Route Origin Authorization
$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/3cb89db2-798b-44f0-9c56-1067803111c0/0/38372e3234382e3133382e302f32342d3234203d3e20323038313631.roa
File: 38372e3234382e3133382e302f32342d3234203d3e20323038313631.roa (raw, json)
Hash identifier: 4MLpPzxBXjy7/IuDc2rI+LS2TSot+ABcU3zrx7VAf4c=
Subject key identifier: C1:33:93:0C:69:64:E7:87:FC:9E:EA:D2:D3:C6:2E:77:3E:72:AB:FB
Certificate issuer: /CN=0b832d69bec9266b0e83cc7182595cbe2671c483
Certificate serial: 416A2E1D90AC9FF4333D1FF0B7DC6F394DFD623F
Authority key identifier: 0B:83:2D:69:BE:C9:26:6B:0E:83:CC:71:82:59:5C:BE:26:71:C4:83
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/C4Mtab7JJmsOg8xxgllcviZxxIM.cer
Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/3cb89db2-798b-44f0-9c56-1067803111c0/0/38372e3234382e3133382e302f32342d3234203d3e20323038313631.roa
Signing time: Mon 07 Jul 2025 14:12:33 +0000
ROA not before: Mon 07 Jul 2025 14:07:33 +0000
ROA not after: Mon 06 Jul 2026 14:12:33 +0000
asID: 208161
IP address blocks: 87.248.138.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
41:6a:2e:1d:90:ac:9f:f4:33:3d:1f:f0:b7:dc:6f:39:4d:fd:62:3f
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=0b832d69bec9266b0e83cc7182595cbe2671c483
Validity
Not Before: Jul 7 14:07:33 2025 GMT
Not After : Jul 6 14:12:33 2026 GMT
Subject: CN=C133930C6964E787FC9EEAD2D3C62E773E72ABFB
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c0:2f:86:e4:0a:b3:ff:4e:43:e3:69:a6:fa:86:
0a:34:f3:22:07:42:7f:73:ca:3e:2b:77:c9:3a:8b:
e6:ee:93:88:a9:d5:5e:49:47:3e:96:5b:dc:2f:e7:
51:22:77:cd:58:aa:01:0a:86:eb:83:61:e2:cb:a6:
60:59:c6:96:9d:d1:9b:ae:07:a6:3e:8b:2b:fe:75:
31:1b:27:a2:58:13:a7:48:24:8f:19:50:37:af:7f:
a9:29:a7:d4:1c:2d:6f:42:12:ec:32:2f:95:65:73:
79:7e:ad:5c:7b:0d:3d:f6:e4:0c:2e:cf:47:3c:9e:
ec:13:bc:7f:67:2f:f9:74:4d:9d:17:94:69:39:19:
ac:8b:61:9d:26:3a:f8:21:60:10:a5:5e:6e:17:71:
4b:26:db:ee:a8:b1:6e:aa:5e:51:3a:78:7d:81:02:
8a:6e:40:4b:67:c6:89:09:24:3a:ff:b5:7f:7a:8b:
9f:7e:ec:c0:46:19:ee:26:b1:32:ef:ca:49:45:99:
c4:bb:f7:21:7d:f0:ea:0c:3b:0c:e7:08:b1:00:59:
4b:f5:ed:ca:fc:4d:83:f4:10:b0:b2:e4:e3:09:d4:
a2:db:40:1a:b4:a3:d7:5e:48:dd:bd:c8:61:b7:2b:
5b:e9:ba:66:2c:93:f4:90:50:24:be:61:75:c2:14:
b1:6f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C1:33:93:0C:69:64:E7:87:FC:9E:EA:D2:D3:C6:2E:77:3E:72:AB:FB
X509v3 Authority Key Identifier:
keyid:0B:83:2D:69:BE:C9:26:6B:0E:83:CC:71:82:59:5C:BE:26:71:C4:83
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.paas.rpki.ripe.net/repository/3cb89db2-798b-44f0-9c56-1067803111c0/0/0B832D69BEC9266B0E83CC7182595CBE2671C483.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/C4Mtab7JJmsOg8xxgllcviZxxIM.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/3cb89db2-798b-44f0-9c56-1067803111c0/0/38372e3234382e3133382e302f32342d3234203d3e20323038313631.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
87.248.138.0/24
Signature Algorithm: sha256WithRSAEncryption
1b:ab:6d:d0:49:d0:0b:1a:45:ce:36:e4:2c:56:ee:fa:a9:db:
79:d2:9f:bb:f1:1e:83:ca:53:1c:91:79:e9:9b:66:0b:91:a2:
03:e9:f7:d2:64:c8:14:5e:9c:4c:61:77:41:ac:61:1b:a7:d7:
47:ad:4e:8c:0f:1b:c5:98:88:46:95:42:dd:a7:33:a9:e3:6d:
c9:8d:3d:33:30:82:04:0a:e5:c8:71:78:df:bf:ec:ff:68:1c:
14:71:18:4e:d1:f3:0b:d0:65:ea:9b:c5:fc:c1:77:c1:6c:09:
c3:78:0b:5c:b5:fa:5f:09:73:12:eb:eb:bc:a6:4b:4b:7d:b9:
a7:eb:5d:0f:e8:01:11:d6:69:2e:bf:f8:10:28:6d:1d:71:fb:
1b:bd:1f:bf:a1:4b:dc:a0:ff:34:78:68:53:64:bf:f7:ad:57:
80:d8:a3:a0:0c:ea:5f:6a:df:a7:a6:43:1d:b8:85:1f:83:17:
7d:83:97:48:0c:f7:d5:e0:5a:a8:b7:dc:10:88:e4:20:1f:aa:
d7:9b:2e:86:6c:aa:56:37:fa:63:03:a2:65:eb:4a:4f:7e:32:
e2:89:c2:e9:3c:7e:10:a3:1b:37:65:95:f9:6d:9a:4c:c2:8d:
f5:4f:af:cf:f3:04:7b:08:3a:c6:a5:eb:72:b7:c1:de:ff:9b:
62:6d:2c:15
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Jul 21 23:59:20 2025 by rpki-client