Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/86/6c0bf7-5f13-44a2-9989-8c9581d96d8f/1/Heko2DWDjrxkxdn8949oUOUqX-4.roa
File: Heko2DWDjrxkxdn8949oUOUqX-4.roa (raw, json)
Hash identifier: 4xVFnO8Ek4LbQ7Ltl7lH8hidKHBXi3EOQ3y19f7S+dA=
Subject key identifier: 1D:E9:28:D8:35:83:8E:BC:64:C5:D9:FC:F7:8F:68:50:E5:2A:5F:EE
Certificate issuer: /CN=5885e884c2fc7a75d12dd1dea49ce2349c47067e
Certificate serial: 01941FFAAFCC998E1B850162A0980CFEA961
Authority key identifier: 58:85:E8:84:C2:FC:7A:75:D1:2D:D1:DE:A4:9C:E2:34:9C:47:06:7E
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/WIXohML8enXRLdHepJziNJxHBn4.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/86/6c0bf7-5f13-44a2-9989-8c9581d96d8f/1/Heko2DWDjrxkxdn8949oUOUqX-4.roa
Signing time: Wed 01 Jan 2025 03:48:30 +0000
ROA not before: Wed 01 Jan 2025 03:48:30 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 210226
IP address blocks: 37.230.128.0/23 maxlen: 23
128.0.65.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:1f:fa:af:cc:99:8e:1b:85:01:62:a0:98:0c:fe:a9:61
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=5885e884c2fc7a75d12dd1dea49ce2349c47067e
Validity
Not Before: Jan 1 03:48:30 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=1de928d835838ebc64c5d9fcf78f6850e52a5fee
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ba:1b:62:da:0e:d4:24:bf:34:34:07:43:c3:dc:
f2:ea:dd:53:67:28:c4:f6:3e:bf:e0:62:d1:1c:6b:
5f:8f:1d:6d:93:d6:2a:54:b1:d7:f8:01:c0:52:d2:
9a:e6:e5:68:22:56:7a:5d:c2:9c:cf:15:71:f0:24:
1e:5e:29:4a:9f:77:f4:93:32:60:f7:dc:99:fa:44:
f4:58:c9:a4:52:6c:94:62:e0:48:2e:33:8e:8a:31:
a7:08:f8:9c:f0:55:fd:fd:be:a3:57:c4:34:17:c2:
ec:59:92:a3:2d:fa:b0:2f:58:90:58:6d:15:16:4e:
4f:27:51:b6:8b:cb:89:be:16:50:44:de:4f:04:81:
17:62:4f:d6:9a:c4:9e:59:c8:74:64:3f:da:83:e1:
31:71:c3:7e:00:ee:66:f6:e2:3b:70:68:f9:4c:f8:
ba:56:df:2d:be:1c:e9:9c:be:67:33:93:24:ff:b8:
b5:1c:6b:7e:8d:98:36:f1:d1:7e:79:8f:2a:1d:4b:
bc:19:c1:37:ca:4d:08:1a:01:06:d0:fd:30:2d:0d:
13:3a:e3:8c:a6:9f:30:da:f2:59:14:cb:7c:4c:f0:
39:da:6e:2e:ce:14:0b:56:1a:17:d8:26:10:f7:b4:
5e:02:ca:2e:81:57:a6:b4:55:e3:e2:e1:0e:5b:1a:
72:27
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
1D:E9:28:D8:35:83:8E:BC:64:C5:D9:FC:F7:8F:68:50:E5:2A:5F:EE
X509v3 Authority Key Identifier:
keyid:58:85:E8:84:C2:FC:7A:75:D1:2D:D1:DE:A4:9C:E2:34:9C:47:06:7E
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/WIXohML8enXRLdHepJziNJxHBn4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/86/6c0bf7-5f13-44a2-9989-8c9581d96d8f/1/Heko2DWDjrxkxdn8949oUOUqX-4.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/86/6c0bf7-5f13-44a2-9989-8c9581d96d8f/1/WIXohML8enXRLdHepJziNJxHBn4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
37.230.128.0/23
128.0.65.0/24
Signature Algorithm: sha256WithRSAEncryption
68:c3:cb:68:d4:74:f2:9b:02:9b:86:70:52:23:fe:e5:b5:7e:
9c:a3:5c:a9:7e:8e:e7:5a:d4:cb:3b:02:fb:8a:54:43:a5:72:
be:00:5d:52:24:bf:76:e3:7a:03:e1:dc:ca:53:34:ab:86:31:
6b:0e:25:94:0c:89:3f:0f:ce:c6:00:5f:16:1e:f8:15:a7:03:
0b:35:5d:f5:0c:73:f6:45:1d:1b:21:61:c3:79:f6:8b:c0:d2:
9f:7d:6b:6b:2c:ec:f5:05:43:77:c7:94:94:5f:e5:dc:08:c3:
14:56:b6:50:d3:7f:1d:4c:6d:14:1d:d8:1d:23:67:65:3c:71:
d1:68:5a:a8:c2:0f:3c:b0:2e:32:3b:dd:71:b5:46:d5:ed:58:
da:44:2f:9a:7c:4a:75:05:03:82:09:ac:f9:a5:cd:ba:74:28:
eb:a4:ba:5f:4b:60:3e:10:9f:e1:8a:02:e2:6a:c0:6c:e1:ff:
8c:a1:56:95:d0:89:af:1a:15:08:c3:3a:53:ba:44:ee:60:f1:
4f:b3:51:89:4d:03:04:13:b4:48:f9:19:7e:4b:20:f8:d0:83:
76:f9:83:e6:c4:3e:fd:73:30:1e:0e:32:b7:e2:9e:de:3f:ec:
71:a4:96:1a:ad:63:c0:2d:ce:8e:ad:b4:34:09:14:5e:18:ef:
e0:8f:80:8e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 5 15:31:24 2025 by rpki-client