Route Origin Authorization
$ rpki-client -vvf rpki.co/repo/HYSP/6/AS202118.roa
File: AS202118.roa (raw, json)
Hash identifier: yp8HVEyh/fOD3J1IrNQz4pa0nZsMx6frTyR2ir63ePs=
Subject key identifier: FB:F3:47:DA:58:A5:B5:90:5C:FB:B8:99:28:8A:5B:DC:69:DE:C4:A8
Certificate issuer: /CN=b57dcba9fc7b0ef1f3cc80a1aee22c00198e767a
Certificate serial: 620C4A9E925C146F996500F534C3E27BFB65DD38
Authority key identifier: B5:7D:CB:A9:FC:7B:0E:F1:F3:CC:80:A1:AE:E2:2C:00:19:8E:76:7A
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/tX3Lqfx7DvHzzIChruIsABmOdno.cer
Subject info access: rsync://rpki.co/repo/HYSP/6/AS202118.roa
Signing time: Sat 08 Apr 2023 03:25:30 +0000
ROA not before: Sat 08 Apr 2023 03:20:30 +0000
ROA not after: Sat 06 Apr 2024 03:25:30 +0000
asID: 202118
IP address blocks: 2a12:dd47:8350::/44 maxlen: 48
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
62:0c:4a:9e:92:5c:14:6f:99:65:00:f5:34:c3:e2:7b:fb:65:dd:38
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=b57dcba9fc7b0ef1f3cc80a1aee22c00198e767a
Validity
Not Before: Apr 8 03:20:30 2023 GMT
Not After : Apr 6 03:25:30 2024 GMT
Subject: CN=FBF347DA58A5B5905CFBB899288A5BDC69DEC4A8
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d4:49:b9:b3:b4:54:74:6d:ae:3f:62:9e:5a:9e:
01:1f:4d:c3:ae:c2:44:4c:fa:9d:2a:da:a9:91:b7:
71:d6:3b:aa:e1:e0:10:f8:2d:89:a0:8c:ba:67:3c:
13:58:7a:52:9c:30:b6:8a:56:45:43:8e:40:bb:cd:
ad:ee:aa:29:82:d2:0f:b3:18:63:de:75:c8:18:10:
c0:81:31:0e:60:e6:24:ad:d6:c7:3b:04:c4:f9:9a:
20:e2:94:2b:de:77:ca:ec:94:05:db:18:3d:83:4e:
4f:68:02:67:d8:9f:64:12:f9:73:b2:b2:f7:a1:c9:
0c:05:10:f0:81:39:1a:32:72:5a:1d:bc:5d:02:4c:
c4:16:32:e7:40:83:90:51:bd:58:a8:41:d8:49:83:
f7:94:5a:57:9c:3b:85:11:b1:29:72:fc:41:68:55:
ef:d6:28:02:e9:3b:59:21:02:04:d0:da:de:98:d0:
5b:1a:46:7f:ae:61:a2:f5:27:27:9a:df:fa:a8:fc:
61:21:23:23:a8:04:c5:3b:ab:b1:59:ad:67:d3:78:
b1:dd:9c:6d:dc:45:fe:0c:db:67:5d:1d:df:b4:be:
70:04:4e:24:8c:a1:9e:b6:4d:c0:6a:a8:ee:78:61:
ba:6a:76:10:89:39:a3:20:f1:44:d1:84:7d:6b:90:
e6:6f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
FB:F3:47:DA:58:A5:B5:90:5C:FB:B8:99:28:8A:5B:DC:69:DE:C4:A8
X509v3 Authority Key Identifier:
keyid:B5:7D:CB:A9:FC:7B:0E:F1:F3:CC:80:A1:AE:E2:2C:00:19:8E:76:7A
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.co/repo/HYSP/6/B57DCBA9FC7B0EF1F3CC80A1AEE22C00198E767A.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/tX3Lqfx7DvHzzIChruIsABmOdno.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.co/repo/HYSP/6/AS202118.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a12:dd47:8350::/44
Signature Algorithm: sha256WithRSAEncryption
9d:94:0f:fc:8c:c4:b2:84:c5:8e:48:c4:62:68:47:7f:7d:f2:
1e:56:9e:e4:f1:a4:ad:36:4f:a5:1c:c0:e8:35:68:82:17:3c:
43:89:5a:48:47:b4:0d:d6:c4:3a:3e:fa:e5:2b:1e:8d:cd:05:
b5:96:39:71:40:31:2e:cc:13:d6:58:5c:22:cd:ed:79:32:e7:
f4:4a:2a:fd:c4:21:86:5b:51:55:23:80:07:6e:3b:38:82:b8:
9a:78:5e:62:97:20:d1:8c:41:8f:2f:3d:f0:59:19:79:af:d6:
ed:69:18:09:bd:5e:d3:bb:50:eb:2c:22:a3:c8:a2:23:2b:a4:
92:c7:65:8d:2c:de:f4:31:f9:29:4a:ba:a8:e3:51:6f:e3:8b:
79:aa:0e:55:f3:ee:b2:90:06:7d:61:39:37:cb:92:ae:3a:c8:
06:79:19:1e:15:32:94:ed:23:96:26:2c:23:a8:ba:7c:af:27:
16:2e:b6:84:07:cf:9d:c2:78:5a:25:4c:81:a9:1e:0a:f9:c4:
4b:c3:e7:56:12:92:ab:76:16:cf:b5:6e:9e:91:75:52:e6:2a:
28:a2:65:59:20:ab:07:2e:17:10:4b:f8:3b:21:6c:3d:25:fe:
98:9b:da:c8:5f:e7:5c:98:88:f0:95:9b:b2:05:62:96:1d:d0:
c5:bc:29:eb
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Apr 16 13:58:27 2025 by rpki-client