Route Origin Authorization
$ rpki-client -vvf rpki.co/repo/HYSP/6/AS200579.roa
File: AS200579.roa (raw, json)
Hash identifier: ygrXg44rBuXeIKl8Bqgu5uvoKgp2FtJMLRNqG7knvUI=
Subject key identifier: 83:E6:F5:C7:F3:F9:4D:17:DB:8C:11:90:8E:31:75:48:07:E1:93:78
Certificate issuer: /CN=b57dcba9fc7b0ef1f3cc80a1aee22c00198e767a
Certificate serial: 109759D225421B4A6F7BAAF762A38B2ED206B32A
Authority key identifier: B5:7D:CB:A9:FC:7B:0E:F1:F3:CC:80:A1:AE:E2:2C:00:19:8E:76:7A
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/tX3Lqfx7DvHzzIChruIsABmOdno.cer
Subject info access: rsync://rpki.co/repo/HYSP/6/AS200579.roa
Signing time: Sat 08 Apr 2023 03:25:32 +0000
ROA not before: Sat 08 Apr 2023 03:20:32 +0000
ROA not after: Sat 06 Apr 2024 03:25:32 +0000
asID: 200579
IP address blocks: 2a12:dd47:8700::/40 maxlen: 48
2a12:dd47:d000::/40 maxlen: 48
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
10:97:59:d2:25:42:1b:4a:6f:7b:aa:f7:62:a3:8b:2e:d2:06:b3:2a
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=b57dcba9fc7b0ef1f3cc80a1aee22c00198e767a
Validity
Not Before: Apr 8 03:20:32 2023 GMT
Not After : Apr 6 03:25:32 2024 GMT
Subject: CN=83E6F5C7F3F94D17DB8C11908E31754807E19378
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:df:8b:ca:8f:de:75:9a:f4:b3:f6:e3:e2:bf:2f:
b3:2c:a0:d1:a5:54:bc:d7:fe:82:36:98:50:e1:db:
25:6a:2c:4a:97:ed:20:8a:b0:b3:18:64:e3:2c:7a:
d0:e8:7c:8b:d0:e4:ab:52:e1:d6:38:75:9f:1b:06:
63:ab:6b:11:22:68:fc:55:6d:de:7d:55:bf:d6:ba:
87:d6:76:98:67:f5:a9:f8:17:78:f9:aa:4b:6b:49:
a5:0f:3e:d7:1e:ea:b9:f4:a1:8e:d0:27:62:43:3d:
fc:2a:55:25:fb:b8:65:8d:2b:ab:e8:84:5e:cd:c4:
e5:f4:0a:a0:0e:2c:d7:2a:5d:9e:7c:d4:c2:d1:03:
35:99:f7:4a:4d:e0:c2:d1:5e:e0:ca:c7:7c:9a:fe:
8b:99:e5:02:f1:7c:40:c1:91:35:34:2c:34:00:9d:
07:b9:4c:e5:b3:94:44:ca:e5:81:ed:6b:48:94:ba:
75:f3:c4:04:90:6a:77:71:36:c7:26:47:54:82:81:
41:cc:dc:7f:12:0e:8b:03:b7:e7:38:08:2f:b2:c6:
7d:a9:69:8c:02:fd:be:92:04:2e:ea:10:b7:4d:61:
53:1d:61:90:fa:e4:1d:e4:a8:ba:ba:d2:84:bc:ae:
7b:0d:7f:3d:f3:b6:d3:e8:46:3c:5b:20:0c:3b:7a:
9c:f9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
83:E6:F5:C7:F3:F9:4D:17:DB:8C:11:90:8E:31:75:48:07:E1:93:78
X509v3 Authority Key Identifier:
keyid:B5:7D:CB:A9:FC:7B:0E:F1:F3:CC:80:A1:AE:E2:2C:00:19:8E:76:7A
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.co/repo/HYSP/6/B57DCBA9FC7B0EF1F3CC80A1AEE22C00198E767A.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/tX3Lqfx7DvHzzIChruIsABmOdno.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.co/repo/HYSP/6/AS200579.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a12:dd47:8700::/40
2a12:dd47:d000::/40
Signature Algorithm: sha256WithRSAEncryption
b3:8f:f8:7a:63:e2:3b:86:30:f8:99:dc:f5:bd:3c:1e:4f:81:
da:fa:70:55:8c:19:ff:fb:77:e9:3d:7a:7c:93:ea:40:ae:4e:
50:b6:73:95:f9:90:72:e5:6e:01:45:68:2d:79:3e:42:92:d2:
19:71:98:af:5e:50:40:41:92:5a:14:49:47:23:c1:05:84:a3:
99:86:e4:ad:02:7c:52:36:be:4d:59:b0:6c:78:95:73:0a:5d:
f6:8d:6c:1f:1a:52:fc:13:8f:02:ea:fb:b6:4f:1a:67:ea:d9:
2a:02:82:7c:41:52:55:51:b6:b9:c6:b7:72:a5:c9:6b:26:d4:
89:bc:a4:18:4f:a5:e7:11:66:47:83:59:4c:4c:b3:a7:53:92:
ab:e3:b4:d0:71:a4:f2:82:cb:1b:e2:38:00:47:91:59:d8:3f:
16:1d:db:b3:4b:d3:70:37:0f:12:90:50:b4:39:f0:33:af:ec:
c8:16:db:32:bb:05:a2:6b:15:36:b5:3f:4f:8e:8c:31:13:40:
bc:99:ad:bd:ca:70:24:82:e0:62:7b:55:39:48:46:41:e6:bd:
47:a3:6a:8b:ec:b9:8f:b8:4d:28:33:72:bf:b2:d0:8d:d6:b7:
98:92:b4:43:a1:92:63:cd:a8:af:7b:41:91:8a:db:12:96:9b:
ab:ca:e7:d8
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Apr 16 13:49:31 2025 by rpki-client