Route Origin Authorization
$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/3cb89db2-798b-44f0-9c56-1067803111c0/0/38372e3234382e3135312e302f32342d3234203d3e20323038313631.roa
File: 38372e3234382e3135312e302f32342d3234203d3e20323038313631.roa (raw, json)
Hash identifier: dvF+MjOdU8ETxv8uBh9nGGUKLUMJEpSqeRewb5VEgBo=
Subject key identifier: BC:D8:76:CD:77:F8:91:1D:8B:6B:F7:AB:C8:63:8D:F3:8E:78:86:CF
Certificate issuer: /CN=0b832d69bec9266b0e83cc7182595cbe2671c483
Certificate serial: 32594EBB3F3C034D5323F55003A5A0DAD900681B
Authority key identifier: 0B:83:2D:69:BE:C9:26:6B:0E:83:CC:71:82:59:5C:BE:26:71:C4:83
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/C4Mtab7JJmsOg8xxgllcviZxxIM.cer
Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/3cb89db2-798b-44f0-9c56-1067803111c0/0/38372e3234382e3135312e302f32342d3234203d3e20323038313631.roa
Signing time: Mon 07 Jul 2025 14:12:48 +0000
ROA not before: Mon 07 Jul 2025 14:07:48 +0000
ROA not after: Mon 06 Jul 2026 14:12:48 +0000
asID: 208161
IP address blocks: 87.248.151.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
32:59:4e:bb:3f:3c:03:4d:53:23:f5:50:03:a5:a0:da:d9:00:68:1b
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=0b832d69bec9266b0e83cc7182595cbe2671c483
Validity
Not Before: Jul 7 14:07:48 2025 GMT
Not After : Jul 6 14:12:48 2026 GMT
Subject: CN=BCD876CD77F8911D8B6BF7ABC8638DF38E7886CF
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a7:1c:85:53:a1:1c:2f:e0:89:1a:d8:ae:dc:fd:
5b:a2:81:14:16:b2:fd:aa:3f:f3:e0:a6:4a:ff:8a:
bc:63:16:9d:4b:8f:13:49:8b:64:2d:93:92:98:bc:
c7:9a:87:9f:8d:db:7c:da:fa:47:df:ce:e4:22:f9:
4c:54:84:ab:2a:78:4f:7e:34:60:14:43:ed:97:7f:
59:02:e9:b1:cf:4b:2f:59:67:8d:fe:83:62:3b:cc:
54:e2:c8:27:1c:4d:f0:64:b7:49:8d:07:b6:b4:a6:
4a:0c:d4:27:15:8f:28:4a:39:34:77:d9:3f:9b:96:
87:0c:86:85:dd:8a:e6:8a:3e:bd:e7:76:14:59:99:
d8:5b:81:0a:4c:15:fa:e3:68:c2:de:72:eb:61:3c:
e8:19:ae:2b:7d:5c:83:83:9b:6f:56:0b:07:ca:68:
73:72:5b:79:90:20:3f:ad:41:c3:25:22:e5:f4:2c:
37:95:dd:c6:4b:53:a1:8b:5e:52:75:1a:36:d7:58:
6a:00:10:54:6d:92:81:68:26:a4:77:01:a1:5d:76:
68:ba:a7:d8:46:3b:4f:94:19:7c:fc:0e:37:16:da:
1d:d2:ee:83:82:ee:9d:5d:61:bc:81:01:ab:f3:d4:
c2:29:f9:91:8f:83:7e:af:0c:70:fb:cf:55:ef:df:
3c:af
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
BC:D8:76:CD:77:F8:91:1D:8B:6B:F7:AB:C8:63:8D:F3:8E:78:86:CF
X509v3 Authority Key Identifier:
keyid:0B:83:2D:69:BE:C9:26:6B:0E:83:CC:71:82:59:5C:BE:26:71:C4:83
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.paas.rpki.ripe.net/repository/3cb89db2-798b-44f0-9c56-1067803111c0/0/0B832D69BEC9266B0E83CC7182595CBE2671C483.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/C4Mtab7JJmsOg8xxgllcviZxxIM.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/3cb89db2-798b-44f0-9c56-1067803111c0/0/38372e3234382e3135312e302f32342d3234203d3e20323038313631.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
