Route Origin Authorization
$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/c478f6f5-449a-4827-99d5-bf6b93a8f6b4/0/AS20473.roa
File: AS20473.roa (raw, json)
Hash identifier: IIEwINy7XKiBYw5w5ziLcyoL/ZAuOMx1CSD7/r58EtE=
Subject key identifier: 45:9E:F4:52:A5:E2:D2:6D:87:9E:88:44:15:9F:97:75:C5:A9:B2:81
Certificate issuer: /CN=9bd813391e4af2ae3103c1891b2272d4d5c13b5f
Certificate serial: 6C41B2AE4CB02DEBF462C753C8AE42F7DF0E7DB4
Authority key identifier: 9B:D8:13:39:1E:4A:F2:AE:31:03:C1:89:1B:22:72:D4:D5:C1:3B:5F
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/m9gTOR5K8q4xA8GJGyJy1NXBO18.cer
Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/c478f6f5-449a-4827-99d5-bf6b93a8f6b4/0/AS20473.roa
Signing time: Tue 21 Jan 2025 00:00:42 +0000
ROA not before: Mon 20 Jan 2025 23:55:42 +0000
ROA not after: Tue 20 Jan 2026 00:00:42 +0000
asID: 20473
IP address blocks: 92.112.58.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
6c:41:b2:ae:4c:b0:2d:eb:f4:62:c7:53:c8:ae:42:f7:df:0e:7d:b4
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=9bd813391e4af2ae3103c1891b2272d4d5c13b5f
Validity
Not Before: Jan 20 23:55:42 2025 GMT
Not After : Jan 20 00:00:42 2026 GMT
Subject: CN=459EF452A5E2D26D879E8844159F9775C5A9B281
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c3:06:0a:2d:6d:43:ea:4b:6d:f7:b4:4d:3d:9b:
d1:36:4f:25:74:e8:a2:77:5d:ac:bc:31:e5:40:a5:
21:d1:95:3b:79:c3:59:f9:9a:2a:06:b9:d9:d5:ce:
27:7f:db:b6:e9:e5:ef:22:bd:3e:0f:d2:0c:fc:9f:
70:b0:1c:45:0c:cc:a3:53:e2:d0:1a:59:48:d9:d8:
6f:42:7a:9f:72:c4:fc:f3:59:93:00:f3:54:66:e3:
0e:1a:26:a0:21:17:f5:34:83:ee:0f:1d:ef:7c:91:
bb:0e:6e:e9:db:89:0a:7b:ea:cb:7b:21:21:6a:54:
b3:58:13:75:1f:22:ef:67:88:bd:3a:5a:3b:73:5c:
13:44:a5:65:ab:98:56:3b:b6:bb:7c:bd:63:18:e0:
74:09:4f:33:0c:0f:4c:b5:d5:a1:dc:22:39:ed:db:
91:65:42:d3:bc:c7:92:8b:42:6c:80:cc:9a:b9:ff:
ee:96:04:74:c9:33:97:68:59:93:43:c5:a9:67:53:
30:c3:8c:f1:4c:98:75:fb:b4:ad:63:9d:05:62:c4:
12:18:52:22:de:93:31:6d:3b:cd:0b:61:05:41:a6:
e0:a9:84:04:e1:8a:8b:f1:da:66:17:c7:7c:5f:08:
ab:9e:f1:78:ab:5e:1a:5b:95:3f:3d:2c:f8:8c:15:
5e:dd
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
45:9E:F4:52:A5:E2:D2:6D:87:9E:88:44:15:9F:97:75:C5:A9:B2:81
X509v3 Authority Key Identifier:
keyid:9B:D8:13:39:1E:4A:F2:AE:31:03:C1:89:1B:22:72:D4:D5:C1:3B:5F
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.paas.rpki.ripe.net/repository/c478f6f5-449a-4827-99d5-bf6b93a8f6b4/0/9BD813391E4AF2AE3103C1891B2272D4D5C13B5F.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/m9gTOR5K8q4xA8GJGyJy1NXBO18.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/c478f6f5-449a-4827-99d5-bf6b93a8f6b4/0/AS20473.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
92.112.58.0/24
Signature Algorithm: sha256WithRSAEncryption
