Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/72/310130-6cad-4c2b-9dd1-40e21ea5701e/1/cpok-pqLH-TUVS72RFCePcblhlk.roa
File: cpok-pqLH-TUVS72RFCePcblhlk.roa (raw, json)
Hash identifier: 4MR2lvhn0pWzaX/EgOXwGXYE3A1w7R6akmbgzmj/BKc=
Subject key identifier: 72:9A:24:FA:9A:8B:1F:E4:D4:55:2E:F6:44:50:9E:3D:C6:E5:86:59
Certificate issuer: /CN=1623c2f37d243494853594fd297c658f7692cbbd
Certificate serial: 01856C7813B10D4CF57C13C8080A9E01F329
Authority key identifier: 16:23:C2:F3:7D:24:34:94:85:35:94:FD:29:7C:65:8F:76:92:CB:BD
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/FiPC830kNJSFNZT9KXxlj3aSy70.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/72/310130-6cad-4c2b-9dd1-40e21ea5701e/1/cpok-pqLH-TUVS72RFCePcblhlk.roa
Signing time: Sun 01 Jan 2023 08:34:46 +0000
ROA not before: Sun 01 Jan 2023 08:34:46 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 30742
IP address blocks: 192.145.112.0/22 maxlen: 22
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:85:6c:78:13:b1:0d:4c:f5:7c:13:c8:08:0a:9e:01:f3:29
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=1623c2f37d243494853594fd297c658f7692cbbd
Validity
Not Before: Jan 1 08:34:46 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=729a24fa9a8b1fe4d4552ef644509e3dc6e58659
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:81:99:d6:b6:41:c0:95:d2:46:05:0a:9c:34:a8:
c9:a5:4d:dc:04:28:40:2f:0b:3b:ff:9a:b9:e8:ee:
9f:b7:bd:7d:ba:49:23:49:e7:1d:c9:9a:7a:b1:7f:
c3:b7:47:df:b6:a4:70:d4:c3:f7:0a:99:27:c2:43:
52:ac:aa:3e:27:c1:45:e6:ed:93:f0:27:fa:d6:8d:
ff:d1:7d:8d:46:08:3c:94:d6:41:18:07:e9:c7:c0:
b8:1d:c8:5a:a5:3c:f9:4a:2f:0c:97:96:df:12:bb:
a9:bd:7b:f0:00:8f:08:17:c8:37:75:dc:71:33:95:
50:90:05:22:8f:11:7d:e2:2c:20:2d:dd:2f:e3:bf:
1b:04:2a:44:36:bf:7d:2d:38:e4:24:5a:64:44:fd:
b8:0d:70:81:4d:56:ed:f3:31:d6:e6:81:44:d1:36:
04:ca:8f:f4:fa:7f:1e:42:da:45:3b:99:b8:bf:32:
d0:46:9a:82:bd:5b:33:fb:7e:ee:21:6c:58:0a:49:
46:cc:73:80:a2:8c:f6:b0:0e:b6:7c:a7:4b:c0:a9:
ba:c1:89:8b:1b:f4:81:c4:40:34:1a:1a:3e:ce:79:
95:b1:28:e1:77:5c:8c:5a:6e:c0:ce:90:94:41:47:
11:3c:9e:c8:8d:00:e0:14:71:70:0c:f6:96:3f:87:
22:3f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
72:9A:24:FA:9A:8B:1F:E4:D4:55:2E:F6:44:50:9E:3D:C6:E5:86:59
X509v3 Authority Key Identifier:
keyid:16:23:C2:F3:7D:24:34:94:85:35:94:FD:29:7C:65:8F:76:92:CB:BD
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/FiPC830kNJSFNZT9KXxlj3aSy70.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/72/310130-6cad-4c2b-9dd1-40e21ea5701e/1/cpok-pqLH-TUVS72RFCePcblhlk.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/72/310130-6cad-4c2b-9dd1-40e21ea5701e/1/FiPC830kNJSFNZT9KXxlj3aSy70.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
