Route Origin Authorization
$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/3cb89db2-798b-44f0-9c56-1067803111c0/0/38372e3234382e3133322e302f32342d3234203d3e20313938353834.roa
File: 38372e3234382e3133322e302f32342d3234203d3e20313938353834.roa (raw, json)
Hash identifier: Ev5xSBW121UZyBp1LUsze020roiQEd5w/IhqnzWs1ac=
Subject key identifier: 31:62:C4:36:44:25:3D:65:FE:1C:48:01:E9:C2:B5:8A:0C:82:EB:0A
Certificate issuer: /CN=0b832d69bec9266b0e83cc7182595cbe2671c483
Certificate serial: 3E452597FBCA44D0F82AF20EE0F10F7E3EB62285
Authority key identifier: 0B:83:2D:69:BE:C9:26:6B:0E:83:CC:71:82:59:5C:BE:26:71:C4:83
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/C4Mtab7JJmsOg8xxgllcviZxxIM.cer
Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/3cb89db2-798b-44f0-9c56-1067803111c0/0/38372e3234382e3133322e302f32342d3234203d3e20313938353834.roa
Signing time: Mon 07 Jul 2025 14:12:19 +0000
ROA not before: Mon 07 Jul 2025 14:07:19 +0000
ROA not after: Mon 06 Jul 2026 14:12:19 +0000
asID: 198584
IP address blocks: 87.248.132.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
3e:45:25:97:fb:ca:44:d0:f8:2a:f2:0e:e0:f1:0f:7e:3e:b6:22:85
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=0b832d69bec9266b0e83cc7182595cbe2671c483
Validity
Not Before: Jul 7 14:07:19 2025 GMT
Not After : Jul 6 14:12:19 2026 GMT
Subject: CN=3162C43644253D65FE1C4801E9C2B58A0C82EB0A
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d8:d0:f7:bd:18:26:db:37:c8:5c:cf:81:13:bf:
01:28:e4:76:85:68:21:2f:a2:3f:c0:75:e0:db:2a:
f0:88:b4:b4:6e:3b:2e:a3:9a:c3:7e:e8:2f:86:1e:
fe:8e:e7:59:ca:1d:8e:14:ee:d8:67:c4:dc:13:77:
1e:dd:12:3a:4e:b5:0a:42:26:61:c6:25:dc:ac:55:
14:cb:5f:b8:1c:67:85:62:70:51:84:fc:ed:82:cc:
a1:cc:66:4d:c1:b7:c9:34:d6:d0:0d:a5:b4:13:1f:
3c:16:64:5c:6d:0e:68:66:96:6d:da:77:31:c1:b4:
82:be:6b:d0:97:3c:00:31:f3:8d:06:17:08:ac:fe:
63:0c:dd:a1:55:43:d9:36:ae:0b:76:f0:be:e1:7a:
ea:54:ba:a6:ae:0a:cd:f8:02:4d:56:73:64:0d:19:
96:da:11:df:71:4b:f6:68:d8:fb:0b:b8:79:4b:82:
32:7d:13:71:ec:37:6a:27:98:19:c1:c4:b3:f8:ac:
d7:6e:36:ce:2c:5a:44:11:e2:c6:04:b6:c0:10:43:
6d:e4:34:08:44:3e:04:6d:57:81:40:dd:22:3d:40:
b0:33:54:5f:f5:8a:aa:44:65:6c:28:b2:07:cc:a8:
77:08:01:e5:0e:58:0d:68:d1:83:40:66:c1:1b:43:
02:91
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
31:62:C4:36:44:25:3D:65:FE:1C:48:01:E9:C2:B5:8A:0C:82:EB:0A
X509v3 Authority Key Identifier:
keyid:0B:83:2D:69:BE:C9:26:6B:0E:83:CC:71:82:59:5C:BE:26:71:C4:83
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.paas.rpki.ripe.net/repository/3cb89db2-798b-44f0-9c56-1067803111c0/0/0B832D69BEC9266B0E83CC7182595CBE2671C483.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/C4Mtab7JJmsOg8xxgllcviZxxIM.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/3cb89db2-798b-44f0-9c56-1067803111c0/0/38372e3234382e3133322e302f32342d3234203d3e20313938353834.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
