Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e3/969463-7f6a-4503-abc4-d6b56aba3eb7/1/959nax4Sel7CbjLeAYmLWWQndxQ.roa
File: 959nax4Sel7CbjLeAYmLWWQndxQ.roa (raw, json)
Hash identifier: liX4bBBihJXYjqG/dIaKEN/KHAc7Bsnfhrqb4D2Gsu0=
Subject key identifier: F7:9F:67:6B:1E:12:7A:5E:C2:6E:32:DE:01:89:8B:59:64:27:77:14
Certificate issuer: /CN=5c92b9a92c7eb913c3da558002c673e8238db1c7
Certificate serial: 019423D6F9C7BA937133730538776462EC67
Authority key identifier: 5C:92:B9:A9:2C:7E:B9:13:C3:DA:55:80:02:C6:73:E8:23:8D:B1:C7
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/XJK5qSx-uRPD2lWAAsZz6CONscc.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/e3/969463-7f6a-4503-abc4-d6b56aba3eb7/1/959nax4Sel7CbjLeAYmLWWQndxQ.roa
Signing time: Wed 01 Jan 2025 21:47:58 +0000
ROA not before: Wed 01 Jan 2025 21:47:58 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 14618
IP address blocks: 194.35.240.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:23:d6:f9:c7:ba:93:71:33:73:05:38:77:64:62:ec:67
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=5c92b9a92c7eb913c3da558002c673e8238db1c7
Validity
Not Before: Jan 1 21:47:58 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=f79f676b1e127a5ec26e32de01898b5964277714
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bf:38:16:81:5a:4a:c4:55:8e:e3:28:e5:f8:32:
7b:71:e3:43:27:8e:24:d5:4f:a5:1b:1b:a4:ac:b1:
34:0f:d5:1c:e1:32:6f:8b:6e:b0:51:bb:c6:05:af:
c1:ff:35:84:fe:7e:e0:83:b1:7b:6d:8d:60:af:91:
45:9d:4d:ab:73:14:ab:3e:d1:c8:44:10:01:dd:0a:
e8:be:19:e2:5d:22:5f:d5:4a:2a:34:dd:6e:3f:d6:
5c:de:50:0d:e9:7d:3a:55:2b:2e:a5:6c:a1:46:32:
4a:78:81:9d:1a:32:eb:12:19:c3:d2:53:40:40:8f:
92:d3:89:ff:38:5e:a1:9b:01:3e:f5:dc:c2:a6:d7:
f7:9c:fd:a4:c3:b1:7d:92:33:37:6b:e4:d1:fd:d5:
d1:b8:32:25:90:c3:47:8e:e3:2d:5b:df:c3:aa:66:
2a:ba:8d:25:5a:d6:ff:dd:0c:17:35:5b:82:54:27:
04:8a:74:2a:d2:8a:62:f3:d8:a7:67:fa:7a:cb:78:
c7:a6:37:78:83:81:09:30:06:34:f8:6b:29:be:1f:
02:26:b9:70:7a:22:ba:0f:e3:64:53:9d:18:c9:7d:
ed:6e:b7:0c:a1:82:07:c4:9f:3d:46:cc:51:a8:aa:
b6:7c:0b:69:db:f1:4b:3d:17:8d:23:77:a6:2e:e2:
bc:49
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F7:9F:67:6B:1E:12:7A:5E:C2:6E:32:DE:01:89:8B:59:64:27:77:14
X509v3 Authority Key Identifier:
keyid:5C:92:B9:A9:2C:7E:B9:13:C3:DA:55:80:02:C6:73:E8:23:8D:B1:C7
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/XJK5qSx-uRPD2lWAAsZz6CONscc.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e3/969463-7f6a-4503-abc4-d6b56aba3eb7/1/959nax4Sel7CbjLeAYmLWWQndxQ.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/e3/969463-7f6a-4503-abc4-d6b56aba3eb7/1/XJK5qSx-uRPD2lWAAsZz6CONscc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
