Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/4f/c8585a-cdf7-4aa3-bc21-212acc4351ff/1/fleie-GXSaWqx7f-vmugkjqZDRc.roa
File: fleie-GXSaWqx7f-vmugkjqZDRc.roa (raw, json)
Hash identifier: /sQTlxWlihiXPSEnXwcQEmisZgo+vZC9vBk2kctuvnQ=
Subject key identifier: 7E:57:A2:7B:E1:97:49:A5:AA:C7:B7:FE:BE:6B:A0:92:3A:99:0D:17
Certificate issuer: /CN=1f31120fe225775eb53152d4920e9c573ff2b65e
Certificate serial: 019425FDC04015AE53C8D5E0D54CC3D73011
Authority key identifier: 1F:31:12:0F:E2:25:77:5E:B5:31:52:D4:92:0E:9C:57:3F:F2:B6:5E
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/HzESD-Ild161MVLUkg6cVz_ytl4.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/4f/c8585a-cdf7-4aa3-bc21-212acc4351ff/1/fleie-GXSaWqx7f-vmugkjqZDRc.roa
Signing time: Thu 02 Jan 2025 07:49:34 +0000
ROA not before: Thu 02 Jan 2025 07:49:34 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 198817
IP address blocks: 91.236.234.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:25:fd:c0:40:15:ae:53:c8:d5:e0:d5:4c:c3:d7:30:11
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=1f31120fe225775eb53152d4920e9c573ff2b65e
Validity
Not Before: Jan 2 07:49:34 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=7e57a27be19749a5aac7b7febe6ba0923a990d17
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c1:f0:97:d8:ad:bc:69:53:9a:ad:d1:09:ae:be:
47:d2:e2:92:31:b0:c7:1e:8d:b2:d8:39:f0:41:b1:
dc:03:fc:b3:1d:b7:bb:d4:44:18:8c:92:48:0a:68:
9f:d7:cb:14:73:bf:db:0f:c9:66:c4:f5:45:0f:2c:
7a:a5:72:a0:7c:4c:6f:ba:ae:26:f0:b4:73:04:b0:
8e:53:aa:de:7a:0c:a5:42:6f:99:88:9d:fc:86:37:
69:39:7d:09:76:d7:ea:f6:46:cd:1c:5e:4b:7e:36:
c9:3e:6d:56:7a:7d:a9:b0:31:0e:72:2d:d9:6c:cd:
73:6a:ad:de:20:85:ee:91:dd:64:7b:c9:01:f1:c3:
56:f5:be:8c:c6:c4:17:c2:f2:54:c4:0b:90:00:e7:
5d:17:d5:8d:c4:d8:bd:57:db:c3:07:37:8f:e2:42:
3f:ef:bf:72:53:39:5c:c7:98:95:97:e7:f7:4d:e5:
19:05:4d:50:c3:42:e6:88:09:78:52:62:9e:9d:0b:
e9:98:f6:42:4f:7c:ca:7e:d7:ba:1e:64:38:2a:61:
9b:44:1e:7c:96:8f:a8:00:0e:7f:a8:e9:f9:b1:ed:
e8:6e:04:f1:56:15:7e:5c:50:e9:51:91:4b:c9:6e:
8e:be:af:53:19:32:dd:b1:d6:f1:7e:e6:28:c2:84:
62:9d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
7E:57:A2:7B:E1:97:49:A5:AA:C7:B7:FE:BE:6B:A0:92:3A:99:0D:17
X509v3 Authority Key Identifier:
keyid:1F:31:12:0F:E2:25:77:5E:B5:31:52:D4:92:0E:9C:57:3F:F2:B6:5E
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/HzESD-Ild161MVLUkg6cVz_ytl4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/4f/c8585a-cdf7-4aa3-bc21-212acc4351ff/1/fleie-GXSaWqx7f-vmugkjqZDRc.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/4f/c8585a-cdf7-4aa3-bc21-212acc4351ff/1/HzESD-Ild161MVLUkg6cVz_ytl4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
91.236.234.0/24
Signature Algorithm: sha256WithRSAEncryption
48:3b:2c:a8:bc:6b:f7:d7:ff:48:45:ca:50:50:f8:78:18:8b:
90:19:62:bf:1a:4d:e3:ef:4d:7d:63:15:66:59:7c:cd:fd:be:
26:e4:bd:7f:f4:14:68:0a:d5:5e:5a:c4:02:86:f6:e2:3e:48:
ad:c8:84:ee:68:c0:42:17:d3:cc:ab:a4:13:a3:cb:aa:6f:ef:
e8:6d:69:5c:b0:00:2f:38:6b:af:bd:9a:08:e5:ec:35:c6:af:
bc:70:d1:ae:17:fe:a7:94:1e:1e:1a:b8:2c:92:c0:62:b9:ae:
53:6e:d5:c6:38:20:65:26:2e:b7:4d:8b:12:7c:56:66:05:c2:
7e:6f:72:d4:46:1e:74:f2:9a:34:c4:12:07:e8:8f:02:35:11:
99:d3:ba:be:30:d0:fa:ef:a8:e4:f5:69:87:59:eb:b9:8b:72:
76:2e:b5:17:da:d9:a5:ec:dd:2d:43:dc:20:c2:dd:e8:4e:1f:
66:ba:25:7d:95:0a:69:e0:e2:e5:63:74:3c:7d:fd:22:2e:b1:
fb:cf:a5:9a:00:49:23:81:a7:85:be:a1:90:c6:60:aa:27:ed:
95:eb:0e:c3:9e:22:82:b5:e8:6e:ae:74:51:e2:29:de:67:3b:
86:42:84:58:86:4b:a7:44:a4:55:de:0e:76:7b:b9:b4:16:3e:
6e:02:8a:63
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 25 11:20:33 2025 by rpki-client