Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/78/66f05c-741c-4720-bc7e-89714a7e8d58/1/LyVym4UPK98Ng-1a9OLHRZHLRmw.roa
File: LyVym4UPK98Ng-1a9OLHRZHLRmw.roa (raw, json)
Hash identifier: /EWVi2VWVGQ7yEZI1vDOB6bTXscAFP3frjxwug5o7DE=
Subject key identifier: 2F:25:72:9B:85:0F:2B:DF:0D:83:ED:5A:F4:E2:C7:45:91:CB:46:6C
Certificate issuer: /CN=86cce06e70df970d90abfe3cbe7fa882f467b1e4
Certificate serial: 0194B0EAD159A2EE200D9170B850CEAB006B
Authority key identifier: 86:CC:E0:6E:70:DF:97:0D:90:AB:FE:3C:BE:7F:A8:82:F4:67:B1:E4
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/hszgbnDflw2Qq_48vn-ogvRnseQ.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/78/66f05c-741c-4720-bc7e-89714a7e8d58/1/LyVym4UPK98Ng-1a9OLHRZHLRmw.roa
Signing time: Wed 29 Jan 2025 07:16:06 +0000
ROA not before: Wed 29 Jan 2025 07:16:06 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 10753
IP address blocks: 82.163.56.0/22 maxlen: 22
82.163.172.0/22 maxlen: 22
86.104.160.0/22 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:b0:ea:d1:59:a2:ee:20:0d:91:70:b8:50:ce:ab:00:6b
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=86cce06e70df970d90abfe3cbe7fa882f467b1e4
Validity
Not Before: Jan 29 07:16:06 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=2f25729b850f2bdf0d83ed5af4e2c74591cb466c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a8:dc:0c:fc:a3:ed:48:35:5f:cf:d4:4c:1c:ef:
37:db:03:ba:3f:13:dd:33:7e:7e:51:85:e0:46:e8:
c6:8c:a5:bc:96:e9:5b:c2:be:c0:77:43:43:ae:27:
ce:32:d2:53:36:21:d5:8d:ab:3d:c9:69:d8:c4:48:
ea:72:fd:50:bf:65:e3:7f:d3:4a:c5:6b:fa:2b:85:
9d:41:56:ec:52:b9:9f:13:5a:73:a9:88:35:60:67:
1d:20:38:5f:23:6e:0c:9f:94:e2:40:f2:e4:28:d5:
cd:bd:ed:0a:22:20:ec:48:9f:76:d8:3b:d9:ad:fe:
49:1e:58:d0:e3:54:3b:49:c3:26:d4:1c:aa:8e:55:
b7:ef:c3:0f:c8:da:1d:7e:ba:07:f7:81:43:60:b6:
36:5e:e7:45:78:97:6d:2f:f1:ed:e8:f4:8b:1a:3e:
73:be:d3:a5:d6:0c:80:82:a5:d1:f2:96:04:ac:e0:
bc:0a:82:f8:55:39:a4:3a:46:91:2b:62:bc:63:18:
84:d5:c4:45:5e:dc:f8:65:40:96:d6:c8:54:22:f5:
a2:7e:62:65:1c:95:86:29:1e:c0:07:ae:9a:f8:b8:
4b:60:7d:5e:ba:b2:75:0a:86:f9:d3:af:43:04:6b:
f0:24:f6:3b:af:0d:19:08:d3:cf:07:0f:c6:1b:8e:
a5:bb
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
2F:25:72:9B:85:0F:2B:DF:0D:83:ED:5A:F4:E2:C7:45:91:CB:46:6C
X509v3 Authority Key Identifier:
keyid:86:CC:E0:6E:70:DF:97:0D:90:AB:FE:3C:BE:7F:A8:82:F4:67:B1:E4
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/hszgbnDflw2Qq_48vn-ogvRnseQ.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/78/66f05c-741c-4720-bc7e-89714a7e8d58/1/LyVym4UPK98Ng-1a9OLHRZHLRmw.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/78/66f05c-741c-4720-bc7e-89714a7e8d58/1/hszgbnDflw2Qq_48vn-ogvRnseQ.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
82.163.56.0/22
82.163.172.0/22
86.104.160.0/22
Signature Algorithm: sha256WithRSAEncryption
56:a7:da:86:51:4b:87:54:07:7f:c6:72:19:af:45:62:44:13:
b9:e7:f2:f0:14:b9:3b:1b:84:77:0e:3d:5f:7c:53:aa:e0:e1:
4b:36:d0:b5:19:f4:b6:49:62:89:11:df:f6:9e:0c:de:21:18:
eb:0c:aa:9c:da:43:52:68:e9:9e:5b:0c:1e:ab:df:61:b4:8e:
95:b3:8c:7f:3e:e5:36:16:f7:eb:a2:f1:98:f3:b8:ed:f7:8f:
29:23:c7:65:72:3f:de:b2:98:44:11:52:69:22:2d:d9:cd:11:
50:9c:3f:8b:3a:ed:86:fd:41:ba:61:a7:ca:f7:f8:98:41:39:
b4:78:bc:71:25:9a:70:2f:66:da:c7:5a:e4:55:ff:69:b9:f3:
3b:5f:32:56:ed:4a:bc:fb:0a:9f:f7:64:df:85:e6:a4:ef:47:
e0:c4:59:b1:1d:43:3f:10:84:43:31:8b:51:66:08:30:e6:b7:
2c:c9:f6:69:a6:e1:8a:7d:ff:c2:bf:a8:5c:3d:cb:87:1c:c4:
ff:ae:c0:5b:bd:44:86:9e:2e:88:cf:b9:81:d8:46:71:99:8d:
c6:e6:93:e6:a6:cd:b2:33:46:64:b8:72:34:29:0c:4f:24:f4:
a6:3f:d2:ad:ff:57:e8:b2:03:44:e1:e3:9e:2d:fa:d7:ad:70:
2c:13:49:52
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 5 08:39:58 2025 by rpki-client