194.35.240.0/24
Signature Algorithm: sha256WithRSAEncryption
78:a5:1a:00:43:bd:5e:a4:24:ef:93:e7:20:1e:d0:bb:36:e4:
20:d8:0b:9e:2d:ad:f7:cb:77:20:f1:6f:61:78:b1:89:f1:63:
eb:96:a2:a3:c1:7a:8c:d2:ea:f9:59:64:46:33:ff:9a:de:c0:
33:83:e2:45:c3:b7:de:28:ed:f6:1c:7c:18:6e:04:4c:e9:85:
09:6f:18:6a:9f:01:79:df:c3:1c:3f:f7:5d:be:39:f1:c3:20:
02:28:28:fb:0d:35:da:0c:45:46:8b:c5:88:9f:d9:3b:e3:5a:
61:c9:c7:23:12:4d:5c:90:a5:97:e7:72:f7:46:f2:ee:06:de:
32:17:04:94:e8:54:fc:b5:3c:99:c6:17:4d:84:5b:c5:67:cd:
44:b4:4a:ad:1c:a2:3e:2b:3a:26:10:f8:77:36:25:79:b3:9d:
6f:df:19:a1:67:20:65:e3:14:ff:58:7a:ad:89:db:69:a8:8b:
97:14:35:f9:03:b2:35:60:bf:81:67:79:c2:2c:01:45:64:35:
bd:b3:b9:9f:4d:91:4b:aa:e3:ab:58:a1:d6:e7:c6:48:b3:fc:
99:7e:2d:03:44:91:eb:1d:63:30:fb:26:f6:36:d6:85:ea:a5:
97:60:f4:44:de:e6:cc:ad:70:98:1b:f1:51:87:c7:8b:ff:b1:
66:ed:9f:4b
-----BEGIN CERTIFICATE-----
MIIE/TCCA+WgAwIBAgISAZQj1vnHupNxM3MFOHdkYuxnMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDVjOTJiOWE5MmM3ZWI5MTNjM2RhNTU4MDAyYzY3M2U4MjM4
ZGIxYzcwHhcNMjUwMTAxMjE0NzU4WhcNMjYwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EyhmNzlmNjc2YjFlMTI3YTVlYzI2ZTMyZGUwMTg5OGI1OTY0Mjc3NzE0MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAvzgWgVpKxFWO4yjl+DJ7ceNDJ44k
1U+lGxukrLE0D9Uc4TJvi26wUbvGBa/B/zWE/n7gg7F7bY1gr5FFnU2rcxSrPtHI
RBAB3QrovhniXSJf1UoqNN1uP9Zc3lAN6X06VSsupWyhRjJKeIGdGjLrEhnD0lNA
QI+S04n/OF6hmwE+9dzCptf3nP2kw7F9kjM3a+TR/dXRuDIlkMNHjuMtW9/DqmYq
uo0lWtb/3QwXNVuCVCcEinQq0opi89inZ/p6y3jHpjd4g4EJMAY0+Gspvh8CJrlw
eiK6D+NkU50YyX3tbrcMoYIHxJ89RsxRqKq2fAtp2/FLPReNI3emLuK8SQIDAQAB
o4ICCTCCAgUwHQYDVR0OBBYEFPefZ2seEnpewm4y3gGJi1lkJ3cUMB8GA1UdIwQY
MBaAFFySuaksfrkTw9pVgALGc+gjjbHHMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvWEpLNXFTeC11UlBEMmxXQUFzWno2Q09Oc2NjLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9lMy85Njk0NjMtN2Y2YS00NTAzLWFiYzQt
ZDZiNTZhYmEzZWI3LzEvOTU5bmF4NFNlbDdDYmpMZUFZbUxXV1FuZHhRLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9lMy85Njk0NjMtN2Y2YS00NTAzLWFiYzQtZDZiNTZhYmEzZWI3
LzEvWEpLNXFTeC11UlBEMmxXQUFzWno2Q09Oc2NjLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAwiPwMA0G
CSqGSIb3DQEBCwUAA4IBAQB4pRoAQ71epCTvk+cgHtC7NuQg2AueLa33y3cg8W9h
eLGJ8WPrlqKjwXqM0ur5WWRGM/+a3sAzg+JFw7feKO32HHwYbgRM6YUJbxhqnwF5
38McP/ddvjnxwyACKCj7DTXaDEVGi8WIn9k741phyccjEk1ckKWX53L3RvLuBt4y
FwSU6FT8tTyZxhdNhFvFZ81EtEqtHKI+KzomEPh3NiV5s51v3xmhZyBl4xT/WHqt
idtpqIuXFDX5A7I1YL+BZ3nCLAFFZDW9s7mfTZFLquOrWKHW58ZIs/yZfi0DRJHr
HWMw+yb2NtaF6qWXYPRE3ubMrXCYG/FRh8eL/7Fm7Z9L
-----END CERTIFICATE-----
Generated at Fri Apr 4 23:54:22 2025 by rpki-client