Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/32/153788-14b7-4551-9ade-6aea9057c800/1/upooLs-mDkOyiBT2fNGHj5cQ7E4.roa
File: upooLs-mDkOyiBT2fNGHj5cQ7E4.roa (raw, json)
Hash identifier: cglav+FWNX7UNTqPwwJsYgYuI7r/rTbr7vfv4F0chKo=
Subject key identifier: BA:9A:28:2E:CF:A6:0E:43:B2:88:14:F6:7C:D1:87:8F:97:10:EC:4E
Certificate issuer: /CN=aeb66ec5e8f2405f6f8d486e73fb82b8de0dee0f
Certificate serial: 019425216E3BC45441479067115FEC7B09E7
Authority key identifier: AE:B6:6E:C5:E8:F2:40:5F:6F:8D:48:6E:73:FB:82:B8:DE:0D:EE:0F
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/rrZuxejyQF9vjUhuc_uCuN4N7g8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/32/153788-14b7-4551-9ade-6aea9057c800/1/upooLs-mDkOyiBT2fNGHj5cQ7E4.roa
Signing time: Thu 02 Jan 2025 03:48:55 +0000
ROA not before: Thu 02 Jan 2025 03:48:55 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 399578
IP address blocks: 78.143.242.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:25:21:6e:3b:c4:54:41:47:90:67:11:5f:ec:7b:09:e7
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=aeb66ec5e8f2405f6f8d486e73fb82b8de0dee0f
Validity
Not Before: Jan 2 03:48:55 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=ba9a282ecfa60e43b28814f67cd1878f9710ec4e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a0:44:2a:81:1c:bc:66:b4:d9:5e:6f:8d:1c:3b:
28:d0:4e:fa:87:2a:fa:67:f6:16:a6:ba:55:1b:aa:
28:9d:0c:5b:a4:c2:68:de:1b:10:cf:e4:c5:f6:ca:
70:b1:2b:94:52:1e:7b:7f:71:2a:93:5c:92:be:e5:
f0:f8:bf:bf:78:46:d2:10:71:71:d6:66:ff:d3:21:
81:c4:99:e0:2b:0c:66:3f:ca:8b:cb:da:7f:3f:a3:
4a:a1:d2:6d:27:e3:7d:23:78:a0:c4:94:a1:26:97:
d9:75:05:a1:39:8a:e8:f9:09:ca:0f:7a:72:c3:65:
54:ca:80:a8:95:fd:5f:6d:20:c9:e5:07:4c:d0:1c:
15:cd:6a:32:64:09:4d:b4:20:c0:69:3a:11:62:93:
2f:2c:79:ff:87:13:65:09:a3:a9:27:ff:64:3e:07:
08:42:be:cc:be:30:26:0f:56:f6:55:c3:88:93:8d:
71:a8:3f:fb:97:3b:17:b6:42:62:76:41:09:a5:76:
49:f8:40:f6:aa:fb:65:9d:bb:3b:54:cf:bd:f9:d6:
23:f9:01:69:0a:3c:f2:f8:ac:78:6c:c4:65:a5:ef:
26:d4:d2:89:7d:73:bf:ef:53:c6:e6:2e:f3:ef:8f:
5f:24:2b:c1:4d:f1:e6:59:be:32:59:bd:91:4d:b4:
24:e7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
BA:9A:28:2E:CF:A6:0E:43:B2:88:14:F6:7C:D1:87:8F:97:10:EC:4E
X509v3 Authority Key Identifier:
keyid:AE:B6:6E:C5:E8:F2:40:5F:6F:8D:48:6E:73:FB:82:B8:DE:0D:EE:0F
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/rrZuxejyQF9vjUhuc_uCuN4N7g8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/32/153788-14b7-4551-9ade-6aea9057c800/1/upooLs-mDkOyiBT2fNGHj5cQ7E4.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/32/153788-14b7-4551-9ade-6aea9057c800/1/rrZuxejyQF9vjUhuc_uCuN4N7g8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
78.143.242.0/24
Signature Algorithm: sha256WithRSAEncryption
49:6c:3f:48:76:b1:17:7d:3e:9a:6c:0a:6b:4b:f0:8f:ad:be:
bf:9c:02:89:93:e5:5c:e8:92:49:c9:e5:25:7c:a5:0f:82:db:
e1:72:32:a0:90:b9:96:b8:ac:a6:14:d5:e6:a1:8c:82:9a:8a:
d2:51:ba:4d:82:e4:98:f0:64:22:dd:15:bc:31:38:4f:2f:7c:
64:1e:1a:8b:38:c9:e8:45:40:c4:3d:23:5c:94:0a:ae:c7:a6:
71:48:9a:ff:ce:dc:54:fb:f7:99:91:5f:59:7c:92:6a:21:87:
e7:98:c1:7f:32:91:57:6d:8b:57:a0:77:82:09:00:33:91:34:
54:ec:06:cc:8c:af:7c:aa:df:9c:c8:87:e1:9a:28:47:aa:37:
27:05:63:46:b6:c2:d9:3a:b4:de:46:d6:b8:6a:2d:a8:f8:36:
16:74:50:2b:99:1a:35:9e:e0:1d:dc:92:e5:ce:d3:a7:89:13:
88:19:8a:4e:cd:10:19:c3:7b:38:34:d7:ca:e4:32:59:fb:8c:
63:80:ad:bd:76:0e:36:f5:cf:ee:ee:e0:82:c7:c3:51:ca:5d:
ba:1b:11:34:7c:ef:25:45:0d:b1:ef:20:be:34:2a:c3:2c:e2:
f1:82:10:d5:f3:e7:57:5e:6e:d0:e0:58:d2:58:e6:6b:1e:9d:
50:17:83:23
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 25 08:12:08 2025 by rpki-client