Route Origin Authorization
$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/3253d973-d5bf-4541-bcc1-276543a25c7d/0/AS20473.roa
File: AS20473.roa (raw, json)
Hash identifier: NAE3ra1IVHPOQjDzlviRAcMWxLYkiyy4oiKydSt8xno=
Subject key identifier: DE:D5:A7:A4:6D:2E:CB:97:AF:66:E7:32:B2:72:4D:B3:5D:CB:43:22
Certificate issuer: /CN=57A9746FE543EB3EA0D449534244C93FC88F8503
Certificate serial: 423ECB08093A490F341002E862BFB21C4E85A235
Authority key identifier: 57:A9:74:6F:E5:43:EB:3E:A0:D4:49:53:42:44:C9:3F:C8:8F:85:03
Authority info access: rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/2/57A9746FE543EB3EA0D449534244C93FC88F8503.cer
Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/3253d973-d5bf-4541-bcc1-276543a25c7d/0/AS20473.roa
Signing time: Thu 09 Jan 2025 15:48:30 +0000
ROA not before: Thu 09 Jan 2025 15:43:30 +0000
ROA not after: Thu 08 Jan 2026 15:48:30 +0000
asID: 20473
IP address blocks: 2a0a:6044:ac60::/44 maxlen: 48
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
42:3e:cb:08:09:3a:49:0f:34:10:02:e8:62:bf:b2:1c:4e:85:a2:35
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=57A9746FE543EB3EA0D449534244C93FC88F8503
Validity
Not Before: Jan 9 15:43:30 2025 GMT
Not After : Jan 8 15:48:30 2026 GMT
Subject: CN=DED5A7A46D2ECB97AF66E732B2724DB35DCB4322
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e4:55:c0:fe:84:a2:30:c9:79:6f:90:a9:e5:df:
7d:b2:3e:a9:c1:54:db:cb:97:6e:7d:20:f6:af:f1:
8b:b6:1f:1e:0d:1a:9d:ed:24:69:a2:2b:49:98:4e:
fe:b3:e4:a7:7f:aa:d4:3c:bc:4a:3b:5a:e2:6a:aa:
f4:27:8b:e6:5d:56:a9:2b:67:5d:4c:3f:6d:be:0b:
23:06:77:80:3b:66:44:7e:7f:3c:28:65:ba:bf:e8:
69:f9:43:79:78:4f:12:b8:b8:c7:f9:de:85:3d:3c:
1d:e7:cf:41:5b:70:f0:8a:8b:a3:c5:2b:17:b1:11:
72:07:4c:b8:23:45:51:a1:71:d1:7b:f9:59:dd:58:
6a:5c:11:32:98:98:1b:91:b3:1d:37:86:c0:a2:5e:
3e:cb:4f:b2:7c:ea:22:f7:8e:8a:04:a4:13:dc:c0:
65:67:f4:06:b5:48:db:c3:0a:7f:9d:5d:7b:a4:56:
54:a0:a5:8f:93:34:15:14:6e:54:ef:52:e3:94:89:
ad:19:12:63:6e:b0:9f:d4:a3:ad:e5:40:0b:33:e2:
4e:a0:61:f7:2f:a8:db:36:7a:74:eb:be:f5:38:8f:
af:88:03:95:c9:df:c0:e0:2d:bc:84:24:9b:a8:99:
46:f2:c3:52:c5:f2:9c:dc:1d:a7:ca:20:71:8b:42:
9e:47
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
DE:D5:A7:A4:6D:2E:CB:97:AF:66:E7:32:B2:72:4D:B3:5D:CB:43:22
X509v3 Authority Key Identifier:
keyid:57:A9:74:6F:E5:43:EB:3E:A0:D4:49:53:42:44:C9:3F:C8:8F:85:03
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.paas.rpki.ripe.net/repository/3253d973-d5bf-4541-bcc1-276543a25c7d/0/57A9746FE543EB3EA0D449534244C93FC88F8503.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/2/57A9746FE543EB3EA0D449534244C93FC88F8503.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/3253d973-d5bf-4541-bcc1-276543a25c7d/0/AS20473.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a0a:6044:ac60::/44