87.248.132.0/24
Signature Algorithm: sha256WithRSAEncryption
09:70:62:54:c8:31:25:1a:c0:57:9e:12:9e:07:81:65:06:e0:
92:4d:cc:60:df:97:ca:98:e5:07:fc:90:bd:16:df:6f:5f:e0:
46:51:7f:aa:6e:e2:45:e0:f5:13:52:25:44:73:be:34:ad:f6:
8e:07:b7:be:64:a5:97:0a:64:31:43:4f:34:77:5c:f1:b3:42:
7f:41:eb:0d:7e:78:5a:a8:2a:22:85:57:c2:5a:6b:c5:ba:2f:
f0:db:c3:a2:7a:4d:10:c0:ba:bf:44:0b:98:ce:10:7b:e1:ec:
01:4d:ac:5d:81:92:39:36:1a:7c:8d:bd:25:c0:e6:c9:6a:6d:
5c:d7:c4:95:d8:9f:64:61:97:d6:59:50:8e:e8:7d:3d:d4:ab:
84:94:89:02:f9:89:ee:24:04:e1:86:a1:bf:50:3a:89:f7:d6:
fd:14:c0:d9:ee:9d:50:69:26:ab:80:11:b8:93:d4:75:3d:a7:
b5:fe:22:ec:34:d8:81:10:c0:97:db:cd:81:96:b2:bc:4c:a5:
a7:5a:3e:99:af:f3:e0:af:cd:e7:82:10:7b:de:a1:74:01:01:
b9:e1:3f:41:36:77:75:aa:25:9a:62:77:d6:79:45:34:c5:4d:
1b:17:fa:5c:f1:7a:2a:06:f1:d3:33:5a:b4:c4:b4:fa:8c:e0:
60:fc:7a:5d
-----BEGIN CERTIFICATE-----
MIIFNTCCBB2gAwIBAgIUPkUll/vKRND4KvIO4PEPfj62IoUwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoMGI4MzJkNjliZWM5MjY2YjBlODNjYzcxODI1OTVjYmUy
NjcxYzQ4MzAeFw0yNTA3MDcxNDA3MTlaFw0yNjA3MDYxNDEyMTlaMDMxMTAvBgNV
BAMTKDMxNjJDNDM2NDQyNTNENjVGRTFDNDgwMUU5QzJCNThBMEM4MkVCMEEwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDY0Pe9GCbbN8hcz4ETvwEo5HaF
aCEvoj/AdeDbKvCItLRuOy6jmsN+6C+GHv6O51nKHY4U7thnxNwTdx7dEjpOtQpC
JmHGJdysVRTLX7gcZ4VicFGE/O2CzKHMZk3Bt8k01tANpbQTHzwWZFxtDmhmlm3a
dzHBtIK+a9CXPAAx840GFwis/mMM3aFVQ9k2rgt28L7heupUuqauCs34Ak1Wc2QN
GZbaEd9xS/Zo2PsLuHlLgjJ9E3HsN2onmBnBxLP4rNduNs4sWkQR4sYEtsAQQ23k
NAhEPgRtV4FA3SI9QLAzVF/1iqpEZWwosgfMqHcIAeUOWA1o0YNAZsEbQwKRAgMB
AAGjggI/MIICOzAdBgNVHQ4EFgQUMWLENkQlPWX+HEgB6cK1igyC6wowHwYDVR0j
BBgwFoAUC4Mtab7JJmsOg8xxgllcviZxxIMwDgYDVR0PAQH/BAQDAgeAMIGVBgNV
HR8EgY0wgYowgYeggYSggYGGf3JzeW5jOi8vcnN5bmMucGFhcy5ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvM2NiODlkYjItNzk4Yi00NGYwLTljNTYtMTA2NzgwMzEx
MWMwLzAvMEI4MzJENjlCRUM5MjY2QjBFODNDQzcxODI1OTVDQkUyNjcxQzQ4My5j
cmwwZAYIKwYBBQUHAQEEWDBWMFQGCCsGAQUFBzAChkhyc3luYzovL3Jwa2kucmlw
ZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxUL0M0TXRhYjdKSm1zT2c4eHhnbGxjdmla
eHhJTS5jZXIwga8GCCsGAQUFBwELBIGiMIGfMIGcBggrBgEFBQcwC4aBj3JzeW5j
Oi8vcnN5bmMucGFhcy5ycGtpLnJpcGUubmV0L3JlcG9zaXRvcnkvM2NiODlkYjIt
Nzk4Yi00NGYwLTljNTYtMTA2NzgwMzExMWMwLzAvMzgzNzJlMzIzNDM4MmUzMTMz
MzIyZTMwMmYzMjM0MmQzMjM0MjAzZDNlMjAzMTM5MzgzNTM4MzQucm9hMBgGA1Ud
IAEB/wQOMAwwCgYIKwYBBQUHDgIwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgABMAYD
BABX+IQwDQYJKoZIhvcNAQELBQADggEBAAlwYlTIMSUawFeeEp4HgWUG4JJNzGDf
l8qY5Qf8kL0W329f4EZRf6pu4kXg9RNSJURzvjSt9o4Ht75kpZcKZDFDTzR3XPGz
Qn9B6w1+eFqoKiKFV8Jaa8W6L/Dbw6J6TRDAur9EC5jOEHvh7AFNrF2Bkjk2GnyN
vSXA5slqbVzXxJXYn2Rhl9ZZUI7ofT3Uq4SUiQL5ie4kBOGGob9QOon31v0UwNnu
nVBpJquAEbiT1HU9p7X+Iuw02IEQwJfbzYGWsrxMpadaPpmv8+CvzeeCEHveoXQB
AbnhP0E2d3WqJZpid9Z5RTTFTRsX+lzxeioG8dMzWrTEtPqM4GD8el0=
-----END CERTIFICATE-----
Generated at Mon Jul 21 23:59:25 2025 by rpki-client