Route Origin Authorization
$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/3cb89db2-798b-44f0-9c56-1067803111c0/0/3138352e3138302e3132392e302f32342d3234203d3e20323130333932.roa
File: 3138352e3138302e3132392e302f32342d3234203d3e20323130333932.roa (raw, json)
Hash identifier: qQRFph9fqb+pgYdX1zH6u3cR2p7jWl8YWVHjjfjRqhQ=
Subject key identifier: B4:C0:EA:BC:17:F9:3F:2C:1F:7D:FC:3F:85:26:91:D0:A4:78:4F:05
Certificate issuer: /CN=0b832d69bec9266b0e83cc7182595cbe2671c483
Certificate serial: 334A7E3A5038BE9D4416C0DF386EC8707EB9932F
Authority key identifier: 0B:83:2D:69:BE:C9:26:6B:0E:83:CC:71:82:59:5C:BE:26:71:C4:83
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/C4Mtab7JJmsOg8xxgllcviZxxIM.cer
Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/3cb89db2-798b-44f0-9c56-1067803111c0/0/3138352e3138302e3132392e302f32342d3234203d3e20323130333932.roa
Signing time: Mon 07 Jul 2025 14:13:37 +0000
ROA not before: Mon 07 Jul 2025 14:08:37 +0000
ROA not after: Mon 06 Jul 2026 14:13:37 +0000
asID: 210392
IP address blocks: 185.180.129.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
33:4a:7e:3a:50:38:be:9d:44:16:c0:df:38:6e:c8:70:7e:b9:93:2f
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=0b832d69bec9266b0e83cc7182595cbe2671c483
Validity
Not Before: Jul 7 14:08:37 2025 GMT
Not After : Jul 6 14:13:37 2026 GMT
Subject: CN=B4C0EABC17F93F2C1F7DFC3F852691D0A4784F05
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:aa:c5:56:8a:59:37:cf:da:f5:11:1d:c7:02:d7:
3f:08:39:fa:5a:d2:5c:a2:e8:5a:9e:32:3e:00:2e:
a4:db:c8:f6:dd:04:3a:61:de:a0:c5:02:3e:73:35:
36:16:b9:7e:1e:f6:03:28:b4:af:d2:85:1c:de:f4:
71:b3:b6:7b:ea:aa:cf:bd:c9:ca:91:34:1d:99:28:
b0:3b:13:01:81:6b:2b:2b:96:d1:4c:34:40:45:77:
55:cb:cd:b0:34:7b:66:38:e7:ed:b5:2a:d5:01:1d:
d9:6a:a6:d7:81:ce:a5:1d:2e:49:fc:52:c1:4f:6e:
89:97:d5:52:77:b7:e5:4c:a5:b3:48:1b:5c:47:9a:
78:1c:fd:25:a1:5a:d7:54:ec:cf:94:df:6c:6b:88:
aa:30:76:16:49:09:4e:d2:ba:26:09:78:16:aa:b6:
28:76:76:65:97:9e:bc:33:36:84:c2:44:42:6d:66:
5f:65:ee:2d:5f:19:d1:78:41:e6:47:17:b1:1a:dd:
bc:77:e6:53:d4:d4:56:44:90:9b:0e:1d:18:37:c6:
4f:c5:63:66:55:ff:11:1b:77:34:99:71:13:f7:a9:
10:6c:fb:9c:23:ab:07:41:f2:9b:5b:6f:fa:a8:a3:
2d:f3:8e:3d:a2:cd:33:ce:ed:f2:49:17:21:81:b8:
ae:2f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B4:C0:EA:BC:17:F9:3F:2C:1F:7D:FC:3F:85:26:91:D0:A4:78:4F:05
X509v3 Authority Key Identifier:
keyid:0B:83:2D:69:BE:C9:26:6B:0E:83:CC:71:82:59:5C:BE:26:71:C4:83
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.paas.rpki.ripe.net/repository/3cb89db2-798b-44f0-9c56-1067803111c0/0/0B832D69BEC9266B0E83CC7182595CBE2671C483.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/C4Mtab7JJmsOg8xxgllcviZxxIM.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/3cb89db2-798b-44f0-9c56-1067803111c0/0/3138352e3138302e3132392e302f32342d3234203d3e20323130333932.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.180.129.0/24
