Route Origin Authorization
$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/3cb89db2-798b-44f0-9c56-1067803111c0/0/3139342e36302e3233302e302f32342d3234203d3e20323038313631.roa
File: 3139342e36302e3233302e302f32342d3234203d3e20323038313631.roa (raw, json)
Hash identifier: BBTOc1oXZ/GWIaMw78E0AXdJwbScyO7OAYIm3mwckp8=
Subject key identifier: 91:EE:9F:4F:6F:18:3D:7C:68:6F:47:3A:67:FF:01:48:57:11:AA:2E
Certificate issuer: /CN=0b832d69bec9266b0e83cc7182595cbe2671c483
Certificate serial: 7FC180688663B90ABD4BFA5B935EBEC9BAB0ED94
Authority key identifier: 0B:83:2D:69:BE:C9:26:6B:0E:83:CC:71:82:59:5C:BE:26:71:C4:83
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/C4Mtab7JJmsOg8xxgllcviZxxIM.cer
Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/3cb89db2-798b-44f0-9c56-1067803111c0/0/3139342e36302e3233302e302f32342d3234203d3e20323038313631.roa
Signing time: Mon 07 Jul 2025 14:12:50 +0000
ROA not before: Mon 07 Jul 2025 14:07:50 +0000
ROA not after: Mon 06 Jul 2026 14:12:50 +0000
asID: 208161
IP address blocks: 194.60.230.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
7f:c1:80:68:86:63:b9:0a:bd:4b:fa:5b:93:5e:be:c9:ba:b0:ed:94
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=0b832d69bec9266b0e83cc7182595cbe2671c483
Validity
Not Before: Jul 7 14:07:50 2025 GMT
Not After : Jul 6 14:12:50 2026 GMT
Subject: CN=91EE9F4F6F183D7C686F473A67FF01485711AA2E
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cc:36:77:84:5b:f8:41:c8:45:43:c4:9f:62:80:
93:ed:5a:ca:90:74:7c:72:14:d8:0d:a1:b2:55:31:
f2:4b:1d:29:dc:63:46:7b:4b:91:1c:c2:b5:e3:b1:
1c:fe:4f:a9:bc:50:9f:c4:af:a6:30:12:23:14:e0:
39:a1:5e:95:8d:06:7b:29:d3:c2:2f:b5:76:93:9f:
79:89:f6:91:b7:fe:3e:41:d8:f1:21:5d:52:a9:f3:
68:95:63:35:83:21:22:34:ea:e8:1d:55:42:65:92:
24:ed:54:f4:e0:65:5e:26:16:85:60:7e:37:65:cb:
05:a4:0b:1f:99:c1:6c:fa:c5:4d:e2:82:d7:e3:c7:
3a:29:9a:1c:7b:6d:b2:7d:fa:30:f5:e0:48:04:bf:
7c:a4:b0:26:bd:e6:97:f9:3a:d6:6c:88:a0:13:6d:
47:ae:64:74:fc:48:ab:cb:5e:fa:f2:79:9e:57:d2:
58:f9:b8:96:6e:47:83:9d:2f:9b:10:44:07:5d:45:
7a:a3:79:31:1b:fb:1d:2d:a9:43:01:48:c6:a7:5c:
95:40:ff:0d:7c:bc:e6:0e:7b:8f:fa:74:8c:ff:5f:
37:16:d9:86:84:4b:9e:33:b9:bd:7e:a8:6c:89:ea:
6e:7e:a6:78:2c:61:fe:e3:a1:a7:a0:38:56:08:aa:
89:79
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
91:EE:9F:4F:6F:18:3D:7C:68:6F:47:3A:67:FF:01:48:57:11:AA:2E
X509v3 Authority Key Identifier:
keyid:0B:83:2D:69:BE:C9:26:6B:0E:83:CC:71:82:59:5C:BE:26:71:C4:83
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.paas.rpki.ripe.net/repository/3cb89db2-798b-44f0-9c56-1067803111c0/0/0B832D69BEC9266B0E83CC7182595CBE2671C483.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/C4Mtab7JJmsOg8xxgllcviZxxIM.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/3cb89db2-798b-44f0-9c56-1067803111c0/0/3139342e36302e3233302e302f32342d3234203d3e20323038313631.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
194.60.230.0/24
Signature Algorithm: sha256WithRSAEncryption
49:56:16:69:f2:98:59:37:85:21:0c:85:db:4a:28:c5:37:88:
f0:a1:f1:5f:99:75:6d:2a:cb:96:c8:d9:ce:09:91:d3:a7:fb:
ab:1d:26:ca:f4:44:42:f4:41:dc:95:71:47:12:7b:65:fc:38:
68:e1:cb:c7:ec:2b:bd:e7:da:4e:66:8b:81:a3:19:9d:43:f8:
b4:c8:34:c4:e8:dd:0d:7f:e8:07:d3:9c:8e:f9:30:5e:60:2f:
79:fb:59:58:cf:30:38:67:f2:7a:c0:1a:2e:95:dd:76:c7:22:
70:8e:af:3a:a0:2c:30:09:ba:d1:b0:b0:0d:ce:58:dd:48:22:
f6:06:16:fa:9f:e0:98:a0:fd:da:69:5e:ff:b4:50:67:0a:ce:
0e:bc:bf:59:d6:2e:eb:22:95:eb:21:86:13:fb:c6:31:69:50:
a2:f1:65:16:79:89:5c:9d:f3:11:be:ec:ce:e6:35:47:15:bb:
8f:c4:53:55:08:d8:6f:c0:f5:c8:82:64:93:e7:f1:da:86:b9:
53:bc:87:6e:3c:ad:56:1b:b8:80:81:cb:6d:60:4a:a2:1f:7e:
ea:d5:c9:ce:41:a4:24:c3:b9:a0:50:e2:36:df:e3:42:2b:e1:
b7:19:14:a5:62:ac:9b:89:b0:c2:e8:73:2a:db:65:cc:1a:c3:
1b:b4:5c:73
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Jul 21 23:59:24 2025 by rpki-client