Route Origin Authorization
$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/f8e7d867-c35e-4e69-a815-ba1e9b336d62/2/AS20473.roa
File: AS20473.roa (raw, json)
Hash identifier: W+ePLuH2oYbY8B6sdxl/8J6HvkAPSEFXbdU+CuqotOs=
Subject key identifier: 3E:EF:F9:E7:08:5D:73:C6:8F:78:AD:5E:90:24:87:5F:4B:15:E5:34
Certificate issuer: /CN=d12ea65dee9873b5dcf3c6c0224faea6fcb8aea6
Certificate serial: 12910754B1593B2DD237DCDAFEBE838C5E9F162B
Authority key identifier: D1:2E:A6:5D:EE:98:73:B5:DC:F3:C6:C0:22:4F:AE:A6:FC:B8:AE:A6
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/0S6mXe6Yc7Xc88bAIk-upvy4rqY.cer
Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/f8e7d867-c35e-4e69-a815-ba1e9b336d62/2/AS20473.roa
Signing time: Sun 01 Jan 2023 23:59:23 +0000
ROA not before: Sun 01 Jan 2023 23:54:23 +0000
ROA not after: Sun 31 Dec 2023 23:59:23 +0000
asID: 20473
IP address blocks: 2a06:a000:170::/48 maxlen: 48
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
12:91:07:54:b1:59:3b:2d:d2:37:dc:da:fe:be:83:8c:5e:9f:16:2b
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=d12ea65dee9873b5dcf3c6c0224faea6fcb8aea6
Validity
Not Before: Jan 1 23:54:23 2023 GMT
Not After : Dec 31 23:59:23 2023 GMT
Subject: CN=3EEFF9E7085D73C68F78AD5E9024875F4B15E534
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b9:f9:0a:ab:cb:34:f0:11:a9:c0:a7:ca:59:d4:
55:b1:8a:53:fc:37:89:17:8b:af:36:6b:08:a6:f9:
5d:33:05:af:37:d7:e2:49:93:0c:c4:30:11:f8:ff:
ba:39:fb:e8:7a:49:27:99:87:52:81:fe:b7:52:77:
fc:5b:26:ab:55:94:f4:09:7b:d9:f1:63:97:89:37:
dc:ae:3b:28:69:cc:0e:fa:bb:ee:da:bd:9b:75:4b:
b9:ef:1f:37:5f:9c:b3:5e:fe:8e:85:7b:c5:88:2c:
5b:bf:83:0a:c4:64:e6:b7:60:68:68:cf:6f:55:7c:
1b:da:e0:b6:d1:31:2f:aa:35:0c:35:de:98:12:84:
45:c7:55:07:2d:a1:24:a8:55:53:10:0f:c2:b4:ed:
73:49:d0:b4:f6:29:e0:a6:bb:b4:a0:d7:19:b5:38:
dc:c4:f7:19:9a:78:51:a2:cc:a0:c0:0e:c9:ab:cc:
37:cf:ab:26:99:79:45:07:7c:3d:b5:84:cf:94:3d:
62:27:01:30:b5:6f:ea:e6:2b:d3:09:2d:92:1a:fe:
14:1c:2a:46:83:e0:2e:9a:a5:b6:d1:ef:34:c6:aa:
51:fb:22:e1:25:0d:83:87:8f:f8:e0:03:d4:e4:f3:
d9:a2:9d:cf:7e:91:44:56:3b:14:fa:b9:1c:52:3c:
b4:69
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
3E:EF:F9:E7:08:5D:73:C6:8F:78:AD:5E:90:24:87:5F:4B:15:E5:34
X509v3 Authority Key Identifier:
keyid:D1:2E:A6:5D:EE:98:73:B5:DC:F3:C6:C0:22:4F:AE:A6:FC:B8:AE:A6
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.paas.rpki.ripe.net/repository/f8e7d867-c35e-4e69-a815-ba1e9b336d62/2/D12EA65DEE9873B5DCF3C6C0224FAEA6FCB8AEA6.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/0S6mXe6Yc7Xc88bAIk-upvy4rqY.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/f8e7d867-c35e-4e69-a815-ba1e9b336d62/2/AS20473.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a06:a000:170::/48
Signature Algorithm: sha256WithRSAEncryption
30:b4:a1:48:65:89:84:38:25:b0:49:39:a4:de:66:a6:11:e5:
c1:ab:9b:b4:63:d2:69:9c:b9:7a:31:cd:e3:0a:25:16:be:cf:
11:b9:43:32:e6:95:3b:12:ac:ad:60:8f:79:32:f5:4a:29:a5:
de:97:fe:13:a0:13:ac:be:97:a3:03:2a:21:00:a5:5a:51:1e:
72:a0:10:37:9d:37:fa:88:b6:70:77:59:f5:4b:52:ab:5c:70:
e2:81:26:88:b7:8e:58:a8:8b:bc:f2:00:42:e6:27:ba:e0:6f:
59:be:53:db:c4:e8:16:a1:57:80:da:4f:81:c3:ed:29:93:24:
bc:2f:5e:91:7a:7c:5c:83:ec:9c:e1:67:3d:9c:dc:2e:2c:cf:
e9:d5:42:8a:3e:57:91:3a:db:5c:11:b2:1d:e1:b1:ee:f6:57:
39:1c:c3:d8:ce:c8:7d:e4:02:b1:e2:58:fc:dd:4f:83:f6:5c:
b6:f7:37:19:0a:4a:fb:31:2a:77:e5:e3:05:39:53:c8:76:91:
7b:13:d5:2f:f8:80:76:6b:6d:20:86:b6:fe:d7:12:9e:d7:79:
5e:34:7c:5b:4d:74:8f:1f:8e:b5:09:fa:5e:90:f2:f7:ba:af:
e8:aa:eb:44:bd:41:5f:37:2b:2c:d9:22:68:94:85:15:33:7a:
73:78:8f:72
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 20:01:08 2024 by rpki-client on console-ams.rpki-client.org