Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/NLKFM8xrkb_9VlPqGcbGG4gQX50.roa
File: NLKFM8xrkb_9VlPqGcbGG4gQX50.roa (raw, json)
Hash identifier: 1jjAzeS6jvzKZsp9y/+JzBGFUyMG9ksqpuF9mhwp97g=
Subject key identifier: 34:B2:85:33:CC:6B:91:BF:FD:56:53:EA:19:C6:C6:1B:88:10:5F:9D
Certificate issuer: /CN=72047be15b275902dcf617dc3d0e16dc1f308022
Certificate serial: 018985E24BF1653FBA671AD12B7CECC92938
Authority key identifier: 72:04:7B:E1:5B:27:59:02:DC:F6:17:DC:3D:0E:16:DC:1F:30:80:22
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/cgR74VsnWQLc9hfcPQ4W3B8wgCI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/NLKFM8xrkb_9VlPqGcbGG4gQX50.roa
Signing time: Mon 24 Jul 2023 03:12:27 +0000
ROA not before: Mon 24 Jul 2023 03:12:27 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 2121
IP address blocks: 193.0.24.0/21 maxlen: 21
2001:67c:64:ffff:0:186:d20f:1e28/128 maxlen: 128
2001:67c:64:ffff:0:186:a1c7:a442/128 maxlen: 128
2001:67c:64:ffff:0:186:92f9:8437/128 maxlen: 128
2001:67c:64:ffff:0:186:59e5:727c/128 maxlen: 128
2001:67c:64:ffff:0:188:5fe2:b396/128 maxlen: 128
2001:67c:64:ffff:0:186:6f5a:adbb/128 maxlen: 128
2001:67c:64:ffff:0:186:7ecd:cc90/128 maxlen: 128
2001:67c:64:ffff:0:187:4695:a68a/128 maxlen: 128
2001:67c:64:ffff:0:186:6e7e:de02/128 maxlen: 128
2001:67c:64:ffff:0:186:9e58:8c82/128 maxlen: 128
2001:67c:64:ffff:0:188:7858:a003/128 maxlen: 128
2001:67c:64:ffff:0:186:cfe9:cd16/128 maxlen: 128
2001:67c:64:ffff:0:187:fa9a:b088/128 maxlen: 128
2001:67c:64::/48 maxlen: 48
2001:67c:64:ffff:0:186:c678:c9dc/128 maxlen: 128
2001:67c:64:ffff:0:187:b2b8:a7dd/128 maxlen: 128
2001:67c:64:ffff:0:186:620c:ed81/128 maxlen: 128
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:89:85:e2:4b:f1:65:3f:ba:67:1a:d1:2b:7c:ec:c9:29:38
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=72047be15b275902dcf617dc3d0e16dc1f308022
Validity
Not Before: Jul 24 03:12:27 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=34b28533cc6b91bffd5653ea19c6c61b88105f9d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9b:c5:e3:55:8a:cf:94:86:6d:11:d3:27:23:2f:
ac:b0:ee:1a:79:12:96:6b:bb:0e:c4:c2:e1:09:27:
26:cc:7c:cc:6f:c1:19:6e:c1:ee:de:97:c6:c9:f4:
0c:c5:7e:f7:e7:8a:6d:b0:2b:9c:55:d1:03:e3:76:
e6:62:1f:ac:20:04:c6:a9:0f:65:65:5b:6a:b7:a7:
65:e4:3b:d3:83:60:5b:ed:00:61:d4:75:95:82:40:
33:78:84:d2:b0:d4:9e:86:e6:5b:52:f4:18:ea:6b:
9c:32:be:b2:2f:b5:7c:b3:15:89:e3:73:0b:87:90:
0c:a1:76:7c:c4:56:03:f4:d9:35:da:c4:37:27:e1:
d4:c1:c3:95:58:ec:c7:76:f6:42:60:3b:20:51:f5:
b0:b3:af:79:e8:db:49:21:30:aa:9c:0f:c5:7f:a0:
99:29:5f:31:02:65:f5:cf:e1:b2:a3:6c:2f:45:af:
ee:62:44:5b:01:5f:d2:c5:6b:34:a6:41:80:7e:08:
21:86:14:cb:80:cb:89:ff:f9:62:5a:22:6d:19:2e:
14:28:40:0f:1a:5d:d6:c4:7e:0a:30:ea:82:5d:7e:
e4:ab:65:74:9f:93:14:f0:aa:55:1e:d4:46:c1:ad:
82:e4:40:db:e0:5f:a6:c6:f5:6a:c6:69:57:88:6a:
16:05
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
34:B2:85:33:CC:6B:91:BF:FD:56:53:EA:19:C6:C6:1B:88:10:5F:9D
X509v3 Authority Key Identifier:
