Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/8b/e0520d-9ba6-41a3-8f87-c53979d66ca5/1/DCzp0ATBLdYzO0DK2TVKxK6X0sE.roa
File: DCzp0ATBLdYzO0DK2TVKxK6X0sE.roa (raw, json)
Hash identifier: PvUdzKVZqQ+UCq5chqjsinM68wzAmFUjhTs9dVHkSY0=
Subject key identifier: 0C:2C:E9:D0:04:C1:2D:D6:33:3B:40:CA:D9:35:4A:C4:AE:97:D2:C1
Certificate issuer: /CN=d3b3da3ecb8a7d433de38338667b35e68df73f8c
Certificate serial: 018C9DDC2002523782AF73998263746FA800
Authority key identifier: D3:B3:DA:3E:CB:8A:7D:43:3D:E3:83:38:66:7B:35:E6:8D:F7:3F:8C
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/07PaPsuKfUM944M4Zns15o33P4w.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/8b/e0520d-9ba6-41a3-8f87-c53979d66ca5/1/DCzp0ATBLdYzO0DK2TVKxK6X0sE.roa
Signing time: Sun 24 Dec 2023 22:04:58 +0000
ROA not before: Sun 24 Dec 2023 22:04:58 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 2121
IP address blocks: 193.0.24.0/21 maxlen: 21
2001:67c:64::/48 maxlen: 48
2001:67c:64:ffff:0:18c:9ddb:7f63/128 maxlen: 128
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8c:9d:dc:20:02:52:37:82:af:73:99:82:63:74:6f:a8:00
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=d3b3da3ecb8a7d433de38338667b35e68df73f8c
Validity
Not Before: Dec 24 22:04:58 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=0c2ce9d004c12dd6333b40cad9354ac4ae97d2c1
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9e:2d:90:d6:a0:6f:95:d4:97:51:7e:40:3b:93:
4f:a8:c0:fd:56:4d:cd:9b:89:1d:b9:a8:f7:6a:26:
46:b4:38:bc:04:86:d1:b1:35:20:d3:aa:93:68:9c:
ad:39:6c:60:d4:8a:03:79:a3:73:5b:f3:9b:1f:db:
ee:67:3f:d1:21:4f:6a:51:ff:a9:26:80:71:40:9c:
3c:af:1c:c0:af:d3:4a:71:78:b1:e7:1e:fa:c5:24:
75:55:55:e4:1b:61:11:83:fb:c9:18:ac:e2:bd:32:
74:dd:a5:41:38:00:7f:1b:74:49:bf:94:af:89:14:
db:b9:94:ee:00:27:b9:d6:66:d5:ae:85:12:d2:42:
dd:5e:09:66:9d:c2:55:43:e8:38:6b:ad:dc:8e:fa:
f8:da:8b:9a:f1:21:30:72:9f:bb:5f:98:4a:e2:61:
ac:98:e9:3d:39:0e:f7:29:e6:31:1d:b8:9c:4f:d8:
6b:6e:61:da:f6:af:da:06:f1:dc:49:fc:55:04:ff:
5d:4f:ac:68:83:f8:55:1f:32:27:c7:a7:f6:ef:d1:
b7:73:bc:e2:86:b7:13:0e:2d:8a:fd:ed:db:1a:e5:
7a:fb:e7:c3:6f:9a:ca:31:94:67:fa:ae:db:a6:87:
42:b8:c9:35:7e:3f:bf:77:50:82:d8:65:59:27:cf:
f9:ef
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
0C:2C:E9:D0:04:C1:2D:D6:33:3B:40:CA:D9:35:4A:C4:AE:97:D2:C1
X509v3 Authority Key Identifier:
keyid:D3:B3:DA:3E:CB:8A:7D:43:3D:E3:83:38:66:7B:35:E6:8D:F7:3F:8C
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/07PaPsuKfUM944M4Zns15o33P4w.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/8b/e0520d-9ba6-41a3-8f87-c53979d66ca5/1/DCzp0ATBLdYzO0DK2TVKxK6X0sE.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/8b/e0520d-9ba6-41a3-8f87-c53979d66ca5/1/07PaPsuKfUM944M4Zns15o33P4w.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
193.0.24.0/21
IPv6:
2001:67c:64::/48
Signature Algorithm: sha256WithRSAEncryption
19:25:4f:12:a1:8f:f2:3c:6a:ec:19:a1:ec:72:9a:95:a5:4d:
fc:c0:ca:0c:06:e2:e8:4a:4d:fe:eb:63:8d:1b:74:86:59:eb:
0c:76:9b:e8:a6:bc:de:a2:f7:b7:99:f1:76:bb:8b:89:2d:06:
7c:af:a5:b0:2c:85:58:29:97:3e:f7:ec:42:12:ba:d6:90:a5:
dd:cd:cc:a1:20:ce:4a:a5:ad:e2:10:4f:e0:b2:1b:7c:4c:d2:
75:77:50:2f:03:8d:84:3a:a1:48:2e:8d:61:ca:a1:44:3a:46:
50:66:3b:8d:0e:bc:ab:dc:8a:96:0f:f0:c4:d5:48:68:d9:00:
d6:f4:5f:dd:f4:e0:de:e5:5a:ac:dd:a0:db:fe:f1:33:46:c3:
65:be:80:21:81:a6:30:1c:51:1a:16:d7:ff:09:c2:c9:a4:0c:
67:f7:84:a7:9a:f4:a8:38:36:3a:eb:0e:38:35:fa:62:29:51:
2c:6f:f2:45:e1:5a:64:08:a2:a3:ae:35:66:cd:c5:00:73:83:
4a:5d:f7:b3:5d:70:e5:d9:be:07:41:6d:a4:c0:25:06:0e:4c:
05:af:80:84:9f:8c:7d:51:7f:d1:d0:c6:a7:51:a6:f2:d7:65:
85:e9:9f:ba:09:89:0e:11:67:56:6d:18:ef:bb:50:1b:91:a4:
21:2f:23:a9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 7 22:42:19 2025 by rpki-client