Route Origin Authorization
$ rpki-client -vvf rpki.co/repo/HYSP/6/AS202340.roa
File: AS202340.roa (raw, json)
Hash identifier: +DHUmyz5l8M9CL/3TF1nrkIkxm5by5jG0S1w2/yzMC4=
Subject key identifier: 86:45:13:AC:D0:CA:3B:EB:20:8B:B0:20:FF:80:04:25:50:24:3D:F3
Certificate issuer: /CN=b57dcba9fc7b0ef1f3cc80a1aee22c00198e767a
Certificate serial: 25351F91EED210A6AC0EE0D5A094113C4A723E72
Authority key identifier: B5:7D:CB:A9:FC:7B:0E:F1:F3:CC:80:A1:AE:E2:2C:00:19:8E:76:7A
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/tX3Lqfx7DvHzzIChruIsABmOdno.cer
Subject info access: rsync://rpki.co/repo/HYSP/6/AS202340.roa
Signing time: Sat 08 Apr 2023 03:25:21 +0000
ROA not before: Sat 08 Apr 2023 03:20:21 +0000
ROA not after: Sat 06 Apr 2024 03:25:21 +0000
asID: 202340
IP address blocks: 2a12:dd47:8162::/48 maxlen: 48
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
25:35:1f:91:ee:d2:10:a6:ac:0e:e0:d5:a0:94:11:3c:4a:72:3e:72
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=b57dcba9fc7b0ef1f3cc80a1aee22c00198e767a
Validity
Not Before: Apr 8 03:20:21 2023 GMT
Not After : Apr 6 03:25:21 2024 GMT
Subject: CN=864513ACD0CA3BEB208BB020FF80042550243DF3
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a8:bf:d2:cd:5f:ca:b8:f7:9a:9b:bd:cf:c0:6c:
3f:b9:20:ca:8b:ff:2d:55:de:68:35:4c:17:e0:28:
63:63:08:fb:02:a9:c3:cf:e4:b1:a8:bf:bd:d8:ef:
7f:ed:dd:aa:07:6b:c8:14:1e:e9:45:be:d0:2e:6c:
c4:a2:b8:10:fa:a7:b9:20:f2:e9:bc:67:4b:42:c2:
d4:70:f7:bb:ec:03:9b:02:7e:44:6b:f2:80:fc:72:
5d:97:6c:e7:a0:b7:77:a4:7a:c9:d6:63:56:3e:d0:
09:50:66:e0:a2:f4:91:cf:38:e2:09:1a:0e:51:1a:
ce:be:d6:df:44:e1:74:a1:e4:29:bc:be:31:f6:84:
67:21:26:85:36:13:45:4e:e5:98:08:bd:2e:aa:28:
e9:98:60:dd:d2:34:7a:11:36:ac:5d:5b:b0:0c:a0:
38:27:29:04:1e:a4:33:af:83:1a:7f:2c:53:4e:74:
e6:e2:a6:be:ac:cd:e5:69:18:fe:96:28:eb:28:08:
af:b0:55:1d:7f:8f:ba:59:02:9b:03:4e:44:ba:e1:
ba:c5:16:5f:ef:f3:fe:51:e3:c2:44:46:1d:9f:a4:
1f:cd:04:22:17:bf:22:be:ec:80:48:45:29:ae:b3:
96:cf:87:d5:eb:fb:a3:5a:2d:ea:42:dc:b6:68:72:
52:d1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
86:45:13:AC:D0:CA:3B:EB:20:8B:B0:20:FF:80:04:25:50:24:3D:F3
X509v3 Authority Key Identifier:
keyid:B5:7D:CB:A9:FC:7B:0E:F1:F3:CC:80:A1:AE:E2:2C:00:19:8E:76:7A
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.co/repo/HYSP/6/B57DCBA9FC7B0EF1F3CC80A1AEE22C00198E767A.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/tX3Lqfx7DvHzzIChruIsABmOdno.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.co/repo/HYSP/6/AS202340.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a12:dd47:8162::/48
Signature Algorithm: sha256WithRSAEncryption
37:9b:6f:be:ce:06:ee:00:45:56:c4:04:70:de:02:0f:fc:d7:
ec:f3:7a:c2:0c:fc:2e:69:d3:66:20:53:e0:fe:70:d1:65:0d:
af:3d:0e:17:36:cf:d2:c0:b2:03:8d:a8:e9:6c:4c:29:8a:34:
28:b6:bf:6b:42:c7:2d:b4:8a:ce:cc:45:2c:0d:89:29:8d:e2:
eb:c2:aa:c6:4d:02:75:cd:93:57:ba:9d:43:4a:5d:24:ad:20:
84:e6:58:92:98:7f:7c:cd:8f:d4:97:f4:d0:4e:c3:7c:df:aa:
65:5a:3e:90:90:0c:ff:eb:9c:f0:ea:97:07:f1:e5:72:fd:fe:
fe:6e:9e:30:fb:29:bf:d7:d8:92:25:87:c5:0f:05:84:90:f0:
4e:ab:9a:e3:d8:21:ef:ea:7e:10:86:3f:7a:ad:63:99:50:de:
12:eb:98:05:61:1f:3f:e9:05:b5:e5:47:89:c6:4b:d3:e6:7f:
ee:10:92:04:67:48:6d:56:26:fb:f6:f0:52:cf:87:89:ff:16:
19:f7:8e:1a:ea:ca:e6:8f:ca:4f:02:d9:fb:9c:f9:62:8a:c3:
de:2e:4f:af:30:5c:0d:58:ad:d1:de:3f:11:77:7a:b7:e0:5d:
cb:82:3a:cf:36:90:56:61:37:53:24:9c:8a:0d:07:bc:54:8a:
78:64:ab:9a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Apr 16 13:41:28 2025 by rpki-client