Route Origin Authorization
$ rpki-client -vvf rpki.co/repo/HYSP/6/AS199679.roa
File: AS199679.roa (raw, json)
Hash identifier: AkJFYgrf+FAlte5V43S+JFoBDFEpYy0QUmxB1UPf8jQ=
Subject key identifier: 91:B4:B9:5E:12:51:21:4A:0C:4F:68:16:5E:07:90:2A:4C:EB:9B:FD
Certificate issuer: /CN=b57dcba9fc7b0ef1f3cc80a1aee22c00198e767a
Certificate serial: 78B9AC4C279329651A8197EC080B9A6B5BBD4B54
Authority key identifier: B5:7D:CB:A9:FC:7B:0E:F1:F3:CC:80:A1:AE:E2:2C:00:19:8E:76:7A
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/tX3Lqfx7DvHzzIChruIsABmOdno.cer
Subject info access: rsync://rpki.co/repo/HYSP/6/AS199679.roa
Signing time: Sat 08 Apr 2023 03:25:47 +0000
ROA not before: Sat 08 Apr 2023 03:20:47 +0000
ROA not after: Sat 06 Apr 2024 03:25:47 +0000
asID: 199679
IP address blocks: 2a12:dd47:f200::/40 maxlen: 48
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
78:b9:ac:4c:27:93:29:65:1a:81:97:ec:08:0b:9a:6b:5b:bd:4b:54
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=b57dcba9fc7b0ef1f3cc80a1aee22c00198e767a
Validity
Not Before: Apr 8 03:20:47 2023 GMT
Not After : Apr 6 03:25:47 2024 GMT
Subject: CN=91B4B95E1251214A0C4F68165E07902A4CEB9BFD
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ef:7f:d1:17:55:f9:7a:42:df:cb:40:8c:ca:61:
c8:60:4a:59:82:e5:19:4e:a7:d3:7d:56:18:53:01:
e4:e5:46:73:98:e4:7d:de:af:c2:2f:68:43:99:31:
c2:71:58:ee:a9:b6:78:fb:20:3b:71:62:21:81:17:
aa:8b:17:e3:51:46:b5:44:82:c6:4d:f6:b0:82:f3:
5f:49:e3:d7:6a:ff:a0:7b:cc:85:05:40:3e:6e:d1:
ad:24:6d:71:99:04:16:11:c3:00:44:78:53:3f:7b:
6f:58:8e:c2:85:07:bc:80:4c:6e:1d:15:d3:46:82:
2d:9b:b6:eb:42:df:b2:c6:99:08:9a:c9:3e:b1:4d:
ee:78:06:56:e4:7e:28:70:3a:37:1f:19:93:d7:2f:
c4:67:3f:e8:4a:71:01:26:c2:d9:52:0f:eb:6d:8c:
1d:9b:03:55:7c:c9:15:38:7c:16:90:92:4f:b9:8f:
38:0f:43:3a:3c:a6:b8:3a:a5:3d:1b:17:80:2f:d1:
32:d5:fd:6f:4a:1e:2e:1b:78:54:13:9b:a6:32:74:
6d:76:9f:e0:84:4b:3b:d8:74:97:4f:51:82:ba:0f:
8d:fc:9b:97:b8:c0:61:65:3f:1b:3a:4e:80:f6:3a:
49:16:b1:96:23:ce:6a:b4:bf:82:66:12:31:9a:a9:
80:7f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
91:B4:B9:5E:12:51:21:4A:0C:4F:68:16:5E:07:90:2A:4C:EB:9B:FD
X509v3 Authority Key Identifier:
keyid:B5:7D:CB:A9:FC:7B:0E:F1:F3:CC:80:A1:AE:E2:2C:00:19:8E:76:7A
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.co/repo/HYSP/6/B57DCBA9FC7B0EF1F3CC80A1AEE22C00198E767A.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/tX3Lqfx7DvHzzIChruIsABmOdno.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.co/repo/HYSP/6/AS199679.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a12:dd47:f200::/40
