Route Origin Authorization
$ rpki-client -vvf rpki.co/repo/HYSP/6/AS201938.roa
File: AS201938.roa (raw, json)
Hash identifier: EUKNJbSK+8LpLCwd9/s/IdjLdI5bzalbWu2eJVYq11o=
Subject key identifier: 01:AC:D3:82:22:EE:DB:CA:5A:2D:29:DF:B5:28:83:A9:0F:5B:9B:C1
Certificate issuer: /CN=b57dcba9fc7b0ef1f3cc80a1aee22c00198e767a
Certificate serial: 791A5548E35180BD1EF09979B60A86E5C61E0E20
Authority key identifier: B5:7D:CB:A9:FC:7B:0E:F1:F3:CC:80:A1:AE:E2:2C:00:19:8E:76:7A
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/tX3Lqfx7DvHzzIChruIsABmOdno.cer
Subject info access: rsync://rpki.co/repo/HYSP/6/AS201938.roa
Signing time: Sat 08 Apr 2023 03:25:34 +0000
ROA not before: Sat 08 Apr 2023 03:20:34 +0000
ROA not after: Sat 06 Apr 2024 03:25:34 +0000
asID: 201938
IP address blocks: 2a12:dd47:8167::/48 maxlen: 48
2a12:dd47:8e50::/44 maxlen: 48
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
79:1a:55:48:e3:51:80:bd:1e:f0:99:79:b6:0a:86:e5:c6:1e:0e:20
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=b57dcba9fc7b0ef1f3cc80a1aee22c00198e767a
Validity
Not Before: Apr 8 03:20:34 2023 GMT
Not After : Apr 6 03:25:34 2024 GMT
Subject: CN=01ACD38222EEDBCA5A2D29DFB52883A90F5B9BC1
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c6:db:fa:7c:be:a3:82:f6:fe:8a:2d:bb:b6:c5:
e3:42:76:a8:ac:5f:cb:7e:3c:65:6c:27:01:b1:a5:
b3:12:b1:a2:0d:5c:43:26:84:72:90:f1:2a:8e:51:
52:23:82:2e:d0:a7:9b:fd:39:e5:4b:08:84:a9:45:
51:ac:8e:90:b3:fb:98:c0:d5:2b:70:8b:21:24:0f:
cc:c2:30:ed:d9:43:de:d5:f8:a5:82:18:9c:b2:e4:
8c:aa:0e:b4:6f:6d:8c:62:ff:60:c9:98:41:e2:23:
58:51:e8:c0:46:ff:a1:c5:58:38:c9:3d:b2:e4:02:
59:39:5b:13:53:90:3d:2e:10:11:4b:1d:fc:43:1b:
68:61:c1:22:c5:bd:ab:62:0e:b5:04:df:c7:21:db:
68:65:0a:86:eb:bf:6a:65:61:9b:15:5e:60:75:39:
1e:29:c6:a1:bb:db:bd:df:ba:59:c6:be:b0:fb:31:
96:ed:25:2b:a2:c9:0f:6e:cd:43:78:ba:eb:ed:a5:
17:ca:41:e4:ce:39:92:a2:4a:0d:f6:9a:fb:80:05:
45:c0:e0:a0:e1:e7:4f:e0:2b:41:b9:2d:98:86:dd:
e6:25:fe:08:a0:a8:8c:45:ac:8c:c4:42:97:db:f0:
2e:15:0a:c7:ee:eb:79:ba:ba:70:e2:96:e4:92:ce:
95:a3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
01:AC:D3:82:22:EE:DB:CA:5A:2D:29:DF:B5:28:83:A9:0F:5B:9B:C1
X509v3 Authority Key Identifier:
keyid:B5:7D:CB:A9:FC:7B:0E:F1:F3:CC:80:A1:AE:E2:2C:00:19:8E:76:7A
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.co/repo/HYSP/6/B57DCBA9FC7B0EF1F3CC80A1AEE22C00198E767A.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/tX3Lqfx7DvHzzIChruIsABmOdno.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.co/repo/HYSP/6/AS201938.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a12:dd47:8167::/48
2a12:dd47:8e50::/44
Signature Algorithm: sha256WithRSAEncryption
18:fc:4b:2f:a2:24:27:1f:1f:c0:f3:1a:d6:b1:bf:f2:a8:a8:
de:f7:bb:27:ee:2b:b9:6b:b4:ed:e6:52:e4:fa:12:40:7b:fd:
e1:a7:d9:86:a2:a2:71:f3:c6:ca:da:5c:bd:96:d0:f2:98:ca:
78:d7:8f:3b:c0:ea:91:08:a7:f3:8b:c2:a4:46:19:b4:cd:62:
ab:30:e4:e2:47:19:ad:39:9f:96:37:27:92:af:ef:bb:a5:10:
d8:f9:38:92:6c:95:68:d1:a0:e4:b8:8d:9b:b9:60:7d:21:3d:
9a:2a:f0:97:dc:50:54:b8:6e:b3:fe:68:5e:e8:53:f8:fb:9c:
a3:66:81:14:9b:bb:49:10:9b:54:03:c1:f9:5b:fb:66:a7:8a:
31:53:a9:5c:b7:67:f7:06:5f:57:03:81:5f:8b:11:91:8e:c8:
6b:0d:ce:55:21:aa:01:6e:e0:80:05:1b:ff:d2:f9:0a:19:63:
95:d4:17:ec:bc:fc:05:5c:1e:7f:8f:c1:36:e2:2a:ed:19:c6:
b4:ec:fb:a6:95:31:86:e9:bf:e8:68:7f:1a:97:c8:70:36:f8:
5a:3c:9f:34:67:e5:ea:3c:be:e6:d2:3c:7c:97:a5:aa:96:cc:
c8:cf:66:4e:14:db:79:c9:ec:aa:26:0d:46:d5:3b:7e:c0:40:
ac:d0:8f:11
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Apr 16 13:49:33 2025 by rpki-client