Route Origin Authorization
$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/3cb89db2-798b-44f0-9c56-1067803111c0/0/38372e3234382e3134362e302f32342d3234203d3e20323132333335.roa
File: 38372e3234382e3134362e302f32342d3234203d3e20323132333335.roa (raw, json)
Hash identifier: XGeDm9Y89Mlk/5yzCVYwOTy0kWNbpixfYBL6B/yqqNM=
Subject key identifier: 01:A1:1A:8C:DD:7A:FD:82:18:9A:4A:68:4E:D1:7D:82:A7:0B:1A:AF
Certificate issuer: /CN=0b832d69bec9266b0e83cc7182595cbe2671c483
Certificate serial: 62B3848164A5FD1DC7B09C2383CDAFA33A61BF9B
Authority key identifier: 0B:83:2D:69:BE:C9:26:6B:0E:83:CC:71:82:59:5C:BE:26:71:C4:83
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/C4Mtab7JJmsOg8xxgllcviZxxIM.cer
Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/3cb89db2-798b-44f0-9c56-1067803111c0/0/38372e3234382e3134362e302f32342d3234203d3e20323132333335.roa
Signing time: Mon 07 Jul 2025 14:13:23 +0000
ROA not before: Mon 07 Jul 2025 14:08:23 +0000
ROA not after: Mon 06 Jul 2026 14:13:23 +0000
asID: 212335
IP address blocks: 87.248.146.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
62:b3:84:81:64:a5:fd:1d:c7:b0:9c:23:83:cd:af:a3:3a:61:bf:9b
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=0b832d69bec9266b0e83cc7182595cbe2671c483
Validity
Not Before: Jul 7 14:08:23 2025 GMT
Not After : Jul 6 14:13:23 2026 GMT
Subject: CN=01A11A8CDD7AFD82189A4A684ED17D82A70B1AAF
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e4:70:fb:d3:75:d9:b0:5c:9e:f8:54:c8:37:54:
9d:d1:7c:0a:a2:5f:c2:6e:72:93:3c:04:da:58:ff:
4e:5a:a0:2b:64:6d:74:ca:f0:10:e6:54:47:dc:6e:
cc:b8:ec:95:fa:7a:54:01:b8:83:da:11:af:be:f4:
98:e0:77:43:56:8c:97:48:84:cd:ba:72:13:0e:66:
e8:63:72:3e:61:90:57:79:7e:71:42:f9:a5:46:9f:
23:66:da:58:c9:4a:04:4a:b9:b1:9b:7b:8e:06:bc:
66:a6:05:93:b0:95:d5:41:8b:c1:b2:d2:71:87:93:
1f:2c:fe:d1:5d:98:a0:d1:8e:5a:af:05:df:27:d9:
4f:4b:68:6e:54:8d:7d:9d:15:ac:7c:15:03:12:2f:
a5:75:64:61:12:05:87:15:41:23:42:55:dc:b1:e6:
a7:0b:c8:78:20:2f:84:20:6b:83:d6:5d:11:cb:a0:
29:a7:90:6c:53:0c:38:9c:45:c4:15:ad:bb:30:6e:
9f:db:3a:3a:30:34:3e:7b:f2:56:ab:f0:50:fb:88:
e0:03:f2:2e:21:69:d6:48:78:2d:66:02:ef:b6:21:
21:32:5f:89:b2:d2:ce:68:77:b2:fa:03:cf:35:f4:
c9:f9:98:c5:9f:29:58:32:b0:97:92:76:87:da:6f:
24:57
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
01:A1:1A:8C:DD:7A:FD:82:18:9A:4A:68:4E:D1:7D:82:A7:0B:1A:AF
X509v3 Authority Key Identifier:
keyid:0B:83:2D:69:BE:C9:26:6B:0E:83:CC:71:82:59:5C:BE:26:71:C4:83
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.paas.rpki.ripe.net/repository/3cb89db2-798b-44f0-9c56-1067803111c0/0/0B832D69BEC9266B0E83CC7182595CBE2671C483.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/C4Mtab7JJmsOg8xxgllcviZxxIM.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/3cb89db2-798b-44f0-9c56-1067803111c0/0/38372e3234382e3134362e302f32342d3234203d3e20323132333335.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
87.248.146.0/24
Signature Algorithm: sha256WithRSAEncryption
2f:21:a7:73:61:05:ca:24:47:56:ae:3f:19:b2:26:da:93:f8:
0b:3a:62:59:58:10:30:91:0d:e7:f2:03:55:73:02:16:f4:8b:
0f:dd:19:14:62:d3:3e:24:a8:dd:dd:c2:5f:0f:fc:b5:01:b1:
01:47:b6:5f:cd:d4:ad:02:bf:86:b0:52:35:7e:13:1a:b2:83:
e4:21:b7:ca:fb:65:59:bf:b5:dc:15:80:d0:72:18:16:55:83:
d7:bf:97:0b:05:6c:d2:c8:39:b2:e1:72:5d:c1:24:61:6d:57:
42:2c:57:ea:20:b8:4a:35:eb:b3:c8:00:a2:13:88:59:37:a6:
06:44:3d:a7:4a:f1:d7:ed:87:21:2f:52:e7:78:07:67:fd:eb:
94:d3:aa:bd:88:98:16:14:e4:77:3e:04:a0:fd:fa:80:52:42:
41:99:c4:07:62:b5:96:fe:73:19:ff:e1:f5:56:e0:2b:7a:d3:
17:15:c1:b7:68:da:57:7d:a8:d7:66:40:04:ef:f5:a2:c1:94:
94:e1:93:15:3f:f4:b7:f2:c9:e4:03:be:68:f3:0c:ae:ca:a9:
1d:64:3e:3e:21:e1:8b:c1:83:a8:80:42:90:17:0d:df:b8:6f:
13:8f:34:9d:16:f1:87:18:e7:e7:13:c9:f6:1b:1c:8c:e2:e8:
80:52:4c:f5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Jul 21 23:59:33 2025 by rpki-client