Route Origin Authorization
$ rpki-client -vvf rpki.co/repo/HYSP/6/AS199656.roa
File: AS199656.roa (raw, json)
Hash identifier: epl8FdeXjh59NGVFbmx/COutytm89bcz/k4H+74MPpk=
Subject key identifier: 9D:69:92:D7:15:0A:C7:63:97:55:79:F8:77:F8:7F:0F:8D:89:6B:28
Certificate issuer: /CN=b57dcba9fc7b0ef1f3cc80a1aee22c00198e767a
Certificate serial: 6E6660C3D8B487E6E53ED783459A029D86DF4F36
Authority key identifier: B5:7D:CB:A9:FC:7B:0E:F1:F3:CC:80:A1:AE:E2:2C:00:19:8E:76:7A
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/tX3Lqfx7DvHzzIChruIsABmOdno.cer
Subject info access: rsync://rpki.co/repo/HYSP/6/AS199656.roa
Signing time: Sat 08 Apr 2023 03:25:29 +0000
ROA not before: Sat 08 Apr 2023 03:20:29 +0000
ROA not after: Sat 06 Apr 2024 03:25:29 +0000
asID: 199656
IP address blocks: 2a12:dd47:8ed0::/44 maxlen: 48
2a12:dd47:f700::/40 maxlen: 48
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
6e:66:60:c3:d8:b4:87:e6:e5:3e:d7:83:45:9a:02:9d:86:df:4f:36
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=b57dcba9fc7b0ef1f3cc80a1aee22c00198e767a
Validity
Not Before: Apr 8 03:20:29 2023 GMT
Not After : Apr 6 03:25:29 2024 GMT
Subject: CN=9D6992D7150AC763975579F877F87F0F8D896B28
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9b:0e:fb:19:38:82:07:88:10:6f:78:0c:fe:3c:
77:79:37:7e:85:d8:15:1f:70:08:cc:63:5a:ad:9a:
b4:53:45:26:75:ba:2a:9c:33:89:61:a2:06:f6:48:
cb:57:c5:11:93:ed:1e:9d:0a:a2:36:30:f0:ac:a6:
0d:85:88:93:a6:76:fd:6a:e5:fe:e4:a7:5f:91:a5:
b8:1f:1f:f0:57:0a:8c:5a:78:27:21:84:ed:e7:55:
f9:8f:0a:14:b4:09:77:06:ca:bf:95:9b:db:a5:f6:
1e:86:58:49:7f:34:e2:47:6e:49:a8:80:16:67:ba:
d7:8f:d6:2a:54:30:2c:5c:b6:dd:48:82:bf:34:d4:
87:0b:68:17:9d:35:64:1d:3b:48:47:95:98:da:fb:
5c:e4:1e:4a:49:86:ee:9d:f7:ea:8d:91:55:77:c1:
af:83:c3:14:ad:5c:b7:7c:15:c0:44:c9:3b:c7:55:
3c:b5:0e:4e:65:b3:b2:35:bf:dd:a4:5e:f0:05:ed:
5c:6c:21:38:28:17:0a:b2:14:86:a0:c5:a0:a9:1c:
c6:5a:18:46:08:2c:20:c0:de:67:ab:98:0b:66:66:
12:3c:9e:5c:04:31:3b:fd:60:75:e7:93:1a:f4:c9:
2c:7c:22:89:24:d4:86:e7:a5:3a:d5:46:3d:69:0d:
6f:e9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
9D:69:92:D7:15:0A:C7:63:97:55:79:F8:77:F8:7F:0F:8D:89:6B:28
X509v3 Authority Key Identifier:
keyid:B5:7D:CB:A9:FC:7B:0E:F1:F3:CC:80:A1:AE:E2:2C:00:19:8E:76:7A
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.co/repo/HYSP/6/B57DCBA9FC7B0EF1F3CC80A1AEE22C00198E767A.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/tX3Lqfx7DvHzzIChruIsABmOdno.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.co/repo/HYSP/6/AS199656.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a12:dd47:8ed0::/44
2a12:dd47:f700::/40
Signature Algorithm: sha256WithRSAEncryption
02:89:f1:a2:d7:e7:0d:28:34:a5:42:06:fa:29:9a:7d:ac:b1:
ab:d3:d3:3f:03:e2:82:c8:c5:36:46:54:e6:1f:dc:ab:40:54:
7d:9d:ea:7a:b3:f2:a8:d8:51:91:cb:d1:94:ce:6b:8d:a2:a9:
38:3e:c3:a8:71:0a:b7:5e:5a:5d:3a:3d:ed:f2:ee:cd:7f:2c:
57:cf:ca:80:11:31:d9:4e:b2:be:ea:fa:eb:d9:1a:5d:dc:cf:
2c:83:4b:e9:12:fc:c7:07:c6:76:6a:ce:42:16:77:c4:37:ef:
30:72:59:76:af:f4:33:6d:b1:e0:38:8a:d3:2c:98:c6:e7:89:
d2:cb:46:15:d8:f9:d3:91:89:3d:5d:5a:b5:0b:0b:21:0c:a5:
25:28:8c:0f:a4:0b:63:ea:9b:2a:a9:8c:4a:ca:25:d4:04:7e:
a1:da:14:db:a4:dd:b0:80:d2:73:70:36:7f:83:cb:e3:61:87:
c7:68:d8:4f:36:1c:24:be:a2:96:2f:c7:c4:c1:90:87:24:22:
30:b2:82:19:d2:a8:34:07:0a:0a:2e:da:d9:1d:38:f5:55:40:
a0:ea:a9:10:80:98:8d:69:42:3b:23:9f:47:3c:0e:9b:90:33:
49:95:fa:32:2d:7b:c0:46:ee:82:49:2d:9f:69:19:ea:28:87:
e8:af:db:16
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 18 12:09:49 2025 by rpki-client