Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/25/9bbe74-ac98-43ac-b18f-625406c2fb0e/1/SAwsPH-_lniG3IZQlvyc62Gm0lY.roa
File: SAwsPH-_lniG3IZQlvyc62Gm0lY.roa (raw, json)
Hash identifier: NPOD4JMRsYQ0mARo28NlWN7SNLu2bgkLFOE9ZjhUE6E=
Subject key identifier: 48:0C:2C:3C:7F:BF:96:78:86:DC:86:50:96:FC:9C:EB:61:A6:D2:56
Certificate issuer: /CN=f2f9500a84f2ce90c4214748acb3835d6c56d96c
Certificate serial: 08C015A4
Authority key identifier: F2:F9:50:0A:84:F2:CE:90:C4:21:47:48:AC:B3:83:5D:6C:56:D9:6C
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/8vlQCoTyzpDEIUdIrLODXWxW2Ww.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/25/9bbe74-ac98-43ac-b18f-625406c2fb0e/1/SAwsPH-_lniG3IZQlvyc62Gm0lY.roa
Signing time: Tue 11 Jan 2022 08:26:33 +0000
ROA not before: Tue 11 Jan 2022 08:26:33 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 200845
IP address blocks: 185.165.4.0/22 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 146806180 (0x8c015a4)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=f2f9500a84f2ce90c4214748acb3835d6c56d96c
Validity
Not Before: Jan 11 08:26:33 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=480c2c3c7fbf967886dc865096fc9ceb61a6d256
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e9:b8:4c:db:36:11:13:85:f6:c1:16:b9:6f:8e:
82:8b:db:29:3c:5a:a5:31:f7:20:a1:0d:8f:dc:7b:
c8:d8:c8:bb:14:b1:89:ae:30:44:38:36:c1:a0:08:
9b:c0:fd:b2:85:1a:1d:a3:ec:3c:b2:59:f9:bf:e6:
57:82:0f:14:72:ef:8a:94:37:bd:fa:9d:b6:d3:96:
7b:f5:82:11:25:cc:8f:aa:70:b4:4d:0b:9e:eb:77:
3b:0c:6f:49:dd:1c:e4:59:c1:0f:fd:90:e6:b2:4d:
20:17:e7:72:00:7d:7e:47:25:dc:b4:26:c2:57:8d:
aa:87:0a:54:bc:05:98:52:7b:c2:98:eb:06:8b:1b:
65:8f:81:49:28:23:0d:f7:43:71:50:c0:04:e6:ff:
75:17:12:eb:99:52:b7:53:94:57:c4:30:24:6d:ac:
f3:6c:29:90:67:6c:46:f8:d3:60:0c:8c:6a:74:b3:
f2:d4:f2:9c:be:e5:bd:30:7f:89:f6:18:9a:e0:de:
3e:0a:25:0b:0b:f4:1c:f1:fe:84:27:b7:40:7f:b7:
03:cb:a9:3e:31:27:6c:01:5b:d1:3a:f0:dd:da:af:
95:51:38:3d:3e:7f:18:ff:29:79:1e:17:5d:ec:ea:
bd:f9:2b:1f:69:f6:69:6d:64:04:e4:24:8b:86:97:
c8:c9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
48:0C:2C:3C:7F:BF:96:78:86:DC:86:50:96:FC:9C:EB:61:A6:D2:56
X509v3 Authority Key Identifier:
keyid:F2:F9:50:0A:84:F2:CE:90:C4:21:47:48:AC:B3:83:5D:6C:56:D9:6C
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/8vlQCoTyzpDEIUdIrLODXWxW2Ww.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/25/9bbe74-ac98-43ac-b18f-625406c2fb0e/1/SAwsPH-_lniG3IZQlvyc62Gm0lY.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/25/9bbe74-ac98-43ac-b18f-625406c2fb0e/1/8vlQCoTyzpDEIUdIrLODXWxW2Ww.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.165.4.0/22
Signature Algorithm: sha256WithRSAEncryption
25:ec:7f:24:fb:40:c8:59:79:94:80:90:90:5c:fd:48:88:bb:
3e:54:8e:3f:13:7d:96:27:d6:9d:4c:4b:d5:31:68:f0:c4:0d:
06:d0:ef:14:af:b3:60:38:a5:25:af:cd:4b:99:6c:6b:f4:34:
e3:c0:68:02:c8:6d:38:99:38:e0:db:62:bc:fb:8a:08:7f:b5:
7c:a6:36:2a:c4:9d:39:28:dc:0c:24:9d:d0:12:a1:e6:68:fa:
7a:aa:19:06:2d:d3:f5:5a:03:b4:5d:c8:64:34:e6:a0:b3:d4:
f2:09:90:c8:c6:0e:8a:2f:e3:76:c7:e4:48:39:e2:f8:35:ed:
45:f4:ec:e7:55:7c:ff:19:38:36:11:2d:ac:eb:39:7e:1a:aa:
d8:e2:af:85:03:72:54:dc:0e:4d:a0:cc:cd:8c:85:42:e7:61:
9f:5b:e2:8a:b4:4e:bd:70:1e:d8:8b:b3:50:42:ca:8e:95:04:
91:de:1b:74:f5:6c:a3:f2:e8:73:75:cb:d0:e9:76:e3:17:a8:
03:01:e1:6d:ee:ee:ff:12:13:91:23:25:8d:27:19:09:3e:7c:
22:bd:13:4b:db:bc:32:9f:3c:e2:a5:9d:17:c7:c5:6f:ea:4b:
96:ac:38:8c:3d:25:a9:51:e5:bc:97:ae:a2:63:e4:55:c7:47:
f4:56:5c:dc
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Feb 21 11:04:54 2025 by rpki-client