Route Origin Authorization
$ rpki-client -vvf rpki.co/repo/HYSP/6/AS203199.roa
File: AS203199.roa (raw, json)
Hash identifier: GQBjMWmv6gJIGFXEixIWiKjjpzE/S/pC68qC9F/JAgE=
Subject key identifier: 72:3E:6B:FC:40:BD:BA:B0:E6:84:6B:4E:B0:75:7A:69:F7:AD:60:5C
Certificate issuer: /CN=b57dcba9fc7b0ef1f3cc80a1aee22c00198e767a
Certificate serial: 485FC83D8931077E084D53D991323EC3EDF7CB2B
Authority key identifier: B5:7D:CB:A9:FC:7B:0E:F1:F3:CC:80:A1:AE:E2:2C:00:19:8E:76:7A
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/tX3Lqfx7DvHzzIChruIsABmOdno.cer
Subject info access: rsync://rpki.co/repo/HYSP/6/AS203199.roa
Signing time: Sat 08 Apr 2023 03:25:43 +0000
ROA not before: Sat 08 Apr 2023 03:20:43 +0000
ROA not after: Sat 06 Apr 2024 03:25:43 +0000
asID: 203199
IP address blocks: 2a12:dd47:8007::/48 maxlen: 48
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
48:5f:c8:3d:89:31:07:7e:08:4d:53:d9:91:32:3e:c3:ed:f7:cb:2b
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=b57dcba9fc7b0ef1f3cc80a1aee22c00198e767a
Validity
Not Before: Apr 8 03:20:43 2023 GMT
Not After : Apr 6 03:25:43 2024 GMT
Subject: CN=723E6BFC40BDBAB0E6846B4EB0757A69F7AD605C
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b4:f4:b8:29:7a:55:77:f0:2c:bb:1a:a2:da:8e:
c6:ed:47:f9:aa:e3:e2:84:f2:dd:20:2d:55:4d:14:
12:74:b3:c2:b0:dd:ca:c9:27:dc:29:b9:e8:ba:3d:
70:29:d0:5e:fc:0c:b5:4d:a1:12:f7:dd:19:d6:db:
c5:82:0a:78:5c:9f:ea:d1:91:6d:b6:81:b6:33:d7:
4d:d8:0a:b4:ba:e4:42:de:53:b7:98:04:c1:91:90:
ed:21:05:22:db:23:ec:16:fc:a4:ef:b7:d4:17:ca:
5d:f5:3d:3e:72:b6:68:36:fd:d4:00:09:47:42:94:
41:16:d5:13:b5:54:56:b3:ab:29:90:99:b6:ae:c8:
7c:cd:c1:dc:df:f2:63:62:5d:c1:2e:50:c1:65:ee:
3c:8e:8c:3c:6a:4f:ea:fd:22:67:00:85:95:9b:6a:
00:04:cf:30:68:66:de:c6:73:a1:35:25:13:09:d3:
e3:b2:15:5d:32:d1:c6:9a:9e:f2:57:dc:5b:8d:d7:
b3:39:ed:40:ee:79:3a:a1:e1:f4:3c:21:ab:50:82:
92:21:77:fc:6e:b7:82:6c:60:88:fd:b2:37:c3:58:
0c:d0:fd:81:91:c6:e1:d2:18:a5:aa:9b:01:af:b0:
c2:ee:ba:43:34:10:35:00:74:8d:23:ec:d1:9d:22:
16:9d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
72:3E:6B:FC:40:BD:BA:B0:E6:84:6B:4E:B0:75:7A:69:F7:AD:60:5C
X509v3 Authority Key Identifier:
keyid:B5:7D:CB:A9:FC:7B:0E:F1:F3:CC:80:A1:AE:E2:2C:00:19:8E:76:7A
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.co/repo/HYSP/6/B57DCBA9FC7B0EF1F3CC80A1AEE22C00198E767A.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/tX3Lqfx7DvHzzIChruIsABmOdno.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.co/repo/HYSP/6/AS203199.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a12:dd47:8007::/48
Signature Algorithm: sha256WithRSAEncryption
2e:d1:1f:b5:b8:c1:a2:31:21:91:09:ff:95:61:c4:30:28:7a:
c7:61:b5:de:01:93:26:90:75:0c:b4:7a:48:bc:36:eb:87:de:
6c:5c:a4:51:67:37:61:3c:37:50:7a:df:29:ad:c3:7e:2d:e5:
06:90:df:71:d7:4a:eb:2c:48:e9:a8:8b:11:ba:9d:f6:84:2e:
b3:fe:48:ea:46:6f:30:31:18:20:04:83:d7:1e:81:b0:1f:e0:
fe:9a:c8:76:2f:57:7a:20:60:3a:31:b8:98:1a:08:45:da:ab:
15:3d:de:d9:80:8b:a8:c1:6a:e3:ec:d4:4f:cb:30:83:5c:8c:
0b:cc:2d:fe:2e:8c:d4:4b:4a:25:c0:92:2b:6c:36:b5:17:d8:
c4:7f:a6:79:63:a3:c7:ed:13:b6:86:78:b4:10:b3:34:6e:3f:
08:18:cf:70:c2:ef:bf:9a:08:28:f6:41:c0:59:57:81:77:29:
35:ad:53:5f:00:45:4c:50:d3:f0:f1:ae:c2:cf:47:1f:33:c0:
e7:c2:3c:70:21:6d:0f:0d:39:7b:52:12:e0:7c:d3:64:9e:d1:
31:4d:40:ae:db:60:67:81:c2:67:10:b6:ca:11:ed:c4:ef:3d:
05:94:b1:ad:c7:d4:fe:ad:0b:5d:c8:21:0c:33:c4:81:96:37:
09:3a:65:c0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Apr 16 13:56:06 2025 by rpki-client