keyid:72:04:7B:E1:5B:27:59:02:DC:F6:17:DC:3D:0E:16:DC:1F:30:80:22
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/cgR74VsnWQLc9hfcPQ4W3B8wgCI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/NLKFM8xrkb_9VlPqGcbGG4gQX50.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/cgR74VsnWQLc9hfcPQ4W3B8wgCI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
193.0.24.0/21
IPv6:
2001:67c:64::/48
Signature Algorithm: sha256WithRSAEncryption
8a:25:b7:a7:d2:8a:15:d4:31:a3:9e:95:20:6f:22:9d:0a:ed:
3f:f3:8f:76:50:3f:8a:a6:0c:23:f0:68:73:6b:2d:ec:41:9f:
98:59:1d:1d:f0:d6:8f:79:91:e6:a1:58:2d:e4:04:97:c6:86:
a6:91:25:c0:c8:b4:93:12:4d:12:be:b2:91:8c:6e:04:cb:26:
d2:fa:b5:73:b2:16:13:d6:80:b2:fe:27:ce:9e:26:3d:12:9a:
ee:29:5b:56:99:8a:9e:97:86:b1:4e:14:f0:ed:36:c7:a8:38:
40:12:28:3a:2d:51:7c:47:d5:b8:59:97:19:7f:a3:6f:b5:7e:
97:ab:04:18:93:0f:9a:d1:8a:08:8b:92:35:e4:99:c3:ac:40:
23:53:0f:8a:80:66:59:dd:f7:6a:87:45:8f:ff:e6:1e:9d:3b:
27:47:0c:98:a4:fe:c2:9c:ad:c0:2b:bc:e3:82:8d:b0:7a:a7:
59:f7:61:67:20:02:95:08:16:b1:93:ef:f5:11:0e:0c:33:f9:
a0:da:cc:62:b9:2c:bb:dc:fd:a8:46:f8:dd:e7:d9:4f:6f:f9:
56:4c:f0:09:16:d2:dd:e9:7d:3c:7f:66:05:74:c8:1c:c5:c0:
b3:23:e5:d5:38:38:61:66:a1:cf:6c:c5:90:09:3f:5a:c3:81:
a1:30:8f:53
-----BEGIN CERTIFICATE-----
MIIFDjCCA/agAwIBAgISAYmF4kvxZT+6ZxrRK3zsySk4MA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDcyMDQ3YmUxNWIyNzU5MDJkY2Y2MTdkYzNkMGUxNmRjMWYz
MDgwMjIwHhcNMjMwNzI0MDMxMjI3WhcNMjQwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EygzNGIyODUzM2NjNmI5MWJmZmQ1NjUzZWExOWM2YzYxYjg4MTA1ZjlkMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAm8XjVYrPlIZtEdMnIy+ssO4aeRKW
a7sOxMLhCScmzHzMb8EZbsHu3pfGyfQMxX7354ptsCucVdED43bmYh+sIATGqQ9l
ZVtqt6dl5DvTg2Bb7QBh1HWVgkAzeITSsNSehuZbUvQY6mucMr6yL7V8sxWJ43ML
h5AMoXZ8xFYD9Nk12sQ3J+HUwcOVWOzHdvZCYDsgUfWws6956NtJITCqnA/Ff6CZ
KV8xAmX1z+Gyo2wvRa/uYkRbAV/SxWs0pkGAfgghhhTLgMuJ//liWiJtGS4UKEAP
Gl3WxH4KMOqCXX7kq2V0n5MU8KpVHtRGwa2C5EDb4F+mxvVqxmlXiGoWBQIDAQAB
o4ICGjCCAhYwHQYDVR0OBBYEFDSyhTPMa5G//VZT6hnGxhuIEF+dMB8GA1UdIwQY
MBaAFHIEe+FbJ1kC3PYX3D0OFtwfMIAiMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvY2dSNzRWc25XUUxjOWhmY1BRNFczQjh3Z0NJLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC81ZS83OTg0NDctMjFmNC00NWFiLTk5ZGMt
MWFiZTNhYzEwYWE2LzEvTkxLRk04eHJrYl85VmxQcUdjYkdHNGdRWDUwLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC81ZS83OTg0NDctMjFmNC00NWFiLTk5ZGMtMWFiZTNhYzEwYWE2
LzEvY2dSNzRWc25XUUxjOWhmY1BRNFczQjh3Z0NJLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMDAGCCsGAQUFBwEHAQH/BCEwHzAMBAIAATAGAwQDwQAYMA8E
AgACMAkDBwAgAQZ8AGQwDQYJKoZIhvcNAQELBQADggEBAIolt6fSihXUMaOelSBv
Ip0K7T/zj3ZQP4qmDCPwaHNrLexBn5hZHR3w1o95keahWC3kBJfGhqaRJcDItJMS
TRK+spGMbgTLJtL6tXOyFhPWgLL+J86eJj0Smu4pW1aZip6XhrFOFPDtNseoOEAS
KDotUXxH1bhZlxl/o2+1fperBBiTD5rRigiLkjXkmcOsQCNTD4qAZlnd92qHRY//
5h6dOydHDJik/sKcrcArvOOCjbB6p1n3YWcgApUIFrGT7/URDgwz+aDazGK5LLvc
/ahG+N3n2U9v+VZM8AkW0t3pfTx/ZgV0yBzFwLMj5dU4OGFmoc9sxZAJP1rDgaEw
j1M=
-----END CERTIFICATE-----
Generated at Sat May 3 13:12:36 2025 by rpki-client