Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/1c/127dfe-dce1-416b-8bd6-e7f458897576/1/pAmgcDKOQwUfIaCwxXcYRd05C3A.roa
File: pAmgcDKOQwUfIaCwxXcYRd05C3A.roa (raw, json)
Hash identifier: UdaGUF/6lKMERNh2dzHz8uf+3ZB4FmFTqwYozfQ4ksg=
Subject key identifier: A4:09:A0:70:32:8E:43:05:1F:21:A0:B0:C5:77:18:45:DD:39:0B:70
Certificate issuer: /CN=14c6a90bd967d0e6d8a3660673d54e5d058af96c
Certificate serial: 0930B138
Authority key identifier: 14:C6:A9:0B:D9:67:D0:E6:D8:A3:66:06:73:D5:4E:5D:05:8A:F9:6C
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/FMapC9ln0ObYo2YGc9VOXQWK-Ww.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/1c/127dfe-dce1-416b-8bd6-e7f458897576/1/pAmgcDKOQwUfIaCwxXcYRd05C3A.roa
Signing time: Thu 07 Apr 2022 09:28:11 +0000
ROA not before: Thu 07 Apr 2022 09:28:11 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 202072
IP address blocks: 141.98.98.0/24 maxlen: 24
185.45.44.0/23 maxlen: 23
185.45.46.0/24 maxlen: 24
185.45.47.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 154186040 (0x930b138)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=14c6a90bd967d0e6d8a3660673d54e5d058af96c
Validity
Not Before: Apr 7 09:28:11 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=a409a070328e43051f21a0b0c5771845dd390b70
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9a:85:d5:c4:a2:16:59:3b:84:f0:e8:96:ab:d3:
5b:96:3e:5a:21:76:ba:00:1a:be:4e:24:14:0a:57:
1c:ac:36:84:a2:cc:b5:e3:8a:72:99:cd:39:bb:b1:
89:53:a8:34:3b:6b:e8:37:d9:ad:1a:db:fa:62:71:
e9:03:c6:66:eb:8d:f7:23:a0:10:ef:8e:2f:f3:19:
18:fb:3a:34:82:a1:61:79:ab:f3:71:50:c9:9e:ff:
7e:06:db:60:cb:c0:50:58:2c:0d:49:a2:43:9c:2b:
e3:39:9c:cb:7e:1b:d4:dc:6a:64:48:c6:f9:99:11:
d2:2f:c3:f0:92:81:39:11:57:e0:ad:35:02:7d:3d:
04:55:ac:f0:12:06:45:4d:bd:dd:a5:c9:6c:3f:35:
dd:9d:19:52:8e:75:3d:a6:8e:6a:49:8f:79:a9:17:
62:0a:41:c7:84:62:67:5f:1a:3f:63:4d:9e:90:d8:
4a:fb:41:cd:5f:05:f6:98:0a:6a:72:87:dd:c0:25:
3a:e7:2c:5d:ed:b8:9f:58:35:48:93:9b:28:14:7a:
18:6d:4c:ae:3a:e8:c3:d4:19:75:09:02:04:56:6b:
e1:06:b2:f3:66:b4:ea:22:2f:66:5b:84:d7:c9:60:
a5:5c:e2:6b:24:71:41:96:f1:cf:03:f2:4f:5a:61:
b4:f1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A4:09:A0:70:32:8E:43:05:1F:21:A0:B0:C5:77:18:45:DD:39:0B:70
X509v3 Authority Key Identifier:
keyid:14:C6:A9:0B:D9:67:D0:E6:D8:A3:66:06:73:D5:4E:5D:05:8A:F9:6C
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/FMapC9ln0ObYo2YGc9VOXQWK-Ww.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/1c/127dfe-dce1-416b-8bd6-e7f458897576/1/pAmgcDKOQwUfIaCwxXcYRd05C3A.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/1c/127dfe-dce1-416b-8bd6-e7f458897576/1/FMapC9ln0ObYo2YGc9VOXQWK-Ww.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
141.98.98.0/24
185.45.44.0/22
Signature Algorithm: sha256WithRSAEncryption
9d:f7:15:d4:8e:35:e0:2b:e5:77:20:6e:53:a1:0b:dd:6c:20:
41:8c:36:1d:0b:0f:f9:c9:6e:d3:6e:7f:50:cb:32:b6:ab:c2:
ed:2e:60:72:56:15:b2:9e:e5:5d:40:61:de:16:4f:1e:89:1e:
a9:30:4a:53:70:73:74:77:2f:35:c1:7d:47:58:f9:2f:8c:db:
4b:81:00:47:bf:08:8b:38:ff:2c:54:77:7c:0c:5f:3b:c8:42:
98:0b:aa:ca:7a:6e:a8:af:d2:8b:fc:1a:f6:00:6f:72:60:44:
f0:df:6a:0f:d3:ea:e4:65:da:4a:97:58:ac:b3:8e:61:01:a9:
7e:4d:db:65:72:6b:d4:80:ad:a9:2a:5b:ff:1d:c0:47:b9:94:
8c:e6:e5:19:4e:3c:14:13:46:fb:8e:51:50:be:96:03:7f:5a:
0a:b3:d1:94:6c:9a:2e:78:9e:a9:58:47:d7:86:3d:76:5e:04:
52:5d:db:54:5f:a7:53:bb:75:b3:b1:3b:55:5f:e0:a8:81:7c:
91:7f:ef:ad:1e:3a:16:ac:12:1c:95:f3:ec:ea:fc:94:d6:0c:
20:06:cf:a2:59:67:85:a4:ae:88:49:34:f8:e8:ac:1f:ac:fd:
54:7e:f7:23:cd:50:ff:29:30:f5:d1:32:3f:83:d9:57:60:15:
31:ba:18:fd
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 13 20:41:38 2025 by rpki-client