Route Origin Authorization
$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/7ff0f555-dba7-4192-a01d-f6916d5bb84e/0/AS20473.roa
File: AS20473.roa (raw, json)
Hash identifier: UYkU7MeqRHNX64bjzABTs707KOlac4bvbtWJwplQpXU=
Subject key identifier: 7D:08:AF:82:42:AF:EC:96:1C:93:94:E3:45:A4:26:03:69:6D:59:11
Certificate issuer: /CN=03b1ba3fdb91d8d9ea76c5776320eb7eb2d6ed9d
Certificate serial: 1090337F3460810012C005857547B6DEA0724EED
Authority key identifier: 03:B1:BA:3F:DB:91:D8:D9:EA:76:C5:77:63:20:EB:7E:B2:D6:ED:9D
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/A7G6P9uR2NnqdsV3YyDrfrLW7Z0.cer
Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/7ff0f555-dba7-4192-a01d-f6916d5bb84e/0/AS20473.roa
Signing time: Tue 26 Nov 2024 00:00:23 +0000
ROA not before: Mon 25 Nov 2024 23:55:23 +0000
ROA not after: Tue 25 Nov 2025 00:00:23 +0000
asID: 20473
IP address blocks: 45.146.80.0/24 maxlen: 24
45.152.242.0/24 maxlen: 24
45.154.106.0/24 maxlen: 24
45.155.17.0/24 maxlen: 24
91.199.172.0/24 maxlen: 24
193.25.207.0/24 maxlen: 24
193.164.1.0/24 maxlen: 24
194.104.158.0/24 maxlen: 24
194.147.4.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
10:90:33:7f:34:60:81:00:12:c0:05:85:75:47:b6:de:a0:72:4e:ed
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=03b1ba3fdb91d8d9ea76c5776320eb7eb2d6ed9d
Validity
Not Before: Nov 25 23:55:23 2024 GMT
Not After : Nov 25 00:00:23 2025 GMT
Subject: CN=7D08AF8242AFEC961C9394E345A42603696D5911
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ae:39:ca:0e:25:28:20:27:26:2f:93:3e:4b:7c:
64:fb:bf:c7:46:13:e6:67:79:6c:e9:2e:c5:ea:c9:
fa:18:78:62:f0:8f:57:fb:c5:77:c9:54:5d:b8:56:
8e:05:9f:57:e2:bb:60:7e:f1:44:0c:ee:11:09:93:
e7:d2:eb:8c:bd:b4:e8:f0:72:02:b7:e6:80:d7:98:
8b:49:b2:a6:23:41:44:44:19:05:0f:0e:70:13:8e:
a3:3c:62:13:ed:61:c2:ae:3d:66:85:48:28:00:4e:
8c:49:b7:ed:f3:b0:67:a1:fa:8a:1e:f8:db:51:7f:
24:1d:36:af:69:a6:7b:6b:df:49:c0:14:a2:dc:db:
6d:fa:73:da:71:cc:72:b1:91:9a:c8:90:65:cd:7c:
dd:a3:8a:a9:04:98:e2:30:a0:22:23:81:49:e1:fa:
de:01:b0:3e:5d:73:b0:e5:18:d3:f5:56:35:38:27:
42:1c:a0:48:85:88:bd:77:83:0e:e6:9e:79:bf:d9:
51:44:17:ba:b6:f4:35:af:b1:15:5a:69:91:4f:bc:
72:37:c9:a4:d4:d0:a0:88:48:7e:1e:9c:97:f6:92:
0e:3a:d6:d1:21:f9:34:95:46:31:a8:42:97:e1:62:
8b:df:03:94:4d:13:f2:90:44:27:30:29:75:60:36:
58:e3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
7D:08:AF:82:42:AF:EC:96:1C:93:94:E3:45:A4:26:03:69:6D:59:11
X509v3 Authority Key Identifier:
keyid:03:B1:BA:3F:DB:91:D8:D9:EA:76:C5:77:63:20:EB:7E:B2:D6:ED:9D
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.paas.rpki.ripe.net/repository/7ff0f555-dba7-4192-a01d-f6916d5bb84e/0/03B1BA3FDB91D8D9EA76C5776320EB7EB2D6ED9D.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/A7G6P9uR2NnqdsV3YyDrfrLW7Z0.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/7ff0f555-dba7-4192-a01d-f6916d5bb84e/0/AS20473.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
45.146.80.0/24
45.152.242.0/24
45.154.106.0/24
45.155.17.0/24
91.199.172.0/24
193.25.207.0/24
193.164.1.0/24
194.104.158.0/24
194.147.4.0/24
Signature Algorithm: sha256WithRSAEncryption
4a:b0:1b:ce:88:83:98:e1:b3:75:78:8b:88:69:4a:f5:73:7a:
0a:aa:ce:d8:09:fd:d1:36:01:8f:8c:31:ba:e4:f0:32:21:a5:
3e:a9:6c:1c:12:b7:a0:d7:5b:b9:76:b6:85:a3:fe:2b:96:b0:
85:ec:95:a7:79:a4:80:53:bc:17:d8:75:bb:36:1e:2d:a5:62:
6c:e2:b0:b2:5b:c5:3d:3f:88:74:44:d7:6f:5e:84:fc:e9:76:
ff:25:be:ae:1e:5c:40:38:78:68:72:9a:9c:44:88:d2:12:9a:
95:84:ab:22:8a:83:6d:f4:bb:23:98:c9:ac:e4:13:25:87:8e:
36:91:b4:58:81:51:ad:68:bc:44:c2:b2:c9:9b:99:95:98:fa:
71:7e:31:71:49:2e:d1:57:af:28:7a:b1:0f:df:14:d8:e6:f6:
46:c3:4b:8c:e2:8e:2a:91:d7:f2:48:2a:72:fc:90:23:05:77:
34:33:5c:73:cf:fd:44:25:bd:07:43:43:72:75:d3:7e:c4:ac:
c1:f9:4b:e6:45:4d:42:31:ac:8f:75:5e:81:ff:a9:7a:ae:83:
ab:99:5d:d7:b2:e7:69:d7:21:29:af:d5:9b:bf:b6:cc:66:28:
d1:0c:53:68:5c:82:c1:06:37:c0:53:41:66:90:2b:98:b0:ef:
1e:a0:11:34
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 25 05:03:06 2025 by rpki-client