Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/75/4da5fc-3174-4f17-a9d5-f583107c898f/1/y2qy_MVH2kKf8kC_LPHYerDric4.roa
File: y2qy_MVH2kKf8kC_LPHYerDric4.roa (raw, json)
Hash identifier: lYxymKhjwgyzJLQ63cBsNHzbpakeM+0OQPpg5990rwk=
Subject key identifier: CB:6A:B2:FC:C5:47:DA:42:9F:F2:40:BF:2C:F1:D8:7A:B0:EB:89:CE
Certificate issuer: /CN=b06c430b61be7a380191cd5dfd105c3af21482fc
Certificate serial: 01A6066E
Authority key identifier: B0:6C:43:0B:61:BE:7A:38:01:91:CD:5D:FD:10:5C:3A:F2:14:82:FC
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/sGxDC2G-ejgBkc1d_RBcOvIUgvw.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/75/4da5fc-3174-4f17-a9d5-f583107c898f/1/y2qy_MVH2kKf8kC_LPHYerDric4.roa
Signing time: Wed 22 Jun 2022 07:58:44 +0000
ROA not before: Wed 22 Jun 2022 07:58:44 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 0
IP address blocks: 45.156.116.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 27657838 (0x1a6066e)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=b06c430b61be7a380191cd5dfd105c3af21482fc
Validity
Not Before: Jun 22 07:58:44 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=cb6ab2fcc547da429ff240bf2cf1d87ab0eb89ce
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c8:b2:0c:2f:1d:18:23:59:cb:15:09:d5:cf:ba:
e4:bd:45:a4:a9:6d:f0:45:1f:8c:d2:4f:84:e2:31:
ff:a7:b1:70:5a:99:81:a0:74:f7:00:e2:07:7c:74:
f2:31:64:0c:b4:27:77:dc:01:28:a8:1b:7f:16:cf:
70:75:35:71:de:80:ef:af:db:ee:97:0e:4c:06:c6:
56:e3:58:d3:a9:0a:b2:bf:39:af:2c:92:7b:78:35:
8a:73:0d:41:87:8e:ab:0f:22:73:3e:e8:bc:42:55:
fb:ef:24:24:d4:c0:f3:7f:39:86:37:53:cf:4a:f0:
87:80:b8:19:c2:d7:d4:6f:60:44:8d:f7:d8:9b:7b:
26:40:ac:4b:84:06:11:4b:69:c5:d4:58:94:d8:fb:
41:77:53:47:bb:fd:8d:b6:a6:5e:53:c0:6b:27:e3:
11:4c:65:5b:a2:c6:e4:1e:a2:6b:8f:37:8c:ce:8b:
39:55:3d:3d:d6:e6:78:c5:de:b3:71:8b:05:51:46:
a2:60:03:aa:62:d0:44:9a:be:12:2d:01:2d:d5:c1:
31:6f:3e:e5:88:58:f9:c0:c4:5b:73:20:d1:f6:89:
89:e4:31:70:34:da:a3:07:39:cf:db:8a:01:12:3f:
ee:2d:28:31:36:1b:33:b4:d9:0b:1e:28:2e:a0:e0:
51:d1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
CB:6A:B2:FC:C5:47:DA:42:9F:F2:40:BF:2C:F1:D8:7A:B0:EB:89:CE
X509v3 Authority Key Identifier:
keyid:B0:6C:43:0B:61:BE:7A:38:01:91:CD:5D:FD:10:5C:3A:F2:14:82:FC
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/sGxDC2G-ejgBkc1d_RBcOvIUgvw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/75/4da5fc-3174-4f17-a9d5-f583107c898f/1/y2qy_MVH2kKf8kC_LPHYerDric4.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/75/4da5fc-3174-4f17-a9d5-f583107c898f/1/sGxDC2G-ejgBkc1d_RBcOvIUgvw.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
45.156.116.0/24
Signature Algorithm: sha256WithRSAEncryption
96:31:40:4f:b0:7e:c5:b2:b6:d8:2e:e9:28:c4:af:f5:8a:27:
14:33:7c:b2:fa:06:f7:78:49:c1:40:d8:6a:e3:0a:29:3a:08:
56:97:36:ea:7f:ab:14:9d:0c:5d:76:40:23:c1:37:10:30:8e:
b2:6e:fc:e6:1a:71:c5:a2:94:d8:fd:18:dd:85:e1:91:39:17:
a6:fd:d0:cf:65:34:eb:8b:fa:cb:f7:70:d0:58:dc:08:4a:42:
9e:b9:b6:99:fe:7a:27:d9:f3:18:6e:f6:ee:66:18:9e:a1:c8:
c3:dc:ef:18:b5:b6:f3:c9:a8:05:dc:77:60:8d:2b:6e:a8:c9:
81:60:d2:21:c8:b8:c0:91:94:c2:2c:b4:f1:bb:da:19:19:db:
e0:ca:06:26:83:8d:85:5d:3c:74:7b:12:1c:a8:a2:7c:db:9d:
b3:cd:e8:6e:0b:5a:5d:96:5d:94:fd:8d:90:81:b2:1f:98:3d:
1f:fb:8f:2f:77:ab:e7:c1:ad:18:79:e3:0b:07:26:06:8e:90:
58:44:e8:05:3b:eb:eb:96:bd:e3:32:c6:e0:38:be:8f:35:ef:
88:37:22:0f:bf:15:33:77:2b:20:12:25:3b:56:82:f4:90:d0:
ca:db:eb:9c:97:ae:15:04:79:eb:c7:48:ae:ac:60:46:c1:25:
0d:99:ce:a3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Feb 17 07:40:49 2025 by rpki-client