Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/93/890ae6-4bd7-4853-b1c3-0f232ca17246/1/cy_ZThd04GMiT-A3kAEj-EK00hs.roa
File: cy_ZThd04GMiT-A3kAEj-EK00hs.roa (raw, json)
Hash identifier: qyagl43x6rM/Et3pD/RGfeaxXI+NrJ6SQz88p37VmrA=
Subject key identifier: 73:2F:D9:4E:17:74:E0:63:22:4F:E0:37:90:01:23:F8:42:B4:D2:1B
Certificate issuer: /CN=59a377bc67718312649ee75715a865f603fc69c3
Certificate serial: 018CC4247D1B5B2D3EB37484F1F79CEAA25A
Authority key identifier: 59:A3:77:BC:67:71:83:12:64:9E:E7:57:15:A8:65:F6:03:FC:69:C3
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/WaN3vGdxgxJknudXFahl9gP8acM.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/93/890ae6-4bd7-4853-b1c3-0f232ca17246/1/cy_ZThd04GMiT-A3kAEj-EK00hs.roa
Signing time: Mon 01 Jan 2024 08:29:34 +0000
ROA not before: Mon 01 Jan 2024 08:29:34 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 6079
IP address blocks: 62.68.93.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8c:c4:24:7d:1b:5b:2d:3e:b3:74:84:f1:f7:9c:ea:a2:5a
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=59a377bc67718312649ee75715a865f603fc69c3
Validity
Not Before: Jan 1 08:29:34 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=732fd94e1774e063224fe037900123f842b4d21b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:84:a2:66:03:c8:9a:35:89:80:20:a4:76:da:0e:
81:33:b4:6e:3f:ad:96:ec:ab:f7:66:01:ec:7a:11:
dd:ad:1e:19:62:63:d1:ff:70:78:f1:84:fa:d0:95:
37:ce:d2:78:e9:8e:00:67:bb:6f:c6:9f:88:a0:f9:
06:ae:eb:d2:38:e7:fc:02:e7:b0:57:c2:0c:57:b3:
e6:21:2f:bb:c6:92:5e:78:45:b3:e0:c7:6d:3b:ca:
d4:2f:96:a4:88:e6:4f:e5:45:56:ca:56:a0:d3:d5:
c6:2f:4b:e9:c0:54:cc:b9:19:8b:d6:89:eb:ca:4f:
02:13:b4:6e:11:1c:fd:72:7b:08:dd:6b:c8:7e:89:
b2:12:24:ed:e8:11:e0:e0:9c:85:3b:81:89:0e:08:
3c:e8:fb:2a:99:d7:03:f4:b2:da:3d:35:53:81:dd:
d9:00:2b:6a:40:d0:9f:d4:1d:5c:22:f5:c0:ea:f7:
6f:05:5d:7d:6f:98:1d:cb:eb:b4:9e:66:c3:84:94:
36:17:b7:c4:fa:1a:f0:4f:af:45:2f:50:9f:9d:2c:
91:27:d9:41:fe:9f:4f:2a:11:5b:d2:35:2b:30:06:
91:92:e1:b8:2c:28:31:c6:07:ab:43:71:35:f4:a2:
11:ae:9b:b5:bd:c3:95:e0:29:46:4e:7d:f9:e1:2f:
d4:8d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
73:2F:D9:4E:17:74:E0:63:22:4F:E0:37:90:01:23:F8:42:B4:D2:1B
X509v3 Authority Key Identifier:
keyid:59:A3:77:BC:67:71:83:12:64:9E:E7:57:15:A8:65:F6:03:FC:69:C3
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/WaN3vGdxgxJknudXFahl9gP8acM.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/93/890ae6-4bd7-4853-b1c3-0f232ca17246/1/cy_ZThd04GMiT-A3kAEj-EK00hs.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/93/890ae6-4bd7-4853-b1c3-0f232ca17246/1/WaN3vGdxgxJknudXFahl9gP8acM.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
62.68.93.0/24
Signature Algorithm: sha256WithRSAEncryption
72:34:1f:1d:86:a5:60:c4:2b:13:a2:ad:cb:b4:a6:81:7c:c8:
ad:19:c7:03:e0:0f:91:65:3b:9e:d7:5d:c9:2d:e7:d2:cc:7e:
ed:19:a0:fd:22:36:b0:0f:e8:52:7f:e0:54:2f:38:97:f2:95:
7a:02:78:dc:e7:c4:3c:33:0b:08:9a:59:dc:b0:5e:c2:da:6c:
a7:72:b1:ac:61:3b:82:34:d6:a4:0f:24:ad:df:20:0b:25:3f:
0f:db:87:09:07:9d:5f:24:c4:c2:47:83:02:b6:ee:bc:9d:8d:
e8:5f:c6:c0:9f:b4:8b:59:21:91:c1:9a:0f:a3:13:b3:26:12:
76:d6:96:63:be:5c:46:36:9c:49:28:0c:19:27:ef:f0:41:72:
ae:fe:92:bb:71:c5:1b:ce:ad:b1:06:7d:3f:9a:d7:44:14:e2:
0e:12:7e:85:13:70:f6:02:68:5e:f9:4c:bb:7d:e3:71:53:47:
22:1b:cf:5d:14:83:f8:50:52:9f:ba:ef:e3:bd:9c:20:f6:90:
87:e2:11:70:38:b4:6e:6a:a2:fb:db:5f:2c:5d:81:02:3b:4b:
88:c5:2b:89:48:a0:3e:62:23:49:b1:05:89:2b:5b:2c:97:97:
be:f8:f7:18:a3:95:1f:d7:52:97:af:5f:20:e5:33:21:0a:24:
83:e6:6b:2b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Feb 17 08:07:03 2025 by rpki-client