87.248.151.0/24
Signature Algorithm: sha256WithRSAEncryption
52:16:2b:b9:a7:3a:0f:03:47:d5:fd:c7:2f:61:38:52:4a:10:
ec:ee:fa:35:0b:a2:c4:37:4b:4a:df:cd:db:94:24:a3:8a:91:
7f:0e:4f:35:0a:cb:0d:16:90:1a:3e:11:a5:77:af:f5:8f:2f:
49:12:b6:1d:51:e8:c4:08:23:8e:77:e6:8a:9e:2a:87:a8:84:
48:91:67:7c:df:27:92:42:db:5d:98:05:5f:48:85:2e:d6:1a:
46:3c:99:93:0c:57:95:4f:8c:1c:70:b2:42:96:00:a5:df:f4:
2e:e3:89:03:c9:08:54:1b:bb:f9:ba:60:67:03:d4:8c:f5:75:
6c:fe:59:0c:5a:e1:94:27:ee:d7:c1:03:dc:94:fa:b7:ec:5b:
b5:8f:e5:db:e6:69:d6:41:c2:a3:dd:b4:9f:cc:db:e8:d9:d6:
f3:85:0c:fb:dd:ac:85:4f:2b:0e:9d:9c:de:9d:61:eb:a7:a1:
38:18:20:c7:dc:49:1b:0f:20:77:2e:63:59:a0:f0:e5:1a:d9:
3d:39:5b:45:31:69:74:fe:09:d6:24:79:5c:fb:c2:9c:3d:e2:
c2:b2:ad:d4:93:11:e9:36:6a:dd:34:57:cc:fc:8a:f1:25:c6:
b2:4f:5e:bd:3c:bf:b9:19:66:62:e1:43:e7:64:74:75:c1:1c:
34:26:a7:11
-----BEGIN CERTIFICATE-----
MIIFNTCCBB2gAwIBAgIUMllOuz88A01TI/VQA6Wg2tkAaBswDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoMGI4MzJkNjliZWM5MjY2YjBlODNjYzcxODI1OTVjYmUy
NjcxYzQ4MzAeFw0yNTA3MDcxNDA3NDhaFw0yNjA3MDYxNDEyNDhaMDMxMTAvBgNV
BAMTKEJDRDg3NkNENzdGODkxMUQ4QjZCRjdBQkM4NjM4REYzOEU3ODg2Q0YwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCnHIVToRwv4Ika2K7c/VuigRQW
sv2qP/Pgpkr/irxjFp1LjxNJi2Qtk5KYvMeah5+N23za+kffzuQi+UxUhKsqeE9+
NGAUQ+2Xf1kC6bHPSy9ZZ43+g2I7zFTiyCccTfBkt0mNB7a0pkoM1CcVjyhKOTR3
2T+blocMhoXdiuaKPr3ndhRZmdhbgQpMFfrjaMLecuthPOgZrit9XIODm29WCwfK
aHNyW3mQID+tQcMlIuX0LDeV3cZLU6GLXlJ1GjbXWGoAEFRtkoFoJqR3AaFddmi6
p9hGO0+UGXz8DjcW2h3S7oOC7p1dYbyBAavz1MIp+ZGPg36vDHD7z1Xv3zyvAgMB
AAGjggI/MIICOzAdBgNVHQ4EFgQUvNh2zXf4kR2La/eryGON8454hs8wHwYDVR0j
BBgwFoAUC4Mtab7JJmsOg8xxgllcviZxxIMwDgYDVR0PAQH/BAQDAgeAMIGVBgNV
HR8EgY0wgYowgYeggYSggYGGf3JzeW5jOi8vcnN5bmMucGFhcy5ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvM2NiODlkYjItNzk4Yi00NGYwLTljNTYtMTA2NzgwMzEx
MWMwLzAvMEI4MzJENjlCRUM5MjY2QjBFODNDQzcxODI1OTVDQkUyNjcxQzQ4My5j
cmwwZAYIKwYBBQUHAQEEWDBWMFQGCCsGAQUFBzAChkhyc3luYzovL3Jwa2kucmlw
ZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxUL0M0TXRhYjdKSm1zT2c4eHhnbGxjdmla
eHhJTS5jZXIwga8GCCsGAQUFBwELBIGiMIGfMIGcBggrBgEFBQcwC4aBj3JzeW5j
Oi8vcnN5bmMucGFhcy5ycGtpLnJpcGUubmV0L3JlcG9zaXRvcnkvM2NiODlkYjIt
Nzk4Yi00NGYwLTljNTYtMTA2NzgwMzExMWMwLzAvMzgzNzJlMzIzNDM4MmUzMTM1
MzEyZTMwMmYzMjM0MmQzMjM0MjAzZDNlMjAzMjMwMzgzMTM2MzEucm9hMBgGA1Ud
IAEB/wQOMAwwCgYIKwYBBQUHDgIwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgABMAYD
BABX+JcwDQYJKoZIhvcNAQELBQADggEBAFIWK7mnOg8DR9X9xy9hOFJKEOzu+jUL
osQ3S0rfzduUJKOKkX8OTzUKyw0WkBo+EaV3r/WPL0kSth1R6MQII4535oqeKoeo
hEiRZ3zfJ5JC212YBV9IhS7WGkY8mZMMV5VPjBxwskKWAKXf9C7jiQPJCFQbu/m6
YGcD1Iz1dWz+WQxa4ZQn7tfBA9yU+rfsW7WP5dvmadZBwqPdtJ/M2+jZ1vOFDPvd
rIVPKw6dnN6dYeunoTgYIMfcSRsPIHcuY1mg8OUa2T05W0UxaXT+CdYkeVz7wpw9
4sKyrdSTEek2at00V8z8ivElxrJPXr08v7kZZmLhQ+dkdHXBHDQmpxE=
-----END CERTIFICATE-----
Generated at Mon Jul 21 23:59:24 2025 by rpki-client