Route Origin Authorization
$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/3cb89db2-798b-44f0-9c56-1067803111c0/0/38372e3234382e3134342e302f32342d3234203d3e20343030303430.roa
File: 38372e3234382e3134342e302f32342d3234203d3e20343030303430.roa (raw, json)
Hash identifier: Gq5o3j3KFVswGu34X2BKD2ZkDBfyCRzIKe63+Rrzwvc=
Subject key identifier: 41:2C:8E:F8:BD:61:D5:18:3C:43:F3:B5:8A:09:8D:9E:AF:D1:52:12
Certificate issuer: /CN=0b832d69bec9266b0e83cc7182595cbe2671c483
Certificate serial: 1005BD50BDC6B366895AC70DAD87A42A88E441D2
Authority key identifier: 0B:83:2D:69:BE:C9:26:6B:0E:83:CC:71:82:59:5C:BE:26:71:C4:83
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/C4Mtab7JJmsOg8xxgllcviZxxIM.cer
Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/3cb89db2-798b-44f0-9c56-1067803111c0/0/38372e3234382e3134342e302f32342d3234203d3e20343030303430.roa
Signing time: Mon 07 Jul 2025 14:12:56 +0000
ROA not before: Mon 07 Jul 2025 14:07:56 +0000
ROA not after: Mon 06 Jul 2026 14:12:56 +0000
asID: 400040
IP address blocks: 87.248.144.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
10:05:bd:50:bd:c6:b3:66:89:5a:c7:0d:ad:87:a4:2a:88:e4:41:d2
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=0b832d69bec9266b0e83cc7182595cbe2671c483
Validity
Not Before: Jul 7 14:07:56 2025 GMT
Not After : Jul 6 14:12:56 2026 GMT
Subject: CN=412C8EF8BD61D5183C43F3B58A098D9EAFD15212
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c8:c5:f5:9c:85:4f:7e:76:f6:ba:aa:41:16:86:
4a:38:75:bf:72:c1:da:96:8c:f9:f8:99:bb:41:72:
9b:b5:5c:fb:53:bb:8c:94:8f:ac:10:1d:03:f7:a9:
41:f3:e3:0a:57:71:37:1c:ad:7a:c3:72:11:4f:50:
aa:c0:a2:2a:e4:99:ee:a5:b9:b9:6d:9d:ba:f4:78:
ad:e8:cf:dc:10:bf:f7:ba:ff:55:cb:f2:cb:96:73:
d9:12:b1:b1:a9:65:60:87:fc:ea:75:b0:e9:c3:e3:
d4:a5:e5:4c:4b:03:3d:a5:69:80:5e:f2:23:38:38:
5d:d2:56:6d:f0:72:28:71:37:e8:98:85:f2:29:06:
1c:ca:4f:96:4e:86:f8:cf:8f:34:e6:c6:9e:50:32:
55:9d:1d:ae:ec:60:32:51:11:63:49:02:ed:a3:09:
2f:7a:11:f5:bb:08:8f:7b:01:47:de:a7:eb:06:e2:
71:55:c9:bd:61:cd:da:3b:26:d7:4d:93:de:33:46:
13:2a:7d:3c:d8:c0:5c:39:56:2e:c4:24:09:61:f6:
88:13:75:35:b2:d2:5f:dd:b5:c3:62:a7:52:57:b1:
6c:d8:e4:35:e1:55:36:c7:5d:ee:a6:be:c0:57:c0:
66:2b:64:04:17:99:eb:23:33:4b:06:9d:4c:7a:95:
0d:61
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
41:2C:8E:F8:BD:61:D5:18:3C:43:F3:B5:8A:09:8D:9E:AF:D1:52:12
X509v3 Authority Key Identifier:
keyid:0B:83:2D:69:BE:C9:26:6B:0E:83:CC:71:82:59:5C:BE:26:71:C4:83
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.paas.rpki.ripe.net/repository/3cb89db2-798b-44f0-9c56-1067803111c0/0/0B832D69BEC9266B0E83CC7182595CBE2671C483.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/C4Mtab7JJmsOg8xxgllcviZxxIM.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/3cb89db2-798b-44f0-9c56-1067803111c0/0/38372e3234382e3134342e302f32342d3234203d3e20343030303430.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
87.248.144.0/24
Signature Algorithm: sha256WithRSAEncryption
38:84:b7:fa:71:8b:13:00:b7:fb:cb:a7:1f:b0:cf:c8:20:af:
3a:22:b4:5e:f4:4d:59:d9:bd:51:6b:9a:8e:0c:a8:62:b8:be:
cf:16:2c:ee:98:1b:66:0a:a9:ad:19:1b:bd:db:15:d9:04:a9:
53:84:2c:ff:f8:85:16:58:16:99:f0:06:e5:ef:e8:3c:ea:eb:
95:f6:52:82:61:d1:3e:6f:ec:5c:be:c9:0f:22:d3:7d:f8:8b:
e2:2c:68:ef:b7:b8:b0:b7:11:25:4a:7d:89:8b:de:73:16:e6:
32:c7:40:0b:87:f4:fb:65:56:b0:c3:ce:66:24:e8:ad:a4:d2:
56:15:c0:c9:0b:05:5e:a5:27:0a:26:4d:3e:f1:4d:29:e1:4e:
87:a5:54:c9:b8:6f:72:e5:0f:7a:20:08:c8:ff:9e:74:58:04:
3e:65:fa:79:bb:20:7f:fa:78:c2:75:4a:c0:ca:e4:f0:4c:7b:
37:ec:49:9b:eb:e9:45:34:03:ea:bd:12:3a:63:b5:d7:77:d6:
a2:73:31:f3:62:fc:d3:1b:72:5c:a9:79:2f:c3:3b:7d:4d:02:
88:60:3e:1b:16:24:ff:84:64:d4:12:c5:5a:94:59:68:a1:b6:
69:18:41:0e:82:3d:10:04:e9:2a:fd:4b:23:87:4b:46:21:e8:
f1:a5:6d:39
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jul 22 11:52:56 2025 by rpki-client