Route Origin Authorization
$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/3cb89db2-798b-44f0-9c56-1067803111c0/0/38372e3234382e3133332e302f32342d3234203d3e20323038313631.roa
File: 38372e3234382e3133332e302f32342d3234203d3e20323038313631.roa (raw, json)
Hash identifier: QvSP4FBacGknn+2IA1Ze0m0WJGonOoae2apXHIasOys=
Subject key identifier: 84:EB:53:1D:C7:68:6C:77:A9:45:26:C2:6F:A3:9B:51:12:4F:54:03
Certificate issuer: /CN=0b832d69bec9266b0e83cc7182595cbe2671c483
Certificate serial: 360C7E2BBEF0489B42524610A641F2DC1400CD09
Authority key identifier: 0B:83:2D:69:BE:C9:26:6B:0E:83:CC:71:82:59:5C:BE:26:71:C4:83
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/C4Mtab7JJmsOg8xxgllcviZxxIM.cer
Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/3cb89db2-798b-44f0-9c56-1067803111c0/0/38372e3234382e3133332e302f32342d3234203d3e20323038313631.roa
Signing time: Mon 07 Jul 2025 14:12:42 +0000
ROA not before: Mon 07 Jul 2025 14:07:42 +0000
ROA not after: Mon 06 Jul 2026 14:12:42 +0000
asID: 208161
IP address blocks: 87.248.133.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
36:0c:7e:2b:be:f0:48:9b:42:52:46:10:a6:41:f2:dc:14:00:cd:09
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=0b832d69bec9266b0e83cc7182595cbe2671c483
Validity
Not Before: Jul 7 14:07:42 2025 GMT
Not After : Jul 6 14:12:42 2026 GMT
Subject: CN=84EB531DC7686C77A94526C26FA39B51124F5403
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d8:9f:80:08:96:3e:6e:a8:b1:cd:3a:d7:56:8e:
40:f9:61:cc:c5:45:65:8d:c4:34:dc:4f:3c:94:72:
94:0e:61:3f:13:41:34:64:32:84:c7:4a:81:70:2b:
b1:cc:50:09:f2:a9:e5:e6:54:d2:5d:33:3b:57:ad:
e2:a4:e3:a8:50:e2:f3:90:cd:52:19:45:c7:89:02:
f6:75:9c:9a:9f:86:a6:7a:3a:6a:ba:23:76:66:64:
cf:ab:60:21:93:af:27:21:e3:21:9b:85:74:09:ff:
89:2c:ba:44:be:5b:d1:ce:c6:8f:16:0b:e9:d1:bf:
aa:3f:0e:04:28:bb:c3:c3:75:ab:8e:93:d7:25:bc:
29:e1:6c:ac:6d:93:39:e6:fd:cb:6b:cf:f1:45:dc:
39:50:27:c1:f4:1b:7a:f1:28:cc:2d:ac:ff:fd:68:
17:12:a7:4e:0a:d3:31:54:41:d9:31:6f:73:d6:0e:
c9:37:7d:fc:f5:82:db:e3:2b:70:d0:4c:0a:b8:f6:
d0:ad:77:d2:b5:4d:7b:76:dc:a4:01:a1:41:e9:04:
c2:65:44:f8:63:13:a2:b9:5a:eb:c6:49:00:9c:05:
8e:45:4b:71:45:d3:ff:79:36:1b:56:60:02:cf:72:
e0:d0:96:6c:89:24:0b:2c:f9:d6:7b:49:3f:2f:f1:
8e:f3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
84:EB:53:1D:C7:68:6C:77:A9:45:26:C2:6F:A3:9B:51:12:4F:54:03
X509v3 Authority Key Identifier:
keyid:0B:83:2D:69:BE:C9:26:6B:0E:83:CC:71:82:59:5C:BE:26:71:C4:83
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.paas.rpki.ripe.net/repository/3cb89db2-798b-44f0-9c56-1067803111c0/0/0B832D69BEC9266B0E83CC7182595CBE2671C483.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/C4Mtab7JJmsOg8xxgllcviZxxIM.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/3cb89db2-798b-44f0-9c56-1067803111c0/0/38372e3234382e3133332e302f32342d3234203d3e20323038313631.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
