Route Origin Authorization
$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/3cb89db2-798b-44f0-9c56-1067803111c0/0/38372e3234382e3135382e302f32342d3234203d3e203631333137.roa
File: 38372e3234382e3135382e302f32342d3234203d3e203631333137.roa (raw, json)
Hash identifier: cmzzrQnOlf+4PzkA2ZJFcFBDgDJzmieQUnWmPvWcXV8=
Subject key identifier: ED:1E:B5:A8:D2:6C:51:0D:CF:AF:2C:A5:B0:1B:11:95:2F:15:1A:B4
Certificate issuer: /CN=0b832d69bec9266b0e83cc7182595cbe2671c483
Certificate serial: 5E7F66C5AB5676F9DEE491B6E4496561D9043AFC
Authority key identifier: 0B:83:2D:69:BE:C9:26:6B:0E:83:CC:71:82:59:5C:BE:26:71:C4:83
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/C4Mtab7JJmsOg8xxgllcviZxxIM.cer
Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/3cb89db2-798b-44f0-9c56-1067803111c0/0/38372e3234382e3135382e302f32342d3234203d3e203631333137.roa
Signing time: Mon 07 Jul 2025 14:12:21 +0000
ROA not before: Mon 07 Jul 2025 14:07:21 +0000
ROA not after: Mon 06 Jul 2026 14:12:21 +0000
asID: 61317
IP address blocks: 87.248.158.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
5e:7f:66:c5:ab:56:76:f9:de:e4:91:b6:e4:49:65:61:d9:04:3a:fc
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=0b832d69bec9266b0e83cc7182595cbe2671c483
Validity
Not Before: Jul 7 14:07:21 2025 GMT
Not After : Jul 6 14:12:21 2026 GMT
Subject: CN=ED1EB5A8D26C510DCFAF2CA5B01B11952F151AB4
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cc:2b:06:88:80:f8:87:42:39:d7:e0:bc:52:9b:
53:7d:d6:0b:12:b9:3d:54:ff:1a:92:65:8e:c5:76:
f8:30:31:08:82:53:6b:1d:b9:c1:ae:7b:a8:84:3a:
00:73:47:4f:ed:89:d1:77:ff:0d:d5:07:4e:5a:9e:
9b:52:45:2f:f7:b1:35:17:83:ed:80:0a:6c:a6:63:
7f:da:45:84:0c:9b:99:76:7c:29:a0:6b:33:61:e2:
d3:73:47:91:c7:02:e8:18:ee:8c:82:fe:1e:ba:bc:
8e:57:6b:1b:b7:1b:7e:2d:ad:0b:15:88:5d:95:13:
6b:ae:95:76:e9:62:e6:ac:6d:9d:78:1d:79:78:b4:
3f:ac:61:a5:90:d3:54:f0:64:bc:65:e6:40:4d:7f:
49:2f:f2:70:c9:23:d0:ea:a9:66:3d:be:27:15:1d:
44:2d:80:fb:3d:eb:19:b4:79:1d:d2:4e:d8:34:fe:
56:31:9b:d0:e1:0b:13:95:4c:9c:10:6c:6e:c2:cb:
92:13:03:19:ed:42:0b:41:18:b8:2c:b8:61:77:be:
2c:b4:12:d7:86:b3:d5:68:9c:ca:45:aa:7c:0a:82:
2c:6d:92:86:93:6b:a2:01:f9:4c:6a:95:ad:aa:73:
cc:4d:23:a6:4c:01:fc:4a:ed:76:bd:9d:73:ad:c9:
d6:5b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
ED:1E:B5:A8:D2:6C:51:0D:CF:AF:2C:A5:B0:1B:11:95:2F:15:1A:B4
X509v3 Authority Key Identifier:
keyid:0B:83:2D:69:BE:C9:26:6B:0E:83:CC:71:82:59:5C:BE:26:71:C4:83
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.paas.rpki.ripe.net/repository/3cb89db2-798b-44f0-9c56-1067803111c0/0/0B832D69BEC9266B0E83CC7182595CBE2671C483.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/C4Mtab7JJmsOg8xxgllcviZxxIM.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/3cb89db2-798b-44f0-9c56-1067803111c0/0/38372e3234382e3135382e302f32342d3234203d3e203631333137.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
87.248.158.0/24
Signature Algorithm: sha256WithRSAEncryption
5a:5e:16:5a:fb:a6:b6:d8:bc:7a:5c:e7:61:94:d9:9e:b8:80:
f5:42:d8:07:21:0a:39:63:b5:76:98:55:51:10:3a:a1:ee:25:
c1:63:e2:2b:8d:22:15:d6:47:95:f8:14:c2:38:7e:c9:03:7e:
e0:34:84:c2:04:80:e7:74:55:eb:cf:a6:39:e2:20:2d:64:a5:
6b:95:8b:12:cd:fc:69:ac:38:77:45:9a:f5:48:97:ad:6f:6e:
15:05:d4:10:b4:c1:f2:ad:f8:e4:8f:75:09:78:6b:f2:7c:cd:
c5:6f:ff:34:1d:81:c6:e3:c1:b0:e6:25:c0:e5:4c:75:a3:c6:
d8:88:77:09:6b:b9:24:cc:be:95:24:22:4a:6f:c6:3e:06:13:
cb:04:bc:52:67:78:f0:32:a5:69:02:2b:6e:91:4d:c2:09:2d:
6e:ce:f5:69:9c:7e:c6:7d:00:a2:43:57:aa:ca:c7:81:1a:bb:
07:c8:66:1c:de:5a:ce:e5:0f:38:d2:85:10:1b:b2:56:5b:bc:
88:61:44:77:2c:91:c3:cc:c3:fb:80:24:32:4d:fa:c9:26:f8:
c8:36:05:fa:2e:ed:96:2e:29:75:3d:60:0a:c4:d9:09:d4:f1:
c2:d9:82:5a:d1:8c:7a:a1:0d:fa:f7:1c:95:4a:99:6f:15:5c:
db:e4:0f:49
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Jul 21 23:59:22 2025 by rpki-client