Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/54/ab26a5-67b9-4667-855b-48af08004b5f/1/cy-X3wiNHoMv3GxkF6oXVO8tcs4.roa
File: cy-X3wiNHoMv3GxkF6oXVO8tcs4.roa (raw, json)
Hash identifier: YSIXVZzaNuHoExMWWqj+jIkNJ/v3s2NBFK8RXxYqptQ=
Subject key identifier: 73:2F:97:DF:08:8D:1E:83:2F:DC:6C:64:17:AA:17:54:EF:2D:72:CE
Certificate issuer: /CN=a44c267fa754cd6509e9f807273123bee96c525d
Certificate serial: 01856F8C52835234F6531D9E2724993A9817
Authority key identifier: A4:4C:26:7F:A7:54:CD:65:09:E9:F8:07:27:31:23:BE:E9:6C:52:5D
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/pEwmf6dUzWUJ6fgHJzEjvulsUl0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/54/ab26a5-67b9-4667-855b-48af08004b5f/1/cy-X3wiNHoMv3GxkF6oXVO8tcs4.roa
Signing time: Sun 01 Jan 2023 22:55:45 +0000
ROA not before: Sun 01 Jan 2023 22:55:45 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 210703
IP address blocks: 45.158.59.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:85:6f:8c:52:83:52:34:f6:53:1d:9e:27:24:99:3a:98:17
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=a44c267fa754cd6509e9f807273123bee96c525d
Validity
Not Before: Jan 1 22:55:45 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=732f97df088d1e832fdc6c6417aa1754ef2d72ce
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c4:1b:79:a5:b0:92:72:b2:57:48:cf:db:b5:73:
57:77:db:20:4e:40:c2:91:47:df:39:f4:ed:cf:1e:
84:88:58:e9:43:b1:18:35:b2:ce:b7:c6:dd:46:3a:
60:ca:8b:e9:7e:a1:3f:0f:24:41:9c:a0:be:24:44:
1a:9c:65:67:b0:5a:9d:6c:39:4e:a2:b7:a0:e7:9d:
64:69:37:cb:3e:2e:df:92:7f:10:e7:12:20:6e:57:
7b:d6:69:f6:6d:79:a6:1b:15:89:25:af:20:8b:3d:
dd:18:34:2e:4f:e5:52:f1:10:ec:56:f3:6e:fa:f7:
d1:d8:57:23:57:7d:1e:16:00:c3:59:e2:80:09:a1:
ad:ed:16:87:b7:6f:0e:af:ef:0b:32:70:b0:f2:a6:
c0:4c:4a:25:cf:79:f9:eb:97:ad:d2:a7:2b:f1:22:
67:4f:57:f8:4a:ff:9f:12:78:49:d4:75:e8:36:cf:
88:c3:26:63:d8:df:0c:04:5c:04:09:93:6a:22:33:
ac:a6:c9:b3:93:df:99:a8:5f:81:a6:f1:3b:e3:2f:
4f:c7:de:c7:27:c3:a9:b8:86:b5:ec:e9:b6:1b:7d:
3f:50:3f:0a:64:e4:cf:1a:95:54:61:a8:8e:d4:7f:
fa:ce:49:5a:69:97:7e:a0:eb:a6:e7:4f:57:6c:59:
b6:d3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
73:2F:97:DF:08:8D:1E:83:2F:DC:6C:64:17:AA:17:54:EF:2D:72:CE
X509v3 Authority Key Identifier:
keyid:A4:4C:26:7F:A7:54:CD:65:09:E9:F8:07:27:31:23:BE:E9:6C:52:5D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/pEwmf6dUzWUJ6fgHJzEjvulsUl0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/54/ab26a5-67b9-4667-855b-48af08004b5f/1/cy-X3wiNHoMv3GxkF6oXVO8tcs4.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/54/ab26a5-67b9-4667-855b-48af08004b5f/1/pEwmf6dUzWUJ6fgHJzEjvulsUl0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
