Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/78/283e8f-bda2-49dc-8afe-af137ccb2b69/1/HeTNJZjhVHC3QazbToD7IxfPGhg.roa
File: HeTNJZjhVHC3QazbToD7IxfPGhg.roa (raw, json)
Hash identifier: k/lPKk3dyIcZTARgL9fxQcpWqaVNc6/eODt+UcBvC5M=
Subject key identifier: 1D:E4:CD:25:98:E1:54:70:B7:41:AC:DB:4E:80:FB:23:17:CF:1A:18
Certificate issuer: /CN=b5c398c07325c40e7d76d2396a1be85c42fdc2c8
Certificate serial: 01942521826CE332D54CF26A08862822F765
Authority key identifier: B5:C3:98:C0:73:25:C4:0E:7D:76:D2:39:6A:1B:E8:5C:42:FD:C2:C8
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/tcOYwHMlxA59dtI5ahvoXEL9wsg.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/78/283e8f-bda2-49dc-8afe-af137ccb2b69/1/HeTNJZjhVHC3QazbToD7IxfPGhg.roa
Signing time: Thu 02 Jan 2025 03:49:00 +0000
ROA not before: Thu 02 Jan 2025 03:49:00 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 51499
IP address blocks: 46.30.248.0/21 maxlen: 24
185.233.248.0/22 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:25:21:82:6c:e3:32:d5:4c:f2:6a:08:86:28:22:f7:65
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=b5c398c07325c40e7d76d2396a1be85c42fdc2c8
Validity
Not Before: Jan 2 03:49:00 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=1de4cd2598e15470b741acdb4e80fb2317cf1a18
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:98:0d:b1:9c:27:01:08:dc:7c:fd:d4:62:4f:77:
f0:c5:9f:49:9a:39:22:6b:92:e7:db:2f:a9:b8:a0:
53:8c:b2:52:1a:1f:be:12:b7:70:ed:9c:41:a0:7a:
f1:db:32:47:ef:00:58:60:cf:a4:f9:0e:9a:57:0a:
f9:1b:5b:b5:b1:a9:d1:c3:b3:b2:bd:95:31:ba:e2:
b9:4f:70:f9:d8:18:68:f5:db:c5:9f:0f:78:35:db:
84:1d:59:41:e3:d0:cb:f5:38:0e:74:dc:02:73:3a:
ba:51:f9:65:57:84:5d:48:a0:b7:24:86:7f:c8:13:
8a:59:3a:49:4b:8d:70:f6:85:53:21:43:d8:8f:8d:
91:f3:2d:72:1a:d3:da:1a:2b:d8:e3:52:5b:75:17:
ff:3d:d9:b5:66:63:24:8d:61:f1:b2:57:66:d5:90:
52:b5:c7:5f:36:6c:17:58:3a:50:43:e6:ab:75:34:
37:cf:57:04:73:ee:13:0f:07:1d:05:ae:6e:c4:48:
43:5e:a2:79:61:ce:17:ba:61:ea:0f:fa:c4:db:ce:
d6:98:01:4b:7b:a8:fc:08:e8:22:8a:76:89:b9:0e:
83:fd:03:bf:66:79:d2:7c:e9:19:29:10:f8:48:ea:
fc:10:8f:93:50:7e:ca:ca:a8:12:15:be:c1:8c:fa:
50:6d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
1D:E4:CD:25:98:E1:54:70:B7:41:AC:DB:4E:80:FB:23:17:CF:1A:18
X509v3 Authority Key Identifier:
keyid:B5:C3:98:C0:73:25:C4:0E:7D:76:D2:39:6A:1B:E8:5C:42:FD:C2:C8
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/tcOYwHMlxA59dtI5ahvoXEL9wsg.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/78/283e8f-bda2-49dc-8afe-af137ccb2b69/1/HeTNJZjhVHC3QazbToD7IxfPGhg.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/78/283e8f-bda2-49dc-8afe-af137ccb2b69/1/tcOYwHMlxA59dtI5ahvoXEL9wsg.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
