Route Origin Authorization
$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/89270f6c-a3fe-4299-b079-309ed97f3824/0/AS20473.roa
File: AS20473.roa (raw, json)
Hash identifier: 7LlsBFo7/Jprr6BSc1xeZoPylAjRyfyUlTC5KyU25yc=
Subject key identifier: 9C:F7:F0:1D:4F:92:AD:2F:A6:8A:BA:C6:28:A4:E6:60:7D:5D:65:B9
Certificate issuer: /CN=a83d48652f3b2df74f6bf9baa8a9c174ccfd3772
Certificate serial: 350D25B184B7AD39188824B04158406C19836F75
Authority key identifier: A8:3D:48:65:2F:3B:2D:F7:4F:6B:F9:BA:A8:A9:C1:74:CC:FD:37:72
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/qD1IZS87LfdPa_m6qKnBdMz9N3I.cer
Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/89270f6c-a3fe-4299-b079-309ed97f3824/0/AS20473.roa
Signing time: Wed 02 Jul 2025 23:34:33 +0000
ROA not before: Wed 02 Jul 2025 23:29:33 +0000
ROA not after: Wed 01 Jul 2026 23:34:33 +0000
asID: 20473
IP address blocks: 2a14:7581:f70::/48 maxlen: 48
2a14:7581:f71::/48 maxlen: 48
2a14:7581:3600::/40 maxlen: 48
2a14:7584:8000::/36 maxlen: 48
Validation: OK
Signature path: rsync://rsync.paas.rpki.ripe.net/repository/89270f6c-a3fe-4299-b079-309ed97f3824/0/A83D48652F3B2DF74F6BF9BAA8A9C174CCFD3772.crl
rsync://rsync.paas.rpki.ripe.net/repository/89270f6c-a3fe-4299-b079-309ed97f3824/0/A83D48652F3B2DF74F6BF9BAA8A9C174CCFD3772.mft
rsync://rpki.ripe.net/repository/DEFAULT/qD1IZS87LfdPa_m6qKnBdMz9N3I.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 21 Jul 2025 13:00:25 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
35:0d:25:b1:84:b7:ad:39:18:88:24:b0:41:58:40:6c:19:83:6f:75
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=a83d48652f3b2df74f6bf9baa8a9c174ccfd3772
Validity
Not Before: Jul 2 23:29:33 2025 GMT
Not After : Jul 1 23:34:33 2026 GMT
Subject: CN=9CF7F01D4F92AD2FA68ABAC628A4E6607D5D65B9
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:99:18:29:26:ed:73:79:3d:81:bd:60:11:4d:3c:
85:2e:05:a4:09:db:22:67:b3:47:86:04:a1:f9:9b:
b5:df:c3:67:f1:d3:0d:a6:7b:f2:79:31:75:98:8f:
68:51:3b:75:bf:ae:40:29:a2:7d:95:fc:d4:90:4f:
fc:b0:3c:3c:7d:69:dd:20:88:23:66:e5:f7:f5:21:
13:d0:58:ae:6a:ea:85:e3:82:e9:44:29:05:a3:1a:
91:7f:16:0b:f0:11:a1:c7:48:83:61:43:76:7c:73:
19:6e:32:f3:d8:e7:75:32:58:cf:cc:ca:aa:b7:a0:
ee:c6:4f:d9:1d:fc:89:a9:9f:97:5b:b4:74:dd:22:
9a:74:21:43:7a:09:32:26:8b:f2:4d:03:5e:38:e9:
81:5c:56:fa:57:16:b9:56:0b:eb:5e:76:bd:1b:4a:
13:48:ca:e6:80:c1:a8:7b:fa:ef:57:63:08:3d:c5:
ab:48:56:89:06:7b:95:42:23:60:64:07:59:62:99:
23:b5:4d:dc:6e:d3:e0:4b:0a:17:7f:eb:48:19:34:
14:a4:14:7e:04:d3:93:80:e4:e0:65:d7:e0:68:de:
c0:c4:82:df:e1:35:49:75:32:ee:6f:d1:57:06:8b:
a7:4f:70:68:ae:e8:47:56:14:51:ce:98:18:af:d9:
cd:f3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
9C:F7:F0:1D:4F:92:AD:2F:A6:8A:BA:C6:28:A4:E6:60:7D:5D:65:B9
X509v3 Authority Key Identifier:
keyid:A8:3D:48:65:2F:3B:2D:F7:4F:6B:F9:BA:A8:A9:C1:74:CC:FD:37:72
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.paas.rpki.ripe.net/repository/89270f6c-a3fe-4299-b079-309ed97f3824/0/A83D48652F3B2DF74F6BF9BAA8A9C174CCFD3772.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/qD1IZS87LfdPa_m6qKnBdMz9N3I.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/89270f6c-a3fe-4299-b079-309ed97f3824/0/AS20473.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a14:7581:f70::/47
2a14:7581:3600::/40
2a14:7584:8000::/36
Signature Algorithm: sha256WithRSAEncryption
05:40:1a:21:57:6e:1c:92:4e:e1:6b:9d:b8:a4:6a:03:d7:50:
97:6b:7c:e6:5a:73:11:61:00:cc:95:ce:72:cf:e1:32:97:29:
b0:86:43:f4:45:fe:8a:4e:b8:31:22:2e:66:39:87:18:6d:b6:
02:ca:a2:71:60:63:a2:08:e1:b9:b2:6c:3c:a4:ca:c4:13:95:
07:c1:7f:bb:88:4e:b4:aa:8b:31:f9:3b:76:45:a2:80:a8:d8:
a9:a2:74:06:10:6f:5a:3c:c3:55:ca:cd:0d:f5:5a:14:5a:c3:
a2:02:fa:da:7c:d7:2a:cc:c1:22:28:7c:fe:cd:82:1c:a8:02:
c5:e4:ef:aa:34:8a:33:77:3e:a2:24:52:b0:ae:4e:09:63:d1:
44:04:08:01:c2:6e:3d:a9:3f:01:b5:25:b9:26:72:33:a6:87:
11:f1:f3:d2:34:0f:bf:41:9f:00:43:5a:4b:99:97:02:71:f9:
01:8a:72:a5:ca:78:32:bc:24:25:5d:be:7d:9f:2f:4c:e9:4b:
09:2a:69:f7:26:d6:bd:55:1d:9b:73:b6:ff:c6:ef:f5:e7:7a:
e3:d7:f7:0d:81:c2:d2:65:54:85:cc:0d:f1:dc:14:82:11:38:
7f:d9:a5:58:0b:0c:a0:50:88:b2:2a:7e:f9:04:ea:b0:74:af:
12:69:4e:4d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jul 20 20:11:12 2025 by rpki-client