Route Origin Authorization
$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/3cb89db2-798b-44f0-9c56-1067803111c0/0/38372e3234382e3134352e302f32342d3234203d3e20323038313631.roa
File: 38372e3234382e3134352e302f32342d3234203d3e20323038313631.roa (raw, json)
Hash identifier: NmQcfZzhOT1j48dz0uP2wt+B4V1rP9kJ+3IAFkTbNeE=
Subject key identifier: 86:A1:65:27:ED:94:94:47:FD:BE:2A:49:BA:0A:E7:9E:87:D7:DC:21
Certificate issuer: /CN=0b832d69bec9266b0e83cc7182595cbe2671c483
Certificate serial: 5E9DC6DEAA11DCAB0C09B1C14187C5B6A6E72CDB
Authority key identifier: 0B:83:2D:69:BE:C9:26:6B:0E:83:CC:71:82:59:5C:BE:26:71:C4:83
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/C4Mtab7JJmsOg8xxgllcviZxxIM.cer
Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/3cb89db2-798b-44f0-9c56-1067803111c0/0/38372e3234382e3134352e302f32342d3234203d3e20323038313631.roa
Signing time: Mon 07 Jul 2025 14:12:32 +0000
ROA not before: Mon 07 Jul 2025 14:07:32 +0000
ROA not after: Mon 06 Jul 2026 14:12:32 +0000
asID: 208161
IP address blocks: 87.248.145.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
5e:9d:c6:de:aa:11:dc:ab:0c:09:b1:c1:41:87:c5:b6:a6:e7:2c:db
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=0b832d69bec9266b0e83cc7182595cbe2671c483
Validity
Not Before: Jul 7 14:07:32 2025 GMT
Not After : Jul 6 14:12:32 2026 GMT
Subject: CN=86A16527ED949447FDBE2A49BA0AE79E87D7DC21
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b5:6e:4e:12:fc:e9:9b:78:ca:b5:59:54:32:13:
93:9b:ff:1a:89:12:1d:fd:bf:b8:79:57:f1:83:9d:
94:11:5e:e6:20:da:0e:7d:4c:64:17:27:53:de:8a:
23:2c:ea:c1:6f:03:8d:b4:1c:03:98:a9:60:66:df:
90:e9:41:ad:1c:dc:39:52:12:65:43:0d:00:b6:35:
be:e4:bf:b0:41:1a:1a:51:9e:14:77:35:50:32:93:
2d:bc:ec:1d:39:b4:08:48:a2:38:24:75:08:0d:ef:
a4:cc:8a:74:28:2a:9f:b5:e1:78:62:d2:55:29:be:
ac:b4:13:a5:2c:60:be:90:7a:61:36:56:80:dc:d7:
e7:4e:d5:f1:44:e3:d3:85:a1:1e:74:a2:2d:bd:04:
50:b2:42:53:4c:74:d3:fa:3c:98:eb:06:29:f6:bb:
4e:29:b7:a8:23:5f:27:f6:cc:11:dc:4d:a3:bb:e8:
95:f3:03:2b:bc:4a:a1:4c:01:c5:d5:78:6b:dd:c3:
5e:83:a1:17:a4:83:5a:a2:93:9e:07:1a:33:ea:66:
28:85:a3:14:46:bb:cd:be:2f:84:fd:18:66:17:0a:
d1:11:75:f5:6c:7a:79:85:d4:68:2a:93:37:3f:6c:
bf:a8:7f:d6:01:44:fe:28:c7:e0:41:32:57:70:1f:
48:65
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
86:A1:65:27:ED:94:94:47:FD:BE:2A:49:BA:0A:E7:9E:87:D7:DC:21
X509v3 Authority Key Identifier:
keyid:0B:83:2D:69:BE:C9:26:6B:0E:83:CC:71:82:59:5C:BE:26:71:C4:83
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.paas.rpki.ripe.net/repository/3cb89db2-798b-44f0-9c56-1067803111c0/0/0B832D69BEC9266B0E83CC7182595CBE2671C483.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/C4Mtab7JJmsOg8xxgllcviZxxIM.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/3cb89db2-798b-44f0-9c56-1067803111c0/0/38372e3234382e3134352e302f32342d3234203d3e20323038313631.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
87.248.145.0/24
Signature Algorithm: sha256WithRSAEncryption
2a:b8:2d:27:f3:4f:dd:98:06:70:8c:b5:2c:75:ba:ce:2b:3f:
d8:04:5e:44:af:40:4c:c2:dc:5d:12:58:eb:41:46:9f:e9:49:
99:fc:8e:41:df:27:a0:45:78:84:25:87:f6:a3:3d:3d:1d:21:
a2:e2:61:06:32:e4:d2:60:9d:36:53:40:34:b9:d0:ec:eb:ac:
59:41:43:ac:16:a2:fa:b2:08:7c:4f:cc:2a:9a:f0:e3:c6:3d:
6c:ec:54:bb:e6:65:92:f6:38:8d:97:b2:21:24:49:9e:7a:12:
0f:df:61:ae:42:7c:a2:0c:1e:ab:52:09:27:eb:50:cf:6d:cd:
d0:4f:f1:07:e4:8d:5a:58:3a:23:3c:fa:4f:b8:0e:75:92:51:
20:6f:f1:45:0b:2e:78:8a:b1:62:72:9a:96:94:e2:fb:4b:2a:
0c:a7:90:f8:a6:24:2c:be:a4:ab:25:79:74:6b:02:66:c0:45:
b5:27:48:72:e4:b0:85:04:14:5b:48:89:72:e4:c4:bc:fd:96:
c1:9a:f1:01:4d:eb:2f:dc:9b:7f:fe:b1:48:50:3d:0e:65:e8:
28:a5:77:3d:74:05:64:a3:4d:75:1f:f6:e9:12:58:98:de:41:
6f:af:9b:9a:3c:46:dd:97:f8:8d:aa:3e:a7:fb:bf:33:b5:7f:
3f:41:69:ee
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Jul 21 23:59:19 2025 by rpki-client