Route Origin Authorization
$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/3cb89db2-798b-44f0-9c56-1067803111c0/0/3139342e36302e3233312e302f32342d3234203d3e20323038313631.roa
File: 3139342e36302e3233312e302f32342d3234203d3e20323038313631.roa (raw, json)
Hash identifier: O16NCrGdwDpWPClaVYoIXKicGnWaQBRFsqCyS3vrytk=
Subject key identifier: 9D:1B:16:0F:B8:99:D4:42:08:44:BC:CE:E6:78:A2:BD:85:97:D4:EA
Certificate issuer: /CN=0b832d69bec9266b0e83cc7182595cbe2671c483
Certificate serial: 708DF5BD5CBC36C0257211F4E2588A23B1CF82AD
Authority key identifier: 0B:83:2D:69:BE:C9:26:6B:0E:83:CC:71:82:59:5C:BE:26:71:C4:83
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/C4Mtab7JJmsOg8xxgllcviZxxIM.cer
Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/3cb89db2-798b-44f0-9c56-1067803111c0/0/3139342e36302e3233312e302f32342d3234203d3e20323038313631.roa
Signing time: Mon 07 Jul 2025 14:12:26 +0000
ROA not before: Mon 07 Jul 2025 14:07:26 +0000
ROA not after: Mon 06 Jul 2026 14:12:26 +0000
asID: 208161
IP address blocks: 194.60.231.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
70:8d:f5:bd:5c:bc:36:c0:25:72:11:f4:e2:58:8a:23:b1:cf:82:ad
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=0b832d69bec9266b0e83cc7182595cbe2671c483
Validity
Not Before: Jul 7 14:07:26 2025 GMT
Not After : Jul 6 14:12:26 2026 GMT
Subject: CN=9D1B160FB899D4420844BCCEE678A2BD8597D4EA
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:89:fd:e5:7d:34:03:95:9b:3e:d3:3c:53:11:43:
27:72:30:a7:44:60:1b:58:a9:c4:e7:6f:63:8e:b5:
0a:6f:28:c2:de:8e:47:ee:80:30:76:20:c3:6d:9e:
90:66:cc:3e:95:64:0a:e5:11:c3:a2:d1:59:84:ae:
6e:94:93:f8:02:71:34:a9:50:f2:c4:0d:ee:6b:95:
02:a8:d1:11:77:b8:23:b1:ab:d1:eb:0d:6b:47:77:
61:98:df:84:bd:8c:41:bf:3b:07:b7:ee:fc:ef:2d:
9b:28:4e:9c:a0:f4:d0:d4:cb:8c:48:f9:f5:3f:35:
4d:4e:0c:25:f0:e7:03:80:d4:bf:13:5d:76:dc:7f:
cd:e8:c7:e6:6c:94:32:f9:76:0a:6c:37:e0:4e:fb:
e5:d1:ae:db:f6:38:92:c5:03:44:aa:7f:e4:cb:1b:
1c:30:4c:95:40:49:6b:d4:0f:d3:c5:c5:90:f4:c1:
07:96:9a:45:75:a7:9f:c4:d9:75:05:08:54:5b:d8:
3d:ee:c3:83:37:ce:b2:4d:0e:2f:3e:56:82:61:70:
c5:91:49:f8:6e:10:d5:c3:b7:4b:e2:67:11:e9:14:
68:e2:7b:59:55:ed:ee:63:97:6f:a6:a5:2e:f9:ec:
e9:16:87:70:3b:90:87:c2:ad:3b:9c:08:af:b1:0e:
a2:2d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
9D:1B:16:0F:B8:99:D4:42:08:44:BC:CE:E6:78:A2:BD:85:97:D4:EA
X509v3 Authority Key Identifier:
keyid:0B:83:2D:69:BE:C9:26:6B:0E:83:CC:71:82:59:5C:BE:26:71:C4:83
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.paas.rpki.ripe.net/repository/3cb89db2-798b-44f0-9c56-1067803111c0/0/0B832D69BEC9266B0E83CC7182595CBE2671C483.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/C4Mtab7JJmsOg8xxgllcviZxxIM.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/3cb89db2-798b-44f0-9c56-1067803111c0/0/3139342e36302e3233312e302f32342d3234203d3e20323038313631.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
194.60.231.0/24
Signature Algorithm: sha256WithRSAEncryption
07:23:e7:63:dd:c6:c5:f7:e5:5a:a4:78:95:6b:38:50:26:8e:
1b:b6:da:b3:25:28:63:5f:a7:a7:ec:86:20:a2:67:86:49:b2:
88:d8:3a:8e:31:30:d0:5e:df:a2:20:5e:82:55:83:b2:e1:60:
0d:ec:ae:8b:e0:f0:3b:74:ec:78:18:b9:ec:7d:c8:d1:7b:82:
53:4f:bb:25:2b:ac:bb:c7:f0:08:0d:8c:a2:b7:73:73:76:9d:
ee:d9:e5:2a:e6:7e:33:ec:a7:cd:50:e6:7b:c3:5c:d2:27:4f:
aa:94:7a:77:f6:6e:35:bd:36:4e:7d:61:aa:14:dd:2f:05:68:
65:01:d2:71:d5:43:2b:cc:b5:13:15:b8:08:f1:f4:21:b2:75:
10:b7:3e:c0:4f:09:c5:f1:fe:a2:0b:98:2e:67:50:49:15:45:
b1:bc:31:ae:be:91:c0:ce:37:e0:e4:2d:bd:45:9a:27:70:c7:
08:33:8f:31:01:0c:5c:a2:44:da:f7:9b:7e:ad:f1:c3:67:81:
87:e5:9f:eb:f2:05:3e:e5:3e:74:6b:e0:5a:a4:97:1b:55:32:
67:2a:ae:04:42:af:07:2a:79:ce:10:b3:5c:af:32:fa:ac:79:
b2:6d:53:88:57:a3:d0:59:11:1a:a3:ee:e9:bd:85:77:79:36:
ae:aa:a4:de
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Jul 21 23:59:34 2025 by rpki-client