Signature Algorithm: sha256WithRSAEncryption
77:8b:c1:b6:43:a5:8f:b5:55:dc:ea:33:e3:93:39:70:f4:45:
ab:0e:8a:af:1f:09:0a:81:fa:43:ac:c5:93:cf:ec:4c:83:53:
5c:3f:89:e4:35:1d:38:15:43:3c:b2:63:ad:2b:e2:71:db:48:
d7:ce:00:9a:9f:d0:a1:09:2c:a6:03:e0:ef:b0:14:06:64:0c:
5c:0b:71:c1:fb:34:26:b1:ac:36:5c:ab:61:b1:42:f2:8e:e4:
2b:28:24:0f:93:34:a1:00:98:f2:35:20:6a:06:f3:1c:77:67:
53:aa:92:2a:ce:25:dc:9a:ce:97:2f:a9:5c:56:5b:f0:ba:e8:
d4:a1:12:1c:36:51:ae:50:a8:bd:d7:76:b1:a9:68:cb:46:71:
60:76:cc:c3:33:bc:aa:93:20:86:c5:cc:3e:73:10:f4:e3:44:
bb:8e:97:85:78:aa:54:e1:84:03:37:87:dc:f3:6b:24:0c:e4:
30:43:21:cf:27:64:f1:8f:67:db:be:5e:4a:50:50:89:65:13:
11:0c:2e:dd:7c:03:ea:87:d1:57:d2:92:44:71:c0:2c:7b:4d:
e9:d2:84:76:fd:97:80:37:36:41:7a:d7:2d:8d:ca:3c:9a:45:
ae:ed:86:d4:ac:c7:3b:eb:21:bb:bf:e8:e1:9f:c5:6c:5e:21:
77:83:f7:65
-----BEGIN CERTIFICATE-----
MIIFNzCCBB+gAwIBAgIUM0p+OlA4vp1EFsDfOG7IcH65ky8wDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoMGI4MzJkNjliZWM5MjY2YjBlODNjYzcxODI1OTVjYmUy
NjcxYzQ4MzAeFw0yNTA3MDcxNDA4MzdaFw0yNjA3MDYxNDEzMzdaMDMxMTAvBgNV
BAMTKEI0QzBFQUJDMTdGOTNGMkMxRjdERkMzRjg1MjY5MUQwQTQ3ODRGMDUwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCqxVaKWTfP2vURHccC1z8IOfpa
0lyi6FqeMj4ALqTbyPbdBDph3qDFAj5zNTYWuX4e9gMotK/ShRze9HGztnvqqs+9
ycqRNB2ZKLA7EwGBaysrltFMNEBFd1XLzbA0e2Y45+21KtUBHdlqpteBzqUdLkn8
UsFPbomX1VJ3t+VMpbNIG1xHmngc/SWhWtdU7M+U32xriKowdhZJCU7SuiYJeBaq
tih2dmWXnrwzNoTCREJtZl9l7i1fGdF4QeZHF7Ea3bx35lPU1FZEkJsOHRg3xk/F
Y2ZV/xEbdzSZcRP3qRBs+5wjqwdB8ptbb/qooy3zjj2izTPO7fJJFyGBuK4vAgMB
AAGjggJBMIICPTAdBgNVHQ4EFgQUtMDqvBf5Pywfffw/hSaR0KR4TwUwHwYDVR0j
BBgwFoAUC4Mtab7JJmsOg8xxgllcviZxxIMwDgYDVR0PAQH/BAQDAgeAMIGVBgNV
HR8EgY0wgYowgYeggYSggYGGf3JzeW5jOi8vcnN5bmMucGFhcy5ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvM2NiODlkYjItNzk4Yi00NGYwLTljNTYtMTA2NzgwMzEx
MWMwLzAvMEI4MzJENjlCRUM5MjY2QjBFODNDQzcxODI1OTVDQkUyNjcxQzQ4My5j
cmwwZAYIKwYBBQUHAQEEWDBWMFQGCCsGAQUFBzAChkhyc3luYzovL3Jwa2kucmlw
ZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxUL0M0TXRhYjdKSm1zT2c4eHhnbGxjdmla
eHhJTS5jZXIwgbEGCCsGAQUFBwELBIGkMIGhMIGeBggrBgEFBQcwC4aBkXJzeW5j
Oi8vcnN5bmMucGFhcy5ycGtpLnJpcGUubmV0L3JlcG9zaXRvcnkvM2NiODlkYjIt
Nzk4Yi00NGYwLTljNTYtMTA2NzgwMzExMWMwLzAvMzEzODM1MmUzMTM4MzAyZTMx
MzIzOTJlMzAyZjMyMzQyZDMyMzQyMDNkM2UyMDMyMzEzMDMzMzkzMi5yb2EwGAYD
VR0gAQH/BA4wDDAKBggrBgEFBQcOAjAfBggrBgEFBQcBBwEB/wQQMA4wDAQCAAEw
BgMEALm0gTANBgkqhkiG9w0BAQsFAAOCAQEAd4vBtkOlj7VV3Ooz45M5cPRFqw6K
rx8JCoH6Q6zFk8/sTINTXD+J5DUdOBVDPLJjrSvicdtI184Amp/QoQkspgPg77AU
BmQMXAtxwfs0JrGsNlyrYbFC8o7kKygkD5M0oQCY8jUgagbzHHdnU6qSKs4l3JrO
ly+pXFZb8Lro1KESHDZRrlCovdd2saloy0ZxYHbMwzO8qpMghsXMPnMQ9ONEu46X
hXiqVOGEAzeH3PNrJAzkMEMhzydk8Y9n275eSlBQiWUTEQwu3XwD6ofRV9KSRHHA
LHtN6dKEdv2XgDc2QXrXLY3KPJpFru2G1KzHO+shu7/o4Z/FbF4hd4P3ZQ==
-----END CERTIFICATE-----
Generated at Mon Jul 21 23:59:27 2025 by rpki-client