46.30.248.0/21
185.233.248.0/22
Signature Algorithm: sha256WithRSAEncryption
73:a4:4e:f5:d6:aa:50:c7:e3:53:15:a2:1c:04:07:29:ea:a4:
94:32:7a:50:d8:f1:db:3e:eb:9e:57:b9:63:52:d7:1e:32:6a:
4e:3b:34:ce:b5:34:8f:6e:94:27:7f:ab:ea:00:78:2f:67:7c:
b3:56:59:94:69:bc:1a:c1:5c:2e:39:63:99:4f:e8:94:24:35:
f4:66:2b:49:2b:b4:28:d1:f7:89:a6:1f:91:ff:d6:53:37:c7:
8a:3d:08:e1:4a:47:f6:08:fd:ce:84:0a:91:41:c8:4a:75:72:
d1:0c:da:a1:90:27:ea:ad:62:bd:38:a1:83:31:8b:4f:4d:91:
92:5d:5b:44:c7:0b:97:f2:60:db:86:22:65:dc:ce:d3:77:2d:
56:be:64:56:e1:26:06:ad:57:70:8e:23:be:88:98:77:d8:68:
8d:e5:12:fd:a6:a6:b2:03:a0:e8:ee:0c:6c:1a:c2:c8:f5:d9:
0d:d7:a4:26:2e:15:8a:8f:de:9b:77:8f:2b:86:1e:e9:fe:72:
5e:6f:e3:7a:7b:79:f8:f0:31:ad:8b:8c:47:8b:7d:cc:8d:01:
9b:6d:16:7b:dd:20:33:f6:61:c2:de:46:ad:69:cc:8a:3f:04:
e4:a2:0e:7a:4d:53:51:1b:65:ca:9e:12:cc:f3:66:1d:d5:81:
e9:51:fd:86
-----BEGIN CERTIFICATE-----
MIIFAzCCA+ugAwIBAgISAZQlIYJs4zLVTPJqCIYoIvdlMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGI1YzM5OGMwNzMyNWM0MGU3ZDc2ZDIzOTZhMWJlODVjNDJm
ZGMyYzgwHhcNMjUwMTAyMDM0OTAwWhcNMjYwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EygxZGU0Y2QyNTk4ZTE1NDcwYjc0MWFjZGI0ZTgwZmIyMzE3Y2YxYTE4MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAmA2xnCcBCNx8/dRiT3fwxZ9Jmjki
a5Ln2y+puKBTjLJSGh++Erdw7ZxBoHrx2zJH7wBYYM+k+Q6aVwr5G1u1sanRw7Oy
vZUxuuK5T3D52Bho9dvFnw94NduEHVlB49DL9TgOdNwCczq6UfllV4RdSKC3JIZ/
yBOKWTpJS41w9oVTIUPYj42R8y1yGtPaGivY41JbdRf/Pdm1ZmMkjWHxsldm1ZBS
tcdfNmwXWDpQQ+ardTQ3z1cEc+4TDwcdBa5uxEhDXqJ5Yc4XumHqD/rE287WmAFL
e6j8COgiinaJuQ6D/QO/ZnnSfOkZKRD4SOr8EI+TUH7KyqgSFb7BjPpQbQIDAQAB
o4ICDzCCAgswHQYDVR0OBBYEFB3kzSWY4VRwt0Gs206A+yMXzxoYMB8GA1UdIwQY
MBaAFLXDmMBzJcQOfXbSOWob6FxC/cLIMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvdGNPWXdITWx4QTU5ZHRJNWFodm9YRUw5d3NnLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC83OC8yODNlOGYtYmRhMi00OWRjLThhZmUt
YWYxMzdjY2IyYjY5LzEvSGVUTkpaamhWSEMzUWF6YlRvRDdJeGZQR2hnLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC83OC8yODNlOGYtYmRhMi00OWRjLThhZmUtYWYxMzdjY2IyYjY5
LzEvdGNPWXdITWx4QTU5ZHRJNWFodm9YRUw5d3NnLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCUGCCsGAQUFBwEHAQH/BBYwFDASBAIAATAMAwQDLh74AwQC
uen4MA0GCSqGSIb3DQEBCwUAA4IBAQBzpE711qpQx+NTFaIcBAcp6qSUMnpQ2PHb
PuueV7ljUtceMmpOOzTOtTSPbpQnf6vqAHgvZ3yzVlmUabwawVwuOWOZT+iUJDX0
ZitJK7Qo0feJph+R/9ZTN8eKPQjhSkf2CP3OhAqRQchKdXLRDNqhkCfqrWK9OKGD
MYtPTZGSXVtExwuX8mDbhiJl3M7Tdy1WvmRW4SYGrVdwjiO+iJh32GiN5RL9pqay
A6Do7gxsGsLI9dkN16QmLhWKj96bd48rhh7p/nJeb+N6e3n48DGti4xHi33MjQGb
bRZ73SAz9mHC3katacyKPwTkog56TVNRG2XKnhLM82Yd1YHpUf2G
-----END CERTIFICATE-----
Generated at Fri Apr 25 04:05:39 2025 by rpki-client