Route Origin Authorization
$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/3cb89db2-798b-44f0-9c56-1067803111c0/0/3138352e3138302e3133302e302f32342d3234203d3e20323130333932.roa
File: 3138352e3138302e3133302e302f32342d3234203d3e20323130333932.roa (raw, json)
Hash identifier: 9QhaMhA7O56pEh/hIpi+kGDtOwNT90c3Mw2+CM46QN0=
Subject key identifier: DD:95:6C:42:AD:EC:F1:3E:0C:F5:CF:D7:EA:37:CD:AE:10:15:F1:6B
Certificate issuer: /CN=0b832d69bec9266b0e83cc7182595cbe2671c483
Certificate serial: 7EEFADE6785225E5BD94E3C73D9EB2258FB4FDC0
Authority key identifier: 0B:83:2D:69:BE:C9:26:6B:0E:83:CC:71:82:59:5C:BE:26:71:C4:83
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/C4Mtab7JJmsOg8xxgllcviZxxIM.cer
Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/3cb89db2-798b-44f0-9c56-1067803111c0/0/3138352e3138302e3133302e302f32342d3234203d3e20323130333932.roa
Signing time: Mon 07 Jul 2025 14:13:33 +0000
ROA not before: Mon 07 Jul 2025 14:08:33 +0000
ROA not after: Mon 06 Jul 2026 14:13:33 +0000
asID: 210392
IP address blocks: 185.180.130.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
7e:ef:ad:e6:78:52:25:e5:bd:94:e3:c7:3d:9e:b2:25:8f:b4:fd:c0
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=0b832d69bec9266b0e83cc7182595cbe2671c483
Validity
Not Before: Jul 7 14:08:33 2025 GMT
Not After : Jul 6 14:13:33 2026 GMT
Subject: CN=DD956C42ADECF13E0CF5CFD7EA37CDAE1015F16B
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b8:cc:01:5f:88:ed:ac:c4:7f:6f:b8:bc:37:59:
be:f9:0d:c8:43:38:0f:f6:64:16:52:f9:aa:cf:7d:
c6:f8:6a:60:d7:45:03:05:2f:c3:34:ad:0d:c2:0a:
69:9c:c2:be:03:8c:42:ef:ef:43:af:84:ca:d7:60:
ea:2f:50:84:23:c6:23:4c:61:34:fd:8e:66:c4:a9:
99:0a:6f:15:84:4f:42:30:4a:15:7e:8c:e9:2d:17:
55:d4:14:12:8d:7a:be:2c:df:7e:08:3d:9a:64:17:
08:de:07:85:80:24:f4:54:a9:6f:4a:e5:c0:74:ca:
1a:2c:56:66:78:8b:d1:2e:57:a7:0a:67:c1:7a:cd:
1b:22:24:03:9b:1c:5d:47:fe:19:88:db:ef:06:74:
fc:18:c6:64:b1:24:51:59:27:56:d8:a2:ad:13:5e:
de:84:b0:d5:17:a5:c2:f3:5d:4d:a0:a0:e5:37:78:
0f:b0:f7:99:77:95:22:d4:a9:ad:36:0d:b8:51:7c:
0a:00:52:99:e1:b4:ff:fd:ce:0f:c7:e7:47:a2:c5:
b6:a2:a8:9e:d5:ad:eb:9a:94:c5:2e:c8:dd:bd:10:
3b:b5:ee:03:37:7b:94:e2:93:da:ec:ff:6b:49:a4:
71:92:b9:88:7b:58:28:ea:42:e3:c3:3c:8e:c7:ac:
f5:23
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
DD:95:6C:42:AD:EC:F1:3E:0C:F5:CF:D7:EA:37:CD:AE:10:15:F1:6B
X509v3 Authority Key Identifier:
keyid:0B:83:2D:69:BE:C9:26:6B:0E:83:CC:71:82:59:5C:BE:26:71:C4:83
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.paas.rpki.ripe.net/repository/3cb89db2-798b-44f0-9c56-1067803111c0/0/0B832D69BEC9266B0E83CC7182595CBE2671C483.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/C4Mtab7JJmsOg8xxgllcviZxxIM.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/3cb89db2-798b-44f0-9c56-1067803111c0/0/3138352e3138302e3133302e302f32342d3234203d3e20323130333932.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.180.130.0/24
Signature Algorithm: sha256WithRSAEncryption
7e:8d:b1:43:3d:16:39:bb:1e:78:a6:53:29:06:b2:87:b8:ba:
68:e6:4f:82:e6:06:68:91:f0:4a:c1:3f:b6:8b:0c:7f:99:06:
50:2f:ae:a5:03:75:72:64:01:51:61:4d:d1:e1:b3:30:7b:93:
a4:9e:c2:23:55:f5:13:a9:a2:02:5c:a8:4f:5d:9f:01:02:0c:
1f:2a:12:71:4d:f9:92:10:32:96:4e:22:2e:25:69:ea:86:e8:
85:88:55:3f:f1:4b:12:13:65:37:ea:1b:dd:43:89:fc:8e:a7:
35:d6:2c:b2:21:7d:33:ff:4e:ab:76:dc:8e:1b:56:d6:3a:b8:
d4:c1:a3:63:ce:a7:3a:85:46:5e:08:b3:98:c2:ab:b9:b8:b2:
62:55:e1:87:1d:79:d5:69:3a:ce:bc:ba:9c:cb:e4:f0:7c:da:
b4:04:32:bf:1c:dd:03:ba:34:bd:8b:9f:4d:a2:76:af:a2:60:
be:a4:bb:19:42:a4:be:a4:98:4d:a3:44:71:50:3a:d2:4f:ef:
fe:47:dc:95:5c:81:0f:8b:ee:18:b6:19:2c:4b:a7:2e:f8:24:
ea:c1:fe:d9:35:99:9b:c6:70:28:60:46:58:1a:e6:4e:7e:7d:
19:8e:f7:7c:94:5e:3e:2c:1c:6f:3e:cc:7f:8d:19:8b:d6:d8:
bc:66:9b:54
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Jul 21 23:59:20 2025 by rpki-client