Signature Algorithm: sha256WithRSAEncryption
38:ce:22:ed:c6:14:94:7a:2b:6f:80:68:78:13:29:f4:36:6d:
05:1d:6e:60:f7:c1:38:08:d4:30:16:a2:5c:2b:0d:5b:7d:54:
f1:06:2e:de:68:79:2d:48:d4:63:20:f5:4b:2f:73:d8:2b:6e:
e3:3c:2d:bc:12:3b:20:d4:31:07:6b:4f:8a:3a:33:73:62:64:
9f:ef:d3:ec:d2:ce:2d:d7:d1:bf:c9:64:95:2c:ba:ae:e6:2f:
14:9f:f1:be:0f:d8:a2:af:ef:ae:45:c6:a4:7a:15:a4:e5:bd:
e7:e6:7b:96:d7:e5:c8:65:af:37:07:0e:8b:81:6a:fc:94:25:
52:5d:25:ae:c9:10:f8:51:76:61:4e:d9:97:89:ac:73:11:77:
8b:cc:2f:9b:58:74:b1:24:b5:0e:1a:1f:89:32:15:3f:53:61:
79:49:d0:44:42:99:59:11:5d:08:db:20:39:42:d1:0e:a4:da:
e9:9a:2e:0a:e1:43:de:56:67:4a:c2:ef:3c:26:a2:9b:7d:9a:
32:ea:3e:74:81:6b:20:23:e0:b6:61:0d:55:93:fc:06:6a:f2:
25:6c:34:ed:5e:c3:7b:3d:c2:50:70:25:b1:d4:8d:b8:6e:d0:
a2:f9:c2:a5:dd:40:27:ab:b8:ad:3f:a6:dc:16:15:6d:23:9a:
07:81:4f:e2
-----BEGIN CERTIFICATE-----
MIIEjjCCA3agAwIBAgIUeLmsTCeTKWUagZfsCAuaa1u9S1QwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoYjU3ZGNiYTlmYzdiMGVmMWYzY2M4MGExYWVlMjJjMDAx
OThlNzY3YTAeFw0yMzA0MDgwMzIwNDdaFw0yNDA0MDYwMzI1NDdaMDMxMTAvBgNV
BAMTKDkxQjRCOTVFMTI1MTIxNEEwQzRGNjgxNjVFMDc5MDJBNENFQjlCRkQwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDvf9EXVfl6Qt/LQIzKYchgSlmC
5RlOp9N9VhhTAeTlRnOY5H3er8IvaEOZMcJxWO6ptnj7IDtxYiGBF6qLF+NRRrVE
gsZN9rCC819J49dq/6B7zIUFQD5u0a0kbXGZBBYRwwBEeFM/e29YjsKFB7yATG4d
FdNGgi2btutC37LGmQiayT6xTe54BlbkfihwOjcfGZPXL8RnP+hKcQEmwtlSD+tt
jB2bA1V8yRU4fBaQkk+5jzgPQzo8prg6pT0bF4Av0TLV/W9KHi4beFQTm6YydG12
n+CESzvYdJdPUYK6D438m5e4wGFlPxs6ToD2OkkWsZYjzmq0v4JmEjGaqYB/AgMB
AAGjggGYMIIBlDAdBgNVHQ4EFgQUkbS5XhJRIUoMT2gWXgeQKkzrm/0wHwYDVR0j
BBgwFoAUtX3Lqfx7DvHzzIChruIsABmOdnowDgYDVR0PAQH/BAQDAgeAMFkGA1Ud
HwRSMFAwTqBMoEqGSHJzeW5jOi8vcnBraS5jby9yZXBvL0hZU1AvNi9CNTdEQ0JB
OUZDN0IwRUYxRjNDQzgwQTFBRUUyMkMwMDE5OEU3NjdBLmNybDBkBggrBgEFBQcB
AQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBvc2l0
b3J5L0RFRkFVTFQvdFgzTHFmeDdEdkh6eklDaHJ1SXNBQm1PZG5vLmNlcjBEBggr
BgEFBQcBCwQ4MDYwNAYIKwYBBQUHMAuGKHJzeW5jOi8vcnBraS5jby9yZXBvL0hZ
U1AvNi9BUzE5OTY3OS5yb2EwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggr
BgEFBQcBBwEB/wQSMBAwDgQCAAIwCAMGACoS3UfyMA0GCSqGSIb3DQEBCwUAA4IB
AQA4ziLtxhSUeitvgGh4Eyn0Nm0FHW5g98E4CNQwFqJcKw1bfVTxBi7eaHktSNRj
IPVLL3PYK27jPC28Ejsg1DEHa0+KOjNzYmSf79Ps0s4t19G/yWSVLLqu5i8Un/G+
D9iir++uRcakehWk5b3n5nuW1+XIZa83Bw6LgWr8lCVSXSWuyRD4UXZhTtmXiaxz
EXeLzC+bWHSxJLUOGh+JMhU/U2F5SdBEQplZEV0I2yA5QtEOpNrpmi4K4UPeVmdK
wu88JqKbfZoy6j50gWsgI+C2YQ1Vk/wGavIlbDTtXsN7PcJQcCWx1I24btCi+cKl
3UAnq7itP6bcFhVtI5oHgU/i
-----END CERTIFICATE-----
Generated at Wed Apr 16 13:48:29 2025 by rpki-client