Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/9d/1bc0cb-dfa4-4151-a61b-335a7e4384b1/1/CyjhjoDiSo7WFimizlr7VkadJR8.roa
File: CyjhjoDiSo7WFimizlr7VkadJR8.roa (raw, json)
Hash identifier: cM6TG/2qfvLGo5XP6sM8MTNGlbdx/5vkQ91bz6yRUQw=
Subject key identifier: 0B:28:E1:8E:80:E2:4A:8E:D6:16:29:A2:CE:5A:FB:56:46:9D:25:1F
Certificate issuer: /CN=5ad0c41fde99651b132906ff0602b47b5607a5be
Certificate serial: 019427B55AA7257829D86ACAB887F0620FA8
Authority key identifier: 5A:D0:C4:1F:DE:99:65:1B:13:29:06:FF:06:02:B4:7B:56:07:A5:BE
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/WtDEH96ZZRsTKQb_BgK0e1YHpb4.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/9d/1bc0cb-dfa4-4151-a61b-335a7e4384b1/1/CyjhjoDiSo7WFimizlr7VkadJR8.roa
Signing time: Thu 02 Jan 2025 15:49:44 +0000
ROA not before: Thu 02 Jan 2025 15:49:44 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 199919
IP address blocks: 45.153.96.0/22 maxlen: 22
45.153.96.0/24 maxlen: 24
45.153.97.0/24 maxlen: 24
45.153.98.0/24 maxlen: 24
45.153.99.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:27:b5:5a:a7:25:78:29:d8:6a:ca:b8:87:f0:62:0f:a8
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=5ad0c41fde99651b132906ff0602b47b5607a5be
Validity
Not Before: Jan 2 15:49:44 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=0b28e18e80e24a8ed61629a2ce5afb56469d251f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b5:81:be:d7:57:42:86:0d:2a:43:a8:11:c6:07:
85:b2:37:2b:1d:6b:89:fc:42:cf:04:55:15:f1:f6:
cd:0c:85:a2:73:e7:47:54:6b:9c:33:15:67:f2:68:
35:e2:de:45:77:cc:0e:67:39:04:0d:4d:5e:a4:40:
55:ef:4f:b2:22:71:0d:d8:f3:cb:b0:c6:a2:bb:4b:
b1:56:40:a4:54:da:76:99:0e:a4:8c:ba:a0:47:57:
f6:a4:24:a0:31:c3:f7:11:d0:90:43:15:b1:c0:b4:
c5:b4:b7:e0:38:fc:b9:3a:3c:6b:87:98:cf:54:cd:
9f:82:74:a6:dd:3a:3e:4e:24:0d:ee:8e:ee:32:e1:
7f:5e:ec:63:fd:bb:5f:a7:e5:da:53:e8:0c:56:af:
61:da:79:c8:60:d6:85:b0:1e:93:29:52:d4:9e:34:
d3:d6:01:67:2f:db:ed:2a:9b:20:8c:12:65:27:e0:
32:8c:d8:4c:45:af:4c:11:38:d3:f8:a6:c0:05:6a:
80:11:f6:34:2f:2a:85:77:b3:c6:b2:3b:93:2a:95:
ad:4d:c8:35:52:4f:8a:ed:73:0a:0e:f5:35:92:ca:
9c:67:04:c0:4b:cf:c0:d1:f7:5c:72:22:16:cb:53:
3a:aa:d9:65:2b:4a:b4:ce:b6:bb:41:af:7d:e1:65:
ab:ef
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
0B:28:E1:8E:80:E2:4A:8E:D6:16:29:A2:CE:5A:FB:56:46:9D:25:1F
X509v3 Authority Key Identifier:
keyid:5A:D0:C4:1F:DE:99:65:1B:13:29:06:FF:06:02:B4:7B:56:07:A5:BE
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/WtDEH96ZZRsTKQb_BgK0e1YHpb4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/9d/1bc0cb-dfa4-4151-a61b-335a7e4384b1/1/CyjhjoDiSo7WFimizlr7VkadJR8.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/9d/1bc0cb-dfa4-4151-a61b-335a7e4384b1/1/WtDEH96ZZRsTKQb_BgK0e1YHpb4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
45.153.96.0/22
Signature Algorithm: sha256WithRSAEncryption
a3:5b:53:3d:31:24:fa:93:07:af:13:a6:6e:ea:75:91:c9:fc:
4d:6c:09:2e:6c:84:ff:18:81:32:f2:eb:03:cc:06:bf:b0:c1:
bc:73:28:65:ad:12:e7:43:78:e2:67:d0:5f:0d:9f:65:f2:af:
3d:9f:93:c2:6a:7c:e4:46:e3:5a:d8:c1:95:75:ae:65:29:32:
08:ea:91:8f:c2:ec:fe:33:d3:c7:65:88:f4:38:7c:cd:ec:5e:
7d:b8:ff:74:18:7d:f1:c0:72:5d:12:6d:11:83:a4:75:bd:c5:
54:73:11:6c:f9:f2:0f:58:de:67:86:8a:e0:c7:c0:14:aa:6e:
c4:34:59:23:25:6e:65:2f:5e:58:c4:ef:01:78:0a:0a:b2:6f:
15:7d:73:e3:e2:3f:6b:8a:12:b7:c1:27:79:e8:8d:2a:e6:69:
89:2d:e2:8d:05:9e:c2:ea:d0:5e:b3:5e:5a:65:96:a6:98:0c:
50:6a:83:83:65:3e:7f:08:e5:a0:da:7a:28:1e:75:d8:dd:8c:
15:8f:e7:f0:71:c3:7e:9c:e1:b1:20:66:48:dc:8b:ea:56:3d:
71:54:24:67:45:13:84:27:32:83:95:e7:59:ec:1c:d2:57:ec:
83:a1:9d:ed:25:50:19:79:ad:04:69:bd:b9:ef:c9:67:49:56:
f6:c1:01:de
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Feb 21 12:47:11 2025 by rpki-client