Route Origin Authorization
$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/3cb89db2-798b-44f0-9c56-1067803111c0/0/38372e3234382e3132382e302f32342d3234203d3e203437383433.roa
File: 38372e3234382e3132382e302f32342d3234203d3e203437383433.roa (raw, json)
Hash identifier: 49jI4nIBqJms5Pzz/zkAdWF7D+J7FQGF4rxHmJNQt6o=
Subject key identifier: 95:6E:F1:5B:14:36:67:D4:B4:49:B6:CB:0A:C6:8D:71:1B:9D:7E:F3
Certificate issuer: /CN=0b832d69bec9266b0e83cc7182595cbe2671c483
Certificate serial: 3BF40740DE8661B304AB3A4A4E38F41D92CD372F
Authority key identifier: 0B:83:2D:69:BE:C9:26:6B:0E:83:CC:71:82:59:5C:BE:26:71:C4:83
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/C4Mtab7JJmsOg8xxgllcviZxxIM.cer
Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/3cb89db2-798b-44f0-9c56-1067803111c0/0/38372e3234382e3132382e302f32342d3234203d3e203437383433.roa
Signing time: Mon 07 Jul 2025 14:12:16 +0000
ROA not before: Mon 07 Jul 2025 14:07:16 +0000
ROA not after: Mon 06 Jul 2026 14:12:16 +0000
asID: 47843
IP address blocks: 87.248.128.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
3b:f4:07:40:de:86:61:b3:04:ab:3a:4a:4e:38:f4:1d:92:cd:37:2f
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=0b832d69bec9266b0e83cc7182595cbe2671c483
Validity
Not Before: Jul 7 14:07:16 2025 GMT
Not After : Jul 6 14:12:16 2026 GMT
Subject: CN=956EF15B143667D4B449B6CB0AC68D711B9D7EF3
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bf:af:85:45:dd:98:05:a9:06:55:ca:ee:84:b6:
26:dd:e9:07:6c:a8:dd:b7:75:fe:d1:b1:61:61:b8:
e5:ad:ad:43:36:ed:2b:07:26:38:35:f2:eb:86:26:
23:00:8e:c2:c7:62:a2:8d:de:34:67:c5:f6:80:5c:
75:b8:e3:49:64:8b:1d:56:51:dd:8b:82:c9:93:b1:
35:6b:21:2f:ec:70:f4:5d:6d:a5:ef:10:17:dc:98:
8d:f0:ca:3f:77:d1:37:5c:f3:24:26:00:d4:0e:e0:
81:4c:bf:3d:9a:9b:76:ea:0d:c0:2f:28:1a:f0:bb:
d1:b8:e0:4d:58:95:92:1d:69:14:4d:cf:b3:a5:53:
9e:3c:5d:1f:d3:85:ee:fc:09:e7:a7:27:06:7d:01:
40:49:bb:df:a6:b6:cf:f9:5e:95:c2:28:58:1c:fd:
47:ed:c0:0d:96:fa:6a:74:96:14:92:39:88:e5:f0:
3d:a2:ad:5c:d3:3c:ec:2a:0a:60:98:f8:ae:0d:65:
00:e6:3c:a3:7e:97:4a:fe:0e:65:ec:e5:d8:88:83:
ca:f5:de:53:f3:a0:1d:03:a7:56:c7:6c:26:ac:88:
05:bf:1e:b4:cc:77:57:31:4b:38:86:be:ad:de:cf:
dc:85:01:f6:dd:ec:00:39:96:4f:e2:50:9b:9b:19:
40:ed
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
95:6E:F1:5B:14:36:67:D4:B4:49:B6:CB:0A:C6:8D:71:1B:9D:7E:F3
X509v3 Authority Key Identifier:
keyid:0B:83:2D:69:BE:C9:26:6B:0E:83:CC:71:82:59:5C:BE:26:71:C4:83
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.paas.rpki.ripe.net/repository/3cb89db2-798b-44f0-9c56-1067803111c0/0/0B832D69BEC9266B0E83CC7182595CBE2671C483.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/C4Mtab7JJmsOg8xxgllcviZxxIM.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/3cb89db2-798b-44f0-9c56-1067803111c0/0/38372e3234382e3132382e302f32342d3234203d3e203437383433.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