9c:6a:d6:ab:91:f2:96:dd:98:93:31:4e:d6:e0:10:fd:2b:2b:
83:7a:c1:93:88:3c:18:12:c4:42:f2:c0:72:2d:52:e1:a9:cb:
76:e8:33:82:fb:f8:ab:a3:a4:40:f2:79:e4:6d:b0:d1:df:45:
50:82:64:a0:db:b2:c9:2a:11:27:62:0f:59:2d:13:bf:45:f8:
33:cd:e2:7c:2c:ce:3a:c0:40:99:b5:68:b8:5e:7f:37:14:5c:
48:c3:b3:23:72:eb:78:f4:c8:87:5f:7d:4d:8d:03:16:ef:5c:
50:91:ba:6d:4f:81:1c:19:ef:0e:bb:6e:02:84:b4:ed:5e:ec:
d0:b5:b1:21:47:4f:e8:53:89:b5:9c:71:5f:76:00:91:1a:c9:
f8:9c:75:6d:cb:a9:ee:08:f9:db:2b:4a:09:18:0e:fa:9e:c0:
8b:5e:05:9a:81:08:bd:1f:d5:aa:c2:87:4b:91:d4:cc:7c:79:
70:31:b4:39:40:e5:eb:8a:3d:c5:77:91:af:9a:76:7c:78:03:
5b:d2:9a:f5:f6:b4:4d:e4:a9:a2:a5:a6:79:7d:ce:fe:84:1c:
3d:c4:c7:4c:af:cb:9f:0e:b8:17:a8:79:1e:54:ad:db:d6:dd:
c3:84:aa:a8:01:7f:96:82:06:bc:7a:68:7e:66:85:fc:e4:33:
a5:17:2b:be
-----BEGIN CERTIFICATE-----
MIIE/zCCA+egAwIBAgIUbEGyrkywLev0YsdTyK5C998OfbQwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoOWJkODEzMzkxZTRhZjJhZTMxMDNjMTg5MWIyMjcyZDRk
NWMxM2I1ZjAeFw0yNTAxMjAyMzU1NDJaFw0yNjAxMjAwMDAwNDJaMDMxMTAvBgNV
BAMTKDQ1OUVGNDUyQTVFMkQyNkQ4NzlFODg0NDE1OUY5Nzc1QzVBOUIyODEwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDDBgotbUPqS233tE09m9E2TyV0
6KJ3Xay8MeVApSHRlTt5w1n5mioGudnVzid/27bp5e8ivT4P0gz8n3CwHEUMzKNT
4tAaWUjZ2G9Cep9yxPzzWZMA81Rm4w4aJqAhF/U0g+4PHe98kbsObunbiQp76st7
ISFqVLNYE3UfIu9niL06WjtzXBNEpWWrmFY7trt8vWMY4HQJTzMMD0y11aHcIjnt
25FlQtO8x5KLQmyAzJq5/+6WBHTJM5doWZNDxalnUzDDjPFMmHX7tK1jnQVixBIY
UiLekzFtO80LYQVBpuCphAThiovx2mYXx3xfCKue8XirXhpblT89LPiMFV7dAgMB
AAGjggIJMIICBTAdBgNVHQ4EFgQURZ70UqXi0m2HnohEFZ+XdcWpsoEwHwYDVR0j
BBgwFoAUm9gTOR5K8q4xA8GJGyJy1NXBO18wDgYDVR0PAQH/BAQDAgeAMIGVBgNV
HR8EgY0wgYowgYeggYSggYGGf3JzeW5jOi8vcnN5bmMucGFhcy5ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvYzQ3OGY2ZjUtNDQ5YS00ODI3LTk5ZDUtYmY2YjkzYThm
NmI0LzAvOUJEODEzMzkxRTRBRjJBRTMxMDNDMTg5MUIyMjcyRDRENUMxM0I1Ri5j
cmwwZAYIKwYBBQUHAQEEWDBWMFQGCCsGAQUFBzAChkhyc3luYzovL3Jwa2kucmlw
ZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxUL205Z1RPUjVLOHE0eEE4R0pHeUp5MU5Y
Qk8xOC5jZXIwegYIKwYBBQUHAQsEbjBsMGoGCCsGAQUFBzALhl5yc3luYzovL3Jz
eW5jLnBhYXMucnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5L2M0NzhmNmY1LTQ0OWEt
NDgyNy05OWQ1LWJmNmI5M2E4ZjZiNC8wL0FTMjA0NzMucm9hMBgGA1UdIAEB/wQO
MAwwCgYIKwYBBQUHDgIwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgABMAYDBABccDow
DQYJKoZIhvcNAQELBQADggEBAJxq1quR8pbdmJMxTtbgEP0rK4N6wZOIPBgSxELy
wHItUuGpy3boM4L7+KujpEDyeeRtsNHfRVCCZKDbsskqESdiD1ktE79F+DPN4nws
zjrAQJm1aLhefzcUXEjDsyNy63j0yIdffU2NAxbvXFCRum1PgRwZ7w67bgKEtO1e
7NC1sSFHT+hTibWccV92AJEayficdW3Lqe4I+dsrSgkYDvqewIteBZqBCL0f1arC
h0uR1Mx8eXAxtDlA5euKPcV3ka+adnx4A1vSmvX2tE3kqaKlpnl9zv6EHD3Ex0yv
y58OuBeoeR5UrdvW3cOEqqgBf5aCBrx6aH5mhfzkM6UXK74=
-----END CERTIFICATE-----
Generated at Fri Apr 25 18:20:11 2025 by rpki-client