Route Origin Authorization
$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/f7948738-3255-49f9-9b6c-9c9f3898995d/3/AS20473.roa
File: AS20473.roa (raw, json)
Hash identifier: srUelehkeO6jhWHmipBvX9sbU8vxP++X5jxWHAPcneg=
Subject key identifier: 1F:70:53:4E:95:8B:C6:AE:F7:2A:7D:7C:36:CE:A4:4C:AD:73:33:50
Certificate issuer: /CN=CCD5D3BE49456F7D48B7321029C886F318C23B36
Certificate serial: 0A3F09195BD3FC8930102579D3A8564AC9F0D65F
Authority key identifier: CC:D5:D3:BE:49:45:6F:7D:48:B7:32:10:29:C8:86:F3:18:C2:3B:36
Authority info access: rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/2/CCD5D3BE49456F7D48B7321029C886F318C23B36.cer
Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/f7948738-3255-49f9-9b6c-9c9f3898995d/3/AS20473.roa
Signing time: Mon 30 Jun 2025 14:59:49 +0000
ROA not before: Mon 30 Jun 2025 14:54:49 +0000
ROA not after: Mon 29 Jun 2026 14:59:49 +0000
asID: 20473
IP address blocks: 2a0a:6044:ac60::/44 maxlen: 48
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
0a:3f:09:19:5b:d3:fc:89:30:10:25:79:d3:a8:56:4a:c9:f0:d6:5f
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=CCD5D3BE49456F7D48B7321029C886F318C23B36
Validity
Not Before: Jun 30 14:54:49 2025 GMT
Not After : Jun 29 14:59:49 2026 GMT
Subject: CN=1F70534E958BC6AEF72A7D7C36CEA44CAD733350
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a6:78:ea:1b:f1:d4:49:17:0f:a6:c0:45:4d:95:
d0:c9:f8:1c:77:32:b0:65:43:66:22:af:6e:ec:76:
01:15:6f:19:04:98:c6:b6:7a:63:5c:64:cc:ff:5a:
6d:e3:75:3d:f1:52:fa:fa:43:78:bf:73:fd:a0:2d:
58:2f:62:70:90:98:51:48:4e:c2:c2:51:ad:17:a6:
24:f8:a1:af:79:1c:81:9e:fe:85:a4:d1:0f:b2:cd:
e7:9a:f0:e9:a3:ae:ea:33:36:94:d3:8d:18:9b:c5:
bb:5f:34:1a:71:60:67:53:bc:86:2e:c5:d9:01:be:
77:6c:c6:9e:42:bc:40:fa:68:10:64:43:16:91:ca:
99:b8:48:53:dd:6f:89:fc:17:df:8a:72:d6:28:5e:
d8:e1:46:c1:71:e9:dc:1e:b3:25:ca:ac:ee:cd:3f:
19:38:43:3d:a3:e9:71:57:b6:27:87:94:d4:f6:31:
96:39:a7:79:5f:61:2e:39:b7:e9:38:14:80:a5:a9:
72:c7:27:f1:30:74:f5:b7:e1:66:87:fb:4e:5f:18:
b0:ea:f0:32:c2:cd:b8:6d:f5:0d:a9:63:72:58:c5:
5f:84:17:2b:a0:8e:24:e1:78:2f:33:cd:a1:56:5a:
2f:b0:e6:4c:33:2c:81:4a:02:45:01:35:ca:99:e8:
b3:3f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
1F:70:53:4E:95:8B:C6:AE:F7:2A:7D:7C:36:CE:A4:4C:AD:73:33:50
X509v3 Authority Key Identifier:
keyid:CC:D5:D3:BE:49:45:6F:7D:48:B7:32:10:29:C8:86:F3:18:C2:3B:36
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.paas.rpki.ripe.net/repository/f7948738-3255-49f9-9b6c-9c9f3898995d/3/CCD5D3BE49456F7D48B7321029C886F318C23B36.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/2/CCD5D3BE49456F7D48B7321029C886F318C23B36.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/f7948738-3255-49f9-9b6c-9c9f3898995d/3/AS20473.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a0a:6044:ac60::/44
Signature Algorithm: sha256WithRSAEncryption
85:e5:79:0a:b4:fd:c9:56:c2:88:aa:8b:23:07:54:ea:2b:b5:
ab:09:51:0f:3a:7f:a5:2b:85:ae:f8:c0:a5:7a:ac:73:9e:6d:
4e:e6:9d:35:d8:e7:d1:f1:10:c0:44:5e:1c:bb:ba:a1:ee:4a:
ba:78:cf:4e:59:51:a9:a2:80:8a:5c:4f:db:d1:cb:01:c3:67:
e6:53:24:90:bd:c9:63:d8:4b:7a:4b:69:9b:2b:40:64:23:b5:
fa:10:56:8f:06:6e:a6:f0:db:73:2f:56:a0:04:36:67:72:5e:
04:58:4b:a5:40:32:d8:1f:41:05:24:fc:f3:a3:7a:ff:53:60:
97:27:fc:63:7f:97:ba:ed:4f:4b:08:b4:96:21:6f:cd:18:db:
b7:b9:8d:1e:2f:38:bd:65:75:50:70:80:42:44:2a:f6:79:c4:
31:48:7d:50:ff:06:52:ff:49:74:8d:18:ba:8a:10:2f:47:7f:
08:df:2d:50:70:bd:59:8c:4a:b4:f7:92:56:00:1b:79:32:41:
df:3d:a3:61:83:67:6c:0f:5a:a5:52:3d:0e:27:24:42:8c:72:
3b:58:d5:f1:ab:63:f6:cf:84:ae:7d:bc:37:2f:d8:fb:dc:08:
7d:f3:75:9d:53:12:f3:6a:a6:75:3d:82:16:b5:44:e0:21:49:
48:70:57:de
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Jul 21 23:57:18 2025 by rpki-client