Route Origin Authorization
$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/7a789e87-f484-423d-a1d7-2c2d5860d2ec/0/3138352e3136372e32342e302f32322d3232203d3e20323035313933.roa
File: 3138352e3136372e32342e302f32322d3232203d3e20323035313933.roa (raw, json)
Hash identifier: 0233NNpFWx78R/jrj+KbtD+G+cNbw30rlrc1vunPVjI=
Subject key identifier: CC:1D:54:D9:D7:A6:00:E0:FE:4D:AD:AD:F2:09:2D:C3:CB:F2:12:C8
Certificate issuer: /CN=b0170abdc955aa176be2af26299678f2f7c9aca0
Certificate serial: 2CDDA1886B59E021AA126113B4A6DD1C19BF724A
Authority key identifier: B0:17:0A:BD:C9:55:AA:17:6B:E2:AF:26:29:96:78:F2:F7:C9:AC:A0
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/sBcKvclVqhdr4q8mKZZ48vfJrKA.cer
Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/7a789e87-f484-423d-a1d7-2c2d5860d2ec/0/3138352e3136372e32342e302f32322d3232203d3e20323035313933.roa
Signing time: Tue 23 Dec 2025 12:22:08 +0000
ROA not before: Tue 23 Dec 2025 12:17:08 +0000
ROA not after: Tue 22 Dec 2026 12:22:08 +0000
asID: 205193
IP address blocks: 185.167.24.0/22 maxlen: 22
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
2c:dd:a1:88:6b:59:e0:21:aa:12:61:13:b4:a6:dd:1c:19:bf:72:4a
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=b0170abdc955aa176be2af26299678f2f7c9aca0
Validity
Not Before: Dec 23 12:17:08 2025 GMT
Not After : Dec 22 12:22:08 2026 GMT
Subject: CN=CC1D54D9D7A600E0FE4DADADF2092DC3CBF212C8
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d2:b6:69:e1:17:22:93:48:b2:ef:56:7e:ef:f6:
96:e0:53:40:77:b6:e1:1b:85:4e:5a:2f:71:92:02:
62:b7:eb:32:9c:45:b7:f2:ef:3a:3c:4c:92:17:1d:
8e:94:9a:64:8e:db:05:4b:83:ac:b4:0d:de:3c:cc:
eb:35:6f:32:8f:5a:99:da:78:4a:3c:8b:d3:f3:13:
2a:fe:44:14:1d:ad:a6:51:08:64:5d:2e:df:0d:a8:
72:87:76:5b:5c:20:ae:41:3d:ca:59:99:f1:6d:52:
07:6c:63:52:71:bd:3b:69:69:4d:2f:23:f3:21:11:
66:d6:1c:d5:a4:fc:f5:e4:3c:9d:5a:5d:f2:78:71:
ce:ba:be:28:4d:08:cd:47:f5:3b:c9:14:7a:55:d8:
e2:42:ca:95:58:df:3f:2a:f0:5e:14:15:b3:c2:c4:
c4:4e:23:9f:3b:50:75:5b:4b:cf:6f:2d:f9:1e:cf:
fe:d7:e6:8d:36:38:68:2e:c5:86:e2:9e:d8:e7:e4:
a3:5a:f5:16:c9:a2:16:77:04:c5:83:fb:00:ef:19:
e8:69:8a:72:6c:56:ba:04:bc:d2:a2:6d:75:b9:99:
86:db:1e:c9:36:ae:18:40:e6:f9:99:02:87:f6:c6:
a1:ef:60:02:81:5a:2b:08:4c:ff:4d:f3:75:db:33:
6a:0d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
CC:1D:54:D9:D7:A6:00:E0:FE:4D:AD:AD:F2:09:2D:C3:CB:F2:12:C8
X509v3 Authority Key Identifier:
keyid:B0:17:0A:BD:C9:55:AA:17:6B:E2:AF:26:29:96:78:F2:F7:C9:AC:A0
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.paas.rpki.ripe.net/repository/7a789e87-f484-423d-a1d7-2c2d5860d2ec/0/B0170ABDC955AA176BE2AF26299678F2F7C9ACA0.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/sBcKvclVqhdr4q8mKZZ48vfJrKA.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/7a789e87-f484-423d-a1d7-2c2d5860d2ec/0/3138352e3136372e32342e302f32322d3232203d3e20323035313933.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.167.24.0/22
Signature Algorithm: sha256WithRSAEncryption
00:ab:f3:19:93:50:df:04:c9:3e:47:e2:1c:a1:02:26:10:1e:
54:f3:b5:33:01:85:60:94:41:a4:be:61:fd:0f:c2:da:0e:9e:
62:80:52:23:f2:2b:79:f7:a7:ae:cb:c4:f9:8f:10:22:9c:0c:
9a:eb:40:ae:8c:e5:e0:90:ad:39:b2:b3:a0:77:6f:ce:7b:01:
09:05:c0:3c:59:64:9e:32:ee:1e:f4:8e:91:5b:5c:f6:c7:92:
a9:3b:ce:56:99:9d:2c:ec:ce:a9:a1:93:3b:22:63:9a:f1:a8:
fd:9f:22:6e:a7:3a:f2:01:3c:58:f7:33:5b:b7:ae:1c:2c:c6:
c9:37:43:c8:bc:21:3d:c5:5f:c3:f0:c6:5f:3e:96:51:c9:0d:
2b:a5:c5:37:09:86:21:3b:a5:a0:08:de:52:aa:64:39:65:21:
41:59:98:36:30:b6:c4:08:1e:15:de:c4:0a:99:fc:af:8b:01:
9e:9d:8a:b2:81:e7:c3:70:17:07:74:f3:33:3a:aa:45:c1:e8:
b1:d5:94:3d:45:95:7d:23:00:ca:1c:f9:4d:6f:c6:2d:8b:3c:
82:65:68:ef:5c:95:09:5c:3b:b4:8b:72:77:9c:2c:06:f0:b8:
3c:a0:ef:45:69:f7:6f:c0:f8:bc:9a:50:e2:3b:cc:ac:eb:4f:
5e:7b:a0:76
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Mar 2 03:36:20 2026 by rpki-client