Route Origin Authorization
$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/3cb89db2-798b-44f0-9c56-1067803111c0/0/3138352e3138302e3133312e302f32342d3234203d3e20323130333932.roa
File: 3138352e3138302e3133312e302f32342d3234203d3e20323130333932.roa (raw, json)
Hash identifier: 4p51qW9qIeLqiHu8k30DC/QPkCuQ5+Pw75NUwI4uCW4=
Subject key identifier: B6:4B:08:55:9F:CB:31:E2:4D:C9:58:03:ED:4D:0E:E8:19:49:13:02
Certificate issuer: /CN=0b832d69bec9266b0e83cc7182595cbe2671c483
Certificate serial: 27CE822E073725A5D718475D9A9608A906635DC7
Authority key identifier: 0B:83:2D:69:BE:C9:26:6B:0E:83:CC:71:82:59:5C:BE:26:71:C4:83
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/C4Mtab7JJmsOg8xxgllcviZxxIM.cer
Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/3cb89db2-798b-44f0-9c56-1067803111c0/0/3138352e3138302e3133312e302f32342d3234203d3e20323130333932.roa
Signing time: Mon 07 Jul 2025 14:13:30 +0000
ROA not before: Mon 07 Jul 2025 14:08:30 +0000
ROA not after: Mon 06 Jul 2026 14:13:30 +0000
asID: 210392
IP address blocks: 185.180.131.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
27:ce:82:2e:07:37:25:a5:d7:18:47:5d:9a:96:08:a9:06:63:5d:c7
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=0b832d69bec9266b0e83cc7182595cbe2671c483
Validity
Not Before: Jul 7 14:08:30 2025 GMT
Not After : Jul 6 14:13:30 2026 GMT
Subject: CN=B64B08559FCB31E24DC95803ED4D0EE819491302
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:db:88:0b:c2:7e:88:37:8b:87:0c:92:a6:8c:cf:
e5:09:47:29:f5:45:8e:20:f0:ed:70:f5:4a:b7:aa:
2f:2e:5a:08:18:6b:6e:15:fd:68:54:51:d5:12:09:
2d:34:31:4b:7d:83:30:9f:ea:3a:c3:13:af:7d:70:
51:db:83:69:0f:fe:4f:da:a3:6c:22:58:bb:5b:fa:
cc:78:19:a2:70:e1:04:87:33:24:ed:85:9d:6f:8d:
b6:ed:a9:13:76:0f:b2:2f:64:7b:45:d6:c6:5d:42:
02:e0:3b:e9:fe:98:41:0c:95:b8:f0:c7:a8:25:14:
00:05:23:9a:e4:74:e5:90:81:5b:91:0a:41:96:e2:
41:aa:12:85:4a:0f:cf:35:c6:2c:9a:a8:13:48:47:
74:34:6b:a7:0c:22:80:aa:63:7a:78:ea:fb:65:db:
f9:8d:70:47:90:4a:b7:44:38:88:69:14:6e:5e:59:
b6:cf:91:a2:e4:12:cd:68:57:6b:46:ae:34:27:68:
02:93:b9:c0:65:69:91:8c:31:22:55:83:ee:68:d4:
1a:03:30:cf:93:79:07:d0:c9:91:46:1e:23:51:94:
5a:9f:b2:90:1e:ca:41:59:3b:77:94:a6:85:97:04:
73:9a:86:d1:7f:bc:00:7f:c8:37:48:9b:87:56:e6:
04:9b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B6:4B:08:55:9F:CB:31:E2:4D:C9:58:03:ED:4D:0E:E8:19:49:13:02
X509v3 Authority Key Identifier:
keyid:0B:83:2D:69:BE:C9:26:6B:0E:83:CC:71:82:59:5C:BE:26:71:C4:83
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.paas.rpki.ripe.net/repository/3cb89db2-798b-44f0-9c56-1067803111c0/0/0B832D69BEC9266B0E83CC7182595CBE2671C483.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/C4Mtab7JJmsOg8xxgllcviZxxIM.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/3cb89db2-798b-44f0-9c56-1067803111c0/0/3138352e3138302e3133312e302f32342d3234203d3e20323130333932.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.180.131.0/24
Signature Algorithm: sha256WithRSAEncryption
57:12:d9:47:bc:10:f6:48:d5:06:24:9a:87:72:6e:d8:1d:d2:
be:be:5e:bd:4a:33:c6:de:fe:2b:7f:de:7f:06:d4:a9:fe:0d:
89:ce:12:b0:fd:a7:f0:8b:f1:8a:9e:00:24:70:5e:fb:d6:bc:
ba:dd:42:ed:15:6a:fe:a5:eb:43:ab:f2:88:82:da:23:58:82:
e7:25:8a:fb:6c:00:43:a7:0d:be:f1:a1:7e:16:bb:87:36:09:
5e:7c:48:09:a8:2d:67:4e:de:2f:51:f4:e3:b5:3f:8e:08:0c:
87:ed:d5:f0:3c:44:03:6d:14:e5:56:23:1b:7e:0e:b2:67:59:
50:62:f3:d9:2b:49:d6:04:03:ca:cf:7a:84:1d:81:26:01:71:
31:00:8c:b6:b6:57:d6:bc:91:af:ad:66:44:39:57:51:92:9e:
ab:69:6a:95:1d:4e:59:db:9c:a5:89:06:07:e5:79:5b:23:97:
14:d2:5d:ca:00:fd:f2:59:21:3e:85:b2:e3:0c:aa:68:ca:e1:
54:0d:83:52:e5:7a:75:c2:4e:a5:d8:88:51:e0:6f:c9:ed:74:
19:cc:1a:30:65:53:aa:8b:37:04:de:51:89:38:13:0c:86:b7:
43:4c:d6:c6:e4:bf:18:25:67:d5:b1:f3:49:5e:62:e1:5e:c2:
ac:5f:0d:a3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Jul 21 23:59:26 2025 by rpki-client