Route Origin Authorization
$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/3cb89db2-798b-44f0-9c56-1067803111c0/0/38372e3234382e3135352e302f32342d3234203d3e20323038313631.roa
File: 38372e3234382e3135352e302f32342d3234203d3e20323038313631.roa (raw, json)
Hash identifier: LegWYOe8PqqZlLXIKn0sNZCM56+oTpfZ2HEaBPkibxM=
Subject key identifier: 76:9B:B6:E8:71:26:AD:8D:A5:8C:56:5C:7E:0B:24:11:37:ED:0E:25
Certificate issuer: /CN=0b832d69bec9266b0e83cc7182595cbe2671c483
Certificate serial: 411B77F0EEC8E0995BE89E225F5C34909F8B0C72
Authority key identifier: 0B:83:2D:69:BE:C9:26:6B:0E:83:CC:71:82:59:5C:BE:26:71:C4:83
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/C4Mtab7JJmsOg8xxgllcviZxxIM.cer
Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/3cb89db2-798b-44f0-9c56-1067803111c0/0/38372e3234382e3135352e302f32342d3234203d3e20323038313631.roa
Signing time: Mon 07 Jul 2025 14:12:52 +0000
ROA not before: Mon 07 Jul 2025 14:07:52 +0000
ROA not after: Mon 06 Jul 2026 14:12:52 +0000
asID: 208161
IP address blocks: 87.248.155.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
41:1b:77:f0:ee:c8:e0:99:5b:e8:9e:22:5f:5c:34:90:9f:8b:0c:72
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=0b832d69bec9266b0e83cc7182595cbe2671c483
Validity
Not Before: Jul 7 14:07:52 2025 GMT
Not After : Jul 6 14:12:52 2026 GMT
Subject: CN=769BB6E87126AD8DA58C565C7E0B241137ED0E25
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b3:0f:ac:5f:3f:cb:08:9a:c5:10:13:19:e8:0f:
e8:9b:df:36:b3:10:b5:6a:c8:b0:57:63:5a:85:49:
28:c1:86:64:72:37:88:63:ac:b5:79:33:c2:37:07:
c6:35:e2:f1:f0:d4:09:88:c6:91:34:01:43:b2:23:
f8:b8:25:57:8b:9c:55:b2:18:9e:f0:18:ec:0c:ba:
db:c5:25:d2:33:fb:99:65:89:24:32:50:7b:34:0b:
f6:27:e9:fd:4a:49:29:88:cc:75:c8:7f:e9:68:5c:
07:63:b6:0e:8d:4a:09:b2:ee:f2:0d:6b:1b:b6:65:
d7:9d:92:18:98:c8:b9:1b:10:7c:5a:78:b5:e3:36:
35:d4:59:1c:3a:ff:7f:d3:0e:a6:5d:7c:25:6e:75:
d7:03:59:e9:a0:b8:a4:09:32:9c:a8:0d:c5:03:40:
e9:29:67:78:90:4c:49:e9:bf:d1:c9:62:fd:fd:39:
32:e5:12:0d:c9:e6:14:88:ff:8b:e7:d8:b6:6f:d2:
8e:e4:01:60:27:4c:86:ba:9c:c9:fd:f8:63:fb:8c:
71:04:8a:cf:69:48:1d:9c:b3:c9:78:a5:70:85:73:
02:57:de:e8:52:39:02:0a:56:d9:2e:de:1b:e7:f9:
78:bc:86:0a:97:95:b5:7c:71:ae:a5:83:44:06:9c:
f2:dd
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
76:9B:B6:E8:71:26:AD:8D:A5:8C:56:5C:7E:0B:24:11:37:ED:0E:25
X509v3 Authority Key Identifier:
keyid:0B:83:2D:69:BE:C9:26:6B:0E:83:CC:71:82:59:5C:BE:26:71:C4:83
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.paas.rpki.ripe.net/repository/3cb89db2-798b-44f0-9c56-1067803111c0/0/0B832D69BEC9266B0E83CC7182595CBE2671C483.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/C4Mtab7JJmsOg8xxgllcviZxxIM.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/3cb89db2-798b-44f0-9c56-1067803111c0/0/38372e3234382e3135352e302f32342d3234203d3e20323038313631.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
