Route Origin Authorization
$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/3cb89db2-798b-44f0-9c56-1067803111c0/0/38372e3234382e3133352e302f32342d3234203d3e20343030303430.roa
File: 38372e3234382e3133352e302f32342d3234203d3e20343030303430.roa (raw, json)
Hash identifier: eoVYYZA0a/1BSTEIwWb42UhhA0OYANXAGIgaOMsxT6g=
Subject key identifier: E5:FE:5A:1A:2B:FC:8C:0C:42:79:3A:15:97:5B:09:FE:8A:DF:17:CC
Certificate issuer: /CN=0b832d69bec9266b0e83cc7182595cbe2671c483
Certificate serial: 38DB5532BC38877012AD403A32A7C39C1C38161C
Authority key identifier: 0B:83:2D:69:BE:C9:26:6B:0E:83:CC:71:82:59:5C:BE:26:71:C4:83
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/C4Mtab7JJmsOg8xxgllcviZxxIM.cer
Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/3cb89db2-798b-44f0-9c56-1067803111c0/0/38372e3234382e3133352e302f32342d3234203d3e20343030303430.roa
Signing time: Mon 07 Jul 2025 14:13:17 +0000
ROA not before: Mon 07 Jul 2025 14:08:17 +0000
ROA not after: Mon 06 Jul 2026 14:13:17 +0000
asID: 400040
IP address blocks: 87.248.135.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
38:db:55:32:bc:38:87:70:12:ad:40:3a:32:a7:c3:9c:1c:38:16:1c
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=0b832d69bec9266b0e83cc7182595cbe2671c483
Validity
Not Before: Jul 7 14:08:17 2025 GMT
Not After : Jul 6 14:13:17 2026 GMT
Subject: CN=E5FE5A1A2BFC8C0C42793A15975B09FE8ADF17CC
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:dd:34:19:56:f2:ec:e6:32:6e:bb:bf:03:22:cd:
e3:e9:4c:f7:a6:d9:e8:28:f9:5d:f6:b9:82:7a:fd:
98:49:a8:ea:46:8e:f3:fd:fb:d5:70:72:bc:c7:72:
eb:f2:89:ca:f8:c7:bf:8e:e5:9e:9e:f9:8c:82:cf:
d8:e5:53:9e:9b:92:e0:c4:2f:4b:f9:1b:77:42:b7:
d2:7d:ff:a9:3f:a2:d7:2c:c7:b3:1d:be:cb:e0:3c:
66:18:7f:65:23:97:57:c9:18:43:b3:61:da:9f:70:
4d:a6:6f:f5:48:2c:a6:ef:84:fc:1c:2b:7d:48:8c:
e5:af:82:a2:bf:0f:bc:f5:28:9a:74:0c:a6:29:f5:
66:c3:7c:8c:8e:f9:a6:c8:59:be:80:05:f2:1f:f5:
4c:4c:f4:c6:7f:79:7d:9b:d5:22:2a:dc:35:28:90:
03:c1:7b:6c:40:b3:2c:83:85:a0:45:e3:4d:5a:fe:
0d:0f:44:18:d8:00:53:4a:a6:52:2e:aa:f3:9a:26:
b8:4e:26:94:32:c2:de:84:e0:11:bb:80:94:7a:88:
74:0c:49:fd:c9:af:c5:1d:9b:d8:47:89:fe:32:16:
87:1c:6c:34:6e:cf:50:57:25:f2:20:27:a4:e8:fa:
a2:56:7d:16:ea:fc:d2:da:67:19:58:56:8e:a8:db:
d4:f5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E5:FE:5A:1A:2B:FC:8C:0C:42:79:3A:15:97:5B:09:FE:8A:DF:17:CC
X509v3 Authority Key Identifier:
keyid:0B:83:2D:69:BE:C9:26:6B:0E:83:CC:71:82:59:5C:BE:26:71:C4:83
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.paas.rpki.ripe.net/repository/3cb89db2-798b-44f0-9c56-1067803111c0/0/0B832D69BEC9266B0E83CC7182595CBE2671C483.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/C4Mtab7JJmsOg8xxgllcviZxxIM.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/3cb89db2-798b-44f0-9c56-1067803111c0/0/38372e3234382e3133352e302f32342d3234203d3e20343030303430.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
87.248.135.0/24
Signature Algorithm: sha256WithRSAEncryption
53:d8:a0:67:d0:cd:c6:b9:1d:9a:eb:26:7a:c5:f7:3a:51:30:
9b:66:d4:fd:fc:ee:88:6c:bd:83:4b:ba:b5:97:8e:c8:7f:f0:
2d:3e:16:5b:4f:f9:ad:44:4a:40:5d:9a:9e:e0:32:5b:b2:46:
ca:61:85:68:9e:07:42:96:7e:86:fd:45:d4:ad:19:db:d0:42:
82:80:df:54:5c:b0:f4:c8:d5:4b:64:c4:d6:bd:d6:89:03:b5:
82:ea:d4:84:ff:91:2f:1b:42:fb:97:05:83:c3:21:55:c8:47:
87:2f:ca:21:6d:69:48:a6:5a:be:af:6c:ed:67:d8:d7:08:27:
73:c8:cc:54:80:fc:06:28:ef:e6:e7:7c:df:30:0a:67:7d:66:
2b:16:da:ba:a5:61:9b:ec:5a:fa:e6:22:29:c2:e8:31:dd:ad:
95:e7:05:b5:1d:c8:f0:89:89:ca:04:9d:ec:54:77:f8:a4:8e:
4f:5f:47:ad:d8:a3:12:cd:26:50:13:47:c7:19:f6:2b:53:82:
f9:b3:c0:e3:f5:4a:01:07:f2:93:e6:be:dd:a7:a7:b7:4a:01:
30:41:c9:7f:5f:7b:15:8f:b4:55:c7:8e:72:18:13:70:7c:d6:
6a:bb:36:9f:28:d5:84:89:c1:aa:8c:08:5a:41:09:e7:80:84:
e9:ef:c5:a7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jul 22 11:52:55 2025 by rpki-client