Route Origin Authorization

$ rpki-client -vvf rpki.co/repo/HYSP/14/326131333a633030373a383034303a3a2f34342d3438203d3e20313939303335.roa
File:                     326131333a633030373a383034303a3a2f34342d3438203d3e20313939303335.roa (raw, json)
Hash identifier:          gzsbni5AcBB+YMoNZ6HkpRgNDg8sjQS7V7kUDY0OtwE=
Subject key identifier:   17:65:E5:EE:8B:AE:4D:1B:87:D0:45:DC:A0:8C:7A:37:B5:02:8B:0A
Certificate issuer:       /CN=f55ccdfa5fc81b342c9888772db31e6c4fdb2622
Certificate serial:       27F5DADDDBA595D3BC1E0599165673CC3013674E
Authority key identifier: F5:5C:CD:FA:5F:C8:1B:34:2C:98:88:77:2D:B3:1E:6C:4F:DB:26:22
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/9VzN-l_IGzQsmIh3LbMebE_bJiI.cer
Subject info access:      rsync://rpki.co/repo/HYSP/14/326131333a633030373a383034303a3a2f34342d3438203d3e20313939303335.roa
Signing time:             Sat 08 Apr 2023 03:25:51 +0000
ROA not before:           Sat 08 Apr 2023 03:20:51 +0000
ROA not after:            Sat 06 Apr 2024 03:25:51 +0000
asID:                     199035
IP address blocks:        2a13:c007:8040::/44 maxlen: 48
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            27:f5:da:dd:db:a5:95:d3:bc:1e:05:99:16:56:73:cc:30:13:67:4e
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=f55ccdfa5fc81b342c9888772db31e6c4fdb2622
        Validity
            Not Before: Apr  8 03:20:51 2023 GMT
            Not After : Apr  6 03:25:51 2024 GMT
        Subject: CN=1765E5EE8BAE4D1B87D045DCA08C7A37B5028B0A
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9b:12:cc:5d:75:56:76:fa:e6:ff:33:ae:ba:0f:
                    cc:75:a6:68:04:02:9a:04:a0:e9:da:6b:4c:cf:56:
                    75:d5:b3:f3:dd:8b:b0:b8:1f:9c:7c:72:d9:52:a6:
                    bf:21:a8:e7:8d:36:4c:27:21:78:23:6f:62:23:2a:
                    56:cc:e2:c7:ea:aa:1e:6c:e6:81:ff:73:7d:d2:74:
                    18:c7:a1:b7:b5:86:0e:6a:8e:8f:a1:e4:33:4a:48:
                    22:3e:a0:44:e9:e5:5e:bb:40:fd:15:15:31:13:0b:
                    eb:d4:11:35:dd:f4:c8:9e:7e:71:e2:ec:5c:e6:5a:
                    9c:f2:e7:00:64:38:c9:e3:0c:f1:e4:a2:39:e5:05:
                    29:3f:3b:bb:8d:87:6c:2c:0e:89:7e:45:f4:cc:bd:
                    ac:a8:fd:d1:93:d1:7a:d1:e4:c6:10:71:e4:2d:ea:
                    28:77:02:38:e3:2b:38:7b:99:a2:ae:79:35:1d:1e:
                    0b:ca:1d:ed:68:9d:36:64:3a:d0:9c:13:e6:d7:6f:
                    e9:30:4d:16:b6:b4:6e:1c:66:ef:b2:80:04:41:3b:
                    4f:e6:4a:ab:a4:83:1f:15:d5:09:2c:7b:d1:7f:58:
                    87:39:92:89:61:e6:3e:97:58:1c:f8:30:2b:25:fd:
                    41:d4:ed:9c:e0:ce:6b:68:89:98:f5:98:84:ab:ee:
                    ae:a7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                17:65:E5:EE:8B:AE:4D:1B:87:D0:45:DC:A0:8C:7A:37:B5:02:8B:0A
            X509v3 Authority Key Identifier:
                keyid:F5:5C:CD:FA:5F:C8:1B:34:2C:98:88:77:2D:B3:1E:6C:4F:DB:26:22

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.co/repo/HYSP/14/F55CCDFA5FC81B342C9888772DB31E6C4FDB2622.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/9VzN-l_IGzQsmIh3LbMebE_bJiI.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.co/repo/HYSP/14/326131333a633030373a383034303a3a2f34342d3438203d3e20313939303335.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2a13:c007:8040::/44

    Signature Algorithm: sha256WithRSAEncryption
         13:73:bd:f7:97:1a:d0:7b:f9:66:38:90:ca:3e:4d:a0:5b:5e:
         b7:1e:09:21:40:6d:69:bd:2d:93:30:b5:00:e9:ca:6d:a4:78:
         ce:47:6c:33:6d:40:84:52:12:0c:97:61:e7:9f:84:9f:23:75:
         8c:b1:ed:68:45:1e:39:5c:87:f2:9e:d0:61:66:43:fd:d7:09:
         4d:21:41:e0:9e:4b:fc:d6:f7:01:f3:b5:62:b3:62:4c:52:3b:
         4f:05:7a:2e:d2:32:81:4e:f6:1f:88:ea:9a:19:4e:ff:36:61:
         8a:6b:b0:dc:44:a8:7e:e1:01:0e:f0:5d:d8:63:86:25:3d:1c:
         1e:98:37:07:5b:2d:5f:ed:b7:00:c9:f5:6a:af:83:2e:50:3b:
         d2:2b:f4:4c:af:f8:f7:61:1b:42:53:6d:06:3e:c1:c4:e4:dd:
         f8:ed:24:05:fb:99:61:ac:5b:9a:75:b7:0e:49:b2:66:a3:61:
         b6:16:47:33:14:ce:de:38:04:f2:18:5a:ed:85:81:b0:ee:d6:
         5a:0f:39:ab:c0:64:eb:81:8d:a4:dc:a2:68:7d:0d:41:38:d6:
         09:85:09:87:0d:32:af:4f:b8:95:f0:43:96:11:b4:c0:4f:cc:
         39:7e:44:93:0d:ce:c8:9b:8c:51:71:a4:9f:84:b3:9f:43:35:
         d5:25:a9:56
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Apr 17 08:46:09 2025 by rpki-client