Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/2c/9f86f3-7465-43be-b72a-a79c759bdb7d/1/cALW_G_wAMPF-g4bNo4anrt667M.roa
File: cALW_G_wAMPF-g4bNo4anrt667M.roa (raw, json)
Hash identifier: Q0ieRSWI1GdW/8FINPPMVeKFqGiC1SY/EgPzbcn6JhI=
Subject key identifier: 70:02:D6:FC:6F:F0:00:C3:C5:FA:0E:1B:36:8E:1A:9E:BB:7A:EB:B3
Certificate issuer: /CN=273c2a39983bcd03551853447847c1e1861ec732
Certificate serial: 1535F538
Authority key identifier: 27:3C:2A:39:98:3B:CD:03:55:18:53:44:78:47:C1:E1:86:1E:C7:32
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/JzwqOZg7zQNVGFNEeEfB4YYexzI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/2c/9f86f3-7465-43be-b72a-a79c759bdb7d/1/cALW_G_wAMPF-g4bNo4anrt667M.roa
Signing time: Sat 01 Jan 2022 13:58:35 +0000
ROA not before: Sat 01 Jan 2022 13:58:35 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 48510
IP address blocks: 185.171.147.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 355857720 (0x1535f538)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=273c2a39983bcd03551853447847c1e1861ec732
Validity
Not Before: Jan 1 13:58:35 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=7002d6fc6ff000c3c5fa0e1b368e1a9ebb7aebb3
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d0:56:59:71:79:05:19:7e:7a:c1:eb:ba:7f:56:
3c:9f:13:ad:d2:ae:d0:4c:c8:c8:f0:39:f9:ab:1c:
3f:e8:f7:8d:33:4b:77:dd:9c:33:98:0f:05:dd:0a:
23:28:9c:e8:f0:0a:15:91:98:4e:53:e2:c1:1b:62:
76:ce:66:f4:6c:b2:28:1f:af:c3:1d:90:cb:f7:0b:
a7:77:a4:34:77:74:a7:80:47:6b:45:bf:f8:6b:48:
1b:3e:45:e6:e7:92:f7:07:29:bc:88:a6:76:6c:66:
b1:8e:24:3c:29:b1:b2:e3:43:d0:be:55:84:c0:ac:
b9:75:9e:01:f7:46:20:3a:f4:c4:23:df:87:3a:8c:
ce:3e:dd:05:7f:11:26:8a:dc:e9:54:68:81:b7:5d:
cc:a4:f4:c6:33:7b:34:47:6b:75:31:be:8f:32:6d:
ba:2d:46:24:46:01:fb:de:1e:79:6f:bc:a3:b0:bd:
80:90:50:a9:a5:fe:c6:3c:34:9d:e8:d4:cd:a2:b1:
52:a9:67:8d:2f:b9:e2:7e:fa:48:53:2f:1e:3f:5e:
be:71:59:50:bd:b2:c8:82:3c:6d:7c:0d:3a:91:8c:
bb:9c:0e:6b:fa:8d:ef:7d:b8:f0:56:04:eb:d6:fb:
63:98:c6:30:31:76:56:71:53:cc:1b:5e:80:d9:7b:
d5:27
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
70:02:D6:FC:6F:F0:00:C3:C5:FA:0E:1B:36:8E:1A:9E:BB:7A:EB:B3
X509v3 Authority Key Identifier:
keyid:27:3C:2A:39:98:3B:CD:03:55:18:53:44:78:47:C1:E1:86:1E:C7:32
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/JzwqOZg7zQNVGFNEeEfB4YYexzI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/2c/9f86f3-7465-43be-b72a-a79c759bdb7d/1/cALW_G_wAMPF-g4bNo4anrt667M.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/2c/9f86f3-7465-43be-b72a-a79c759bdb7d/1/JzwqOZg7zQNVGFNEeEfB4YYexzI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.171.147.0/24
Signature Algorithm: sha256WithRSAEncryption
6c:4a:3e:32:bf:53:d2:56:73:8f:8f:87:c6:3d:65:2b:0f:fb:
83:fb:a9:22:bb:e1:51:43:09:ea:ec:e7:cc:48:59:dd:62:2c:
ee:f3:b1:59:be:c9:b0:36:5e:93:3e:81:2a:3e:50:65:25:53:
90:4e:19:fd:78:2e:f2:9b:da:ab:13:c0:3f:03:0a:9d:9a:f0:
f5:3e:86:89:e8:a0:80:8a:cf:35:46:9e:ee:8f:0e:74:68:31:
7c:83:f6:84:17:52:c7:d9:3b:f5:3c:9e:a2:1d:87:e7:76:72:
e1:5f:47:2b:b1:5b:fc:1a:a6:20:81:51:0e:c2:b9:fc:95:ac:
c0:27:7f:48:69:b4:f5:cb:f8:1d:86:b6:7c:ae:f1:60:1c:ca:
87:3c:34:60:83:7b:1d:bb:95:51:c2:db:31:e2:1a:65:d7:63:
ed:6f:74:ea:b6:f5:d7:dc:9f:1c:f8:a3:56:56:8d:ff:fc:4e:
4f:91:c6:6e:2a:4f:4b:10:89:ee:f6:1e:15:7e:cd:26:21:0e:
24:b7:2b:6c:1c:52:0b:6b:a6:77:25:cd:14:93:90:4d:eb:21:
4e:0f:a7:4d:45:59:27:8e:09:f5:92:7f:16:2e:df:3d:46:13:
cf:f3:c9:a9:8f:ac:51:47:86:9b:6a:2f:eb:77:c1:19:5f:7a:
77:96:a5:59
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 19:00:37 2024 by rpki-client on console-ams.rpki-client.org