Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/2a/e26d9c-d851-4a69-95f9-1504ea53e255/1/CY-tvdBWBt7wOg3GB0icUZ8MPCA.roa
File: CY-tvdBWBt7wOg3GB0icUZ8MPCA.roa (raw, json)
Hash identifier: Ejbz7aRM11I5vJNNpK3p8qUEl2ngpQB+ME89yYTVcX4=
Subject key identifier: 09:8F:AD:BD:D0:56:06:DE:F0:3A:0D:C6:07:48:9C:51:9F:0C:3C:20
Certificate issuer: /CN=70ad353cc1a0d16d5e8e14a37575a6f3d60563f8
Certificate serial: 019424B38C4214585008BBA57D415DEA031F
Authority key identifier: 70:AD:35:3C:C1:A0:D1:6D:5E:8E:14:A3:75:75:A6:F3:D6:05:63:F8
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/cK01PMGg0W1ejhSjdXWm89YFY_g.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/2a/e26d9c-d851-4a69-95f9-1504ea53e255/1/CY-tvdBWBt7wOg3GB0icUZ8MPCA.roa
Signing time: Thu 02 Jan 2025 01:48:54 +0000
ROA not before: Thu 02 Jan 2025 01:48:54 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 51134
IP address blocks: 2a01:430:11::/48 maxlen: 48
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:24:b3:8c:42:14:58:50:08:bb:a5:7d:41:5d:ea:03:1f
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=70ad353cc1a0d16d5e8e14a37575a6f3d60563f8
Validity
Not Before: Jan 2 01:48:54 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=098fadbdd05606def03a0dc607489c519f0c3c20
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a7:11:e3:35:ea:b7:a2:cd:54:47:90:41:99:90:
23:ca:3e:3c:53:c5:d9:ba:d2:d0:ed:da:83:54:bb:
d6:40:c7:e6:cc:f4:35:85:ee:3d:0a:a5:ba:91:64:
21:c6:5a:7d:f8:f3:89:35:fd:39:8a:e4:f1:e9:e2:
0b:06:28:d3:96:cc:f9:99:e6:cb:a3:60:c7:bd:5b:
b6:0b:1e:e4:7a:09:8e:22:3b:e8:2d:1e:6d:fb:47:
13:7f:c8:e0:83:48:25:73:db:30:f6:f5:93:88:f2:
6c:cf:ab:d7:08:38:9f:89:79:fa:84:f6:8a:38:d5:
29:8b:f4:25:99:24:3f:4c:a8:7b:4a:71:ad:29:d5:
43:48:50:02:ed:ac:19:87:7a:60:06:d4:86:bc:d7:
ac:32:05:36:48:db:5b:b7:fe:13:ce:11:93:3c:cc:
cb:4e:45:c9:3b:9d:e8:fd:8a:37:f4:8e:ae:57:d9:
d7:f6:de:e4:bc:ed:83:ef:e7:26:03:ba:5f:25:82:
96:96:44:29:c4:b2:fe:6b:39:a8:cc:6d:b3:e6:84:
d9:7c:69:53:f6:80:4c:65:74:6c:f3:d1:b3:b2:ec:
e3:34:fa:50:32:27:fa:75:a0:02:e8:9c:4e:af:6f:
21:ef:09:53:9d:91:85:f8:5a:47:6f:0f:a4:c0:4f:
4c:2b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
09:8F:AD:BD:D0:56:06:DE:F0:3A:0D:C6:07:48:9C:51:9F:0C:3C:20
X509v3 Authority Key Identifier:
keyid:70:AD:35:3C:C1:A0:D1:6D:5E:8E:14:A3:75:75:A6:F3:D6:05:63:F8
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/cK01PMGg0W1ejhSjdXWm89YFY_g.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/2a/e26d9c-d851-4a69-95f9-1504ea53e255/1/CY-tvdBWBt7wOg3GB0icUZ8MPCA.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/2a/e26d9c-d851-4a69-95f9-1504ea53e255/1/cK01PMGg0W1ejhSjdXWm89YFY_g.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a01:430:11::/48
Signature Algorithm: sha256WithRSAEncryption
85:7e:b1:bd:ff:eb:ca:86:58:23:1c:fb:38:60:c4:5e:5e:89:
a6:c4:93:a9:33:d0:b9:22:b9:fe:ff:2b:c4:38:d4:78:3c:73:
c1:8b:8e:88:0c:62:50:70:64:47:d7:b0:aa:02:31:65:d7:4c:
1f:cc:08:0c:51:91:1c:5b:7a:0c:b3:e9:e5:0e:43:24:c6:5a:
31:f0:65:69:19:73:57:71:10:5d:f8:12:b0:67:46:ae:b1:5d:
9d:13:d5:42:8e:64:1a:a8:34:e8:50:63:d4:05:6a:1d:ab:b7:
80:5a:d1:a7:69:80:05:24:33:55:75:9b:6a:14:20:41:b9:b0:
7a:2b:b1:04:5a:23:b4:ba:b7:b7:31:e3:48:62:d4:90:85:bd:
c7:74:23:3b:ee:22:5f:2e:09:b2:1b:ae:81:98:7d:7b:6b:de:
98:06:9e:ed:4e:ad:60:31:09:52:55:50:41:63:42:ce:b8:77:
49:06:99:8f:29:e4:89:ad:94:bc:3d:24:7c:de:1a:c9:ea:c8:
27:59:2b:78:0f:b0:31:bc:d3:d1:ab:fc:fc:c3:61:67:7d:e1:
3b:fa:cc:de:23:9a:bd:f5:fc:02:0d:ae:09:3d:94:9a:eb:90:
65:82:1e:0b:46:dc:42:67:1b:33:5e:68:f3:e1:fb:c9:41:87:
60:a3:72:e9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 25 04:01:45 2025 by rpki-client