Route Origin Authorization
$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/3cb89db2-798b-44f0-9c56-1067803111c0/0/38372e3234382e3134382e302f32342d3234203d3e2035363530.roa
File: 38372e3234382e3134382e302f32342d3234203d3e2035363530.roa (raw, json)
Hash identifier: Px0Il8k9ZvjVNfqamqF8rYmPED4vZrjrxkZ/QWWoKTE=
Subject key identifier: 3A:94:EB:C3:20:73:2B:D9:80:70:58:89:54:4A:13:CE:56:64:07:73
Certificate issuer: /CN=0b832d69bec9266b0e83cc7182595cbe2671c483
Certificate serial: 0D42C2EFAA57C6882BDFD93A135CE8A52B8826C3
Authority key identifier: 0B:83:2D:69:BE:C9:26:6B:0E:83:CC:71:82:59:5C:BE:26:71:C4:83
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/C4Mtab7JJmsOg8xxgllcviZxxIM.cer
Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/3cb89db2-798b-44f0-9c56-1067803111c0/0/38372e3234382e3134382e302f32342d3234203d3e2035363530.roa
Signing time: Mon 07 Jul 2025 14:12:07 +0000
ROA not before: Mon 07 Jul 2025 14:07:07 +0000
ROA not after: Mon 06 Jul 2026 14:12:07 +0000
asID: 5650
IP address blocks: 87.248.148.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
0d:42:c2:ef:aa:57:c6:88:2b:df:d9:3a:13:5c:e8:a5:2b:88:26:c3
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=0b832d69bec9266b0e83cc7182595cbe2671c483
Validity
Not Before: Jul 7 14:07:07 2025 GMT
Not After : Jul 6 14:12:07 2026 GMT
Subject: CN=3A94EBC320732BD980705889544A13CE56640773
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:99:c1:35:12:00:00:53:05:97:fb:fa:b3:fc:e3:
c8:04:34:b1:16:86:db:7c:ea:28:fe:38:bc:f0:ba:
d0:7d:f6:12:8b:86:2d:0a:12:76:cc:47:f3:fc:98:
c2:f6:62:60:c4:d4:76:b2:8d:e6:6a:11:2a:1b:6d:
da:87:3d:89:96:ef:a2:3d:23:60:57:77:41:1a:fa:
5e:a0:28:b0:f1:34:d4:e7:55:eb:e0:f7:d1:03:cb:
f0:a3:77:93:24:00:48:9a:e9:77:b4:a5:0a:08:e0:
4f:06:78:5d:ba:a2:10:77:54:39:c9:a4:e6:dd:d8:
64:61:46:9d:ee:3a:0d:1b:31:32:2f:a1:25:6b:10:
21:43:fe:d4:f1:63:0f:97:88:9f:e5:a3:21:5b:3a:
d6:55:3e:1b:a6:29:55:fc:1c:54:49:bb:4f:8d:2d:
4b:07:19:7f:79:fb:95:9b:9c:e8:63:a0:a6:18:92:
9c:84:e4:a1:55:b2:c1:4e:fa:34:c8:99:20:86:c8:
38:fd:0f:65:10:68:82:de:ae:11:42:f7:2e:22:2a:
19:54:9a:6f:10:7e:a4:ba:74:41:20:ef:ee:17:0d:
75:7e:d0:81:73:e3:30:54:36:4f:00:4e:86:49:c9:
8d:a8:c2:d2:7f:51:4f:da:18:24:65:e1:b8:b2:87:
6a:7f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
3A:94:EB:C3:20:73:2B:D9:80:70:58:89:54:4A:13:CE:56:64:07:73
X509v3 Authority Key Identifier:
keyid:0B:83:2D:69:BE:C9:26:6B:0E:83:CC:71:82:59:5C:BE:26:71:C4:83
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.paas.rpki.ripe.net/repository/3cb89db2-798b-44f0-9c56-1067803111c0/0/0B832D69BEC9266B0E83CC7182595CBE2671C483.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/C4Mtab7JJmsOg8xxgllcviZxxIM.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/3cb89db2-798b-44f0-9c56-1067803111c0/0/38372e3234382e3134382e302f32342d3234203d3e2035363530.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
87.248.148.0/24
Signature Algorithm: sha256WithRSAEncryption
98:52:02:56:1d:f5:07:d6:a7:87:ae:c5:54:ed:db:56:de:d3:
c4:1f:5a:ca:20:67:a0:f7:0d:93:a6:55:f3:5a:d6:2b:ff:ec:
84:11:aa:0b:14:69:a6:0c:3b:dc:c8:95:3a:58:e8:dc:4c:14:
08:1c:14:bd:67:63:d0:5e:a8:f1:4c:8d:f9:27:e0:cc:a3:d1:
02:f1:10:0c:08:df:2c:0b:99:d5:b7:9a:6b:be:70:df:1e:d9:
db:37:ce:25:11:14:fd:22:c0:94:3a:6f:1a:c6:ad:af:c7:9b:
38:02:52:29:78:fa:99:c5:92:d8:31:60:3d:b3:16:33:b8:26:
7d:72:c6:c2:80:60:e4:ff:d6:0a:a7:96:53:f0:93:88:46:fb:
2b:8b:ba:08:e7:b6:f0:bb:ce:2e:2e:88:a7:82:c7:6d:68:5f:
54:2b:c8:02:63:02:d8:c3:fe:ec:43:f6:7f:72:2e:1f:e4:9b:
5c:7d:16:10:30:84:ac:14:a2:39:3b:4e:0a:29:fc:7e:d1:b2:
4a:99:7d:94:94:a2:38:3e:06:2c:79:82:86:d4:3a:02:ae:d0:
05:ef:a8:ab:be:17:e2:09:c4:10:fb:5f:78:8e:e5:02:0e:a1:
8e:d3:b6:8b:53:14:1d:a3:fc:8e:fa:16:c1:99:79:29:c9:96:
6c:3d:bf:7e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Jul 21 23:59:34 2025 by rpki-client