Signature Algorithm: sha256WithRSAEncryption
93:6d:f2:4f:44:c4:a8:14:2c:0b:5e:2f:6b:b7:d4:e2:98:43:
58:13:70:23:e6:66:e0:49:f8:37:ac:18:8a:46:71:42:6f:d7:
7c:c6:8d:7e:8c:c2:d2:3e:9c:fd:c1:62:73:66:e9:d7:0c:c8:
48:21:bf:9f:24:9a:40:f2:38:34:b1:47:4f:e3:30:e8:f1:b9:
be:ba:61:63:9f:82:2f:ed:7b:4a:67:6b:38:f0:42:15:86:51:
a7:78:09:99:59:78:83:50:e8:13:47:a7:28:4a:a8:2a:f4:45:
ec:24:85:d3:8e:fc:c2:e2:7f:c0:20:f6:8a:58:7f:f3:3a:55:
3d:0e:6e:f3:60:a8:51:90:21:c9:cf:47:57:d9:03:29:99:89:
8d:30:6b:2a:80:2c:5c:55:b6:05:25:58:20:f7:8f:4f:89:4b:
7e:20:f9:f7:23:37:e3:28:4c:b5:55:01:fc:88:16:2f:48:3a:
72:5f:4c:3a:68:29:c8:ca:15:55:0f:6b:6b:49:b1:f7:80:9f:
45:54:f8:fa:ea:83:c3:6b:86:96:a9:34:c6:00:2d:d8:c0:97:
90:68:e3:8a:a8:ed:c9:2c:9c:be:68:9c:85:13:2e:9b:86:2a:
6c:39:f6:94:58:b8:ab:45:9b:ec:74:a0:fe:65:45:61:e7:3b:
b0:ce:c0:36
-----BEGIN CERTIFICATE-----
MIIFMjCCBBqgAwIBAgIUQj7LCAk6SQ80EALoYr+yHE6FojUwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoNTdBOTc0NkZFNTQzRUIzRUEwRDQ0OTUzNDI0NEM5M0ZD
ODhGODUwMzAeFw0yNTAxMDkxNTQzMzBaFw0yNjAxMDgxNTQ4MzBaMDMxMTAvBgNV
BAMTKERFRDVBN0E0NkQyRUNCOTdBRjY2RTczMkIyNzI0REIzNURDQjQzMjIwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDkVcD+hKIwyXlvkKnl332yPqnB
VNvLl259IPav8Yu2Hx4NGp3tJGmiK0mYTv6z5Kd/qtQ8vEo7WuJqqvQni+ZdVqkr
Z11MP22+CyMGd4A7ZkR+fzwoZbq/6Gn5Q3l4TxK4uMf53oU9PB3nz0FbcPCKi6PF
KxexEXIHTLgjRVGhcdF7+VndWGpcETKYmBuRsx03hsCiXj7LT7J86iL3jooEpBPc
wGVn9Aa1SNvDCn+dXXukVlSgpY+TNBUUblTvUuOUia0ZEmNusJ/Uo63lQAsz4k6g
YfcvqNs2enTrvvU4j6+IA5XJ38DgLbyEJJuomUbyw1LF8pzcHafKIHGLQp5HAgMB
AAGjggI8MIICODAdBgNVHQ4EFgQU3tWnpG0uy5evZucysnJNs13LQyIwHwYDVR0j
BBgwFoAUV6l0b+VD6z6g1ElTQkTJP8iPhQMwDgYDVR0PAQH/BAQDAgeAMIGVBgNV
HR8EgY0wgYowgYeggYSggYGGf3JzeW5jOi8vcnN5bmMucGFhcy5ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvMzI1M2Q5NzMtZDViZi00NTQxLWJjYzEtMjc2NTQzYTI1
YzdkLzAvNTdBOTc0NkZFNTQzRUIzRUEwRDQ0OTUzNDI0NEM5M0ZDODhGODUwMy5j
cmwwgZMGCCsGAQUFBwEBBIGGMIGDMIGABggrBgEFBQcwAoZ0cnN5bmM6Ly9ycGtp
LXJwcy5hcmluLm5ldC9yZXBvc2l0b3J5LzhhODQ4YWRmODUwZDA2M2UwMTg1NzU1
YzkxYmUzZjlkLzIvNTdBOTc0NkZFNTQzRUIzRUEwRDQ0OTUzNDI0NEM5M0ZDODhG
ODUwMy5jZXIwegYIKwYBBQUHAQsEbjBsMGoGCCsGAQUFBzALhl5yc3luYzovL3Jz
eW5jLnBhYXMucnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5LzMyNTNkOTczLWQ1YmYt
NDU0MS1iY2MxLTI3NjU0M2EyNWM3ZC8wL0FTMjA0NzMucm9hMBgGA1UdIAEB/wQO
MAwwCgYIKwYBBQUHDgIwIgYIKwYBBQUHAQcBAf8EEzARMA8EAgACMAkDBwQqCmBE
rGAwDQYJKoZIhvcNAQELBQADggEBAJNt8k9ExKgULAteL2u31OKYQ1gTcCPmZuBJ
+DesGIpGcUJv13zGjX6MwtI+nP3BYnNm6dcMyEghv58kmkDyODSxR0/jMOjxub66
YWOfgi/te0pnazjwQhWGUad4CZlZeINQ6BNHpyhKqCr0RewkhdOO/MLif8Ag9opY
f/M6VT0ObvNgqFGQIcnPR1fZAymZiY0wayqALFxVtgUlWCD3j0+JS34g+fcjN+Mo
TLVVAfyIFi9IOnJfTDpoKcjKFVUPa2tJsfeAn0VU+Prqg8NrhpapNMYALdjAl5Bo
44qo7cksnL5onIUTLpuGKmw59pRYuKtFm+x0oP5lRWHnO7DOwDY=
-----END CERTIFICATE-----
Generated at Sun Feb 16 15:52:53 2025 by rpki-client