192.145.112.0/22
Signature Algorithm: sha256WithRSAEncryption
1a:68:78:99:81:86:24:b8:6c:c9:70:11:ad:d5:eb:90:95:fb:
31:96:f8:aa:7b:99:bd:aa:31:ae:97:34:46:81:4d:03:63:94:
03:5e:f1:d5:09:d9:55:85:ce:b8:6b:f4:ac:75:cc:75:35:1d:
06:5c:6c:76:a3:dc:52:c9:d4:6e:61:75:fe:c4:c9:c3:98:9e:
98:10:da:d1:d0:23:c7:ba:ec:5e:3a:66:8b:aa:5b:cb:ae:1e:
1e:f9:80:25:e6:5e:a0:66:d0:c8:d0:52:96:91:d8:11:e9:ef:
a8:69:67:a8:5f:a2:c7:05:2d:2d:82:87:0c:13:fe:f6:f2:8c:
3b:fd:5f:a6:ca:dc:fc:00:f3:ec:6e:44:8c:1d:99:9d:ef:c9:
70:69:04:1f:68:f8:14:d0:a2:b8:56:36:76:76:cf:ce:59:a5:
37:83:04:85:28:d4:ff:c3:70:a8:80:f3:9d:7d:09:dc:57:6f:
c2:98:2d:22:96:bb:f3:77:f9:b0:11:69:e7:9c:c0:0b:38:86:
8e:f9:95:2b:54:05:8c:cb:c3:c9:70:2a:6c:dd:7b:ba:0a:cd:
25:d7:71:94:01:90:e1:99:7c:02:a0:f8:37:e8:e5:36:5b:be:
19:55:db:f8:0a:0d:c9:d2:7b:e6:f1:73:8a:7f:79:b2:2c:ae:
f4:d7:2b:fd
-----BEGIN CERTIFICATE-----
MIIE/TCCA+WgAwIBAgISAYVseBOxDUz1fBPICAqeAfMpMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDE2MjNjMmYzN2QyNDM0OTQ4NTM1OTRmZDI5N2M2NThmNzY5
MmNiYmQwHhcNMjMwMTAxMDgzNDQ2WhcNMjQwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
Eyg3MjlhMjRmYTlhOGIxZmU0ZDQ1NTJlZjY0NDUwOWUzZGM2ZTU4NjU5MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAgZnWtkHAldJGBQqcNKjJpU3cBChA
Lws7/5q56O6ft719ukkjSecdyZp6sX/Dt0fftqRw1MP3CpknwkNSrKo+J8FF5u2T
8Cf61o3/0X2NRgg8lNZBGAfpx8C4HchapTz5Si8Ml5bfErupvXvwAI8IF8g3ddxx
M5VQkAUijxF94iwgLd0v478bBCpENr99LTjkJFpkRP24DXCBTVbt8zHW5oFE0TYE
yo/0+n8eQtpFO5m4vzLQRpqCvVsz+37uIWxYCklGzHOAooz2sA62fKdLwKm6wYmL
G/SBxEA0Gho+znmVsSjhd1yMWm7AzpCUQUcRPJ7IjQDgFHFwDPaWP4ciPwIDAQAB
o4ICCTCCAgUwHQYDVR0OBBYEFHKaJPqaix/k1FUu9kRQnj3G5YZZMB8GA1UdIwQY
MBaAFBYjwvN9JDSUhTWU/Sl8ZY92ksu9MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvRmlQQzgzMGtOSlNGTlpUOUtYeGxqM2FTeTcwLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC83Mi8zMTAxMzAtNmNhZC00YzJiLTlkZDEt
NDBlMjFlYTU3MDFlLzEvY3Bvay1wcUxILVRVVlM3MlJGQ2VQY2JsaGxrLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC83Mi8zMTAxMzAtNmNhZC00YzJiLTlkZDEtNDBlMjFlYTU3MDFl
LzEvRmlQQzgzMGtOSlNGTlpUOUtYeGxqM2FTeTcwLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQCwJFwMA0G
CSqGSIb3DQEBCwUAA4IBAQAaaHiZgYYkuGzJcBGt1euQlfsxlviqe5m9qjGulzRG
gU0DY5QDXvHVCdlVhc64a/Ssdcx1NR0GXGx2o9xSydRuYXX+xMnDmJ6YENrR0CPH
uuxeOmaLqlvLrh4e+YAl5l6gZtDI0FKWkdgR6e+oaWeoX6LHBS0tgocME/728ow7
/V+mytz8APPsbkSMHZmd78lwaQQfaPgU0KK4VjZ2ds/OWaU3gwSFKNT/w3CogPOd
fQncV2/CmC0ilrvzd/mwEWnnnMALOIaO+ZUrVAWMy8PJcCps3Xu6Cs0l13GUAZDh
mXwCoPg36OU2W74ZVdv4Cg3J0nvm8XOKf3myLK701yv9
-----END CERTIFICATE-----
Generated at Tue Apr 22 11:58:15 2025 by rpki-client