Route Origin Authorization
$ rpki-client -vvf rpki.co/repo/HYSP/6/326131323a646434373a383134303a3a2f34342d3438203d3e20323033313937.roa
File: 326131323a646434373a383134303a3a2f34342d3438203d3e20323033313937.roa (raw, json)
Hash identifier: dSVy9YQ0wzqaVhIT2CTbMlttIm/5IlHWcfBrzfU5b34=
Subject key identifier: A7:E5:24:9F:22:5D:F3:DC:F4:E2:32:91:97:82:62:94:4A:AE:9D:2F
Certificate issuer: /CN=b57dcba9fc7b0ef1f3cc80a1aee22c00198e767a
Certificate serial: 44B2DD2DF18435F2366B190B29CEBFE7190F342D
Authority key identifier: B5:7D:CB:A9:FC:7B:0E:F1:F3:CC:80:A1:AE:E2:2C:00:19:8E:76:7A
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/tX3Lqfx7DvHzzIChruIsABmOdno.cer
Subject info access: rsync://rpki.co/repo/HYSP/6/326131323a646434373a383134303a3a2f34342d3438203d3e20323033313937.roa
Signing time: Sat 08 Apr 2023 05:28:41 +0000
ROA not before: Sat 08 Apr 2023 05:23:41 +0000
ROA not after: Sat 06 Apr 2024 05:28:41 +0000
asID: 203197
IP address blocks: 2a12:dd47:8140::/44 maxlen: 48
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
44:b2:dd:2d:f1:84:35:f2:36:6b:19:0b:29:ce:bf:e7:19:0f:34:2d
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=b57dcba9fc7b0ef1f3cc80a1aee22c00198e767a
Validity
Not Before: Apr 8 05:23:41 2023 GMT
Not After : Apr 6 05:28:41 2024 GMT
Subject: CN=A7E5249F225DF3DCF4E23291978262944AAE9D2F
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c5:9d:2d:bc:34:a8:5e:80:fa:46:06:43:d3:c9:
59:cf:cf:29:dc:85:f0:eb:14:e2:0a:24:2b:38:2c:
62:f0:d2:8c:f1:7f:01:da:b8:64:65:e8:a5:b8:08:
21:72:53:8d:86:50:e1:00:5a:63:0a:f3:3b:3b:cc:
45:ce:91:b0:f0:41:3d:c9:2e:bd:a2:96:2b:46:2a:
57:d0:04:51:67:a7:9c:58:5f:96:fe:a2:f1:e3:18:
af:7b:9e:b1:a8:f6:5c:44:24:0e:f4:ea:b3:ae:3f:
02:5f:d2:99:97:1e:8f:bd:34:87:62:78:13:22:03:
e0:0d:1e:e1:8c:1e:4d:bd:6a:5c:96:ea:94:e1:93:
52:35:aa:18:d0:89:92:16:07:01:cb:7d:6c:c5:d4:
6e:61:c1:e6:63:92:e4:05:dc:e8:3c:1e:87:55:48:
b8:7a:2c:ce:3e:c5:d1:5f:e1:be:03:c3:5a:94:1c:
21:5f:4d:e0:9a:77:a0:79:79:89:b2:a0:73:d5:e3:
00:4a:ca:47:dd:97:e8:5d:9a:e7:13:52:b5:0a:57:
e8:26:ac:b5:dc:76:09:c6:ff:4c:5d:a5:53:50:d1:
cf:e7:01:eb:ab:fe:2a:fd:b5:4c:7c:18:67:a8:47:
2f:16:ea:1f:9c:30:96:1d:4a:1c:50:71:3a:17:0b:
b5:5d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A7:E5:24:9F:22:5D:F3:DC:F4:E2:32:91:97:82:62:94:4A:AE:9D:2F
X509v3 Authority Key Identifier:
keyid:B5:7D:CB:A9:FC:7B:0E:F1:F3:CC:80:A1:AE:E2:2C:00:19:8E:76:7A
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.co/repo/HYSP/6/B57DCBA9FC7B0EF1F3CC80A1AEE22C00198E767A.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/tX3Lqfx7DvHzzIChruIsABmOdno.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.co/repo/HYSP/6/326131323a646434373a383134303a3a2f34342d3438203d3e20323033313937.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a12:dd47:8140::/44
Signature Algorithm: sha256WithRSAEncryption
95:85:ba:c5:a1:73:42:09:58:d1:70:b3:48:86:e6:a4:e5:33:
6c:70:01:c3:d6:c0:df:25:02:01:21:a4:dd:fc:11:96:7f:0f:
3c:7e:a8:ef:11:31:59:63:c6:5c:72:86:b9:5e:1b:8f:7f:d2:
fe:6f:40:60:df:b5:86:a5:58:27:e7:57:9e:c2:eb:33:d0:42:
90:87:24:2d:79:5e:cd:d2:3e:61:83:58:11:50:a4:41:61:f0:
d0:c5:f3:50:e9:5b:33:bb:ca:24:3d:09:95:6f:5d:71:19:08:
58:ea:66:e4:b7:52:11:22:1d:b0:6b:54:a7:7a:ca:15:60:f3:
81:da:5a:92:db:4c:e4:bf:bd:d2:b5:96:d6:04:d1:46:13:fc:
a6:38:ff:98:a2:6a:02:eb:d3:3f:5a:88:2f:d8:e4:0e:50:f9:
bc:53:1b:dd:a7:d3:4d:49:d7:9c:bb:45:50:64:39:ba:20:87:
b5:00:00:05:e1:ef:0f:73:4e:fa:5d:68:d5:40:82:f7:ce:12:
33:44:b4:02:f4:5f:d5:bf:a1:6d:09:91:d4:89:57:26:69:8a:
59:b0:5f:6f:50:df:21:12:5a:e8:09:4b:d2:71:90:f5:2b:56:
ec:dd:40:a2:33:e0:49:8c:bb:8d:24:fb:dc:3d:e4:ef:8b:eb:
98:e4:32:21
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Apr 16 14:23:25 2025 by rpki-client