Route Origin Authorization
$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/3cb89db2-798b-44f0-9c56-1067803111c0/0/38372e3234382e3135302e302f32342d3234203d3e20323038313631.roa
File: 38372e3234382e3135302e302f32342d3234203d3e20323038313631.roa (raw, json)
Hash identifier: rDTOoBOqz7j2cmRyzdjYqHrBiv0Qhg5DKG5Ey+7i+00=
Subject key identifier: 62:1F:7D:DA:BF:F8:8A:6B:43:01:AB:4C:83:0C:D7:87:E1:C4:6B:06
Certificate issuer: /CN=0b832d69bec9266b0e83cc7182595cbe2671c483
Certificate serial: 3B5412ED769384C162F0E8BD123AFFB21D3EFAD9
Authority key identifier: 0B:83:2D:69:BE:C9:26:6B:0E:83:CC:71:82:59:5C:BE:26:71:C4:83
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/C4Mtab7JJmsOg8xxgllcviZxxIM.cer
Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/3cb89db2-798b-44f0-9c56-1067803111c0/0/38372e3234382e3135302e302f32342d3234203d3e20323038313631.roa
Signing time: Mon 07 Jul 2025 14:12:45 +0000
ROA not before: Mon 07 Jul 2025 14:07:45 +0000
ROA not after: Mon 06 Jul 2026 14:12:45 +0000
asID: 208161
IP address blocks: 87.248.150.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
3b:54:12:ed:76:93:84:c1:62:f0:e8:bd:12:3a:ff:b2:1d:3e:fa:d9
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=0b832d69bec9266b0e83cc7182595cbe2671c483
Validity
Not Before: Jul 7 14:07:45 2025 GMT
Not After : Jul 6 14:12:45 2026 GMT
Subject: CN=621F7DDABFF88A6B4301AB4C830CD787E1C46B06
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9e:e1:e2:e9:ac:7a:ce:12:d0:f9:c0:90:b9:76:
4f:f2:03:08:06:af:d9:2b:89:95:86:db:9e:2f:c3:
2a:11:fc:ef:30:b0:1b:fc:26:0d:7b:31:9d:c6:63:
99:61:91:69:e1:34:29:91:8d:34:c8:67:ff:2e:ea:
c5:ea:89:5c:65:36:cc:81:5d:f4:41:06:bb:57:f7:
4a:da:e1:12:fd:77:c8:b6:75:30:71:6f:ad:e8:5f:
d9:88:0d:a7:57:7b:37:b5:a0:08:f0:15:c0:95:21:
99:5b:93:06:15:f6:29:fe:a0:8e:6e:e0:36:63:c8:
da:cd:9c:1e:c6:18:25:a3:19:49:55:95:c1:45:0b:
56:0f:c9:49:c6:4e:3a:b6:2c:42:55:98:98:5d:0a:
f0:81:ad:48:25:0d:dd:3c:e7:c2:04:3d:73:2b:37:
b2:a0:df:3d:dd:21:a8:2d:31:69:c5:a9:71:22:ac:
b2:45:3e:38:8c:3c:a5:85:ff:1a:0b:2c:83:64:50:
93:b6:a1:81:3f:63:27:fa:a6:99:bf:8b:de:a6:f8:
7a:b3:b3:7c:78:89:c7:ce:b9:dd:5f:d9:1c:3f:b3:
38:e5:43:37:d2:5a:ad:7c:5f:de:77:41:fb:9c:27:
48:6c:86:70:d7:42:ba:44:33:f2:0f:50:b5:93:36:
2a:63
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
62:1F:7D:DA:BF:F8:8A:6B:43:01:AB:4C:83:0C:D7:87:E1:C4:6B:06
X509v3 Authority Key Identifier:
keyid:0B:83:2D:69:BE:C9:26:6B:0E:83:CC:71:82:59:5C:BE:26:71:C4:83
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.paas.rpki.ripe.net/repository/3cb89db2-798b-44f0-9c56-1067803111c0/0/0B832D69BEC9266B0E83CC7182595CBE2671C483.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/C4Mtab7JJmsOg8xxgllcviZxxIM.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/3cb89db2-798b-44f0-9c56-1067803111c0/0/38372e3234382e3135302e302f32342d3234203d3e20323038313631.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
87.248.150.0/24
Signature Algorithm: sha256WithRSAEncryption
9c:75:21:06:24:09:b6:32:90:3d:66:6d:6f:a3:e1:dd:eb:d9:
fd:ee:ca:29:45:53:b7:76:6a:be:50:09:8a:5c:2e:be:a4:21:
4a:11:74:e8:84:52:95:33:b7:5c:d3:6e:d2:f4:3e:54:21:07:
17:70:dc:b0:6c:12:a4:7f:9c:54:c2:5c:11:d4:c8:52:41:37:
c0:0f:e2:81:e8:c4:d8:a7:36:fe:aa:a4:b9:b6:a0:84:dd:d7:
34:a9:19:b9:88:ca:0c:4e:a0:2f:26:b8:7e:41:1f:a7:d5:ad:
7e:b8:eb:94:66:2b:14:49:ae:ca:60:f5:2c:e8:b4:a0:c3:c6:
01:24:49:7e:65:fc:7c:45:d1:67:58:7c:67:b5:e0:3b:2f:a5:
61:9c:49:0b:63:97:16:4e:08:4e:79:1f:e3:f9:a3:f7:61:c4:
aa:82:6f:01:46:fc:77:37:76:f9:bf:40:5a:da:b3:38:fa:68:
bc:b6:81:57:71:0a:73:b4:a4:a3:86:78:59:05:9d:ad:f9:38:
db:a2:09:c0:cf:9e:6d:d0:59:1c:a1:d5:e9:04:95:03:ce:6d:
18:50:fb:af:66:d1:89:a4:bb:dc:d7:6b:cb:b0:eb:2b:b1:ef:
b6:bf:3d:6d:19:2b:c5:7a:a0:8b:38:05:80:d5:54:17:92:ce:
69:49:5c:54
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Jul 21 23:59:20 2025 by rpki-client