Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5b/ad195b-63cc-4fff-9e7f-5914438351b6/1/lyv-MR_awE0YJfSYhQ0CrTLXVN0.roa
File: lyv-MR_awE0YJfSYhQ0CrTLXVN0.roa (raw, json)
Hash identifier: EcGr479ARWlXGwJ5JN9uC2yN7ZQn37TPcVh3EVlD9+o=
Subject key identifier: 97:2B:FE:31:1F:DA:C0:4D:18:25:F4:98:85:0D:02:AD:32:D7:54:DD
Certificate issuer: /CN=2138c8ea76e06f82832fb252bee9c85c57edfbae
Certificate serial: 0185708CEF968134C56468964230D8D9A58F
Authority key identifier: 21:38:C8:EA:76:E0:6F:82:83:2F:B2:52:BE:E9:C8:5C:57:ED:FB:AE
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/ITjI6nbgb4KDL7JSvunIXFft-64.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/5b/ad195b-63cc-4fff-9e7f-5914438351b6/1/lyv-MR_awE0YJfSYhQ0CrTLXVN0.roa
Signing time: Mon 02 Jan 2023 03:36:02 +0000
ROA not before: Mon 02 Jan 2023 03:36:02 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 45002
IP address blocks: 195.230.121.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:85:70:8c:ef:96:81:34:c5:64:68:96:42:30:d8:d9:a5:8f
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2138c8ea76e06f82832fb252bee9c85c57edfbae
Validity
Not Before: Jan 2 03:36:02 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=972bfe311fdac04d1825f498850d02ad32d754dd
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8e:04:5e:a0:b5:4c:18:4a:b5:e8:ea:59:bf:46:
a8:9a:9b:2b:ba:55:25:32:53:c2:c4:27:1e:44:92:
50:8d:fb:3c:95:00:7d:ff:8b:1b:4c:53:b3:c1:fa:
ea:c5:85:a1:56:18:f2:c0:f2:b0:2f:81:5b:f3:45:
b6:3b:a0:f1:5e:da:31:3c:d0:f2:e3:b5:a7:cd:e9:
6b:c1:02:c8:83:d7:63:66:d1:64:fc:b3:17:94:f3:
c5:eb:1e:6f:ba:84:7a:3f:6b:bb:4c:e1:20:4f:5a:
e6:7f:55:0b:db:5e:ee:e8:51:55:ce:97:13:a2:87:
2a:51:be:11:58:50:58:6b:04:d7:3f:7e:6c:c0:4a:
db:a0:c9:e1:29:f8:af:59:31:c7:66:c8:29:e6:b4:
df:39:d5:4a:2b:58:66:08:c1:24:0a:f7:db:d8:2e:
74:bc:5a:da:af:63:bf:e7:f8:a3:e7:54:4a:34:dc:
2d:d1:5e:ff:c8:9e:79:f3:13:89:d2:09:ff:5b:1a:
f2:30:a4:05:63:13:59:b0:a7:49:7d:3b:c3:08:2c:
42:4a:6f:fa:6e:50:85:cf:7a:0c:58:9c:79:90:60:
cb:e6:ab:23:02:e2:3a:47:11:70:19:83:70:cf:af:
a1:67:f4:03:39:e3:f9:7b:c9:f4:30:2d:6d:31:d4:
22:41
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
97:2B:FE:31:1F:DA:C0:4D:18:25:F4:98:85:0D:02:AD:32:D7:54:DD
X509v3 Authority Key Identifier:
keyid:21:38:C8:EA:76:E0:6F:82:83:2F:B2:52:BE:E9:C8:5C:57:ED:FB:AE
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ITjI6nbgb4KDL7JSvunIXFft-64.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5b/ad195b-63cc-4fff-9e7f-5914438351b6/1/lyv-MR_awE0YJfSYhQ0CrTLXVN0.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/5b/ad195b-63cc-4fff-9e7f-5914438351b6/1/ITjI6nbgb4KDL7JSvunIXFft-64.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
195.230.121.0/24
Signature Algorithm: sha256WithRSAEncryption
4a:1e:d4:6e:ee:22:16:87:0f:74:d4:3e:f1:01:86:28:5f:ed:
19:2d:ab:15:01:f4:c7:c7:93:92:c2:e5:36:a0:86:80:f0:2d:
2a:1e:83:96:b6:aa:ed:31:0b:07:fa:ed:91:c7:b9:37:cf:51:
55:ed:4d:87:80:26:62:e5:2b:f4:01:cc:fa:28:f3:7b:3f:bc:
a0:a0:e2:16:7c:d6:6f:80:e6:01:0c:95:b3:b0:78:89:d9:17:
71:d3:aa:10:38:be:b5:09:18:d7:d7:85:a3:1b:f5:ba:8f:4e:
d0:02:63:4a:5b:31:8a:4f:85:87:8c:e5:65:56:6f:a6:96:d6:
b2:aa:9a:ce:5c:3b:cb:24:41:81:ef:44:ac:7d:19:42:32:30:
24:b6:64:d3:12:68:92:fa:06:dc:6e:c5:c8:81:f2:4e:30:b8:
42:02:1c:d3:3e:d9:44:f6:98:7f:f2:5c:b2:ba:64:60:c7:fc:
fb:7c:2e:a2:52:e3:bd:4f:bb:94:92:e7:d2:24:03:a3:af:a9:
9a:a8:25:66:e1:40:aa:d1:a2:7c:a7:66:99:a0:25:f2:cb:c9:
c9:ce:8b:65:b9:f5:a0:e1:ca:71:24:d3:10:86:11:2b:1d:f7:
67:9d:79:5d:fa:a0:7b:6a:3b:e0:9d:3f:0b:cc:19:8b:b5:1e:
51:d6:6d:77
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 19 23:52:41 2023 by rpki-client on console-ams.rpki-client.org