Route Origin Authorization
$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/3cb89db2-798b-44f0-9c56-1067803111c0/0/38372e3234382e3134302e302f32342d3234203d3e203434343030.roa
File: 38372e3234382e3134302e302f32342d3234203d3e203434343030.roa (raw, json)
Hash identifier: O3wzAr3CYVOZ42oAywq1PbHEiZW9t2aYy6OCoB1oqbM=
Subject key identifier: 7E:40:CA:EE:4D:F3:FA:4D:72:EE:4B:F0:2A:EF:EC:2B:89:94:CD:B2
Certificate issuer: /CN=0b832d69bec9266b0e83cc7182595cbe2671c483
Certificate serial: 648A69ABFF18B7C0F8D1E86CC8BD4FD8F08F330A
Authority key identifier: 0B:83:2D:69:BE:C9:26:6B:0E:83:CC:71:82:59:5C:BE:26:71:C4:83
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/C4Mtab7JJmsOg8xxgllcviZxxIM.cer
Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/3cb89db2-798b-44f0-9c56-1067803111c0/0/38372e3234382e3134302e302f32342d3234203d3e203434343030.roa
Signing time: Mon 07 Jul 2025 14:12:09 +0000
ROA not before: Mon 07 Jul 2025 14:07:09 +0000
ROA not after: Mon 06 Jul 2026 14:12:09 +0000
asID: 44400
IP address blocks: 87.248.140.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
64:8a:69:ab:ff:18:b7:c0:f8:d1:e8:6c:c8:bd:4f:d8:f0:8f:33:0a
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=0b832d69bec9266b0e83cc7182595cbe2671c483
Validity
Not Before: Jul 7 14:07:09 2025 GMT
Not After : Jul 6 14:12:09 2026 GMT
Subject: CN=7E40CAEE4DF3FA4D72EE4BF02AEFEC2B8994CDB2
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:90:6c:a9:01:12:86:84:a2:24:3f:50:af:c2:0b:
12:05:8a:87:82:e6:9d:33:65:a2:50:8c:ab:41:80:
fe:5e:cd:e6:f9:f5:c8:1a:4b:60:8f:b3:22:9b:20:
4d:b3:9e:9d:5b:04:2c:10:cc:63:16:f7:fc:a9:6e:
a0:b0:75:94:57:92:fa:6b:a4:e0:4e:d5:f4:13:a5:
36:c8:8a:97:23:c0:3e:a0:5e:55:29:a0:4f:74:5d:
25:38:59:eb:0b:36:c2:66:42:24:7c:04:69:43:3b:
5e:8a:16:e3:ac:4f:a5:33:cf:f5:50:84:15:8f:a9:
84:51:32:5c:97:5d:95:7b:ef:e3:82:f5:90:13:fe:
c3:55:ef:55:36:63:f2:e5:e1:34:03:34:8c:03:5a:
63:4f:10:12:29:66:24:eb:84:a3:d3:0d:64:9f:68:
64:40:3e:0a:51:7a:1e:7e:44:91:5b:10:ec:1a:8b:
65:42:8f:02:8a:c3:5f:5a:3a:16:34:2c:89:49:7a:
50:47:c0:df:30:c2:2b:30:18:9f:11:af:91:d1:03:
d3:86:06:5d:38:af:56:d0:cb:b8:19:76:36:ae:94:
55:e2:83:91:50:84:a8:8b:3c:34:4d:98:8c:65:d5:
2e:5e:a6:88:56:28:06:c1:a2:e5:9d:7b:8f:d2:de:
1c:6f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
7E:40:CA:EE:4D:F3:FA:4D:72:EE:4B:F0:2A:EF:EC:2B:89:94:CD:B2
X509v3 Authority Key Identifier:
keyid:0B:83:2D:69:BE:C9:26:6B:0E:83:CC:71:82:59:5C:BE:26:71:C4:83
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.paas.rpki.ripe.net/repository/3cb89db2-798b-44f0-9c56-1067803111c0/0/0B832D69BEC9266B0E83CC7182595CBE2671C483.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/C4Mtab7JJmsOg8xxgllcviZxxIM.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/3cb89db2-798b-44f0-9c56-1067803111c0/0/38372e3234382e3134302e302f32342d3234203d3e203434343030.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
87.248.140.0/24
Signature Algorithm: sha256WithRSAEncryption
4e:57:95:7c:92:4c:10:21:94:8c:92:9c:eb:1f:c1:32:0a:6e:
ef:59:98:2b:ce:46:29:2f:98:09:14:d0:91:26:f4:ce:5d:48:
87:f3:e9:30:31:6e:75:b8:e8:85:12:53:5d:25:ad:b7:7d:b6:
8f:6f:5b:ea:2d:27:84:08:2c:51:6b:bc:99:75:ce:48:ec:f0:
15:af:87:b1:c6:02:eb:a3:a9:8e:99:29:ca:5e:34:61:a1:61:
86:95:74:41:17:46:79:55:94:13:2e:f2:78:46:3d:b5:49:d6:
02:02:17:9e:5a:75:6a:07:ee:86:23:98:ab:f8:e7:00:d2:95:
3a:78:64:7b:9c:2d:37:50:3d:05:16:7f:0c:cd:f0:e4:86:aa:
21:4d:46:bd:57:aa:37:12:43:c4:ed:ce:00:8b:29:86:be:b1:
97:a2:9c:ad:58:4b:a1:5a:d3:fb:57:05:e3:b5:a6:95:4d:1e:
b2:96:bb:25:3f:2b:97:46:b5:8a:ae:61:90:bd:57:ce:02:8e:
cb:bb:76:b7:91:61:60:97:d2:fc:ee:84:46:76:0b:39:4e:bd:
ec:8a:13:e9:30:2e:8a:40:e2:94:2a:3b:73:eb:a4:54:d8:bc:
03:86:2f:eb:cf:ec:c6:b3:03:70:db:32:1c:a4:02:a8:76:0b:
91:32:e7:f0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jul 22 11:54:16 2025 by rpki-client