Route Origin Authorization
$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/3cb89db2-798b-44f0-9c56-1067803111c0/0/38372e3234382e3134372e302f32342d3234203d3e203438313437.roa
File: 38372e3234382e3134372e302f32342d3234203d3e203438313437.roa (raw, json)
Hash identifier: jfUuPkTrVGcKDUm4Cn2bjnqI8OO+MYXw88zDyusLRuc=
Subject key identifier: 95:36:A4:B2:AC:A9:47:15:23:B8:56:F7:9E:AC:49:B2:6D:81:38:69
Certificate issuer: /CN=0b832d69bec9266b0e83cc7182595cbe2671c483
Certificate serial: 6F70F2F8CC62EE0C16667C8CEB76D7A114C505CE
Authority key identifier: 0B:83:2D:69:BE:C9:26:6B:0E:83:CC:71:82:59:5C:BE:26:71:C4:83
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/C4Mtab7JJmsOg8xxgllcviZxxIM.cer
Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/3cb89db2-798b-44f0-9c56-1067803111c0/0/38372e3234382e3134372e302f32342d3234203d3e203438313437.roa
Signing time: Mon 07 Jul 2025 14:12:18 +0000
ROA not before: Mon 07 Jul 2025 14:07:18 +0000
ROA not after: Mon 06 Jul 2026 14:12:18 +0000
asID: 48147
IP address blocks: 87.248.147.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
6f:70:f2:f8:cc:62:ee:0c:16:66:7c:8c:eb:76:d7:a1:14:c5:05:ce
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=0b832d69bec9266b0e83cc7182595cbe2671c483
Validity
Not Before: Jul 7 14:07:18 2025 GMT
Not After : Jul 6 14:12:18 2026 GMT
Subject: CN=9536A4B2ACA9471523B856F79EAC49B26D813869
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:da:68:36:9d:d9:66:0c:5c:e1:8d:b4:4e:0e:78:
8c:c8:4a:0f:35:d0:5d:d5:a2:33:02:27:3d:c0:68:
71:99:35:07:ff:9c:7e:bf:cf:3e:d6:33:98:c5:ef:
b0:be:02:f4:ea:4e:d6:7c:bb:35:a7:57:dd:2e:f1:
76:ca:c8:a0:94:bd:99:8f:58:6e:d2:09:94:2e:d4:
4b:ba:da:24:02:40:9d:ed:6c:28:dd:4c:dc:6a:3a:
06:a1:85:7f:68:bd:df:64:85:fa:65:e4:24:b1:7e:
25:55:3c:c6:0f:58:19:fc:73:05:a2:72:e1:19:e7:
46:26:dc:38:d8:e4:3f:4d:da:c9:ae:11:43:65:be:
72:ea:d4:fc:b2:58:ac:c9:41:df:e5:f5:11:9f:f2:
6f:6b:f6:a2:cf:38:ee:84:4f:85:30:1e:3c:d4:bb:
a5:b2:a8:85:9f:42:fe:a4:5d:1e:25:0a:a5:eb:64:
14:f4:24:ca:de:f4:2b:2c:cd:61:8a:b0:66:a4:a2:
34:45:23:9e:8d:71:40:c3:f3:41:d8:29:5d:3b:d9:
dd:4f:f9:5b:42:b6:96:d8:d9:a0:67:e2:45:f3:8e:
a2:a7:7e:37:9b:0d:ba:99:8f:4d:ff:02:a8:f3:58:
81:30:85:02:71:2a:0d:c3:5b:e7:f3:6f:b8:3c:43:
fc:d1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
95:36:A4:B2:AC:A9:47:15:23:B8:56:F7:9E:AC:49:B2:6D:81:38:69
X509v3 Authority Key Identifier:
keyid:0B:83:2D:69:BE:C9:26:6B:0E:83:CC:71:82:59:5C:BE:26:71:C4:83
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.paas.rpki.ripe.net/repository/3cb89db2-798b-44f0-9c56-1067803111c0/0/0B832D69BEC9266B0E83CC7182595CBE2671C483.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/C4Mtab7JJmsOg8xxgllcviZxxIM.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/3cb89db2-798b-44f0-9c56-1067803111c0/0/38372e3234382e3134372e302f32342d3234203d3e203438313437.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
