Route Origin Authorization
$ rpki-client -vvf rpki.co/repo/HYSP/6/AS202248.roa
File: AS202248.roa (raw, json)
Hash identifier: 3V2PC9A/jE3H065rTnDhiQevaIwz+O+TjmbVVt3b4lk=
Subject key identifier: F2:F6:E2:03:D1:AE:54:88:2F:BC:D1:80:D7:35:8A:A2:42:64:9A:69
Certificate issuer: /CN=b57dcba9fc7b0ef1f3cc80a1aee22c00198e767a
Certificate serial: 09148D52BCE1D7D5E19041104552CF9FA94960CD
Authority key identifier: B5:7D:CB:A9:FC:7B:0E:F1:F3:CC:80:A1:AE:E2:2C:00:19:8E:76:7A
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/tX3Lqfx7DvHzzIChruIsABmOdno.cer
Subject info access: rsync://rpki.co/repo/HYSP/6/AS202248.roa
Signing time: Sat 08 Apr 2023 03:25:37 +0000
ROA not before: Sat 08 Apr 2023 03:20:37 +0000
ROA not after: Sat 06 Apr 2024 03:25:37 +0000
asID: 202248
IP address blocks: 2a12:dd47:8164::/48 maxlen: 48
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
09:14:8d:52:bc:e1:d7:d5:e1:90:41:10:45:52:cf:9f:a9:49:60:cd
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=b57dcba9fc7b0ef1f3cc80a1aee22c00198e767a
Validity
Not Before: Apr 8 03:20:37 2023 GMT
Not After : Apr 6 03:25:37 2024 GMT
Subject: CN=F2F6E203D1AE54882FBCD180D7358AA242649A69
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:db:4c:41:14:c1:72:9d:a0:e0:dd:e2:19:cc:92:
ba:62:b8:9a:a1:fb:d2:90:93:6c:2c:fd:e7:57:e2:
a1:be:14:56:68:07:67:c8:4d:29:c6:71:f8:f6:14:
8d:73:06:85:90:b7:80:35:d3:f1:dc:a8:8e:4c:f2:
8a:b7:2c:4d:0f:5f:83:4d:68:44:79:17:c3:41:1c:
85:b1:ee:69:15:ca:41:3a:c4:19:98:dc:11:2f:bd:
31:ee:e4:44:9a:a2:76:18:c9:d3:f1:49:7c:70:fe:
36:13:bf:7a:76:1f:56:45:57:4f:14:3d:37:a9:13:
a1:25:e7:88:82:6f:2e:c4:d0:aa:92:cd:bc:92:54:
4f:2e:b2:d4:ac:70:bc:f4:f4:b2:e4:2e:89:ae:1d:
4c:9a:5e:76:22:59:08:62:cb:ad:1a:73:3b:47:fc:
ed:57:f2:01:79:15:0b:f4:7d:18:0c:78:3d:73:e6:
38:66:dc:b6:2c:71:c1:9e:21:0b:64:84:d6:e4:25:
89:c9:e0:df:1e:3c:3c:b3:4f:fc:3c:3a:f5:a0:c3:
d8:2e:07:57:b2:f7:f7:bb:ad:22:6c:95:b2:93:97:
0f:a8:0c:1b:d8:44:ae:91:4c:5f:fd:57:87:5f:45:
58:b5:d4:2e:7f:b2:fc:b9:9a:21:40:d9:8f:d9:95:
f8:bf
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F2:F6:E2:03:D1:AE:54:88:2F:BC:D1:80:D7:35:8A:A2:42:64:9A:69
X509v3 Authority Key Identifier:
keyid:B5:7D:CB:A9:FC:7B:0E:F1:F3:CC:80:A1:AE:E2:2C:00:19:8E:76:7A
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.co/repo/HYSP/6/B57DCBA9FC7B0EF1F3CC80A1AEE22C00198E767A.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/tX3Lqfx7DvHzzIChruIsABmOdno.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.co/repo/HYSP/6/AS202248.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a12:dd47:8164::/48
