Route Origin Authorization
$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/3cb89db2-798b-44f0-9c56-1067803111c0/0/38372e3234382e3133342e302f32342d3234203d3e20323031393439.roa
File: 38372e3234382e3133342e302f32342d3234203d3e20323031393439.roa (raw, json)
Hash identifier: PPuRsujGg/UDiRK0Ov1Xx6Z+7Ne6EzsKw2eXBNN7J7Q=
Subject key identifier: 7E:51:27:1B:96:F2:B7:31:4D:5F:FA:92:EE:54:A1:91:C0:70:6A:25
Certificate issuer: /CN=0b832d69bec9266b0e83cc7182595cbe2671c483
Certificate serial: 0E1070EF76F24A9F917FA1547EB6F6AB3A776743
Authority key identifier: 0B:83:2D:69:BE:C9:26:6B:0E:83:CC:71:82:59:5C:BE:26:71:C4:83
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/C4Mtab7JJmsOg8xxgllcviZxxIM.cer
Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/3cb89db2-798b-44f0-9c56-1067803111c0/0/38372e3234382e3133342e302f32342d3234203d3e20323031393439.roa
Signing time: Mon 07 Jul 2025 14:12:35 +0000
ROA not before: Mon 07 Jul 2025 14:07:35 +0000
ROA not after: Mon 06 Jul 2026 14:12:35 +0000
asID: 201949
IP address blocks: 87.248.134.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
0e:10:70:ef:76:f2:4a:9f:91:7f:a1:54:7e:b6:f6:ab:3a:77:67:43
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=0b832d69bec9266b0e83cc7182595cbe2671c483
Validity
Not Before: Jul 7 14:07:35 2025 GMT
Not After : Jul 6 14:12:35 2026 GMT
Subject: CN=7E51271B96F2B7314D5FFA92EE54A191C0706A25
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b0:6f:3c:dc:5d:5c:c6:ff:1f:2a:4b:1c:03:0f:
50:3b:0b:a3:6c:4a:c3:52:27:bc:bf:2b:12:c0:3f:
2b:39:a1:3c:17:34:07:91:bb:a2:7e:fd:1c:7c:3a:
6c:6d:d7:95:0a:77:a6:e8:b6:e9:3b:57:a6:62:c4:
77:c4:61:b9:b5:ca:93:c8:61:d1:6f:84:91:73:65:
d8:3d:e1:f1:34:28:33:04:d2:e1:e6:2b:03:a2:44:
5d:d6:ae:f8:f7:0a:1b:0b:28:af:c8:34:d5:28:0b:
be:b5:ff:b7:fa:bc:b7:8b:9e:6d:da:f8:87:37:5d:
b7:52:2d:b3:5a:1a:b1:49:7a:fe:fc:d5:a1:bd:3a:
f3:56:e2:8d:76:97:5e:3d:9e:bd:76:7f:38:72:6c:
04:fc:90:62:39:4b:ae:3b:6e:bd:e5:2d:c6:4a:3d:
e5:44:04:bf:44:56:56:b7:60:f1:aa:a5:2c:de:be:
2d:63:5f:0e:59:36:5c:96:ff:76:ee:60:16:65:85:
3a:15:5f:e2:28:0f:4b:e0:b0:84:b0:df:41:fc:3f:
a8:2d:3c:f2:da:18:09:7c:93:c4:02:cd:ce:a3:1a:
fb:bf:ec:c8:2e:3f:48:f7:d5:72:93:96:12:a5:1f:
9d:ba:51:62:1e:db:60:d3:1a:74:59:36:5e:6c:cd:
86:4b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
7E:51:27:1B:96:F2:B7:31:4D:5F:FA:92:EE:54:A1:91:C0:70:6A:25
X509v3 Authority Key Identifier:
keyid:0B:83:2D:69:BE:C9:26:6B:0E:83:CC:71:82:59:5C:BE:26:71:C4:83
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.paas.rpki.ripe.net/repository/3cb89db2-798b-44f0-9c56-1067803111c0/0/0B832D69BEC9266B0E83CC7182595CBE2671C483.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/C4Mtab7JJmsOg8xxgllcviZxxIM.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/3cb89db2-798b-44f0-9c56-1067803111c0/0/38372e3234382e3133342e302f32342d3234203d3e20323031393439.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
87.248.134.0/24
Signature Algorithm: sha256WithRSAEncryption
42:d8:94:c8:a8:78:7c:c3:ff:ca:97:4c:be:30:2d:5f:1a:03:
b4:ce:41:48:43:5d:9d:41:5d:6b:63:e7:9d:ab:48:3d:00:97:
36:53:59:c3:61:2f:f4:c5:09:41:42:24:f0:c2:17:eb:cf:9d:
16:3e:5c:00:7e:66:e1:c8:b8:2e:59:ad:da:12:f8:03:94:ca:
37:89:16:56:1e:1d:d7:06:2a:29:65:3c:c2:1d:e8:85:68:23:
89:f7:95:df:22:0e:f3:c1:1c:99:f7:67:e6:7f:a1:d0:7e:80:
d9:13:6a:d7:42:1c:93:d3:cd:38:93:d7:01:d7:ae:4d:27:b2:
c7:0f:a5:a2:ec:97:1d:cb:bb:e8:48:90:94:bf:c8:a8:e2:66:
44:c6:64:8d:9e:90:e1:ed:78:ec:f0:4d:6c:ae:ba:2b:67:00:
53:53:42:09:f0:08:93:ac:49:91:90:94:a7:fb:e3:06:95:3a:
7c:68:07:3b:99:b4:40:48:c2:67:b8:14:13:0d:42:d3:0a:5b:
9f:80:81:24:ef:74:64:75:e2:1c:d3:98:6f:33:97:a3:ec:87:
36:60:74:02:fd:95:62:6a:3f:1c:a4:78:4a:2c:b1:9c:e6:aa:
fc:88:40:b3:37:1c:67:c8:b1:e0:23:85:85:87:77:b1:8d:0c:
01:5d:dd:0b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Jul 21 23:59:20 2025 by rpki-client