Route Origin Authorization
$ rpki-client -vvf rpki.co/repo/HYSP/6/AS202685.roa
File: AS202685.roa (raw, json)
Hash identifier: cmk701HMCMnE/Nz14qtexZyxtZuUr+vnmin0TIGrRAk=
Subject key identifier: D1:95:F9:EA:90:D2:6F:2A:CF:58:9A:BF:C1:F1:C8:B1:08:D1:CD:7F
Certificate issuer: /CN=b57dcba9fc7b0ef1f3cc80a1aee22c00198e767a
Certificate serial: 2D3A5070B331EED54E731CA6DBEE240F17A816D1
Authority key identifier: B5:7D:CB:A9:FC:7B:0E:F1:F3:CC:80:A1:AE:E2:2C:00:19:8E:76:7A
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/tX3Lqfx7DvHzzIChruIsABmOdno.cer
Subject info access: rsync://rpki.co/repo/HYSP/6/AS202685.roa
Signing time: Sat 08 Apr 2023 03:25:21 +0000
ROA not before: Sat 08 Apr 2023 03:20:21 +0000
ROA not after: Sat 06 Apr 2024 03:25:21 +0000
asID: 202685
IP address blocks: 2a12:dd47:8500::/40 maxlen: 48
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
2d:3a:50:70:b3:31:ee:d5:4e:73:1c:a6:db:ee:24:0f:17:a8:16:d1
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=b57dcba9fc7b0ef1f3cc80a1aee22c00198e767a
Validity
Not Before: Apr 8 03:20:21 2023 GMT
Not After : Apr 6 03:25:21 2024 GMT
Subject: CN=D195F9EA90D26F2ACF589ABFC1F1C8B108D1CD7F
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b4:66:ea:de:4d:dd:d6:cb:6c:94:ca:53:a1:ea:
84:46:30:8b:0c:35:c3:d2:ef:e7:69:d5:65:6c:a1:
d3:2f:62:ee:36:f3:32:49:3d:d0:78:ac:6a:fa:18:
59:23:e1:5c:3b:ce:24:df:cf:90:d1:2c:ae:dc:6d:
d1:4a:94:0d:8d:50:e6:ec:04:67:3b:a3:65:78:42:
58:a4:1a:5d:7c:3f:28:c3:b1:99:26:9c:89:6d:85:
61:54:50:55:f6:9a:a8:08:c2:3c:25:09:61:18:16:
a8:b0:61:08:d6:b3:9a:38:05:0f:52:7a:92:9b:65:
0a:57:f5:1f:6a:e3:60:52:96:43:eb:0a:eb:20:24:
79:74:8c:c2:ba:44:99:f2:e7:54:e6:07:b2:9d:ea:
29:64:fa:c0:57:7f:f9:98:e8:12:ab:c3:55:c4:c6:
4c:1e:8e:b8:ec:67:0c:d7:96:53:76:f6:51:84:58:
e8:2f:41:6e:c4:32:d4:da:e1:ec:47:87:0f:aa:fc:
db:a5:3c:95:17:53:8c:62:19:92:73:bf:49:fa:d1:
91:05:ea:d9:37:b6:31:9e:0c:48:3a:f6:a7:1b:47:
59:e2:97:98:f0:cc:c7:8b:08:c9:2f:96:00:22:87:
46:0a:c7:10:1c:b4:96:3d:9a:26:d9:fa:ec:18:63:
43:e7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D1:95:F9:EA:90:D2:6F:2A:CF:58:9A:BF:C1:F1:C8:B1:08:D1:CD:7F
X509v3 Authority Key Identifier:
keyid:B5:7D:CB:A9:FC:7B:0E:F1:F3:CC:80:A1:AE:E2:2C:00:19:8E:76:7A
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.co/repo/HYSP/6/B57DCBA9FC7B0EF1F3CC80A1AEE22C00198E767A.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/tX3Lqfx7DvHzzIChruIsABmOdno.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.co/repo/HYSP/6/AS202685.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a12:dd47:8500::/40
Signature Algorithm: sha256WithRSAEncryption
42:77:7a:02:b8:71:19:0c:2e:c2:d8:32:31:2c:48:1c:8e:dc:
2f:a9:65:b2:33:5b:53:a4:33:49:75:e2:81:e1:d5:3d:d0:8a:
da:66:98:75:e9:1a:a4:2b:a7:40:f0:59:82:36:57:50:8c:75:
2c:36:78:8d:0a:ee:1d:3d:82:1c:20:b8:0e:38:59:50:35:89:
c7:59:00:28:9b:02:a4:c6:dd:31:49:37:29:14:ae:b0:0c:1f:
65:2f:cf:91:7a:a3:80:5a:73:ea:c3:04:91:18:49:5e:49:82:
bb:3c:d9:1b:7d:e4:43:e7:41:55:bd:d1:b2:ee:2e:12:b1:57:
81:62:2c:39:14:e0:0f:55:90:ef:2f:1b:fa:c4:50:8e:7e:c3:
a3:c4:70:26:88:90:ec:84:4c:b5:f1:eb:76:a7:69:13:ad:93:
f6:0e:2d:07:9f:88:98:5d:78:c5:69:9b:61:ae:6a:1c:c3:9d:
76:82:c6:07:ef:3d:6a:0f:70:1c:17:14:4f:ca:70:33:e6:63:
f9:9a:a0:8f:8c:81:52:0a:84:8b:f1:04:d9:78:c3:86:c2:50:
b6:f2:d0:b5:e6:85:b2:b2:d5:48:dd:b3:f5:55:05:64:bf:e6:
40:8b:5e:5d:97:99:f4:ce:42:6f:0c:6b:80:8e:68:ba:3f:cd:
02:87:07:49
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Apr 16 13:52:06 2025 by rpki-client