Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f3/1321fd-294d-4a54-973e-dfd69fe6fd61/1/o_mo0sLp4aAZv7jFC3T6y64-CHE.roa
File: o_mo0sLp4aAZv7jFC3T6y64-CHE.roa (raw, json)
Hash identifier: gIBGdYdkwU+0ptyx6YQXmQuWRioulmWd6dn0KT0yG3g=
Subject key identifier: A3:F9:A8:D2:C2:E9:E1:A0:19:BF:B8:C5:0B:74:FA:CB:AE:3E:08:71
Certificate issuer: /CN=51ba5d3ea192aed2d30666c79499069daf6dc374
Certificate serial: 01867DA16FD7B55CEA2D03F8E3583960BBA3
Authority key identifier: 51:BA:5D:3E:A1:92:AE:D2:D3:06:66:C7:94:99:06:9D:AF:6D:C3:74
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/UbpdPqGSrtLTBmbHlJkGna9tw3Q.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/f3/1321fd-294d-4a54-973e-dfd69fe6fd61/1/o_mo0sLp4aAZv7jFC3T6y64-CHE.roa
Signing time: Thu 23 Feb 2023 09:36:17 +0000
ROA not before: Thu 23 Feb 2023 09:36:17 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 29119
IP address blocks: 62.122.228.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:86:7d:a1:6f:d7:b5:5c:ea:2d:03:f8:e3:58:39:60:bb:a3
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=51ba5d3ea192aed2d30666c79499069daf6dc374
Validity
Not Before: Feb 23 09:36:17 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=a3f9a8d2c2e9e1a019bfb8c50b74facbae3e0871
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8d:b3:38:4e:87:52:d9:40:d1:8f:55:27:0f:de:
f3:c9:e1:44:cd:e7:b6:f7:a0:0e:eb:f2:64:9e:e8:
75:b8:b0:a1:91:f3:05:e0:35:7e:d0:f5:0f:f4:b9:
92:2a:4d:4e:38:22:78:cf:66:d1:db:89:ff:45:8d:
a5:57:ce:47:61:3f:80:47:14:9c:03:ea:5f:64:82:
70:3e:51:e5:76:4b:b5:c3:3e:a7:8a:5c:87:1d:9e:
1a:f8:bf:7f:94:e0:46:c1:28:e0:08:57:15:0e:9e:
c7:eb:58:98:de:6b:53:29:5e:b4:38:34:f1:62:76:
1a:c7:4a:3d:3a:c2:80:ba:b5:5e:bd:53:97:4f:e3:
91:0e:36:2e:87:95:43:d1:42:ea:eb:a9:6a:7e:ce:
b1:e8:0f:3e:72:03:4d:26:35:02:3c:5c:1e:11:a6:
da:33:0a:89:6f:fd:03:0f:24:20:95:75:57:98:39:
fa:a2:9d:be:57:fc:d1:e8:64:0f:8a:86:4a:c6:46:
29:96:35:e0:aa:e7:e3:f2:4e:8f:c6:c9:7f:95:60:
4e:75:c0:fe:af:3f:36:95:bd:fe:e2:0d:be:43:83:
91:1c:55:fa:3c:c8:05:3d:ce:4c:b3:2d:7c:ee:0d:
11:03:16:84:03:6f:1f:17:eb:f7:92:7f:26:13:d5:
8b:5f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A3:F9:A8:D2:C2:E9:E1:A0:19:BF:B8:C5:0B:74:FA:CB:AE:3E:08:71
X509v3 Authority Key Identifier:
keyid:51:BA:5D:3E:A1:92:AE:D2:D3:06:66:C7:94:99:06:9D:AF:6D:C3:74
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/UbpdPqGSrtLTBmbHlJkGna9tw3Q.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f3/1321fd-294d-4a54-973e-dfd69fe6fd61/1/o_mo0sLp4aAZv7jFC3T6y64-CHE.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/f3/1321fd-294d-4a54-973e-dfd69fe6fd61/1/UbpdPqGSrtLTBmbHlJkGna9tw3Q.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
62.122.228.0/24
Signature Algorithm: sha256WithRSAEncryption
4c:54:69:f6:70:f0:5c:a5:87:78:7e:5b:a4:8b:18:bd:ca:5a:
e2:1d:b5:29:02:05:62:de:05:df:59:37:b3:b6:03:46:83:1e:
9c:f2:df:36:3d:dc:1d:88:03:52:a3:4b:28:d0:c8:ca:aa:c7:
41:9a:b9:2c:24:9e:9e:95:fd:8b:ed:54:c8:ad:96:4f:71:89:
53:c0:c6:37:68:96:44:c3:e3:21:2d:29:c3:0c:2e:ca:4a:6c:
d6:23:e9:00:48:23:08:a0:99:08:62:2c:89:fc:13:da:e8:f2:
ec:63:e4:ca:04:f1:b2:75:3d:e1:e8:94:ba:2e:9e:8b:52:9a:
9e:d4:99:70:b3:a9:a4:4f:11:bf:9a:68:63:a1:7d:86:2e:71:
d2:d7:1a:e3:33:aa:31:e0:c0:44:48:ce:1d:6e:68:6d:ae:b0:
88:d7:c7:85:be:9e:b8:0f:50:83:42:a8:bf:6f:b3:5a:c1:38:
68:4e:4d:d0:2b:cf:f9:98:c5:a8:56:9f:31:64:e8:11:c5:89:
83:a0:0e:95:29:a0:af:a0:3c:9b:5f:e5:8c:01:67:ca:50:2e:
3c:82:6a:28:65:c1:5d:2b:22:51:1e:62:54:33:81:42:01:e6:
40:41:f8:c9:13:f4:9d:07:b6:d8:5f:81:c0:12:93:bb:38:55:
bd:89:2d:8f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Jun 9 06:00:00 2025 by rpki-client