Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/cpncj-A7LZNgwkWN-hJvx6LQA3g.roa
File: cpncj-A7LZNgwkWN-hJvx6LQA3g.roa (raw, json)
Hash identifier: Y8PNu+wKyDyMxbW9gyXFXzAwRrixR6OS9lGBZBGaMe0=
Subject key identifier: 72:99:DC:8F:E0:3B:2D:93:60:C2:45:8D:FA:12:6F:C7:A2:D0:03:78
Certificate issuer: /CN=72047be15b275902dcf617dc3d0e16dc1f308022
Certificate serial: 018A318514167D0B460A05A00748F6ADE689
Authority key identifier: 72:04:7B:E1:5B:27:59:02:DC:F6:17:DC:3D:0E:16:DC:1F:30:80:22
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/cgR74VsnWQLc9hfcPQ4W3B8wgCI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/cpncj-A7LZNgwkWN-hJvx6LQA3g.roa
Signing time: Sat 26 Aug 2023 11:05:19 +0000
ROA not before: Sat 26 Aug 2023 11:05:19 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 2121
IP address blocks: 193.0.24.0/21 maxlen: 21
2001:67c:64:ffff:0:18a:3184:3490/128 maxlen: 128
2001:67c:64::/48 maxlen: 48
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8a:31:85:14:16:7d:0b:46:0a:05:a0:07:48:f6:ad:e6:89
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=72047be15b275902dcf617dc3d0e16dc1f308022
Validity
Not Before: Aug 26 11:05:19 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=7299dc8fe03b2d9360c2458dfa126fc7a2d00378
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:99:6f:1a:a8:ec:a6:0d:5f:cf:b4:ba:62:54:56:
3d:82:7b:4e:fd:19:e3:0d:d7:14:77:49:52:24:aa:
05:e4:43:ea:a9:20:f0:d6:53:ad:54:9f:a5:55:f6:
3f:e1:d0:1f:f6:26:f2:17:ae:61:a1:cd:5e:c0:38:
fe:ee:51:37:a6:8e:fd:e0:00:3b:49:54:fd:e1:ed:
67:b5:e5:dd:a7:5a:10:95:40:f2:20:af:58:f8:64:
00:33:3e:f8:f3:c3:f9:60:37:ca:01:bd:d8:ce:ab:
30:a3:a9:56:13:13:6d:2b:fa:45:8e:bb:ed:3e:d3:
50:40:ae:ba:7e:95:29:ba:2e:d3:5d:d1:52:4d:be:
e5:5c:82:d9:ec:ce:fc:e9:57:ac:ea:43:e2:7d:0d:
57:05:3d:cc:7c:5f:66:d7:7b:c2:c1:37:51:3f:f4:
d8:41:88:68:c5:df:bb:0e:a0:6f:35:13:71:e7:f7:
3b:14:66:9c:6f:3a:54:f9:f2:65:94:45:f6:9b:b1:
37:4d:7c:a6:75:d9:81:8c:35:63:8b:91:5a:bf:5c:
ed:9a:84:ba:6c:8b:06:ad:57:c7:12:0b:7f:46:bf:
48:d0:40:0e:e0:91:b5:e9:64:d6:15:b8:61:a8:8a:
e8:fc:38:2e:09:8d:61:23:70:39:44:54:ad:b1:e4:
42:17
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
72:99:DC:8F:E0:3B:2D:93:60:C2:45:8D:FA:12:6F:C7:A2:D0:03:78
X509v3 Authority Key Identifier:
keyid:72:04:7B:E1:5B:27:59:02:DC:F6:17:DC:3D:0E:16:DC:1F:30:80:22
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/cgR74VsnWQLc9hfcPQ4W3B8wgCI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/cpncj-A7LZNgwkWN-hJvx6LQA3g.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/cgR74VsnWQLc9hfcPQ4W3B8wgCI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
193.0.24.0/21
IPv6:
2001:67c:64::/48
Signature Algorithm: sha256WithRSAEncryption
45:7f:24:80:56:6f:cd:19:da:b9:7a:53:53:09:42:d9:eb:7b:
51:cf:67:90:e8:eb:a9:23:82:20:47:35:0a:11:ba:ba:76:bd:
b0:68:0c:a3:de:d9:19:98:5b:50:28:2a:a2:56:eb:b5:35:d4:
be:b9:6e:42:bf:92:c8:73:bb:b1:30:31:d0:a0:b1:54:f6:d0:
21:74:50:70:65:60:b3:12:46:5b:6b:5b:af:e9:80:4e:95:60:
ea:94:31:78:27:bb:3a:56:98:8f:1b:8c:c1:ee:1c:9b:e7:ae:
1f:d8:19:05:8a:8f:5e:bc:6d:d1:81:56:5b:3a:33:f8:91:f5:
3b:bf:cf:c9:6a:c4:eb:8c:ca:a2:fc:04:a5:ef:a3:eb:a4:3b:
57:61:c7:14:d2:e4:bd:0b:3f:9f:af:15:fc:5c:a4:1b:42:f3:
f1:3c:3c:29:d4:8a:49:b2:9a:d8:30:8d:40:0f:b7:df:5f:91:
0c:a1:28:1e:6c:de:3e:e9:3b:76:d2:92:2c:dc:04:a3:c9:c9:
f1:c9:09:08:b4:aa:3c:1e:18:03:7b:7e:63:fd:fb:b8:44:04:
96:f2:05:7a:75:b6:94:49:35:f2:78:53:96:10:e9:45:68:ee:
ef:02:6f:e5:1a:6c:b1:e0:ee:6e:fb:4f:22:13:92:fc:63:78:
97:33:b0:f6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun May 4 03:58:16 2025 by rpki-client