45.158.59.0/24
Signature Algorithm: sha256WithRSAEncryption
52:f9:aa:db:a5:a3:ed:0b:17:47:19:64:a2:1b:dc:97:2e:ab:
93:b7:14:8b:01:8f:93:24:18:49:1f:61:b4:f5:7d:76:b7:80:
5e:09:aa:cd:7d:25:1b:61:7b:e9:62:a9:a6:06:0c:82:ea:a3:
eb:c9:96:73:2e:3e:50:21:fe:ce:94:c8:59:a6:c9:0b:52:e1:
a1:5d:68:3d:96:82:b6:ee:68:b8:8c:87:46:2b:63:53:b4:b8:
86:18:43:fb:d0:33:ae:2a:8b:c3:8f:32:78:c7:7f:04:e6:db:
83:fc:42:14:bd:27:3c:35:6e:f3:2b:12:53:8e:e5:5a:4f:1c:
58:b7:3e:58:50:92:d2:87:62:72:5f:e6:30:14:9f:f4:6b:04:
7c:7e:92:3f:57:00:d8:c7:de:9e:13:d4:52:8e:1a:ee:7a:f6:
2b:8d:d0:8b:f7:e1:a1:75:ae:0e:1c:86:0d:13:d2:bf:96:75:
28:81:df:25:b7:84:34:85:45:54:68:04:3e:20:a3:3c:f9:5f:
a0:46:a0:34:72:5d:4d:4c:6e:71:e1:d1:f3:52:4c:7e:b9:3d:
e1:9c:e1:4f:cc:42:8a:a8:5a:ac:75:31:a5:1d:36:09:ec:eb:
fa:96:47:51:15:20:34:9f:e7:b0:fd:c4:72:81:f8:19:12:4e:
10:87:7c:a1
-----BEGIN CERTIFICATE-----
MIIE/TCCA+WgAwIBAgISAYVvjFKDUjT2Ux2eJySZOpgXMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGE0NGMyNjdmYTc1NGNkNjUwOWU5ZjgwNzI3MzEyM2JlZTk2
YzUyNWQwHhcNMjMwMTAxMjI1NTQ1WhcNMjQwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
Eyg3MzJmOTdkZjA4OGQxZTgzMmZkYzZjNjQxN2FhMTc1NGVmMmQ3MmNlMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAxBt5pbCScrJXSM/btXNXd9sgTkDC
kUffOfTtzx6EiFjpQ7EYNbLOt8bdRjpgyovpfqE/DyRBnKC+JEQanGVnsFqdbDlO
oreg551kaTfLPi7fkn8Q5xIgbld71mn2bXmmGxWJJa8giz3dGDQuT+VS8RDsVvNu
+vfR2FcjV30eFgDDWeKACaGt7RaHt28Or+8LMnCw8qbATEolz3n565et0qcr8SJn
T1f4Sv+fEnhJ1HXoNs+IwyZj2N8MBFwECZNqIjOspsmzk9+ZqF+BpvE74y9Px97H
J8OpuIa17Om2G30/UD8KZOTPGpVUYaiO1H/6zklaaZd+oOum509XbFm20wIDAQAB
o4ICCTCCAgUwHQYDVR0OBBYEFHMvl98IjR6DL9xsZBeqF1TvLXLOMB8GA1UdIwQY
MBaAFKRMJn+nVM1lCen4BycxI77pbFJdMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvcEV3bWY2ZFV6V1VKNmZnSEp6RWp2dWxzVWwwLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC81NC9hYjI2YTUtNjdiOS00NjY3LTg1NWIt
NDhhZjA4MDA0YjVmLzEvY3ktWDN3aU5Ib012M0d4a0Y2b1hWTzh0Y3M0LnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC81NC9hYjI2YTUtNjdiOS00NjY3LTg1NWItNDhhZjA4MDA0YjVm
LzEvcEV3bWY2ZFV6V1VKNmZnSEp6RWp2dWxzVWwwLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQALZ47MA0G
CSqGSIb3DQEBCwUAA4IBAQBS+arbpaPtCxdHGWSiG9yXLquTtxSLAY+TJBhJH2G0
9X12t4BeCarNfSUbYXvpYqmmBgyC6qPryZZzLj5QIf7OlMhZpskLUuGhXWg9loK2
7mi4jIdGK2NTtLiGGEP70DOuKovDjzJ4x38E5tuD/EIUvSc8NW7zKxJTjuVaTxxY
tz5YUJLSh2JyX+YwFJ/0awR8fpI/VwDYx96eE9RSjhruevYrjdCL9+Ghda4OHIYN
E9K/lnUogd8lt4Q0hUVUaAQ+IKM8+V+gRqA0cl1NTG5x4dHzUkx+uT3hnOFPzEKK
qFqsdTGlHTYJ7Ov6lkdRFSA0n+ew/cRygfgZEk4Qh3yh
-----END CERTIFICATE-----
Generated at Wed Jul 19 23:48:31 2023 by rpki-client on console-fra.rpki-client.org