Route Origin Authorization
$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/e26eb136-4fe5-4e61-a4d8-f345f52bc25d/1/32332e3137352e32342e302f32342d3234203d3e203533383038.roa
File: 32332e3137352e32342e302f32342d3234203d3e203533383038.roa (raw, json)
Hash identifier: 0Z2D/+w3fy668bxeM4x+wpPqC/ioLXEh/WHhazBLKNU=
Subject key identifier: 95:64:17:A1:7D:08:0E:EC:B9:AA:15:7D:FD:AD:0D:31:E3:BA:4C:32
Certificate issuer: /CN=a22aa82bd6af16d70a699d34ed843d71620176f10e2010d22d
Certificate serial: 7AF186F504ED12E587AEF0C75608426E51A01AE0
Authority key identifier: DE:F9:CF:6D:4F:F8:42:24:03:A0:B6:5E:13:9A:B5:3C:60:8B:92:12
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/7f33cf59-ae35-41d4-8252-d9bdbaba4210/a22aa82bd6af16d70a699d34ed843d71620176f10e2010d22d.cer
Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/e26eb136-4fe5-4e61-a4d8-f345f52bc25d/1/32332e3137352e32342e302f32342d3234203d3e203533383038.roa
Signing time: Mon 22 Dec 2025 20:21:03 +0000
ROA not before: Mon 22 Dec 2025 20:16:03 +0000
ROA not after: Mon 21 Dec 2026 20:21:03 +0000
asID: 53808
IP address blocks: 23.175.24.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
7a:f1:86:f5:04:ed:12:e5:87:ae:f0:c7:56:08:42:6e:51:a0:1a:e0
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=a22aa82bd6af16d70a699d34ed843d71620176f10e2010d22d
Validity
Not Before: Dec 22 20:16:03 2025 GMT
Not After : Dec 21 20:21:03 2026 GMT
Subject: CN=956417A17D080EECB9AA157DFDAD0D31E3BA4C32
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:af:3c:b6:46:6b:f8:6a:c8:5e:2b:d5:8e:cb:03:
e3:da:bc:dc:60:10:93:3d:23:1d:38:db:91:39:e8:
f7:7b:31:0c:fd:89:62:1a:a6:ae:30:a8:4f:4c:3d:
22:44:35:a8:f1:c6:1f:90:15:a0:0d:ba:02:d3:72:
ca:19:a0:2c:48:30:b3:08:94:c2:42:45:c8:9a:35:
15:22:31:61:53:e7:8b:8a:c1:02:f6:be:e0:31:25:
86:a8:2b:d7:1d:16:6f:56:ff:11:bc:7c:7c:37:63:
5d:64:a5:12:6f:b1:95:ac:e2:93:1c:37:73:a9:07:
86:26:dd:52:80:35:54:d8:ea:90:03:31:79:c2:03:
63:4d:1e:53:ba:b4:f1:0a:97:33:2b:de:43:03:17:
a5:4a:b2:73:80:2d:f4:81:3b:8f:8e:5a:48:f3:0d:
24:b9:e6:86:9c:59:e7:42:9b:d9:cc:f3:57:60:c9:
80:84:c5:7f:7f:9b:2f:c2:79:89:ca:be:f6:70:ac:
07:b6:de:44:81:0d:5f:70:d5:7a:26:4e:ef:66:c4:
40:7e:6c:95:75:f9:c5:12:c6:bb:30:2d:14:20:d4:
f7:20:00:ad:35:50:06:c1:b8:2a:9a:a6:d6:d1:92:
18:99:30:b3:d6:ab:b8:1f:e3:12:15:91:89:cd:91:
26:57
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
95:64:17:A1:7D:08:0E:EC:B9:AA:15:7D:FD:AD:0D:31:E3:BA:4C:32
X509v3 Authority Key Identifier:
keyid:DE:F9:CF:6D:4F:F8:42:24:03:A0:B6:5E:13:9A:B5:3C:60:8B:92:12
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.paas.rpki.ripe.net/repository/e26eb136-4fe5-4e61-a4d8-f345f52bc25d/1/DEF9CF6D4FF8422403A0B65E139AB53C608B9212.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/7f33cf59-ae35-41d4-8252-d9bdbaba4210/a22aa82bd6af16d70a699d34ed843d71620176f10e2010d22d.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/e26eb136-4fe5-4e61-a4d8-f345f52bc25d/1/32332e3137352e32342e302f32342d3234203d3e203533383038.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
23.175.24.0/24
Signature Algorithm: sha256WithRSAEncryption
0a:ce:46:77:c4:5b:ab:c4:75:8c:a3:cb:d5:b1:5b:d1:94:07:
c1:12:29:38:2b:44:4a:1e:d3:82:32:0e:a7:1c:ac:d4:28:1a:
eb:34:c2:fb:09:22:2e:3a:ab:a7:84:d1:f3:d5:54:e7:5c:8d:
92:1d:20:58:93:fd:14:f7:ff:1d:2c:f9:90:88:43:82:60:bc:
6f:7e:40:72:3f:27:34:3d:43:7b:ab:cd:d5:7b:be:95:a9:83:
01:67:15:b4:c1:ba:2c:91:a4:14:b2:0b:6e:2a:1e:c2:00:89:
e9:5c:77:59:c7:58:c2:c7:1b:44:5b:5d:e1:70:81:52:13:5e:
9a:28:14:46:9d:c6:db:71:47:da:81:53:44:7a:f0:3f:4c:6f:
a2:76:86:2e:17:2a:e6:70:74:32:93:dc:58:44:d7:d2:8b:9d:
8e:96:8b:7f:9e:48:f1:1f:5b:54:d3:83:48:0f:54:8f:da:6e:
8c:b7:37:f2:83:4f:2d:82:35:ff:94:2f:90:d4:af:ea:9e:59:
a8:39:d0:13:1f:07:2a:dd:f8:3f:d5:01:d4:94:23:3d:97:cd:
52:2a:3e:4e:e6:7c:85:a7:7b:ec:dd:60:bc:ad:48:ac:da:c4:
fb:35:da:74:86:27:03:74:1a:91:2f:83:d0:65:dc:3c:e0:b3:
a9:a4:7f:f7
-----BEGIN CERTIFICATE-----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=
-----END CERTIFICATE-----
Generated at Wed Mar 11 20:09:37 2026 by rpki-client