Route Origin Authorization
$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/3cb89db2-798b-44f0-9c56-1067803111c0/0/38372e3234382e3133392e302f32342d3234203d3e20323038313631.roa
File: 38372e3234382e3133392e302f32342d3234203d3e20323038313631.roa (raw, json)
Hash identifier: uVd8O7Sls+nGQrtxJHsM+F4qEa+1D6v5F5/P/IhtJgg=
Subject key identifier: E9:1F:52:E4:8C:7C:9F:FA:E0:4B:17:D5:3A:EE:19:18:35:65:1F:BD
Certificate issuer: /CN=0b832d69bec9266b0e83cc7182595cbe2671c483
Certificate serial: 7D9363A8B51B5A3D4C6C8D6E5449BD61E9D1F662
Authority key identifier: 0B:83:2D:69:BE:C9:26:6B:0E:83:CC:71:82:59:5C:BE:26:71:C4:83
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/C4Mtab7JJmsOg8xxgllcviZxxIM.cer
Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/3cb89db2-798b-44f0-9c56-1067803111c0/0/38372e3234382e3133392e302f32342d3234203d3e20323038313631.roa
Signing time: Mon 07 Jul 2025 14:12:44 +0000
ROA not before: Mon 07 Jul 2025 14:07:44 +0000
ROA not after: Mon 06 Jul 2026 14:12:44 +0000
asID: 208161
IP address blocks: 87.248.139.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
7d:93:63:a8:b5:1b:5a:3d:4c:6c:8d:6e:54:49:bd:61:e9:d1:f6:62
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=0b832d69bec9266b0e83cc7182595cbe2671c483
Validity
Not Before: Jul 7 14:07:44 2025 GMT
Not After : Jul 6 14:12:44 2026 GMT
Subject: CN=E91F52E48C7C9FFAE04B17D53AEE191835651FBD
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ee:4a:1f:e7:2e:db:f4:a3:d7:9e:c7:c5:4d:b5:
8c:a2:b3:b7:a0:6c:b4:eb:4f:ca:8e:c9:da:44:37:
5b:13:fc:4b:9a:37:af:66:a5:81:13:7e:ee:81:21:
d3:41:a9:03:d3:4c:71:15:7b:50:45:b1:38:5f:eb:
e5:3a:d0:7a:f8:21:33:a5:01:f2:2b:eb:bd:23:0c:
26:ca:30:d4:90:5c:b9:4f:cf:62:a7:6f:2a:08:ff:
ee:c2:05:7d:b8:07:f5:9d:4e:4b:8f:04:28:ea:ec:
1b:79:ac:3a:fb:a2:b3:ae:76:4a:1e:d3:52:a2:a7:
45:e8:fb:0c:c7:cf:22:9c:89:7e:e7:5a:7d:dc:13:
ae:18:af:5a:f8:4f:13:be:a4:8b:23:28:8e:dc:e2:
11:70:cd:71:e7:4f:c4:35:7d:97:42:8a:27:eb:c0:
75:2c:a3:ce:fd:24:bd:8c:98:64:5f:01:7c:30:03:
c7:10:fa:8f:52:72:d2:80:42:6e:19:32:42:a2:07:
1c:5e:29:5b:0c:9f:a5:32:fe:3d:11:b2:cb:7f:5b:
e1:3e:48:c1:fa:6f:2d:37:6a:48:77:ce:06:1d:3b:
1a:57:93:b8:2e:eb:2d:77:d6:d0:ff:d4:f3:7e:66:
bb:82:52:4d:b5:3c:67:a7:4b:6e:e4:5b:f8:b4:33:
de:a3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E9:1F:52:E4:8C:7C:9F:FA:E0:4B:17:D5:3A:EE:19:18:35:65:1F:BD
X509v3 Authority Key Identifier:
keyid:0B:83:2D:69:BE:C9:26:6B:0E:83:CC:71:82:59:5C:BE:26:71:C4:83
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.paas.rpki.ripe.net/repository/3cb89db2-798b-44f0-9c56-1067803111c0/0/0B832D69BEC9266B0E83CC7182595CBE2671C483.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/C4Mtab7JJmsOg8xxgllcviZxxIM.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/3cb89db2-798b-44f0-9c56-1067803111c0/0/38372e3234382e3133392e302f32342d3234203d3e20323038313631.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
87.248.139.0/24
Signature Algorithm: sha256WithRSAEncryption
81:7e:56:00:c9:a6:98:a4:8e:fe:9a:cc:67:ab:be:a7:a1:ff:
75:e7:76:ca:64:3f:5f:0d:21:35:6b:3e:5f:00:62:64:b5:78:
6c:2e:68:72:86:01:ed:86:c9:3d:0e:19:cd:37:18:a2:84:13:
b9:12:fd:26:19:e6:21:c6:3c:5f:1d:99:d1:a3:92:7a:e2:6a:
37:1c:88:17:52:3b:b9:26:e4:c3:0e:95:82:af:66:59:cd:07:
7e:be:82:43:9e:91:d6:7a:0a:8b:49:8f:81:2d:8a:f0:f8:70:
71:4e:92:57:06:e6:34:4a:ff:9b:3a:8f:6e:1b:30:cf:e3:ef:
dd:31:bb:63:b8:90:85:8c:9f:f9:e8:e3:43:7a:9c:18:3a:8e:
71:85:b8:a0:7d:7d:aa:aa:de:da:a2:c1:0a:27:f9:e4:9d:d6:
ee:c9:11:42:16:a1:77:41:a2:88:13:0a:fa:52:21:f0:04:91:
34:b0:2b:c8:4d:50:14:fb:47:eb:4b:db:e1:07:d2:e8:4a:23:
a9:02:9a:b2:a3:5b:dc:47:a7:7f:1b:5c:6f:c2:5b:44:d5:8a:
12:d7:5e:36:52:55:fd:d3:b5:d2:35:aa:6f:52:52:7a:78:f5:
d8:4c:a2:79:1f:e5:ba:83:99:3f:3e:c6:6c:a9:e0:c5:cb:e2:
0b:9e:a1:75
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Jul 21 23:59:21 2025 by rpki-client