Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/8b/e0520d-9ba6-41a3-8f87-c53979d66ca5/1/DuZL-CysU_g4TpGZz7QPuPmV2Zg.roa
File: DuZL-CysU_g4TpGZz7QPuPmV2Zg.roa (raw, json)
Hash identifier: rbiXxwBCbFuj/oVdxsNRp4zXefNwkznJY/zizuWuc10=
Subject key identifier: 0E:E6:4B:F8:2C:AC:53:F8:38:4E:91:99:CF:B4:0F:B8:F9:95:D9:98
Certificate issuer: /CN=d3b3da3ecb8a7d433de38338667b35e68df73f8c
Certificate serial: 018DC6DF9DE0B7DFF6B542E9BDEEF3CA2D5E
Authority key identifier: D3:B3:DA:3E:CB:8A:7D:43:3D:E3:83:38:66:7B:35:E6:8D:F7:3F:8C
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/07PaPsuKfUM944M4Zns15o33P4w.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/8b/e0520d-9ba6-41a3-8f87-c53979d66ca5/1/DuZL-CysU_g4TpGZz7QPuPmV2Zg.roa
Signing time: Tue 20 Feb 2024 14:16:00 +0000
ROA not before: Tue 20 Feb 2024 14:16:00 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 2121
IP address blocks: 193.0.24.0/21 maxlen: 21
2001:67c:64::/48 maxlen: 48
2001:67c:64:ffff:0:18d:4013:c01e/128 maxlen: 128
2001:67c:64:ffff:0:18d:c109:b478/128 maxlen: 128
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8d:c6:df:9d:e0:b7:df:f6:b5:42:e9:bd:ee:f3:ca:2d:5e
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=d3b3da3ecb8a7d433de38338667b35e68df73f8c
Validity
Not Before: Feb 20 14:16:00 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=0ee64bf82cac53f8384e9199cfb40fb8f995d998
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a3:d9:a0:6a:2f:0e:3b:c7:72:26:e7:9a:79:a2:
14:b7:2e:e2:b3:1b:40:da:a2:bd:aa:d9:8b:6e:41:
72:0e:ff:cb:7b:b9:06:b0:db:f8:f3:75:ee:fd:3e:
d6:5e:64:32:87:d2:ee:18:ff:34:10:09:ac:27:59:
2e:2e:d6:3a:6a:7e:fd:c2:65:dd:c0:c6:e8:cf:77:
38:f9:5a:f0:dc:dd:92:17:2c:c8:b7:30:3c:d7:b1:
11:30:7c:9a:f6:46:08:ff:55:ed:d5:79:f2:65:0d:
ca:45:c7:94:09:76:35:f3:a9:3b:6c:6d:78:f7:6e:
a8:be:73:e3:9a:e0:b2:64:37:2b:66:ac:dd:47:a6:
88:b1:fe:21:62:7f:9a:ce:9e:3a:e3:c7:36:eb:63:
6c:33:b4:23:7b:f4:45:3f:01:a4:f9:9a:8e:4b:76:
55:27:4b:0f:b8:0a:3c:36:cd:03:a7:bd:00:f9:25:
45:7b:b9:3e:b3:06:a8:a4:38:18:56:81:c2:06:f1:
93:2f:77:38:84:ea:4d:ae:a7:d2:4a:f5:be:af:be:
54:d0:9e:ba:1b:45:01:f1:cb:06:fe:1f:f5:f8:76:
e7:91:70:6e:da:c5:9e:c8:89:d6:94:bf:79:62:b8:
04:a9:e9:e3:cc:55:d8:7a:86:fc:8b:9d:5e:cb:98:
dc:11
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
0E:E6:4B:F8:2C:AC:53:F8:38:4E:91:99:CF:B4:0F:B8:F9:95:D9:98
X509v3 Authority Key Identifier:
keyid:D3:B3:DA:3E:CB:8A:7D:43:3D:E3:83:38:66:7B:35:E6:8D:F7:3F:8C
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/07PaPsuKfUM944M4Zns15o33P4w.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/8b/e0520d-9ba6-41a3-8f87-c53979d66ca5/1/DuZL-CysU_g4TpGZz7QPuPmV2Zg.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/8b/e0520d-9ba6-41a3-8f87-c53979d66ca5/1/07PaPsuKfUM944M4Zns15o33P4w.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
193.0.24.0/21
IPv6:
2001:67c:64::/48
Signature Algorithm: sha256WithRSAEncryption
22:95:f5:3d:f7:33:26:d4:a6:f5:d9:80:e7:fa:ca:29:10:d9:
b0:57:a6:c1:6f:03:18:6a:1e:04:0f:ce:a5:50:c9:b8:71:7a:
c5:ea:25:de:f0:a5:e2:39:9b:b8:5d:fb:00:19:4d:7d:dc:b5:
f7:55:0c:e9:e2:65:76:80:41:b0:57:54:94:4a:ee:bd:b5:7c:
1f:72:c6:89:b9:31:fe:ae:53:9e:64:e4:36:84:66:42:f2:72:
2a:e4:8b:13:59:81:6f:a5:90:0d:67:57:2f:f7:73:bd:50:52:
c5:63:2d:2f:4a:1a:c4:be:ef:ed:c6:6a:f0:6f:b6:58:71:3c:
c8:0d:97:ee:10:e6:1b:f8:be:89:f9:d5:9a:21:cc:d2:00:ef:
c4:da:d8:1e:6a:a8:01:e1:1e:7c:aa:16:3b:5b:d1:ce:5d:46:
cc:f0:40:d0:17:39:9e:48:47:42:0a:79:23:7e:78:3c:0e:99:
4b:e1:83:f3:55:6f:fa:e2:05:d1:bd:51:04:d7:dc:42:10:9f:
06:82:7c:45:22:08:7c:ae:b2:7a:0d:25:8c:5f:0c:cf:1d:5b:
ae:e9:d2:0b:dc:eb:7b:cb:df:65:14:8d:cb:e0:fc:20:1f:62:
4d:2d:8b:8a:e4:38:df:92:a8:66:28:25:c3:4c:44:d3:0b:8c:
6b:37:20:1a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 7 22:22:30 2025 by rpki-client