c0:af:c0:b6:
bc:d2:82:91:06:df:af:26:22:57:46:03:20:aa:7a:40:1e:ec:
e7:68:54:a6:f4:4c:bf:1f:16:fc:1e:25:53:13:43:06:0b:0b:
b6:84:7d:e8:94:70:ba:4b:4c:ed:14:1f:48:ee:f5:5b:5c:af:
5d:12:e4:8f
-----BEGIN CERTIFICATE-----
MIIFDjCCA/agAwIBAgISAYl0SeVCBGakoZXbYTnEFbMjMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDcyMDQ3YmUxNWIyNzU5MDJkY2Y2MTdkYzNkMGUxNmRjMWYz
MDgwMjIwHhcNMjMwNzIwMTcxMjI3WhcNMjQwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
Eyg5ZTMzNDFiMzg0ZmVlMzA5YTY3MzQ4MGNmNGQ0ZjIwYzFkNjhlYWZlMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAoeXRc22QNIA+GKiQ1G/doM02Z/RK
Qs92dT0jpf50W1kAugfxbM8VQuF1pz4yuyO5AF17z1H7n0TVIMJBNfZRSxvRZOW/
kGVTCSTE5q/G4EOZ76OXIjWh5FPlML7YGbCn/02mDEJGoqaHzMoBjRg41eQpKFbN
6rfbdErEJyex7hSRGp5CTOb17pJ1BTfxj3Bktx6hl0zlUSc51KhlgzaP1Yn093Z7
c5wYP7JMXEencL+XEw8BHtCwAL8vwNiyzgsLtRQnDELwELvOQiy5gHV2xEbMZL1b
rfnHZsWk8o0qmPPsf2MskkgPshRC0Ty8sl1PUpMP4hxuVyHGLy4F3+eR2wIDAQAB
o4ICGjCCAhYwHQYDVR0OBBYEFJ4zQbOE/uMJpnNIDPTU8gwdaOr+MB8GA1UdIwQY
MBaAFHIEe+FbJ1kC3PYX3D0OFtwfMIAiMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvY2dSNzRWc25XUUxjOWhmY1BRNFczQjh3Z0NJLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC81ZS83OTg0NDctMjFmNC00NWFiLTk5ZGMt
MWFiZTNhYzEwYWE2LzEvbmpOQnM0VC00d21tYzBnTTlOVHlEQjFvNnY0LnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC81ZS83OTg0NDctMjFmNC00NWFiLTk5ZGMtMWFiZTNhYzEwYWE2
LzEvY2dSNzRWc25XUUxjOWhmY1BRNFczQjh3Z0NJLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMDAGCCsGAQUFBwEHAQH/BCEwHzAMBAIAATAGAwQDwQAYMA8E
AgACMAkDBwAgAQZ8AGQwDQYJKoZIhvcNAQELBQADggEBAClqE9z0MufS39N9JYdB
dinB6iaAlF0tN/KiPRnLaLYooSbyyZDs2AuMYPIPFcGv1lWa2LHKqxdfA3wluieJ
u8eiH46uhcmJLjLqqsqdeAokoHUtG8PNbp82ZES+0rT9kSJkZxPJAKQtOPm+RkHy
EzAPWn7cbSgsRNf00082JntBYExjpjk45O9TAqLL0jPakuQ1qXvgIP2tBjynn2Lo
pdBAZD4oKtqemoJ1PIwzmF1WKdNGNXOa4G4bt1/FwCdU+AHuwK/AtrzSgpEG368m
IldGAyCqekAe7OdoVKb0TL8fFvweJVMTQwYLC7aEfeiUcLpLTO0UH0ju9Vtcr10S
5I8=
-----END CERTIFICATE-----
Generated at Mon Jun 9 07:26:41 2025 by rpki-client