Route Origin Authorization
$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/3cb89db2-798b-44f0-9c56-1067803111c0/0/38372e3234382e3135342e302f32342d3234203d3e203437323136.roa
File: 38372e3234382e3135342e302f32342d3234203d3e203437323136.roa (raw, json)
Hash identifier: FghF/Srfc72oOZPiU+neRYk3dSxQEyvtbsfOuBQAMXE=
Subject key identifier: 98:06:70:D1:FD:BA:30:E5:9E:7B:13:95:DC:A0:00:D4:57:37:E4:04
Certificate issuer: /CN=0b832d69bec9266b0e83cc7182595cbe2671c483
Certificate serial: 748049E3096033CD1777E70C0F1DD4BF28E404AB
Authority key identifier: 0B:83:2D:69:BE:C9:26:6B:0E:83:CC:71:82:59:5C:BE:26:71:C4:83
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/C4Mtab7JJmsOg8xxgllcviZxxIM.cer
Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/3cb89db2-798b-44f0-9c56-1067803111c0/0/38372e3234382e3135342e302f32342d3234203d3e203437323136.roa
Signing time: Mon 07 Jul 2025 14:12:12 +0000
ROA not before: Mon 07 Jul 2025 14:07:12 +0000
ROA not after: Mon 06 Jul 2026 14:12:12 +0000
asID: 47216
IP address blocks: 87.248.154.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
74:80:49:e3:09:60:33:cd:17:77:e7:0c:0f:1d:d4:bf:28:e4:04:ab
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=0b832d69bec9266b0e83cc7182595cbe2671c483
Validity
Not Before: Jul 7 14:07:12 2025 GMT
Not After : Jul 6 14:12:12 2026 GMT
Subject: CN=980670D1FDBA30E59E7B1395DCA000D45737E404
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b5:2d:91:4f:a6:a0:4c:cb:cc:d4:c8:cd:a8:1b:
ca:4c:ab:1e:17:7e:f6:ae:53:6c:a2:37:4a:97:85:
8f:3e:d9:ed:6e:54:8c:68:a4:d4:10:92:7f:48:ed:
c4:08:46:02:50:10:70:86:d6:54:c5:03:27:e8:a8:
af:2e:91:37:4f:10:3c:9d:da:bf:0a:1b:f6:f6:f6:
f6:75:8a:23:57:a9:e8:97:65:d5:56:df:0c:ed:ce:
df:d1:eb:04:e6:09:77:6b:ec:e2:8b:02:3c:0d:a7:
00:ec:17:b4:a1:49:77:61:14:11:46:cd:ef:5e:06:
f3:44:ee:3f:c8:79:bc:49:35:c8:c3:6f:74:2e:0b:
15:1b:03:e4:bc:d2:ed:41:dd:03:c4:45:ae:33:ce:
1d:13:30:0f:ab:51:48:8f:ca:46:75:e3:dc:c4:89:
94:43:d1:b0:ed:e3:5c:20:66:24:c4:e3:2e:95:55:
e1:d5:2f:e1:0d:79:b1:bd:f5:f7:bf:21:07:b9:f1:
b6:0a:0d:58:a4:7e:84:e2:70:a2:e6:74:a8:04:1d:
75:77:87:5c:4a:d3:3f:0f:bf:67:8b:10:43:28:17:
79:3d:69:9d:bb:2c:81:28:99:56:c7:cf:f5:1b:95:
d6:f7:9c:99:c1:4f:7d:ae:6d:21:fc:24:f5:bc:14:
a0:cf
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
98:06:70:D1:FD:BA:30:E5:9E:7B:13:95:DC:A0:00:D4:57:37:E4:04
X509v3 Authority Key Identifier:
keyid:0B:83:2D:69:BE:C9:26:6B:0E:83:CC:71:82:59:5C:BE:26:71:C4:83
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.paas.rpki.ripe.net/repository/3cb89db2-798b-44f0-9c56-1067803111c0/0/0B832D69BEC9266B0E83CC7182595CBE2671C483.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/C4Mtab7JJmsOg8xxgllcviZxxIM.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/3cb89db2-798b-44f0-9c56-1067803111c0/0/38372e3234382e3135342e302f32342d3234203d3e203437323136.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
87.248.154.0/24
Signature Algorithm: sha256WithRSAEncryption
64:3c:56:1b:d4:c3:23:de:7e:b9:f7:95:07:08:ac:96:05:29:
72:1f:2f:c1:99:8b:7a:50:18:a3:a5:b7:b6:1c:1f:3a:74:95:
b3:31:3a:18:c7:6a:5d:2d:0a:d1:ef:77:7e:4a:49:66:81:26:
e6:21:4b:22:0e:c0:d2:07:50:f9:b7:2f:4c:7d:10:ef:e8:2c:
bb:92:8d:da:a6:5b:76:ef:bd:ac:b5:f2:0a:7d:05:d7:4a:1b:
28:9c:e9:5d:c7:ac:fe:d6:b5:91:e4:20:63:6d:bf:4b:f7:47:
ef:ef:98:b0:ee:ad:00:b8:76:28:1d:b3:43:23:a0:0b:36:9a:
81:84:f2:e0:5f:6e:98:c4:54:f5:7a:9d:2e:9c:92:c2:de:93:
1c:84:33:90:fe:03:12:ad:4f:bc:47:19:ec:fd:92:11:ec:ef:
53:84:bf:70:b3:cb:3f:45:e0:25:b7:32:08:85:fe:23:bb:d8:
71:21:b9:f3:9e:55:1f:26:6c:01:cb:53:85:9c:ad:9e:f2:68:
9e:89:9b:bd:a3:af:73:1d:1e:d8:7c:b3:0a:5f:71:68:cb:63:
c8:5f:c1:e8:13:ba:2c:5f:98:6b:9e:6e:87:21:56:1b:47:70:
97:b4:3c:ca:95:3b:6b:dc:bc:fb:a2:c7:0d:09:a1:98:96:9f:
31:d1:80:0f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jul 22 04:49:00 2025 by rpki-client