Route Origin Authorization
$ rpki-client -vvf rpki.co/repo/HYSP/6/AS201763.roa
File: AS201763.roa (raw, json)
Hash identifier: 1I82AHs6HCnfvz4/oALneCb627Wo42yT33SOhfeA54c=
Subject key identifier: 14:AA:23:58:F2:38:75:6C:55:9E:A4:13:3F:1A:FF:C7:63:F4:89:3C
Certificate issuer: /CN=b57dcba9fc7b0ef1f3cc80a1aee22c00198e767a
Certificate serial: 0DC2E2AF58B637322D5F3D01F5E2AC24A65ADA87
Authority key identifier: B5:7D:CB:A9:FC:7B:0E:F1:F3:CC:80:A1:AE:E2:2C:00:19:8E:76:7A
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/tX3Lqfx7DvHzzIChruIsABmOdno.cer
Subject info access: rsync://rpki.co/repo/HYSP/6/AS201763.roa
Signing time: Sat 08 Apr 2023 03:25:24 +0000
ROA not before: Sat 08 Apr 2023 03:20:24 +0000
ROA not after: Sat 06 Apr 2024 03:25:24 +0000
asID: 201763
IP address blocks: 2a12:dd47:816d::/48 maxlen: 48
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
0d:c2:e2:af:58:b6:37:32:2d:5f:3d:01:f5:e2:ac:24:a6:5a:da:87
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=b57dcba9fc7b0ef1f3cc80a1aee22c00198e767a
Validity
Not Before: Apr 8 03:20:24 2023 GMT
Not After : Apr 6 03:25:24 2024 GMT
Subject: CN=14AA2358F238756C559EA4133F1AFFC763F4893C
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:aa:db:ff:ad:4a:01:2f:1c:1a:6e:a8:eb:9a:ec:
6a:f4:97:34:53:6b:a2:a6:cb:08:3a:a5:fe:6e:13:
18:f2:ba:99:c3:98:a4:80:e4:4e:a3:ef:47:c6:9c:
63:65:f0:b7:da:bd:6f:55:b2:46:fc:30:26:47:de:
de:5c:7f:b4:8a:55:39:fb:ef:ec:74:39:ee:72:ed:
2a:05:e4:7e:ad:50:f2:1e:a2:01:4a:0e:48:23:f6:
0b:01:9c:94:72:f8:b3:4f:75:78:db:e5:e1:71:f2:
02:8d:ca:3a:64:a3:e3:56:6b:ea:a6:dc:fa:d3:2c:
08:ab:74:2a:b8:ca:62:d6:5e:6d:79:1d:5a:a7:87:
00:02:e0:73:e8:a7:3e:1c:cd:1c:80:98:5c:9c:cf:
27:13:db:82:bf:54:a1:59:74:02:a1:31:50:99:ac:
88:30:d0:00:8d:e5:62:10:c8:d7:78:99:e3:f0:ff:
8b:25:8b:2b:4b:69:68:0f:39:95:85:7f:19:52:ff:
23:e2:4f:b7:bb:9c:a1:57:61:85:c5:34:c9:98:c9:
dc:87:15:dc:67:60:29:66:0b:b5:13:a1:6f:d1:df:
45:a2:94:59:da:79:82:2d:ad:26:da:88:8a:7c:98:
b8:09:f2:14:e9:0e:0f:68:d2:eb:78:7d:6b:41:da:
0a:1f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
14:AA:23:58:F2:38:75:6C:55:9E:A4:13:3F:1A:FF:C7:63:F4:89:3C
X509v3 Authority Key Identifier:
keyid:B5:7D:CB:A9:FC:7B:0E:F1:F3:CC:80:A1:AE:E2:2C:00:19:8E:76:7A
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.co/repo/HYSP/6/B57DCBA9FC7B0EF1F3CC80A1AEE22C00198E767A.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/tX3Lqfx7DvHzzIChruIsABmOdno.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.co/repo/HYSP/6/AS201763.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a12:dd47:816d::/48
Signature Algorithm: sha256WithRSAEncryption
94:59:ef:ce:65:51:a9:02:7c:fa:62:79:9b:44:0f:ab:79:07:
4d:7d:6b:01:f7:bd:2b:fa:08:40:22:39:b9:a2:34:fb:80:72:
f8:21:1c:64:ee:e6:31:62:57:36:94:6a:bc:0b:4a:9e:e7:f0:
89:9d:d8:08:7b:56:9e:30:65:2f:0d:9d:f6:d0:85:6d:95:19:
ce:99:47:f8:59:c9:45:73:33:0e:0a:cc:29:fd:2b:52:69:42:
d8:93:54:2b:34:6c:0d:38:7c:03:ff:2b:c3:cc:25:58:01:c5:
4c:78:3d:37:36:b9:4d:88:7b:c5:5e:4c:7e:0b:df:2c:96:69:
53:04:1b:1c:28:86:f7:cf:d4:ca:55:f9:d6:91:71:1a:f8:36:
af:63:73:3c:ef:c4:76:b0:6e:a6:c6:24:a0:fd:10:61:ed:a0:
99:2e:7d:2b:3a:74:fe:04:a6:9a:38:c6:fc:fc:50:22:61:cd:
75:fa:33:37:bd:f0:aa:6e:f8:92:96:81:e0:8b:6e:a8:bc:75:
45:b6:fc:76:37:6e:b5:8f:2c:ec:e6:a9:49:0e:f1:ba:67:8c:
bf:1f:5b:4d:39:0d:5c:af:9c:e8:6b:28:2c:ca:f4:0a:70:ee:
30:c8:6c:f7:96:ac:be:86:e0:72:d1:c1:99:a6:38:ab:d3:6b:
56:6b:5c:ee
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Apr 16 13:58:29 2025 by rpki-client