Route Origin Authorization
$ rpki-client -vvf rpki.co/repo/HYSP/6/326131323a646434373a356531303a3a2f34342d3438203d3e20323033353239.roa
File: 326131323a646434373a356531303a3a2f34342d3438203d3e20323033353239.roa (raw, json)
Hash identifier: INgYR9ki5L3vVhaj+3D1An1WdOgWx/H6MeUgIVYe38g=
Subject key identifier: 65:90:76:89:5D:59:5F:69:E2:63:1F:9B:19:36:B2:CD:FA:E5:71:32
Certificate issuer: /CN=b57dcba9fc7b0ef1f3cc80a1aee22c00198e767a
Certificate serial: 68352C905EAFA3E91393D55A9A65EF6A48F6B7F1
Authority key identifier: B5:7D:CB:A9:FC:7B:0E:F1:F3:CC:80:A1:AE:E2:2C:00:19:8E:76:7A
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/tX3Lqfx7DvHzzIChruIsABmOdno.cer
Subject info access: rsync://rpki.co/repo/HYSP/6/326131323a646434373a356531303a3a2f34342d3438203d3e20323033353239.roa
Signing time: Sat 08 Apr 2023 05:28:44 +0000
ROA not before: Sat 08 Apr 2023 05:23:44 +0000
ROA not after: Sat 06 Apr 2024 05:28:44 +0000
asID: 203529
IP address blocks: 2a12:dd47:5e10::/44 maxlen: 48
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
68:35:2c:90:5e:af:a3:e9:13:93:d5:5a:9a:65:ef:6a:48:f6:b7:f1
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=b57dcba9fc7b0ef1f3cc80a1aee22c00198e767a
Validity
Not Before: Apr 8 05:23:44 2023 GMT
Not After : Apr 6 05:28:44 2024 GMT
Subject: CN=659076895D595F69E2631F9B1936B2CDFAE57132
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b5:2b:b3:95:d1:2a:81:9c:51:74:05:b9:1e:00:
a2:f4:08:2d:dd:84:9e:f8:6a:5d:7c:76:66:a9:ea:
15:a2:a5:25:0d:91:5c:73:1d:65:b3:79:15:88:b9:
06:f7:e4:50:c9:1c:ac:bc:f5:97:3c:a9:e4:f5:45:
f6:b5:17:c5:75:d6:d8:63:10:8f:a8:46:2f:d1:e2:
e5:8b:5d:c5:3e:57:81:4c:b0:45:81:d4:cd:7d:84:
2a:ea:c8:e6:ad:d5:98:31:97:ff:36:87:15:26:f7:
c8:3b:80:23:09:d3:3f:56:5e:8f:0d:43:99:cf:13:
16:96:6e:bb:28:e7:78:71:21:e3:02:aa:18:b1:99:
2b:8a:bd:c0:d9:ac:93:cf:13:2b:b3:53:30:c1:b3:
cc:af:69:7b:e2:3b:4e:8c:a3:7a:69:4b:7a:f3:f5:
34:77:eb:c7:79:a2:fd:8a:42:95:3b:bb:2f:48:60:
22:27:03:96:cf:aa:fa:63:51:aa:ca:7d:23:05:74:
dd:f0:17:f4:9f:69:84:51:f4:79:26:97:34:fe:e0:
6d:29:62:8f:3c:a4:df:84:a6:e5:4a:2a:aa:81:e3:
b5:d3:0f:d0:fd:63:d0:9d:6e:04:47:09:f0:23:07:
8d:c7:f3:0c:14:3f:8a:1a:3d:a6:b9:78:f9:6e:5f:
17:01
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
65:90:76:89:5D:59:5F:69:E2:63:1F:9B:19:36:B2:CD:FA:E5:71:32
X509v3 Authority Key Identifier:
keyid:B5:7D:CB:A9:FC:7B:0E:F1:F3:CC:80:A1:AE:E2:2C:00:19:8E:76:7A
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.co/repo/HYSP/6/B57DCBA9FC7B0EF1F3CC80A1AEE22C00198E767A.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/tX3Lqfx7DvHzzIChruIsABmOdno.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.co/repo/HYSP/6/326131323a646434373a356531303a3a2f34342d3438203d3e20323033353239.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a12:dd47:5e10::/44
Signature Algorithm: sha256WithRSAEncryption
40:a0:72:00:9b:d9:7a:2d:c8:f1:18:59:09:d0:6a:ff:d3:f3:
0e:41:21:6e:97:31:cc:d2:95:b0:1b:1a:98:85:59:fe:55:f8:
f3:e0:da:a9:d4:3b:38:f1:53:9a:74:c5:66:a7:2c:94:25:3c:
e6:f4:46:21:b6:8d:de:ad:ef:16:af:69:85:a1:1c:1d:64:23:
96:75:86:63:d0:cd:6b:66:b8:97:32:81:8d:f8:e0:fc:9b:5a:
8f:a5:a7:4d:db:00:c9:7e:d6:5c:20:04:52:9f:bf:cf:09:ce:
fd:5f:01:d1:ba:13:a6:f7:5b:3a:b9:7b:f3:9c:07:cf:92:a8:
a4:00:a6:b6:7f:f3:53:b2:d4:ec:bd:d2:4a:49:4d:6d:56:15:
9f:12:01:40:c4:b9:ea:93:10:3b:f3:ad:b9:a8:08:98:a2:d2:
33:84:c2:1c:ac:55:4e:44:9c:3a:ba:1c:0b:5c:06:5c:1e:47:
f8:c9:e8:9d:7d:ac:b9:d8:32:d9:ac:02:7b:b4:5e:aa:61:c7:
b3:ac:1a:e3:4f:16:8d:c3:ff:2e:cd:3f:f8:40:0d:10:10:22:
26:7f:02:93:26:86:46:4c:d5:c7:6e:9d:88:ce:ea:d8:2f:ad:
e5:18:33:0b:ef:6b:4b:87:84:49:d1:f8:d4:7d:a4:0c:7c:13:
48:ee:78:60
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jun 8 15:45:47 2025 by rpki-client