Route Origin Authorization
$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/3cb89db2-798b-44f0-9c56-1067803111c0/0/3138352e3138302e3132382e302f32342d3234203d3e20323130333932.roa
File: 3138352e3138302e3132382e302f32342d3234203d3e20323130333932.roa (raw, json)
Hash identifier: +w4SuVPVh3PZ9LHsCbr4dbUnbGJPMQGUpj8yL49WadM=
Subject key identifier: 3F:2B:DA:08:66:F0:17:5E:12:90:8C:58:67:C4:E2:10:68:6D:6D:5B
Certificate issuer: /CN=0b832d69bec9266b0e83cc7182595cbe2671c483
Certificate serial: 603F0914D5D45BCF31141AD36A5468A4563E3C30
Authority key identifier: 0B:83:2D:69:BE:C9:26:6B:0E:83:CC:71:82:59:5C:BE:26:71:C4:83
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/C4Mtab7JJmsOg8xxgllcviZxxIM.cer
Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/3cb89db2-798b-44f0-9c56-1067803111c0/0/3138352e3138302e3132382e302f32342d3234203d3e20323130333932.roa
Signing time: Mon 07 Jul 2025 14:12:23 +0000
ROA not before: Mon 07 Jul 2025 14:07:23 +0000
ROA not after: Mon 06 Jul 2026 14:12:23 +0000
asID: 210392
IP address blocks: 185.180.128.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
60:3f:09:14:d5:d4:5b:cf:31:14:1a:d3:6a:54:68:a4:56:3e:3c:30
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=0b832d69bec9266b0e83cc7182595cbe2671c483
Validity
Not Before: Jul 7 14:07:23 2025 GMT
Not After : Jul 6 14:12:23 2026 GMT
Subject: CN=3F2BDA0866F0175E12908C5867C4E210686D6D5B
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ae:45:36:5d:64:af:58:45:8c:81:d0:0b:4b:e6:
35:67:12:8f:13:7a:f5:52:65:b5:de:9d:fb:ba:a5:
d5:59:97:8b:bd:41:ed:d3:8c:d8:a3:a2:3e:1c:d6:
78:29:79:01:e2:07:9d:ac:48:62:08:8b:e3:5e:dd:
b4:2d:59:db:49:22:92:ad:6c:54:bb:00:99:d5:5b:
8d:0d:19:c7:18:fa:7c:0c:37:8f:9b:9c:63:bc:b9:
80:ba:45:c4:fa:75:0c:47:eb:35:b6:48:19:b0:9c:
4a:c8:e7:3a:2f:29:20:a0:d1:0d:8f:71:65:6b:8f:
1a:e3:41:0d:05:40:8d:76:ca:c4:ab:58:37:1b:d1:
3d:35:a4:93:b0:1d:67:db:19:cc:30:a5:f0:33:ae:
bc:4d:4c:24:a1:94:db:87:0a:1d:22:a9:17:55:5e:
40:ad:75:9e:4d:f2:ee:09:7c:34:5b:4f:cb:dc:6c:
0e:82:8a:d2:19:b3:c5:9a:82:4a:14:ab:1a:b1:55:
ea:ec:52:76:ec:2d:c5:e8:84:81:77:5e:86:fa:64:
cc:a8:50:40:e6:43:d0:49:77:a0:f5:b0:e0:77:9f:
07:dd:d3:00:b7:da:e9:48:a8:bd:56:6e:b6:60:17:
94:da:a7:2d:c5:77:48:d8:ec:ef:ae:54:45:99:2e:
a3:41
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
3F:2B:DA:08:66:F0:17:5E:12:90:8C:58:67:C4:E2:10:68:6D:6D:5B
X509v3 Authority Key Identifier:
keyid:0B:83:2D:69:BE:C9:26:6B:0E:83:CC:71:82:59:5C:BE:26:71:C4:83
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.paas.rpki.ripe.net/repository/3cb89db2-798b-44f0-9c56-1067803111c0/0/0B832D69BEC9266B0E83CC7182595CBE2671C483.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/C4Mtab7JJmsOg8xxgllcviZxxIM.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/3cb89db2-798b-44f0-9c56-1067803111c0/0/3138352e3138302e3132382e302f32342d3234203d3e20323130333932.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.180.128.0/24
Signature Algorithm: sha256WithRSAEncryption
3c:56:31:e1:7a:5e:af:5b:72:39:b2:eb:9e:a7:5f:08:38:b5:
89:5a:b7:5c:68:f0:2e:24:d7:71:b0:ec:25:47:98:44:0c:3a:
5d:61:84:ec:9a:8c:4d:34:7c:f4:cb:b0:f6:9c:8d:1e:4e:2f:
cf:ee:58:9b:cd:13:e8:bf:09:73:a2:62:b5:fa:35:8a:c2:42:
21:fb:4b:ee:60:8d:5e:22:73:7a:d0:d6:99:1b:af:ed:09:d9:
10:1e:27:1d:68:5a:fa:4d:8b:62:d3:d0:e1:47:0f:b7:df:76:
01:4e:9f:b8:20:48:ad:9b:70:7f:58:2f:67:51:d3:51:df:92:
71:d9:54:e9:47:eb:e3:84:3a:3e:c3:e7:69:27:b9:06:e2:66:
11:51:6b:e6:66:14:9e:eb:7e:d5:56:b1:d6:db:29:dd:bc:8b:
a1:c0:4d:9d:9c:5e:13:53:2a:97:c5:ca:1c:91:95:74:b4:2a:
c4:db:a3:0c:5a:4c:97:ed:6d:02:06:b3:fe:3d:f7:7c:16:04:
92:07:82:7e:a4:35:05:60:0f:31:c1:f1:0a:be:8c:8e:68:84:
cf:55:d7:21:ab:59:e1:75:19:9a:27:69:fa:6d:75:ec:91:e8:
e7:db:88:ae:a4:31:bc:3a:f7:9a:19:56:7b:2b:ec:1e:84:a4:
71:04:5e:00
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Jul 21 23:59:27 2025 by rpki-client