Signature Algorithm: sha256WithRSAEncryption
59:83:fa:8e:5d:f8:fd:f1:b3:bd:07:4a:a1:e1:9b:67:af:99:
0d:c3:0e:2c:30:65:23:e7:75:9c:a4:30:19:e8:9f:b4:5f:9c:
95:9b:62:8c:53:af:59:cd:c5:6a:16:8e:71:16:58:c6:08:30:
d0:a9:4c:b1:e5:aa:1a:88:dd:3c:fe:db:82:20:27:97:5d:16:
a0:ac:a9:c2:bc:e0:fe:b7:8f:b4:8d:b7:aa:95:a8:0b:3a:48:
f4:50:f8:ac:6e:df:97:55:3d:b6:3e:83:54:a4:7b:92:ff:39:
91:24:8b:11:2d:59:b3:5a:46:c6:bd:00:88:b7:97:2b:5d:0f:
01:14:83:e8:79:53:7c:ca:5c:35:52:48:c6:ad:2e:3f:43:e9:
fb:51:13:b9:b5:27:4c:a8:3e:8a:90:11:30:60:60:a3:63:12:
2d:fd:9f:9b:a2:55:8d:4b:9b:e1:96:b7:17:88:49:33:52:dd:
ba:35:a6:1c:30:56:1a:eb:d7:64:09:a2:58:71:46:a7:a9:5c:
7c:22:8c:27:3a:5b:d4:56:75:b5:47:c4:b7:fe:31:ca:5d:c2:
4e:d8:ee:c6:be:07:b9:f2:4b:6b:d2:d9:41:4e:db:42:23:91:
73:1d:97:72:f1:93:d6:87:13:ab:2e:9c:e4:71:8b:d9:96:0d:
34:14:90:49
-----BEGIN CERTIFICATE-----
MIIEjzCCA3egAwIBAgIUCRSNUrzh19XhkEEQRVLPn6lJYM0wDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoYjU3ZGNiYTlmYzdiMGVmMWYzY2M4MGExYWVlMjJjMDAx
OThlNzY3YTAeFw0yMzA0MDgwMzIwMzdaFw0yNDA0MDYwMzI1MzdaMDMxMTAvBgNV
BAMTKEYyRjZFMjAzRDFBRTU0ODgyRkJDRDE4MEQ3MzU4QUEyNDI2NDlBNjkwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDbTEEUwXKdoODd4hnMkrpiuJqh
+9KQk2ws/edX4qG+FFZoB2fITSnGcfj2FI1zBoWQt4A10/HcqI5M8oq3LE0PX4NN
aER5F8NBHIWx7mkVykE6xBmY3BEvvTHu5ESaonYYydPxSXxw/jYTv3p2H1ZFV08U
PTepE6El54iCby7E0KqSzbySVE8ustSscLz09LLkLomuHUyaXnYiWQhiy60acztH
/O1X8gF5FQv0fRgMeD1z5jhm3LYsccGeIQtkhNbkJYnJ4N8ePDyzT/w8OvWgw9gu
B1ey9/e7rSJslbKTlw+oDBvYRK6RTF/9V4dfRVi11C5/svy5miFA2Y/Zlfi/AgMB
AAGjggGZMIIBlTAdBgNVHQ4EFgQU8vbiA9GuVIgvvNGA1zWKokJkmmkwHwYDVR0j
BBgwFoAUtX3Lqfx7DvHzzIChruIsABmOdnowDgYDVR0PAQH/BAQDAgeAMFkGA1Ud
HwRSMFAwTqBMoEqGSHJzeW5jOi8vcnBraS5jby9yZXBvL0hZU1AvNi9CNTdEQ0JB
OUZDN0IwRUYxRjNDQzgwQTFBRUUyMkMwMDE5OEU3NjdBLmNybDBkBggrBgEFBQcB
AQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBvc2l0
b3J5L0RFRkFVTFQvdFgzTHFmeDdEdkh6eklDaHJ1SXNBQm1PZG5vLmNlcjBEBggr
BgEFBQcBCwQ4MDYwNAYIKwYBBQUHMAuGKHJzeW5jOi8vcnBraS5jby9yZXBvL0hZ
U1AvNi9BUzIwMjI0OC5yb2EwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAiBggr
BgEFBQcBBwEB/wQTMBEwDwQCAAIwCQMHACoS3UeBZDANBgkqhkiG9w0BAQsFAAOC
AQEAWYP6jl34/fGzvQdKoeGbZ6+ZDcMOLDBlI+d1nKQwGeiftF+clZtijFOvWc3F
ahaOcRZYxggw0KlMseWqGojdPP7bgiAnl10WoKypwrzg/rePtI23qpWoCzpI9FD4
rG7fl1U9tj6DVKR7kv85kSSLES1Zs1pGxr0AiLeXK10PARSD6HlTfMpcNVJIxq0u
P0Pp+1ETubUnTKg+ipARMGBgo2MSLf2fm6JVjUub4Za3F4hJM1LdujWmHDBWGuvX
ZAmiWHFGp6lcfCKMJzpb1FZ1tUfEt/4xyl3CTtjuxr4HufJLa9LZQU7bQiORcx2X
cvGT1ocTqy6c5HGL2ZYNNBSQSQ==
-----END CERTIFICATE-----
Generated at Wed Apr 16 13:54:23 2025 by rpki-client