Route Origin Authorization
$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/3cb89db2-798b-44f0-9c56-1067803111c0/0/38372e3234382e3135372e302f32342d3234203d3e20323130353338.roa
File: 38372e3234382e3135372e302f32342d3234203d3e20323130353338.roa (raw, json)
Hash identifier: h3OQSvITjf+v3vYJ4cOZBGeNvjTyLtHG9YAvSsw+gcY=
Subject key identifier: 7B:F5:64:22:4E:40:73:3A:36:9A:81:38:D6:BE:BC:E3:E2:AD:7B:43
Certificate issuer: /CN=0b832d69bec9266b0e83cc7182595cbe2671c483
Certificate serial: 3ACE5835A90C938022C3A212FD56F1DF980247AC
Authority key identifier: 0B:83:2D:69:BE:C9:26:6B:0E:83:CC:71:82:59:5C:BE:26:71:C4:83
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/C4Mtab7JJmsOg8xxgllcviZxxIM.cer
Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/3cb89db2-798b-44f0-9c56-1067803111c0/0/38372e3234382e3135372e302f32342d3234203d3e20323130353338.roa
Signing time: Mon 07 Jul 2025 14:13:27 +0000
ROA not before: Mon 07 Jul 2025 14:08:27 +0000
ROA not after: Mon 06 Jul 2026 14:13:27 +0000
asID: 210538
IP address blocks: 87.248.157.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
3a:ce:58:35:a9:0c:93:80:22:c3:a2:12:fd:56:f1:df:98:02:47:ac
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=0b832d69bec9266b0e83cc7182595cbe2671c483
Validity
Not Before: Jul 7 14:08:27 2025 GMT
Not After : Jul 6 14:13:27 2026 GMT
Subject: CN=7BF564224E40733A369A8138D6BEBCE3E2AD7B43
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b3:05:d9:82:6b:a8:a2:80:79:19:d8:d2:99:50:
dd:e4:5c:05:a1:54:64:3f:6b:2b:3a:ed:76:5b:e8:
f8:d7:61:a4:51:36:42:33:b7:9a:6f:f7:61:ab:57:
86:d6:1b:45:c7:57:d0:01:90:f6:5a:e6:3b:21:35:
eb:f3:d7:b3:9d:fc:5b:48:6c:6c:7f:61:32:6f:0e:
78:e3:7f:36:4b:67:29:3e:a4:d5:5c:45:74:0a:49:
fd:80:ac:91:00:d7:73:36:1c:54:a7:a5:6e:b6:d9:
36:4a:cb:cf:1e:4b:b2:fb:f2:1c:f4:24:53:5d:6a:
8e:2e:fc:77:0d:04:1a:64:b4:4a:0d:a2:9e:62:44:
45:e7:7c:80:a2:c2:48:1c:7c:d4:8f:0d:c2:36:51:
5d:9a:f7:1c:d5:91:eb:0d:85:1f:d6:55:59:11:bc:
66:f8:5d:1b:ef:df:35:8f:04:b3:c8:53:d4:d1:93:
28:24:9b:88:42:a8:c6:5a:97:66:3e:ea:3a:ca:65:
e9:08:b0:06:01:46:71:2c:eb:e6:08:3b:4b:a3:af:
29:3c:24:08:71:dc:b7:50:1a:2c:6c:81:28:72:82:
9c:d8:17:f9:9d:67:f5:5d:1f:5d:59:d1:61:65:2c:
ce:de:3f:c5:df:3a:62:a3:07:01:0b:24:a5:85:e9:
fa:c7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
7B:F5:64:22:4E:40:73:3A:36:9A:81:38:D6:BE:BC:E3:E2:AD:7B:43
X509v3 Authority Key Identifier:
keyid:0B:83:2D:69:BE:C9:26:6B:0E:83:CC:71:82:59:5C:BE:26:71:C4:83
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.paas.rpki.ripe.net/repository/3cb89db2-798b-44f0-9c56-1067803111c0/0/0B832D69BEC9266B0E83CC7182595CBE2671C483.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/C4Mtab7JJmsOg8xxgllcviZxxIM.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/3cb89db2-798b-44f0-9c56-1067803111c0/0/38372e3234382e3135372e302f32342d3234203d3e20323130353338.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
87.248.157.0/24
Signature Algorithm: sha256WithRSAEncryption
21:ca:62:14:70:38:e3:cd:37:08:28:4b:3d:89:e7:d1:cd:6c:
ba:73:e2:f0:0c:c1:5b:ce:89:d8:7a:f0:93:28:cd:4e:50:f1:
14:02:1c:f9:ea:7b:23:67:f6:82:3c:1f:28:e3:7e:dd:4b:44:
5d:d2:2e:ce:4b:00:8c:5e:b0:3b:dd:ea:41:0a:6c:ba:6a:c0:
b9:1e:25:a4:c4:31:85:fa:21:e0:e9:f0:f8:3e:5f:c3:e6:9a:
3c:67:a8:fa:49:03:23:67:69:5c:ae:7d:c4:b0:63:85:26:44:
1d:64:48:db:08:a8:9d:4d:63:be:60:f2:2d:02:0f:02:ee:89:
3a:ab:11:97:1e:a6:62:99:cf:cc:e4:74:9e:70:ac:09:0c:e0:
53:7d:47:1d:05:67:ba:c9:8a:2d:86:b3:d7:60:9e:18:04:9f:
6f:e3:07:e4:3b:17:1f:f4:f9:68:5e:c7:06:fa:7d:37:21:1a:
df:1a:5c:6b:28:b9:5d:80:09:bd:c2:b4:6f:8f:8a:a1:ac:4a:
57:ce:0d:ef:a3:18:ec:16:a7:4d:76:c0:5a:ff:14:ca:a5:9f:
57:74:98:7f:ff:d0:5d:a4:11:cf:25:7b:3d:17:74:05:38:00:
c9:e1:93:03:be:d3:27:4b:bf:2c:7c:7b:22:0f:52:49:f9:6b:
62:84:d2:e0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Jul 21 23:59:24 2025 by rpki-client