Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c8/f60178-991a-4261-96a0-dd5c300be54e/1/UPa450RDK8_XOJoWMR3tB3wcJGU.roa
File: UPa450RDK8_XOJoWMR3tB3wcJGU.roa (raw, json)
Hash identifier: o3Hw8PkrOydB9Zoo6bwxyxADQJ90HmKStuai7E1E3LQ=
Subject key identifier: 50:F6:B8:E7:44:43:2B:CF:D7:38:9A:16:31:1D:ED:07:7C:1C:24:65
Certificate issuer: /CN=43039a68130f19631e1527946e1e127db1e8f9d9
Certificate serial: 018C1C4C6ED968C2F7E03F374AD501AB2C95
Authority key identifier: 43:03:9A:68:13:0F:19:63:1E:15:27:94:6E:1E:12:7D:B1:E8:F9:D9
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/QwOaaBMPGWMeFSeUbh4SfbHo-dk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c8/f60178-991a-4261-96a0-dd5c300be54e/1/UPa450RDK8_XOJoWMR3tB3wcJGU.roa
Signing time: Wed 29 Nov 2023 18:17:00 +0000
ROA not before: Wed 29 Nov 2023 18:17:00 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 2121
IP address blocks: 193.0.24.0/21 maxlen: 21
2001:67c:64::/96 maxlen: 128
2001:67c:64::/48 maxlen: 48
2001:67c:64:ffff:0:18b:caf2:ca7a/128 maxlen: 128
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8c:1c:4c:6e:d9:68:c2:f7:e0:3f:37:4a:d5:01:ab:2c:95
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=43039a68130f19631e1527946e1e127db1e8f9d9
Validity
Not Before: Nov 29 18:17:00 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=50f6b8e744432bcfd7389a16311ded077c1c2465
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:81:64:4c:9d:df:1f:3f:a8:f5:d2:6c:8d:73:50:
09:d8:c7:b1:e5:4d:cf:1a:17:a0:ce:f9:20:36:b4:
94:e7:2f:f4:c4:89:e8:79:90:0b:02:43:3e:f5:ab:
6e:c5:9d:a7:01:c6:01:29:3d:05:3a:1b:5c:5e:06:
4b:bb:b9:a3:39:f5:fe:40:b6:eb:48:fb:fc:3a:2e:
c8:7a:0f:06:37:49:cf:4d:cf:9e:32:82:c3:7a:b0:
e0:16:7a:ab:58:fa:65:d7:8b:51:54:f5:30:fe:d2:
62:cc:84:a2:54:e0:e8:8e:dd:24:cc:43:38:20:80:
ac:34:0b:19:6a:35:92:58:04:0b:72:94:10:0b:47:
37:26:d1:fb:59:5b:74:62:b4:1f:63:81:c0:52:31:
b3:2e:ad:3f:83:7c:b2:eb:f2:25:98:5c:19:a1:66:
b8:3a:bb:30:4f:9e:e0:48:a6:1b:e4:fc:d3:f5:ba:
ca:3a:f0:8e:be:7d:a3:a4:3f:14:21:19:b4:75:b8:
48:e3:64:9c:8e:ee:ac:5e:b9:e6:1d:c0:3b:af:f5:
b1:8c:14:f5:93:3e:17:2d:d4:c6:59:bc:77:4d:59:
52:65:35:24:f5:c8:a2:68:34:37:49:5d:55:0b:fe:
89:6a:a4:b3:93:13:81:c4:ab:14:0c:fb:74:be:ad:
93:23
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
50:F6:B8:E7:44:43:2B:CF:D7:38:9A:16:31:1D:ED:07:7C:1C:24:65
X509v3 Authority Key Identifier:
keyid:43:03:9A:68:13:0F:19:63:1E:15:27:94:6E:1E:12:7D:B1:E8:F9:D9
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/QwOaaBMPGWMeFSeUbh4SfbHo-dk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c8/f60178-991a-4261-96a0-dd5c300be54e/1/UPa450RDK8_XOJoWMR3tB3wcJGU.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c8/f60178-991a-4261-96a0-dd5c300be54e/1/QwOaaBMPGWMeFSeUbh4SfbHo-dk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
193.0.24.0/21
IPv6:
2001:67c:64::/48
Signature Algorithm: sha256WithRSAEncryption
c7:c7:12:c3:be:f5:5c:90:6a:4d:ab:89:b5:2f:48:bd:d0:10:
38:20:cc:b5:b7:d2:06:df:ba:ea:d1:dd:4b:33:7c:2f:e0:82:
8b:78:f8:90:e7:a7:75:b7:b6:d9:76:2d:41:6d:de:e7:09:ad:
65:94:0c:59:55:8c:3b:c8:86:04:43:bf:2a:82:66:9c:f2:8f:
14:26:95:ff:e6:d2:b5:92:e7:e6:14:2a:b4:46:24:b1:8e:4d:
a3:86:50:d0:80:3e:cb:eb:68:74:0d:56:d0:04:23:85:f9:15:
c3:81:f1:1a:74:66:31:4b:cf:8c:54:06:13:53:69:a8:8c:b6:
85:c8:81:19:fa:fe:f0:29:00:a6:83:52:cb:a9:fc:3e:97:41:
d5:af:20:67:9a:9e:d9:a3:08:66:d5:d9:bb:60:29:66:ad:1a:
21:01:48:50:2d:12:b5:1e:2d:ea:fe:4e:6f:81:a7:2d:93:c9:
c7:fd:94:96:4c:d2:15:77:38:44:78:18:87:e5:23:3f:de:0f:
bb:ad:5a:80:50:1e:aa:d3:c7:94:5b:50:af:4e:8a:04:80:cd:
bb:bc:80:b3:21:dd:76:3b:6a:15:5f:28:f5:64:f9:76:a3:c1:
cd:29:92:f4:cd:f5:14:c8:ac:7c:1d:01:87:a7:cf:3b:ae:81:
74:60:50:52
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue May 13 02:17:28 2025 by rpki-client