Route Origin Authorization

$ rpki-client -vvf rpki.co/repo/HYSP/6/326131323a646434373a333430303a3a2f33382d3438203d3e20323030383237.roa
File:                     326131323a646434373a333430303a3a2f33382d3438203d3e20323030383237.roa (raw, json)
Hash identifier:          lEdCD6nnvp4BKx0BiEVs3jT0oFhgtmfVND8Vlh+gIJQ=
Subject key identifier:   AF:64:B2:E6:1B:6E:5D:DF:CD:64:D9:47:7D:D3:50:61:20:E8:39:53
Certificate issuer:       /CN=b57dcba9fc7b0ef1f3cc80a1aee22c00198e767a
Certificate serial:       3C52F38E2DF69735550E3DB99A93DFC5D525ECD6
Authority key identifier: B5:7D:CB:A9:FC:7B:0E:F1:F3:CC:80:A1:AE:E2:2C:00:19:8E:76:7A
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/tX3Lqfx7DvHzzIChruIsABmOdno.cer
Subject info access:      rsync://rpki.co/repo/HYSP/6/326131323a646434373a333430303a3a2f33382d3438203d3e20323030383237.roa
Signing time:             Sat 08 Apr 2023 05:28:51 +0000
ROA not before:           Sat 08 Apr 2023 05:23:51 +0000
ROA not after:            Sat 06 Apr 2024 05:28:51 +0000
asID:                     200827
IP address blocks:        2a12:dd47:3400::/38 maxlen: 48
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            3c:52:f3:8e:2d:f6:97:35:55:0e:3d:b9:9a:93:df:c5:d5:25:ec:d6
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=b57dcba9fc7b0ef1f3cc80a1aee22c00198e767a
        Validity
            Not Before: Apr  8 05:23:51 2023 GMT
            Not After : Apr  6 05:28:51 2024 GMT
        Subject: CN=AF64B2E61B6E5DDFCD64D9477DD3506120E83953
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c3:76:56:ad:7f:7d:1b:e3:59:77:ec:d0:87:3b:
                    3d:70:b4:67:45:9f:67:d0:2e:9f:57:3f:13:43:e6:
                    b6:f8:41:b5:90:01:78:1c:ea:2c:46:a6:d2:f1:29:
                    bf:9b:0e:4a:06:12:2d:a2:c1:b4:e0:5b:79:ba:46:
                    c6:41:b7:a0:db:90:41:15:ae:3c:da:41:b6:bb:b2:
                    37:69:67:38:d9:73:7f:08:51:9b:78:86:b6:7a:76:
                    a7:a4:75:5b:e3:db:be:69:1b:31:af:6d:e5:f1:8a:
                    60:7e:4a:9c:31:43:63:6b:10:a0:f3:b0:83:52:82:
                    e1:06:4c:a1:7c:1a:29:b2:7e:44:d0:43:28:40:15:
                    ff:9f:7c:9f:8b:0b:bf:c0:5d:9b:e0:95:13:7c:38:
                    66:2a:02:74:4b:f8:89:11:a1:50:19:80:a5:08:ce:
                    8e:35:ea:fc:62:2e:65:4c:25:12:d6:65:26:48:5f:
                    d5:63:cb:a1:43:79:cf:15:09:ce:37:f8:11:c9:c9:
                    eb:d8:26:a8:12:82:eb:c7:db:9c:87:7a:75:ab:90:
                    68:e8:9e:ad:bf:ca:10:1e:51:8a:a2:1f:56:f9:7c:
                    df:89:bc:04:d4:63:2e:ff:8b:a0:1b:39:a2:e5:6f:
                    f0:65:a3:0f:5a:09:3b:d6:49:b4:60:4c:67:13:6e:
                    3d:a9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                AF:64:B2:E6:1B:6E:5D:DF:CD:64:D9:47:7D:D3:50:61:20:E8:39:53
            X509v3 Authority Key Identifier:
                keyid:B5:7D:CB:A9:FC:7B:0E:F1:F3:CC:80:A1:AE:E2:2C:00:19:8E:76:7A

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.co/repo/HYSP/6/B57DCBA9FC7B0EF1F3CC80A1AEE22C00198E767A.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/tX3Lqfx7DvHzzIChruIsABmOdno.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.co/repo/HYSP/6/326131323a646434373a333430303a3a2f33382d3438203d3e20323030383237.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2a12:dd47:3400::/38

    Signature Algorithm: sha256WithRSAEncryption
         64:3d:02:83:ab:69:6e:b8:40:05:d8:89:51:e4:ed:a3:c9:2c:
         75:83:2b:0c:1a:9b:df:a3:48:e4:ca:93:52:a0:e7:69:49:c5:
         9b:33:d4:cc:2c:75:32:ad:7f:2e:3b:78:9d:9b:93:14:dc:12:
         6b:13:2b:d5:35:47:95:a8:29:43:24:e5:77:07:30:6e:b4:2d:
         2f:92:aa:2e:a9:dc:41:9d:db:e2:5a:09:9f:1f:8a:2a:0c:8b:
         0d:78:11:92:31:77:0e:c9:29:fe:57:b0:2f:e9:a1:f0:8e:ca:
         6d:d3:30:c0:f4:2d:9d:7d:e8:47:68:9b:44:e9:f4:dd:81:32:
         b6:58:e0:4d:0e:0e:4d:ac:ba:93:02:79:c3:c2:11:2d:d8:32:
         a4:5a:15:15:21:bb:d1:67:68:89:b7:96:21:ef:03:80:74:07:
         f1:6c:fc:5e:0e:68:95:69:9b:89:94:aa:1a:9f:1d:ea:31:71:
         06:b4:94:8c:70:da:ae:71:89:9b:f6:b9:8f:39:ce:b1:ad:49:
         dd:56:21:dc:5e:b2:96:5a:b7:89:1b:53:bb:70:a6:a9:60:8f:
         8b:76:e6:21:64:ce:a8:30:3c:5a:c3:57:a0:48:c9:3b:3c:1e:
         f1:43:ae:2b:9d:3a:ff:7e:14:2f:a1:51:72:5d:de:66:2c:84:
         17:04:46:56
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jun 8 07:40:38 2025 by rpki-client