Route Origin Authorization
$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/3cb89db2-798b-44f0-9c56-1067803111c0/0/38372e3234382e3135392e302f32342d3234203d3e203438303239.roa
File: 38372e3234382e3135392e302f32342d3234203d3e203438303239.roa (raw, json)
Hash identifier: vCht5D9PRh3F1kUbDytFBZoO/kchTKc64DaKFyQ5cnA=
Subject key identifier: DE:B7:15:3C:2F:B0:5B:9F:A5:1A:77:D4:0A:89:0C:87:3B:9D:E4:61
Certificate issuer: /CN=0b832d69bec9266b0e83cc7182595cbe2671c483
Certificate serial: 11B0E091858E670592A276BFD1DA6419EFDD8940
Authority key identifier: 0B:83:2D:69:BE:C9:26:6B:0E:83:CC:71:82:59:5C:BE:26:71:C4:83
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/C4Mtab7JJmsOg8xxgllcviZxxIM.cer
Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/3cb89db2-798b-44f0-9c56-1067803111c0/0/38372e3234382e3135392e302f32342d3234203d3e203438303239.roa
Signing time: Mon 07 Jul 2025 14:12:14 +0000
ROA not before: Mon 07 Jul 2025 14:07:14 +0000
ROA not after: Mon 06 Jul 2026 14:12:14 +0000
asID: 48029
IP address blocks: 87.248.159.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
11:b0:e0:91:85:8e:67:05:92:a2:76:bf:d1:da:64:19:ef:dd:89:40
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=0b832d69bec9266b0e83cc7182595cbe2671c483
Validity
Not Before: Jul 7 14:07:14 2025 GMT
Not After : Jul 6 14:12:14 2026 GMT
Subject: CN=DEB7153C2FB05B9FA51A77D40A890C873B9DE461
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b5:1d:52:a5:ba:5f:a4:2a:e4:ff:f3:aa:4a:a4:
8b:bd:0c:a5:47:08:43:6c:70:83:5a:1e:9d:d3:b7:
b5:f6:07:37:01:54:64:ed:c4:9c:be:6c:56:83:af:
ea:c6:70:b9:ec:d7:85:29:28:97:87:86:cb:e5:75:
ab:0d:e9:fb:e3:17:c6:7d:32:fc:84:cb:fe:da:01:
5e:8a:ca:8d:47:90:0d:3c:56:65:fd:38:2f:2d:b2:
ef:fa:82:a8:5e:a7:a3:4d:06:43:e3:a1:8a:67:4f:
5b:52:4b:01:eb:79:70:e6:93:b3:55:78:3a:0d:39:
03:41:47:f3:16:db:f3:ae:45:14:41:0b:ee:e4:5f:
72:3a:f1:64:fe:d3:3a:c4:19:00:37:87:22:2f:b2:
b3:ef:bb:45:90:83:e1:ae:80:35:c4:45:94:85:cf:
23:6a:e8:58:5f:e9:3a:05:fd:b7:dd:79:db:07:d1:
00:34:f7:1d:e1:93:72:5c:11:1f:f3:50:af:61:5d:
f5:7f:ec:4d:4b:5a:cf:45:2e:40:a9:87:2f:46:de:
98:8f:4e:6b:ed:20:cc:57:d4:76:d0:17:4c:3b:c7:
37:78:44:62:d5:4a:40:25:44:91:57:0d:a0:8a:04:
0a:1a:ad:4d:25:4d:ad:00:67:b8:b4:1c:5a:24:fa:
8f:45
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
DE:B7:15:3C:2F:B0:5B:9F:A5:1A:77:D4:0A:89:0C:87:3B:9D:E4:61
X509v3 Authority Key Identifier:
keyid:0B:83:2D:69:BE:C9:26:6B:0E:83:CC:71:82:59:5C:BE:26:71:C4:83
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.paas.rpki.ripe.net/repository/3cb89db2-798b-44f0-9c56-1067803111c0/0/0B832D69BEC9266B0E83CC7182595CBE2671C483.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/C4Mtab7JJmsOg8xxgllcviZxxIM.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/3cb89db2-798b-44f0-9c56-1067803111c0/0/38372e3234382e3135392e302f32342d3234203d3e203438303239.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
87.248.159.0/24
Signature Algorithm: sha256WithRSAEncryption
68:a3:81:37:0b:e9:c4:72:6f:a1:5e:46:1e:84:04:0f:83:07:
41:74:81:2c:30:48:84:15:ca:58:f8:c8:9c:86:6d:8e:73:85:
e3:cb:0e:dc:fd:9a:cb:c1:aa:d1:61:86:fc:9a:6e:92:58:bc:
22:22:36:2a:e8:bd:07:3d:80:ad:39:42:7e:f5:03:87:86:44:
60:67:bd:f5:31:fd:2e:cf:51:e8:7f:a3:38:a7:0d:7e:2b:92:
83:af:33:22:50:60:ec:33:19:5b:0d:d6:b2:15:51:d1:5f:d1:
9c:7e:e0:db:c1:73:7e:34:cf:4d:ef:b0:4e:e4:1c:b3:01:6a:
25:c0:08:60:51:80:d2:40:69:9a:00:fe:ab:5e:a0:00:4b:fb:
ef:4e:ee:ee:b1:87:c7:0f:38:48:01:f3:18:10:54:d3:5d:78:
ad:49:eb:d8:07:b7:3b:4e:77:b8:78:54:ed:6f:d6:d3:8b:80:
11:43:0b:e6:fa:7c:01:3f:d0:fc:63:ca:91:26:cd:e3:5d:c4:
18:d8:6d:c7:62:b2:4e:f4:f7:7d:79:ff:ee:72:9d:a1:2f:70:
50:f7:f8:00:aa:e8:f4:95:16:27:bb:bf:65:25:bc:37:d4:97:
d6:02:d9:10:5f:9e:9e:51:8f:b6:a3:b6:79:b0:95:bf:61:e2:
37:16:e4:d5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Jul 21 23:59:32 2025 by rpki-client