87.248.128.0/24
Signature Algorithm: sha256WithRSAEncryption
94:bd:59:14:e4:f1:14:45:9d:6c:f7:51:f3:8e:06:78:cc:51:
7e:9b:1a:a0:b3:89:58:98:df:b7:72:f8:bb:46:20:5a:6a:a6:
cb:93:03:c1:98:62:cb:92:99:13:17:38:b0:6d:45:3b:7e:60:
62:19:98:48:3b:f3:32:b5:16:1b:15:bc:29:a4:71:03:d7:c1:
4e:62:d5:8c:8b:aa:10:27:c6:5f:f0:94:64:62:b9:45:d7:dc:
8f:8c:8f:50:e0:2a:59:c8:3a:24:06:f3:92:92:57:41:c5:d5:
64:49:87:1b:f6:e9:bc:98:69:43:72:2d:a8:48:ef:75:6b:dc:
15:f0:f8:72:1e:8b:a8:d3:62:ef:3b:11:73:c6:10:de:8c:90:
1f:f0:c1:84:c3:2b:46:ff:6b:1d:44:62:a7:65:d3:a6:de:39:
e5:04:77:b9:58:1d:b3:4f:b9:be:51:36:5b:84:64:47:bf:2b:
9d:6a:5e:c7:d4:5c:0b:f4:27:87:ac:d1:c6:ad:48:da:c3:50:
c0:41:c2:59:a6:90:49:18:08:23:d1:66:c1:c8:48:55:12:1e:
b5:e6:ed:4c:b5:91:06:19:15:13:0b:26:fc:e6:f8:0a:d2:83:
2a:d1:bd:c4:49:62:6d:ec:d2:5f:50:4e:b3:ea:8c:00:18:e2:
ba:c4:66:cf
-----BEGIN CERTIFICATE-----
MIIFMzCCBBugAwIBAgIUO/QHQN6GYbMEqzpKTjj0HZLNNy8wDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoMGI4MzJkNjliZWM5MjY2YjBlODNjYzcxODI1OTVjYmUy
NjcxYzQ4MzAeFw0yNTA3MDcxNDA3MTZaFw0yNjA3MDYxNDEyMTZaMDMxMTAvBgNV
BAMTKDk1NkVGMTVCMTQzNjY3RDRCNDQ5QjZDQjBBQzY4RDcxMUI5RDdFRjMwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQC/r4VF3ZgFqQZVyu6Etibd6Qds
qN23df7RsWFhuOWtrUM27SsHJjg18uuGJiMAjsLHYqKN3jRnxfaAXHW440lkix1W
Ud2LgsmTsTVrIS/scPRdbaXvEBfcmI3wyj930Tdc8yQmANQO4IFMvz2am3bqDcAv
KBrwu9G44E1YlZIdaRRNz7OlU548XR/The78CeenJwZ9AUBJu9+mts/5XpXCKFgc
/UftwA2W+mp0lhSSOYjl8D2irVzTPOwqCmCY+K4NZQDmPKN+l0r+DmXs5diIg8r1
3lPzoB0Dp1bHbCasiAW/HrTMd1cxSziGvq3ez9yFAfbd7AA5lk/iUJubGUDtAgMB
AAGjggI9MIICOTAdBgNVHQ4EFgQUlW7xWxQ2Z9S0SbbLCsaNcRudfvMwHwYDVR0j
BBgwFoAUC4Mtab7JJmsOg8xxgllcviZxxIMwDgYDVR0PAQH/BAQDAgeAMIGVBgNV
HR8EgY0wgYowgYeggYSggYGGf3JzeW5jOi8vcnN5bmMucGFhcy5ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvM2NiODlkYjItNzk4Yi00NGYwLTljNTYtMTA2NzgwMzEx
MWMwLzAvMEI4MzJENjlCRUM5MjY2QjBFODNDQzcxODI1OTVDQkUyNjcxQzQ4My5j
cmwwZAYIKwYBBQUHAQEEWDBWMFQGCCsGAQUFBzAChkhyc3luYzovL3Jwa2kucmlw
ZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxUL0M0TXRhYjdKSm1zT2c4eHhnbGxjdmla
eHhJTS5jZXIwga0GCCsGAQUFBwELBIGgMIGdMIGaBggrBgEFBQcwC4aBjXJzeW5j
Oi8vcnN5bmMucGFhcy5ycGtpLnJpcGUubmV0L3JlcG9zaXRvcnkvM2NiODlkYjIt
Nzk4Yi00NGYwLTljNTYtMTA2NzgwMzExMWMwLzAvMzgzNzJlMzIzNDM4MmUzMTMy
MzgyZTMwMmYzMjM0MmQzMjM0MjAzZDNlMjAzNDM3MzgzNDMzLnJvYTAYBgNVHSAB
Af8EDjAMMAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQA
V/iAMA0GCSqGSIb3DQEBCwUAA4IBAQCUvVkU5PEURZ1s91HzjgZ4zFF+mxqgs4lY
mN+3cvi7RiBaaqbLkwPBmGLLkpkTFziwbUU7fmBiGZhIO/MytRYbFbwppHED18FO
YtWMi6oQJ8Zf8JRkYrlF19yPjI9Q4CpZyDokBvOSkldBxdVkSYcb9um8mGlDci2o
SO91a9wV8PhyHouo02LvOxFzxhDejJAf8MGEwytG/2sdRGKnZdOm3jnlBHe5WB2z
T7m+UTZbhGRHvyudal7H1FwL9CeHrNHGrUjaw1DAQcJZppBJGAgj0WbByEhVEh61
5u1MtZEGGRUTCyb85vgK0oMq0b3ESWJt7NJfUE6z6owAGOK6xGbP
-----END CERTIFICATE-----
Generated at Tue Jul 22 11:52:50 2025 by rpki-client