87.248.133.0/24
Signature Algorithm: sha256WithRSAEncryption
7a:4d:8d:5a:e0:70:86:af:d8:2b:4d:f9:73:ef:f6:79:cd:63:
0c:57:86:bf:40:7c:7b:6e:58:d9:59:08:42:41:83:6d:9a:18:
8b:9e:62:ca:9d:91:b5:e3:d1:dd:00:33:84:f0:cf:d6:36:1f:
0e:87:05:d4:89:62:df:2a:b5:95:64:e5:4a:4a:8c:25:26:96:
87:7b:06:b8:99:13:4e:94:1a:b4:10:49:18:11:8f:92:b0:63:
ca:56:96:ec:64:45:6d:42:ed:a4:41:3e:27:0b:26:a8:00:4c:
50:9d:a8:13:23:66:1f:33:8b:51:c7:87:df:4e:0d:04:4a:a9:
f1:0a:bf:d9:7e:a8:81:94:77:a7:32:5f:ab:79:88:42:ba:74:
ee:45:b4:10:c6:00:79:bf:4b:d6:a9:d6:55:33:52:56:5d:99:
71:e8:42:fe:df:bc:54:47:bc:6d:1d:8d:db:7f:49:3e:81:82:
85:19:d1:87:1f:e9:0c:21:4e:bc:3d:0f:27:e9:b5:60:ad:d9:
ef:2a:a2:e2:f2:45:c8:37:8b:70:6a:ee:b8:d6:17:87:36:af:
3b:4c:c6:27:ed:dc:bc:f1:27:1b:d1:ec:20:bb:5d:9b:2d:cb:
4e:59:f5:cf:0d:81:11:58:88:bc:67:2a:11:5c:1c:3c:ab:03:
d8:b3:e7:82
-----BEGIN CERTIFICATE-----
MIIFNTCCBB2gAwIBAgIUNgx+K77wSJtCUkYQpkHy3BQAzQkwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoMGI4MzJkNjliZWM5MjY2YjBlODNjYzcxODI1OTVjYmUy
NjcxYzQ4MzAeFw0yNTA3MDcxNDA3NDJaFw0yNjA3MDYxNDEyNDJaMDMxMTAvBgNV
BAMTKDg0RUI1MzFEQzc2ODZDNzdBOTQ1MjZDMjZGQTM5QjUxMTI0RjU0MDMwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDYn4AIlj5uqLHNOtdWjkD5YczF
RWWNxDTcTzyUcpQOYT8TQTRkMoTHSoFwK7HMUAnyqeXmVNJdMztXreKk46hQ4vOQ
zVIZRceJAvZ1nJqfhqZ6Omq6I3ZmZM+rYCGTrych4yGbhXQJ/4ksukS+W9HOxo8W
C+nRv6o/DgQou8PDdauOk9clvCnhbKxtkznm/ctrz/FF3DlQJ8H0G3rxKMwtrP/9
aBcSp04K0zFUQdkxb3PWDsk3ffz1gtvjK3DQTAq49tCtd9K1TXt23KQBoUHpBMJl
RPhjE6K5WuvGSQCcBY5FS3FF0/95NhtWYALPcuDQlmyJJAss+dZ7ST8v8Y7zAgMB
AAGjggI/MIICOzAdBgNVHQ4EFgQUhOtTHcdobHepRSbCb6ObURJPVAMwHwYDVR0j
BBgwFoAUC4Mtab7JJmsOg8xxgllcviZxxIMwDgYDVR0PAQH/BAQDAgeAMIGVBgNV
HR8EgY0wgYowgYeggYSggYGGf3JzeW5jOi8vcnN5bmMucGFhcy5ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvM2NiODlkYjItNzk4Yi00NGYwLTljNTYtMTA2NzgwMzEx
MWMwLzAvMEI4MzJENjlCRUM5MjY2QjBFODNDQzcxODI1OTVDQkUyNjcxQzQ4My5j
cmwwZAYIKwYBBQUHAQEEWDBWMFQGCCsGAQUFBzAChkhyc3luYzovL3Jwa2kucmlw
ZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxUL0M0TXRhYjdKSm1zT2c4eHhnbGxjdmla
eHhJTS5jZXIwga8GCCsGAQUFBwELBIGiMIGfMIGcBggrBgEFBQcwC4aBj3JzeW5j
Oi8vcnN5bmMucGFhcy5ycGtpLnJpcGUubmV0L3JlcG9zaXRvcnkvM2NiODlkYjIt
Nzk4Yi00NGYwLTljNTYtMTA2NzgwMzExMWMwLzAvMzgzNzJlMzIzNDM4MmUzMTMz
MzMyZTMwMmYzMjM0MmQzMjM0MjAzZDNlMjAzMjMwMzgzMTM2MzEucm9hMBgGA1Ud
IAEB/wQOMAwwCgYIKwYBBQUHDgIwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgABMAYD
BABX+IUwDQYJKoZIhvcNAQELBQADggEBAHpNjVrgcIav2CtN+XPv9nnNYwxXhr9A
fHtuWNlZCEJBg22aGIueYsqdkbXj0d0AM4Twz9Y2Hw6HBdSJYt8qtZVk5UpKjCUm
lod7BriZE06UGrQQSRgRj5KwY8pWluxkRW1C7aRBPicLJqgATFCdqBMjZh8zi1HH
h99ODQRKqfEKv9l+qIGUd6cyX6t5iEK6dO5FtBDGAHm/S9ap1lUzUlZdmXHoQv7f
vFRHvG0djdt/ST6BgoUZ0Ycf6QwhTrw9DyfptWCt2e8qouLyRcg3i3Bq7rjWF4c2
rztMxift3LzxJxvR7CC7XZsty05Z9c8NgRFYiLxnKhFcHDyrA9iz54I=
-----END CERTIFICATE-----
Generated at Mon Jul 21 23:59:22 2025 by rpki-client