Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/7f/4cea79-2a09-4ae7-a50c-f8a836f01b21/1/lyju-WcsfjKzHsY-MgdKzzZhTIw.roa
File: lyju-WcsfjKzHsY-MgdKzzZhTIw.roa (raw, json)
Hash identifier: EiV9Q5uHzoj0xoTRtMoDguUYz6ko8D3bkiYvM3cYUXQ=
Subject key identifier: 97:28:EE:F9:67:2C:7E:32:B3:1E:C6:3E:32:07:4A:CF:36:61:4C:8C
Certificate issuer: /CN=8a5d86aab4c0974f0c27f43d968df426f53df5d2
Certificate serial: 019420D665F8F79270C2A1E3AC7343F61EAA
Authority key identifier: 8A:5D:86:AA:B4:C0:97:4F:0C:27:F4:3D:96:8D:F4:26:F5:3D:F5:D2
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/il2GqrTAl08MJ_Q9lo30JvU99dI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/7f/4cea79-2a09-4ae7-a50c-f8a836f01b21/1/lyju-WcsfjKzHsY-MgdKzzZhTIw.roa
Signing time: Wed 01 Jan 2025 07:48:29 +0000
ROA not before: Wed 01 Jan 2025 07:48:29 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 12637
IP address blocks: 46.174.136.0/24 maxlen: 24
46.174.137.0/24 maxlen: 24
46.174.138.0/24 maxlen: 24
2a09:dd80::/32 maxlen: 32
2a09:dd81::/32 maxlen: 32
2a09:dd82::/32 maxlen: 32
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:20:d6:65:f8:f7:92:70:c2:a1:e3:ac:73:43:f6:1e:aa
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=8a5d86aab4c0974f0c27f43d968df426f53df5d2
Validity
Not Before: Jan 1 07:48:29 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=9728eef9672c7e32b31ec63e32074acf36614c8c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9e:c5:63:86:70:12:d8:f2:53:b8:5f:fa:92:a6:
47:79:25:fd:d6:6c:56:a5:ca:13:45:9e:91:f0:a4:
85:e7:5e:a9:2d:07:d2:ce:be:15:53:10:54:15:00:
3c:79:78:91:5e:e7:93:d0:39:e7:44:a0:08:8d:76:
74:04:d9:c9:1b:f1:b1:b7:16:ad:3c:32:7b:1e:66:
94:b7:d4:db:02:58:f2:19:03:ce:01:32:fd:07:53:
d6:54:15:17:4f:f9:09:59:c7:65:8b:73:91:c5:27:
1c:44:fd:77:6e:bd:ee:51:23:43:b4:8e:f8:a5:75:
32:0b:36:9a:b4:f3:b0:2e:2b:fa:20:09:75:b8:d5:
8f:2a:f5:14:01:f1:05:b2:dc:93:44:c1:b3:0a:16:
3d:be:9a:b3:75:63:3b:38:da:7e:d8:87:6e:46:31:
6b:a5:fc:ad:52:57:b2:c4:2c:7e:5f:4e:53:cd:21:
28:07:7c:da:7e:c3:f2:ce:61:8d:32:a9:1a:b9:26:
e5:ce:64:e4:cf:e1:71:e3:b5:2f:24:ba:c4:5c:22:
ba:43:d3:93:cb:7a:94:b7:37:a8:5d:66:e1:9f:06:
01:65:52:f9:5f:3c:3a:30:85:89:dc:62:66:44:8b:
9e:26:3c:d3:e5:63:cc:15:85:c5:5a:5a:7a:f6:cf:
e0:4d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
97:28:EE:F9:67:2C:7E:32:B3:1E:C6:3E:32:07:4A:CF:36:61:4C:8C
X509v3 Authority Key Identifier:
keyid:8A:5D:86:AA:B4:C0:97:4F:0C:27:F4:3D:96:8D:F4:26:F5:3D:F5:D2
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/il2GqrTAl08MJ_Q9lo30JvU99dI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/7f/4cea79-2a09-4ae7-a50c-f8a836f01b21/1/lyju-WcsfjKzHsY-MgdKzzZhTIw.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/7f/4cea79-2a09-4ae7-a50c-f8a836f01b21/1/il2GqrTAl08MJ_Q9lo30JvU99dI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
46.174.136.0-46.174.138.255
IPv6:
2a09:dd80::-2a09:dd82:ffff:ffff:ffff:ffff:ffff:ffff
Signature Algorithm: sha256WithRSAEncryption
46:ba:18:f1:ba:0d:1b:08:cf:27:22:58:09:e6:4e:02:29:ca:
82:af:d5:60:1a:d1:48:b9:01:3c:a7:8b:8d:e3:10:9f:fa:66:
3f:95:b7:e4:a0:a7:19:79:8a:13:e8:a0:b0:82:11:3a:e1:49:
02:91:94:9d:b1:b0:51:7a:71:e9:38:22:1d:dd:82:40:cd:01:
7c:28:cf:52:bf:d9:9e:45:d7:5e:94:1a:43:1a:2a:9a:30:f0:
24:4a:31:bb:7a:56:7e:97:11:11:8e:2d:48:e6:6c:a4:ed:1c:
dd:bf:54:b8:f2:c8:6c:75:ec:1b:21:ad:3a:d0:7b:e9:c5:1a:
7f:86:9a:fe:62:64:7a:ef:41:ee:b4:f8:99:07:05:98:d6:d8:
7b:d4:b4:d2:a9:7a:21:33:ab:1f:50:fe:29:6d:63:88:37:ec:
5f:5e:6c:eb:b5:a1:27:43:9d:cf:72:cb:26:20:7c:0f:df:bd:
1d:0f:05:eb:6f:52:a2:92:ee:e5:39:33:de:8e:13:fa:32:18:
e8:9e:fc:48:a6:cb:e7:18:e9:c9:4b:6d:23:c8:ad:1a:0f:c6:
24:16:9a:89:7c:2f:9b:8d:9e:66:1d:e8:3a:3e:de:80:d7:49:
3c:5d:ff:7e:7d:73:b5:15:08:4c:85:39:02:a6:42:62:ea:3e:
3e:26:00:29
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 6 04:40:32 2025 by rpki-client