87.248.155.0/24
Signature Algorithm: sha256WithRSAEncryption
0a:27:83:d1:5d:3d:d4:2d:10:fd:e4:57:ad:c8:43:7b:07:2e:
96:d0:cb:c3:46:f6:a5:be:7d:eb:f5:b1:f4:de:1e:01:59:0a:
e8:bc:8f:18:5c:a0:22:a2:dc:b7:a1:30:c0:83:2e:de:e2:f5:
b4:1b:b3:25:5b:42:fc:66:ab:21:ff:df:dc:dd:a4:77:27:ed:
fc:0c:89:ec:dc:53:8e:5b:79:c7:b7:d2:7f:38:eb:8f:84:ad:
a3:9b:a9:8f:84:1d:86:fb:1a:56:6c:93:aa:a9:95:a8:e1:42:
c5:2f:aa:5b:5b:0a:13:19:87:76:71:84:8c:b4:eb:a4:d3:53:
5c:01:22:89:f7:93:af:b9:17:94:a5:70:0e:41:8b:da:c1:94:
d7:c9:7c:00:1c:bf:cc:3a:e1:9b:f1:16:8d:e2:5a:2e:61:3c:
42:3b:bd:e2:1e:24:4a:b2:d7:6a:12:40:9d:e9:c0:32:ca:7b:
c0:f1:80:06:70:45:98:b0:71:0d:c7:5b:a6:b0:37:2c:07:62:
0c:2f:4b:60:de:56:0e:f3:bd:1f:d6:98:28:4c:62:9a:70:0c:
62:f5:3a:ef:c2:1d:ff:57:e2:3a:33:15:b8:d1:f0:a9:cc:b9:
ae:1c:0f:33:4f:16:b4:eb:28:75:b8:97:b9:bc:fa:2b:db:ae:
03:6a:fa:c2
-----BEGIN CERTIFICATE-----
MIIFNTCCBB2gAwIBAgIUQRt38O7I4Jlb6J4iX1w0kJ+LDHIwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoMGI4MzJkNjliZWM5MjY2YjBlODNjYzcxODI1OTVjYmUy
NjcxYzQ4MzAeFw0yNTA3MDcxNDA3NTJaFw0yNjA3MDYxNDEyNTJaMDMxMTAvBgNV
BAMTKDc2OUJCNkU4NzEyNkFEOERBNThDNTY1QzdFMEIyNDExMzdFRDBFMjUwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCzD6xfP8sImsUQExnoD+ib3zaz
ELVqyLBXY1qFSSjBhmRyN4hjrLV5M8I3B8Y14vHw1AmIxpE0AUOyI/i4JVeLnFWy
GJ7wGOwMutvFJdIz+5lliSQyUHs0C/Yn6f1KSSmIzHXIf+loXAdjtg6NSgmy7vIN
axu2ZdedkhiYyLkbEHxaeLXjNjXUWRw6/3/TDqZdfCVuddcDWemguKQJMpyoDcUD
QOkpZ3iQTEnpv9HJYv39OTLlEg3J5hSI/4vn2LZv0o7kAWAnTIa6nMn9+GP7jHEE
is9pSB2cs8l4pXCFcwJX3uhSOQIKVtku3hvn+Xi8hgqXlbV8ca6lg0QGnPLdAgMB
AAGjggI/MIICOzAdBgNVHQ4EFgQUdpu26HEmrY2ljFZcfgskETftDiUwHwYDVR0j
BBgwFoAUC4Mtab7JJmsOg8xxgllcviZxxIMwDgYDVR0PAQH/BAQDAgeAMIGVBgNV
HR8EgY0wgYowgYeggYSggYGGf3JzeW5jOi8vcnN5bmMucGFhcy5ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvM2NiODlkYjItNzk4Yi00NGYwLTljNTYtMTA2NzgwMzEx
MWMwLzAvMEI4MzJENjlCRUM5MjY2QjBFODNDQzcxODI1OTVDQkUyNjcxQzQ4My5j
cmwwZAYIKwYBBQUHAQEEWDBWMFQGCCsGAQUFBzAChkhyc3luYzovL3Jwa2kucmlw
ZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxUL0M0TXRhYjdKSm1zT2c4eHhnbGxjdmla
eHhJTS5jZXIwga8GCCsGAQUFBwELBIGiMIGfMIGcBggrBgEFBQcwC4aBj3JzeW5j
Oi8vcnN5bmMucGFhcy5ycGtpLnJpcGUubmV0L3JlcG9zaXRvcnkvM2NiODlkYjIt
Nzk4Yi00NGYwLTljNTYtMTA2NzgwMzExMWMwLzAvMzgzNzJlMzIzNDM4MmUzMTM1
MzUyZTMwMmYzMjM0MmQzMjM0MjAzZDNlMjAzMjMwMzgzMTM2MzEucm9hMBgGA1Ud
IAEB/wQOMAwwCgYIKwYBBQUHDgIwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgABMAYD
BABX+JswDQYJKoZIhvcNAQELBQADggEBAAong9FdPdQtEP3kV63IQ3sHLpbQy8NG
9qW+fev1sfTeHgFZCui8jxhcoCKi3LehMMCDLt7i9bQbsyVbQvxmqyH/39zdpHcn
7fwMiezcU45bece30n8464+EraObqY+EHYb7GlZsk6qplajhQsUvqltbChMZh3Zx
hIy066TTU1wBIon3k6+5F5SlcA5Bi9rBlNfJfAAcv8w64ZvxFo3iWi5hPEI7veIe
JEqy12oSQJ3pwDLKe8DxgAZwRZiwcQ3HW6awNywHYgwvS2DeVg7zvR/WmChMYppw
DGL1Ou/CHf9X4jozFbjR8KnMua4cDzNPFrTrKHW4l7m8+ivbrgNq+sI=
-----END CERTIFICATE-----
Generated at Mon Jul 21 23:59:20 2025 by rpki-client