Route Origin Authorization
$ rpki-client -vvf rpki.co/repo/HYSP/6/AS202911.roa
File: AS202911.roa (raw, json)
Hash identifier: srhJk9YKGQNOLciFouVcmjegpJu8njkkbSBYYwxRevc=
Subject key identifier: CB:A6:8F:EF:45:48:69:B1:FB:37:8B:EC:0A:F6:8C:2E:B3:AC:3A:BA
Certificate issuer: /CN=b57dcba9fc7b0ef1f3cc80a1aee22c00198e767a
Certificate serial: 4BA9C53EE04E55D565BECA9DC93CC0330201D462
Authority key identifier: B5:7D:CB:A9:FC:7B:0E:F1:F3:CC:80:A1:AE:E2:2C:00:19:8E:76:7A
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/tX3Lqfx7DvHzzIChruIsABmOdno.cer
Subject info access: rsync://rpki.co/repo/HYSP/6/AS202911.roa
Signing time: Sat 08 Apr 2023 03:25:46 +0000
ROA not before: Sat 08 Apr 2023 03:20:46 +0000
ROA not after: Sat 06 Apr 2024 03:25:46 +0000
asID: 202911
IP address blocks: 2a12:dd47:8210::/44 maxlen: 48
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
4b:a9:c5:3e:e0:4e:55:d5:65:be:ca:9d:c9:3c:c0:33:02:01:d4:62
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=b57dcba9fc7b0ef1f3cc80a1aee22c00198e767a
Validity
Not Before: Apr 8 03:20:46 2023 GMT
Not After : Apr 6 03:25:46 2024 GMT
Subject: CN=CBA68FEF454869B1FB378BEC0AF68C2EB3AC3ABA
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a7:d5:12:db:8a:d8:2c:43:93:97:33:95:be:d4:
73:fd:90:f1:a1:b3:38:4e:d5:40:95:1a:59:e6:8a:
fa:4a:2d:15:6c:71:2b:6e:91:e8:65:ec:fa:53:0b:
23:c6:bf:00:5a:08:0e:50:d6:80:87:1a:5c:24:20:
36:fa:26:9c:92:98:96:39:7d:bd:af:83:45:d2:a8:
87:20:e0:db:da:67:27:c6:3a:b3:bb:d2:4e:b0:ec:
af:45:ca:f7:40:c0:d9:5e:7a:82:da:44:a6:6a:bc:
bc:d6:b3:83:e1:8f:48:67:d7:35:63:1f:85:d1:87:
05:31:32:66:b3:40:9a:bb:7c:8d:5e:d4:1e:88:60:
b2:1b:3b:52:d4:a4:a4:94:7a:7b:cb:0f:89:c3:d2:
60:c9:34:fe:46:41:12:83:69:f8:99:98:01:c2:0c:
13:68:21:1f:dc:2d:ca:ef:8c:30:4e:9e:51:37:e5:
5e:5d:61:83:5c:6b:19:c8:bb:22:74:1c:32:01:7b:
22:06:39:71:3d:26:95:5d:98:4f:d3:a6:00:1f:78:
ed:03:52:63:f7:68:a4:2e:a0:97:4a:d6:4e:8d:62:
8a:b3:3e:38:11:2e:d0:c6:b8:61:a9:e5:3a:1b:ce:
e8:f1:73:08:9b:93:48:ff:f4:2c:b9:e5:4f:59:48:
09:cd
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
CB:A6:8F:EF:45:48:69:B1:FB:37:8B:EC:0A:F6:8C:2E:B3:AC:3A:BA
X509v3 Authority Key Identifier:
keyid:B5:7D:CB:A9:FC:7B:0E:F1:F3:CC:80:A1:AE:E2:2C:00:19:8E:76:7A
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.co/repo/HYSP/6/B57DCBA9FC7B0EF1F3CC80A1AEE22C00198E767A.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/tX3Lqfx7DvHzzIChruIsABmOdno.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.co/repo/HYSP/6/AS202911.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a12:dd47:8210::/44
