Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/chnxCnPX_A2KQI64Y6Lw8DE6ZHI.roa
File: chnxCnPX_A2KQI64Y6Lw8DE6ZHI.roa (raw, json)
Hash identifier: dDhscOpTZ7PJQTOvxTliFW7H+AKsvyQADsoEm1itf/8=
Subject key identifier: 72:19:F1:0A:73:D7:FC:0D:8A:40:8E:B8:63:A2:F0:F0:31:3A:64:72
Certificate issuer: /CN=72047be15b275902dcf617dc3d0e16dc1f308022
Certificate serial: 0188B4DFC33D9897153B498F49B74280F4D1
Authority key identifier: 72:04:7B:E1:5B:27:59:02:DC:F6:17:DC:3D:0E:16:DC:1F:30:80:22
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/cgR74VsnWQLc9hfcPQ4W3B8wgCI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/chnxCnPX_A2KQI64Y6Lw8DE6ZHI.roa
Signing time: Tue 13 Jun 2023 13:09:03 +0000
ROA not before: Tue 13 Jun 2023 13:09:03 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 2121
IP address blocks: 193.0.24.0/21 maxlen: 21
2001:67c:64:ffff:0:186:d20f:1e28/128 maxlen: 128
2001:67c:64:ffff:0:186:a1c7:a442/128 maxlen: 128
2001:67c:64:ffff:0:186:92f9:8437/128 maxlen: 128
2001:67c:64:ffff:0:186:59e5:727c/128 maxlen: 128
2001:67c:64:ffff:0:188:5fe2:b396/128 maxlen: 128
2001:67c:64:ffff:0:186:6f5a:adbb/128 maxlen: 128
2001:67c:64:ffff:0:186:7ecd:cc90/128 maxlen: 128
2001:67c:64:ffff:0:187:4695:a68a/128 maxlen: 128
2001:67c:64:ffff:0:186:6e7e:de02/128 maxlen: 128
2001:67c:64:ffff:0:186:9e58:8c82/128 maxlen: 128
2001:67c:64:ffff:0:188:7858:a003/128 maxlen: 128
2001:67c:64:ffff:0:186:cfe9:cd16/128 maxlen: 128
2001:67c:64:ffff:0:187:fa9a:b088/128 maxlen: 128
2001:67c:64::/48 maxlen: 48
2001:67c:64:ffff:0:186:c678:c9dc/128 maxlen: 128
2001:67c:64:ffff:0:187:b2b8:a7dd/128 maxlen: 128
2001:67c:64:ffff:0:186:620c:ed81/128 maxlen: 128
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:88:b4:df:c3:3d:98:97:15:3b:49:8f:49:b7:42:80:f4:d1
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=72047be15b275902dcf617dc3d0e16dc1f308022
Validity
Not Before: Jun 13 13:09:03 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=7219f10a73d7fc0d8a408eb863a2f0f0313a6472
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:83:ac:5f:6c:50:ca:41:7f:db:61:90:38:01:a7:
90:7a:e5:e7:83:af:95:59:fd:0a:df:bc:7c:db:c5:
e0:5a:da:f3:8a:ef:eb:42:19:16:5c:99:10:43:4d:
c8:43:b1:3c:f9:ad:3c:06:ea:ca:45:a1:b2:5c:c6:
b2:5c:05:aa:c3:f2:f5:64:c9:67:08:8a:71:43:d1:
9e:17:b2:12:3c:af:e1:e6:ca:6b:f6:e5:ef:d4:f9:
82:a9:7a:b1:c1:a5:6a:51:82:f4:dc:8e:4d:41:e8:
76:ed:ea:16:1c:3c:56:0d:db:66:be:93:ca:5e:6e:
85:9b:55:4f:9a:2f:2c:6f:38:04:67:aa:62:2f:83:
0c:f4:a5:48:b6:c1:46:98:2c:d3:0a:76:e8:16:fd:
e4:97:40:1d:1a:54:3b:e7:95:d2:05:86:43:a8:d8:
3c:cd:83:61:61:5c:8f:e0:14:99:fb:7f:df:ae:8b:
1d:d8:d4:13:46:ea:2d:f5:98:01:a1:b1:9e:ae:56:
46:8e:59:4b:cb:d2:05:2e:82:d9:cd:75:ee:ec:67:
ba:75:29:ad:40:65:d8:4e:3b:ea:bc:99:f2:44:e9:
4a:f0:01:7f:e6:e4:3d:1e:29:cf:c9:f5:c1:8b:17:
57:a5:a4:d5:9d:cc:17:2e:0f:ab:c6:6b:0c:d8:68:
9a:ad
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
72:19:F1:0A:73:D7:FC:0D:8A:40:8E:B8:63:A2:F0:F0:31:3A:64:72
X509v3 Authority Key Identifier:
keyid:72:04:7B:E1:5B:27:59:02:DC:F6:17:DC:3D:0E:16:DC:1F:30:80:22
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/cgR74VsnWQLc9hfcPQ4W3B8wgCI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/chnxCnPX_A2KQI64Y6Lw8DE6ZHI.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/cgR74VsnWQLc9hfcPQ4W3B8wgCI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
193.0.24.0/21
IPv6:
2001:67c:64::/48
Signature Algorithm: sha256WithRSAEncryption
3c:9c:a4:2a:a8:81:4a:f4:6d:bf:79:c1:02:b3:00:11:94:b0:
fd:06:1c:4d:56:0e:61:42:d0:fb:a8:19:b1:17:7a:b8:44:12:
00:68:0b:36:e3:47:41:8f:1d:70:95:90:2e:0b:23:c0:14:51:
c0:00:0e:59:3a:b3:1c:8d:8c:d6:65:4b:49:50:6d:ee:b4:d2:
1e:82:78:57:16:f2:58:dd:da:52:ef:29:81:dd:b5:f5:98:b4:
2f:c9:9b:3a:37:34:16:43:29:96:db:f9:91:84:e5:da:0d:5d:
63:eb:98:24:cb:14:06:fb:e4:74:48:2f:6b:61:0c:70:0a:9e:
6d:be:89:c8:0b:79:6a:6f:45:52:7b:1e:de:da:a5:ba:8e:f2:
c4:bf:56:19:98:9f:fc:52:7e:0a:f8:55:16:e2:a7:79:f5:8e:
26:b7:c7:fe:7f:fd:f6:7d:72:cf:4a:98:5d:ef:09:3e:72:63:
91:39:83:94:c1:d4:b5:66:7c:8f:a7:8b:2f:de:41:92:ea:2a:
f6:ef:34:d0:ab:e8:e9:68:5c:ba:77:c7:c3:a2:3a:71:7d:d6:
86:e0:4a:ab:04:f4:ea:81:16:ba:93:56:8c:2f:95:cc:34:50:
bc:05:32:2f:72:39:29:b7:e1:1c:af:ed:ac:73:c2:bd:5d:77:
0f:12:2b:a3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat May 3 07:46:55 2025 by rpki-client