Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/57/4641f6-87c0-4d17-a58a-6163564d9704/1/Fos4k-aSLdEYWmZhXdlcR6bCWys.roa
File: Fos4k-aSLdEYWmZhXdlcR6bCWys.roa (raw, json)
Hash identifier: HS3y4vkBAjpU848sF3XG+sUdhXmb1HlulJYZWUnSiHQ=
Subject key identifier: 16:8B:38:93:E6:92:2D:D1:18:5A:66:61:5D:D9:5C:47:A6:C2:5B:2B
Certificate issuer: /CN=0e51516767d9a8508c6e14d58deeffbfab8080dd
Certificate serial: 0195A3CD8402FD6797EDB1608E22F115F043
Authority key identifier: 0E:51:51:67:67:D9:A8:50:8C:6E:14:D5:8D:EE:FF:BF:AB:80:80:DD
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/DlFRZ2fZqFCMbhTVje7_v6uAgN0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/57/4641f6-87c0-4d17-a58a-6163564d9704/1/Fos4k-aSLdEYWmZhXdlcR6bCWys.roa
Signing time: Mon 17 Mar 2025 11:11:49 +0000
ROA not before: Mon 17 Mar 2025 11:11:49 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 38930
IP address blocks: 91.224.122.0/23 maxlen: 24
91.224.122.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:95:a3:cd:84:02:fd:67:97:ed:b1:60:8e:22:f1:15:f0:43
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=0e51516767d9a8508c6e14d58deeffbfab8080dd
Validity
Not Before: Mar 17 11:11:49 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=168b3893e6922dd1185a66615dd95c47a6c25b2b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:86:b3:ba:e4:aa:fb:79:65:3a:81:0f:d1:8d:7c:
b9:0e:4f:52:51:e0:1e:73:29:ce:80:bb:7c:e7:87:
40:6c:a1:1b:65:ff:1d:9f:be:30:1d:47:92:8f:f1:
e2:be:ae:4f:f1:48:a3:d8:d0:9d:a7:ad:0e:e3:dc:
d5:79:e0:0d:17:91:1e:08:6d:9f:a2:72:b1:29:2c:
a2:9c:fb:c5:e2:08:5e:cf:fb:fd:c0:44:7b:5c:b1:
7f:5c:14:45:c6:9b:ae:e7:c5:2c:05:b4:7c:99:cd:
09:83:f8:bd:99:e9:cb:f2:d0:ed:51:46:32:1b:26:
14:33:52:3b:62:dd:29:f5:ef:8e:db:cd:9b:65:7a:
24:e2:f9:d1:90:89:17:65:f8:d2:a7:e9:82:e3:5e:
a7:f6:c8:73:87:8a:d3:a1:0d:9f:a0:48:52:6e:59:
2e:2e:5a:9c:38:21:25:29:26:b4:0b:ac:5c:64:5b:
83:23:fc:0f:10:ee:b2:57:af:28:77:9f:73:56:53:
c6:fe:14:6a:89:1c:b2:84:60:31:fc:e6:5b:36:8a:
82:b6:43:91:4f:bc:d2:4e:65:f2:97:10:f6:ae:d1:
0e:ba:53:14:37:0d:61:fa:75:ee:8c:92:34:49:4c:
93:6c:69:e9:e0:cc:2b:c6:30:96:76:58:f5:21:fb:
f9:3b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
16:8B:38:93:E6:92:2D:D1:18:5A:66:61:5D:D9:5C:47:A6:C2:5B:2B
X509v3 Authority Key Identifier:
keyid:0E:51:51:67:67:D9:A8:50:8C:6E:14:D5:8D:EE:FF:BF:AB:80:80:DD
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/DlFRZ2fZqFCMbhTVje7_v6uAgN0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/57/4641f6-87c0-4d17-a58a-6163564d9704/1/Fos4k-aSLdEYWmZhXdlcR6bCWys.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/57/4641f6-87c0-4d17-a58a-6163564d9704/1/DlFRZ2fZqFCMbhTVje7_v6uAgN0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
91.224.122.0/23
Signature Algorithm: sha256WithRSAEncryption
aa:b5:7d:c3:51:bc:a1:49:61:11:e9:4a:4a:42:3d:cd:0c:53:
b6:d7:f5:c0:78:8e:77:7f:c0:6e:60:1f:6e:fe:4a:9b:64:eb:
bd:4a:19:7e:f8:a0:8c:7b:2a:b7:ad:3c:71:8c:a7:19:ae:f4:
56:a6:1b:6c:ae:0f:4f:ff:21:d8:4e:a5:ba:01:ff:80:6c:7c:
b8:f0:ff:f5:91:75:a1:e5:d0:7b:9c:69:a6:f4:5f:02:7e:7b:
13:ac:ab:30:37:3b:56:e8:2e:66:c6:64:10:c8:4d:4c:5f:50:
b6:f8:47:25:ba:97:11:44:df:be:61:34:6c:2d:12:0e:5b:b4:
31:82:45:aa:58:28:e0:13:b4:62:7a:02:1e:bb:c8:3d:38:52:
28:43:fd:d3:75:6d:c9:a4:75:88:d4:0c:dd:7d:00:e8:de:2c:
c4:20:14:ba:83:db:55:cb:51:ca:d3:27:68:11:4c:ed:66:1c:
b3:6d:c0:e4:72:63:3a:fe:9c:e0:82:9c:54:43:91:17:82:f3:
fa:36:ef:b7:8d:26:e4:1b:80:3a:76:ff:d6:58:97:48:e8:58:
27:15:13:e7:f4:49:18:2c:f8:b0:c9:a2:69:77:52:66:05:01:
8f:6b:06:1a:c0:15:52:71:fc:9a:8a:7a:2e:1d:34:fb:92:a0:
a8:2d:5d:b9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Apr 8 00:03:27 2025 by rpki-client