Signature Algorithm: sha256WithRSAEncryption
82:6b:d9:bf:2a:d0:67:62:f6:6d:1f:67:c9:bf:83:c6:c8:0a:
e1:4d:cd:ae:e2:7c:9d:f2:a8:dd:d5:76:d8:c3:96:9c:c0:89:
8f:53:e8:53:4e:dc:0c:10:99:63:fd:73:d1:3c:cf:b3:35:ab:
1b:d9:11:b3:b4:e1:ed:de:7c:7b:0b:e4:f2:5c:e5:ae:07:3f:
55:b4:d6:03:3a:bd:e5:76:5c:db:45:14:b8:f9:65:b7:31:6d:
cc:c6:62:8e:ba:d5:f9:bb:d8:13:b7:b2:c3:75:ae:4f:dd:13:
f0:e7:e9:16:b8:14:5b:6b:ee:4c:22:2e:1d:a9:01:2a:e1:c6:
8b:5c:f6:e1:b1:f8:ff:f2:fe:d5:78:35:19:da:f3:74:69:73:
da:7b:78:cb:4f:6c:f0:d4:6c:dc:b6:31:38:cc:86:1b:9b:8f:
55:bb:2d:8f:41:6e:14:77:8b:4e:69:33:fa:4b:33:2e:07:9d:
4b:29:e0:d3:a9:09:41:8b:69:8c:d3:30:48:7a:58:00:e3:9f:
4d:1c:e1:c3:90:40:e6:76:0c:58:50:2e:d4:98:85:76:96:89:
2b:bf:d0:7f:1a:c5:d3:07:8d:fb:4f:f8:58:e2:03:aa:62:69:
01:09:c6:ee:8b:e9:f1:f2:89:57:99:80:31:01:5a:16:84:0a:
85:21:7c:d7
-----BEGIN CERTIFICATE-----
MIIEjzCCA3egAwIBAgIUS6nFPuBOVdVlvsqdyTzAMwIB1GIwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoYjU3ZGNiYTlmYzdiMGVmMWYzY2M4MGExYWVlMjJjMDAx
OThlNzY3YTAeFw0yMzA0MDgwMzIwNDZaFw0yNDA0MDYwMzI1NDZaMDMxMTAvBgNV
BAMTKENCQTY4RkVGNDU0ODY5QjFGQjM3OEJFQzBBRjY4QzJFQjNBQzNBQkEwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCn1RLbitgsQ5OXM5W+1HP9kPGh
szhO1UCVGlnmivpKLRVscStukehl7PpTCyPGvwBaCA5Q1oCHGlwkIDb6JpySmJY5
fb2vg0XSqIcg4NvaZyfGOrO70k6w7K9FyvdAwNleeoLaRKZqvLzWs4Phj0hn1zVj
H4XRhwUxMmazQJq7fI1e1B6IYLIbO1LUpKSUenvLD4nD0mDJNP5GQRKDafiZmAHC
DBNoIR/cLcrvjDBOnlE35V5dYYNcaxnIuyJ0HDIBeyIGOXE9JpVdmE/TpgAfeO0D
UmP3aKQuoJdK1k6NYoqzPjgRLtDGuGGp5Tobzujxcwibk0j/9Cy55U9ZSAnNAgMB
AAGjggGZMIIBlTAdBgNVHQ4EFgQUy6aP70VIabH7N4vsCvaMLrOsOrowHwYDVR0j
BBgwFoAUtX3Lqfx7DvHzzIChruIsABmOdnowDgYDVR0PAQH/BAQDAgeAMFkGA1Ud
HwRSMFAwTqBMoEqGSHJzeW5jOi8vcnBraS5jby9yZXBvL0hZU1AvNi9CNTdEQ0JB
OUZDN0IwRUYxRjNDQzgwQTFBRUUyMkMwMDE5OEU3NjdBLmNybDBkBggrBgEFBQcB
AQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBvc2l0
b3J5L0RFRkFVTFQvdFgzTHFmeDdEdkh6eklDaHJ1SXNBQm1PZG5vLmNlcjBEBggr
BgEFBQcBCwQ4MDYwNAYIKwYBBQUHMAuGKHJzeW5jOi8vcnBraS5jby9yZXBvL0hZ
U1AvNi9BUzIwMjkxMS5yb2EwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAiBggr
BgEFBQcBBwEB/wQTMBEwDwQCAAIwCQMHBCoS3UeCEDANBgkqhkiG9w0BAQsFAAOC
AQEAgmvZvyrQZ2L2bR9nyb+DxsgK4U3NruJ8nfKo3dV22MOWnMCJj1PoU07cDBCZ
Y/1z0TzPszWrG9kRs7Th7d58ewvk8lzlrgc/VbTWAzq95XZc20UUuPlltzFtzMZi
jrrV+bvYE7eyw3WuT90T8OfpFrgUW2vuTCIuHakBKuHGi1z24bH4//L+1Xg1Gdrz
dGlz2nt4y09s8NRs3LYxOMyGG5uPVbstj0FuFHeLTmkz+kszLgedSyng06kJQYtp
jNMwSHpYAOOfTRzhw5BA5nYMWFAu1JiFdpaJK7/QfxrF0weN+0/4WOIDqmJpAQnG
7ovp8fKJV5mAMQFaFoQKhSF81w==
-----END CERTIFICATE-----
Generated at Wed Apr 16 13:48:31 2025 by rpki-client