Route Origin Authorization
$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/3cb89db2-798b-44f0-9c56-1067803111c0/0/38372e3234382e3132392e302f32342d3234203d3e20323136333833.roa
File: 38372e3234382e3132392e302f32342d3234203d3e20323136333833.roa (raw, json)
Hash identifier: B44cH26H6QeqCtL7/8n5ayKpHYt1MpN885em4z5wqYk=
Subject key identifier: 8C:00:C6:94:D6:0D:58:66:B2:0F:64:18:D5:75:E9:ED:39:2C:69:B6
Certificate issuer: /CN=0b832d69bec9266b0e83cc7182595cbe2671c483
Certificate serial: 374E5A487ECF4524110E36AE172E055CCFAD74B8
Authority key identifier: 0B:83:2D:69:BE:C9:26:6B:0E:83:CC:71:82:59:5C:BE:26:71:C4:83
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/C4Mtab7JJmsOg8xxgllcviZxxIM.cer
Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/3cb89db2-798b-44f0-9c56-1067803111c0/0/38372e3234382e3132392e302f32342d3234203d3e20323136333833.roa
Signing time: Mon 07 Jul 2025 14:13:20 +0000
ROA not before: Mon 07 Jul 2025 14:08:20 +0000
ROA not after: Mon 06 Jul 2026 14:13:20 +0000
asID: 216383
IP address blocks: 87.248.129.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
37:4e:5a:48:7e:cf:45:24:11:0e:36:ae:17:2e:05:5c:cf:ad:74:b8
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=0b832d69bec9266b0e83cc7182595cbe2671c483
Validity
Not Before: Jul 7 14:08:20 2025 GMT
Not After : Jul 6 14:13:20 2026 GMT
Subject: CN=8C00C694D60D5866B20F6418D575E9ED392C69B6
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cd:ca:41:b2:c0:d7:40:8b:53:21:43:fc:5c:55:
54:49:b8:9a:ea:7a:b7:63:42:8d:5d:8b:38:86:9f:
b9:23:bc:a7:bc:13:12:d5:a8:04:11:04:f0:08:13:
e6:b5:c2:60:cc:d5:31:6e:e1:fa:ab:9f:98:81:d5:
b1:81:2d:55:dc:7f:30:a6:05:b0:bd:cc:80:13:57:
fe:40:8a:47:c4:b3:13:d6:c9:5e:cd:50:9f:9e:f0:
d6:64:e4:4e:eb:a6:7e:b5:2e:8c:04:5b:49:84:40:
ef:b0:7c:35:f2:23:c0:fa:81:92:eb:08:07:2f:4f:
15:cb:56:d3:6c:d9:2f:be:a8:d3:98:c1:be:6f:5d:
4f:e4:c7:24:69:b2:78:26:c4:8f:af:1e:5b:51:d2:
6d:28:97:00:92:1b:23:f9:d5:27:9e:39:b7:ef:99:
8b:1f:7c:f2:cb:d5:da:cf:82:d4:1c:88:5f:35:18:
3c:7b:1e:d4:13:36:28:0a:08:31:ac:89:b6:31:d9:
12:71:7a:81:36:99:85:18:80:04:5a:96:03:35:68:
1b:53:60:a3:1d:cf:0c:d1:7c:54:bb:f5:6c:e9:94:
e4:48:68:4e:0b:9f:d1:f4:54:fb:32:d3:a4:73:7b:
39:53:4b:bb:06:7a:44:0a:4f:89:98:04:e9:60:dc:
a8:7d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
8C:00:C6:94:D6:0D:58:66:B2:0F:64:18:D5:75:E9:ED:39:2C:69:B6
X509v3 Authority Key Identifier:
keyid:0B:83:2D:69:BE:C9:26:6B:0E:83:CC:71:82:59:5C:BE:26:71:C4:83
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.paas.rpki.ripe.net/repository/3cb89db2-798b-44f0-9c56-1067803111c0/0/0B832D69BEC9266B0E83CC7182595CBE2671C483.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/C4Mtab7JJmsOg8xxgllcviZxxIM.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/3cb89db2-798b-44f0-9c56-1067803111c0/0/38372e3234382e3132392e302f32342d3234203d3e20323136333833.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
87.248.129.0/24
Signature Algorithm: sha256WithRSAEncryption
4d:bf:63:76:38:7f:5a:af:70:f8:43:8c:d3:d0:61:95:af:44:
4a:c3:54:5a:51:5f:f2:80:94:6a:3b:6b:18:53:a5:39:ce:62:
2e:37:fe:cf:20:45:49:f3:d9:9e:31:c2:73:0a:f4:7e:fc:94:
5d:5e:fb:7c:5f:9a:75:cb:3a:be:b1:ca:0e:2a:76:0b:26:2a:
fa:d7:4e:ce:27:2c:a0:2d:a7:c2:32:dd:80:bc:a3:33:b1:92:
17:88:30:37:75:25:4b:23:12:fb:6e:cf:8d:f8:be:4f:d3:43:
cb:31:e4:16:fc:7b:bf:09:e2:c3:c7:2d:a6:1e:ef:d4:15:cd:
f4:60:af:8b:c2:a1:66:e7:64:fc:b1:9d:70:a9:14:3b:5b:c4:
49:f6:34:e3:89:04:9e:85:91:4b:65:e7:43:7f:36:63:0d:3a:
22:15:38:a4:bd:ae:67:3b:b6:8d:c7:97:a3:6b:4e:cb:ff:e7:
84:89:b1:67:ed:e3:29:8b:a2:96:65:9e:80:86:1a:1d:3b:e2:
49:af:90:bb:9c:0a:c5:91:28:c2:35:67:33:1f:df:ce:6f:bd:
c5:cb:dd:c9:e3:d5:6e:36:64:0e:0b:2a:93:75:7c:69:02:12:
74:27:8f:2f:1d:c5:f0:15:47:ef:52:3a:1f:48:18:31:14:a5:
c5:59:2b:ea
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Jul 21 23:59:35 2025 by rpki-client