Route Origin Authorization
$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/3cb89db2-798b-44f0-9c56-1067803111c0/0/38372e3234382e3133372e302f32342d3234203d3e20323038313631.roa
File: 38372e3234382e3133372e302f32342d3234203d3e20323038313631.roa (raw, json)
Hash identifier: O9wDWNBZIGbSkR4cBpxB9PGzBp0qD/5dbnvAGsj/sDU=
Subject key identifier: 90:87:E9:43:64:3F:4D:8F:8C:6D:3C:FB:38:6C:37:5E:16:B3:7E:12
Certificate issuer: /CN=0b832d69bec9266b0e83cc7182595cbe2671c483
Certificate serial: 20D3D54646872E05E3E9FA32EEF396659C642A52
Authority key identifier: 0B:83:2D:69:BE:C9:26:6B:0E:83:CC:71:82:59:5C:BE:26:71:C4:83
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/C4Mtab7JJmsOg8xxgllcviZxxIM.cer
Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/3cb89db2-798b-44f0-9c56-1067803111c0/0/38372e3234382e3133372e302f32342d3234203d3e20323038313631.roa
Signing time: Mon 07 Jul 2025 14:12:39 +0000
ROA not before: Mon 07 Jul 2025 14:07:39 +0000
ROA not after: Mon 06 Jul 2026 14:12:39 +0000
asID: 208161
IP address blocks: 87.248.137.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
20:d3:d5:46:46:87:2e:05:e3:e9:fa:32:ee:f3:96:65:9c:64:2a:52
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=0b832d69bec9266b0e83cc7182595cbe2671c483
Validity
Not Before: Jul 7 14:07:39 2025 GMT
Not After : Jul 6 14:12:39 2026 GMT
Subject: CN=9087E943643F4D8F8C6D3CFB386C375E16B37E12
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:91:4c:42:23:9f:99:20:eb:6e:97:f5:d3:90:e4:
7d:5f:b1:46:56:40:dc:c6:62:0a:ed:79:7e:3c:d8:
32:38:42:50:24:6c:84:75:37:70:9d:19:04:8a:8b:
be:19:73:fd:f3:26:94:7a:02:49:00:ad:64:05:57:
9d:bc:b4:72:72:4a:6d:b0:40:c4:77:5d:70:56:05:
9c:24:8c:23:d7:7b:3e:3a:4e:9c:07:77:ea:83:35:
8c:de:65:31:c2:cf:7e:0a:ed:1e:f4:1c:84:f9:2f:
32:f8:93:a1:6f:87:51:00:fc:a4:5d:9f:1b:3a:07:
ff:91:3d:8d:ce:ac:21:f0:92:20:0a:ce:eb:37:29:
d2:fb:bc:e9:45:50:07:35:bc:26:07:de:69:f6:9c:
a5:74:54:8a:e2:63:98:7a:5d:e8:9e:83:87:95:a8:
78:63:43:ad:01:8a:b6:c9:6f:11:67:20:32:2e:59:
eb:54:2c:2e:d3:49:eb:c3:14:03:cd:70:5b:ef:7a:
c9:90:c2:4d:c6:8a:6c:14:30:f6:1b:fb:17:9c:59:
ac:a7:6f:3c:bf:e4:2f:02:47:03:6d:ea:78:34:c5:
e1:b0:cc:63:96:6b:23:92:23:c2:8e:51:db:dd:b3:
d8:9a:6b:f2:2c:22:92:7f:6c:c4:b9:1b:2f:c8:00:
eb:c3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
90:87:E9:43:64:3F:4D:8F:8C:6D:3C:FB:38:6C:37:5E:16:B3:7E:12
X509v3 Authority Key Identifier:
keyid:0B:83:2D:69:BE:C9:26:6B:0E:83:CC:71:82:59:5C:BE:26:71:C4:83
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.paas.rpki.ripe.net/repository/3cb89db2-798b-44f0-9c56-1067803111c0/0/0B832D69BEC9266B0E83CC7182595CBE2671C483.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/C4Mtab7JJmsOg8xxgllcviZxxIM.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/3cb89db2-798b-44f0-9c56-1067803111c0/0/38372e3234382e3133372e302f32342d3234203d3e20323038313631.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
87.248.137.0/24
Signature Algorithm: sha256WithRSAEncryption
51:bf:cd:f7:32:6c:61:6f:54:bf:8c:32:6f:46:bf:c4:0e:fa:
71:97:a2:c8:28:a4:09:82:3b:53:d7:a4:e6:a2:24:7a:bf:bc:
be:63:39:c5:c8:b5:df:d5:39:3c:63:9d:ce:f6:1d:e3:67:df:
fc:70:d6:6c:58:2e:7a:de:e5:40:cf:98:31:2a:e5:e5:24:bf:
bf:31:e8:84:1f:28:85:6f:8a:40:db:4f:b0:08:a3:75:a6:af:
0f:23:5a:e1:79:92:80:00:2f:1d:b3:06:0c:ab:58:89:f5:3e:
6b:ff:de:21:46:8b:65:9c:c8:03:79:75:99:fd:48:9e:14:f5:
f4:d9:32:09:35:4e:fc:9a:ee:1b:52:2c:24:44:cb:15:75:a3:
7e:9c:3f:2d:44:55:5f:84:e6:aa:0b:81:a3:2e:36:99:41:67:
b0:31:33:01:87:45:82:17:88:50:da:b9:24:ba:7e:7e:7e:4e:
66:1a:ab:7e:53:30:fd:3b:ef:52:b0:65:58:94:bd:11:36:e9:
79:5f:1d:e5:91:11:86:85:69:37:d3:5f:3b:ec:f6:90:84:a4:
60:9c:ec:71:ca:71:e7:f9:76:1a:65:00:e6:cc:44:2f:82:d4:
3f:77:a6:a6:a5:8c:a2:fb:1a:81:a2:87:bf:7a:66:c8:7d:c6:
eb:23:e9:62
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Jul 21 23:59:22 2025 by rpki-client