87.248.147.0/24
Signature Algorithm: sha256WithRSAEncryption
74:a3:f5:78:fc:da:55:74:17:02:9f:87:bf:cb:4c:b8:30:2b:
67:53:58:fb:00:a0:20:7f:a5:2d:2a:dc:35:c9:55:b1:e8:a5:
b4:76:c2:07:44:ee:a2:e0:95:59:3a:6d:c0:6b:85:87:b7:da:
7f:09:49:7d:6b:05:ef:48:91:a7:f4:39:e9:c8:a3:24:0e:8f:
b1:f2:34:cb:b2:15:63:19:bf:19:1c:53:1e:c6:65:3d:0e:45:
61:3c:5b:0e:39:7f:90:16:70:26:57:69:bf:58:9c:79:2e:24:
87:da:0a:52:92:85:9b:f7:80:20:46:86:d9:50:b3:52:1f:b5:
66:e4:27:c4:ee:35:40:15:ae:7b:75:d2:17:02:5e:df:c9:9a:
c0:6b:9c:24:7d:79:65:d2:70:37:bf:6d:ba:56:db:34:54:7a:
46:e1:a6:8b:8d:66:4a:a3:73:1c:ac:d8:7f:16:d1:90:9b:50:
91:50:9d:02:f2:e0:af:35:cb:e4:0c:5d:58:9d:7f:8e:15:92:
7f:e8:b6:de:0b:a4:b6:eb:08:8b:a3:7b:e8:20:34:d4:a3:39:
bd:b5:09:d8:f3:81:b7:c7:e1:9b:61:0a:74:4c:1b:ad:7b:41:
05:51:0e:b1:9f:09:55:3c:87:f7:d8:a7:ef:41:e4:e3:38:6c:
6c:21:38:b3
-----BEGIN CERTIFICATE-----
MIIFMzCCBBugAwIBAgIUb3Dy+Mxi7gwWZnyM63bXoRTFBc4wDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoMGI4MzJkNjliZWM5MjY2YjBlODNjYzcxODI1OTVjYmUy
NjcxYzQ4MzAeFw0yNTA3MDcxNDA3MThaFw0yNjA3MDYxNDEyMThaMDMxMTAvBgNV
BAMTKDk1MzZBNEIyQUNBOTQ3MTUyM0I4NTZGNzlFQUM0OUIyNkQ4MTM4NjkwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDaaDad2WYMXOGNtE4OeIzISg81
0F3VojMCJz3AaHGZNQf/nH6/zz7WM5jF77C+AvTqTtZ8uzWnV90u8XbKyKCUvZmP
WG7SCZQu1Eu62iQCQJ3tbCjdTNxqOgahhX9ovd9khfpl5CSxfiVVPMYPWBn8cwWi
cuEZ50Ym3DjY5D9N2smuEUNlvnLq1PyyWKzJQd/l9RGf8m9r9qLPOO6ET4UwHjzU
u6WyqIWfQv6kXR4lCqXrZBT0JMre9CsszWGKsGakojRFI56NcUDD80HYKV072d1P
+VtCtpbY2aBn4kXzjqKnfjebDbqZj03/AqjzWIEwhQJxKg3DW+fzb7g8Q/zRAgMB
AAGjggI9MIICOTAdBgNVHQ4EFgQUlTaksqypRxUjuFb3nqxJsm2BOGkwHwYDVR0j
BBgwFoAUC4Mtab7JJmsOg8xxgllcviZxxIMwDgYDVR0PAQH/BAQDAgeAMIGVBgNV
HR8EgY0wgYowgYeggYSggYGGf3JzeW5jOi8vcnN5bmMucGFhcy5ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvM2NiODlkYjItNzk4Yi00NGYwLTljNTYtMTA2NzgwMzEx
MWMwLzAvMEI4MzJENjlCRUM5MjY2QjBFODNDQzcxODI1OTVDQkUyNjcxQzQ4My5j
cmwwZAYIKwYBBQUHAQEEWDBWMFQGCCsGAQUFBzAChkhyc3luYzovL3Jwa2kucmlw
ZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxUL0M0TXRhYjdKSm1zT2c4eHhnbGxjdmla
eHhJTS5jZXIwga0GCCsGAQUFBwELBIGgMIGdMIGaBggrBgEFBQcwC4aBjXJzeW5j
Oi8vcnN5bmMucGFhcy5ycGtpLnJpcGUubmV0L3JlcG9zaXRvcnkvM2NiODlkYjIt
Nzk4Yi00NGYwLTljNTYtMTA2NzgwMzExMWMwLzAvMzgzNzJlMzIzNDM4MmUzMTM0
MzcyZTMwMmYzMjM0MmQzMjM0MjAzZDNlMjAzNDM4MzEzNDM3LnJvYTAYBgNVHSAB
Af8EDjAMMAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQA
V/iTMA0GCSqGSIb3DQEBCwUAA4IBAQB0o/V4/NpVdBcCn4e/y0y4MCtnU1j7AKAg
f6UtKtw1yVWx6KW0dsIHRO6i4JVZOm3Aa4WHt9p/CUl9awXvSJGn9DnpyKMkDo+x
8jTLshVjGb8ZHFMexmU9DkVhPFsOOX+QFnAmV2m/WJx5LiSH2gpSkoWb94AgRobZ
ULNSH7Vm5CfE7jVAFa57ddIXAl7fyZrAa5wkfXll0nA3v226Vts0VHpG4aaLjWZK
o3McrNh/FtGQm1CRUJ0C8uCvNcvkDF1YnX+OFZJ/6LbeC6S26wiLo3voIDTUozm9
tQnY84G3x+GbYQp0TBute0EFUQ6xnwlVPIf32KfvQeTjOGxsITiz
-----END CERTIFICATE-----
Generated at Mon Jul 21 23:59:32 2025 by rpki-client