Route Origin Authorization
$ rpki-client -vvf rpki.co/repo/HYSP/6/AS203323.roa
File: AS203323.roa (raw, json)
Hash identifier: 9SbZClud5Jjxg1tixSsnI1Y78B+e+hNaEF4HKbgOqp4=
Subject key identifier: 67:E8:0C:1E:52:55:E7:A4:8B:62:E8:31:C9:1E:ED:22:7E:46:70:BC
Certificate issuer: /CN=b57dcba9fc7b0ef1f3cc80a1aee22c00198e767a
Certificate serial: 2BF4B1F75A76A8C6F086C5A486219F5F0F74A800
Authority key identifier: B5:7D:CB:A9:FC:7B:0E:F1:F3:CC:80:A1:AE:E2:2C:00:19:8E:76:7A
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/tX3Lqfx7DvHzzIChruIsABmOdno.cer
Subject info access: rsync://rpki.co/repo/HYSP/6/AS203323.roa
Signing time: Sat 08 Apr 2023 03:25:41 +0000
ROA not before: Sat 08 Apr 2023 03:20:41 +0000
ROA not after: Sat 06 Apr 2024 03:25:41 +0000
asID: 203323
IP address blocks: 2a12:dd47:8078::/48 maxlen: 48
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
2b:f4:b1:f7:5a:76:a8:c6:f0:86:c5:a4:86:21:9f:5f:0f:74:a8:00
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=b57dcba9fc7b0ef1f3cc80a1aee22c00198e767a
Validity
Not Before: Apr 8 03:20:41 2023 GMT
Not After : Apr 6 03:25:41 2024 GMT
Subject: CN=67E80C1E5255E7A48B62E831C91EED227E4670BC
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b1:b3:8f:6a:fe:c7:3f:3b:90:2b:d4:ac:a0:f0:
5c:30:9f:35:ae:b0:44:d3:68:1a:f9:b0:e9:90:a0:
c9:f2:48:a1:69:de:53:68:7d:5b:b4:e9:ca:32:5f:
39:64:a1:f1:a3:9e:75:ba:a9:88:68:ec:3b:c4:7a:
21:91:a3:0c:cb:75:34:22:a3:43:72:3e:ec:93:de:
01:ef:45:ea:b3:37:cb:9e:85:91:7f:41:1a:3a:76:
6f:fe:c9:d0:ce:aa:bb:63:a8:7c:d3:a3:ac:2d:ae:
80:16:be:61:4d:cb:6e:cd:bf:35:47:5a:bd:e9:a4:
3a:bd:39:4a:45:67:8f:f8:99:52:9d:dd:1d:d5:2b:
32:1c:ef:e3:ca:15:73:7d:c2:6f:7a:34:c8:da:b2:
96:87:2c:71:8b:cc:dc:2b:14:53:f6:6e:90:6d:3a:
34:03:08:b0:24:df:f7:0e:a9:53:7f:4d:8c:90:73:
99:e0:e7:54:26:44:5a:3c:da:30:f7:2c:3d:31:2b:
73:e9:8c:82:9c:ad:d9:8f:ea:76:4a:dd:90:7a:4e:
c4:dc:80:9d:57:b8:3e:05:90:53:01:1f:64:a3:b3:
6f:7d:e1:f6:e1:e5:8b:f3:40:cc:bd:85:07:10:0a:
0a:5d:4a:c0:7e:38:a2:c3:8b:1f:c9:3f:83:8d:ac:
08:3f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
67:E8:0C:1E:52:55:E7:A4:8B:62:E8:31:C9:1E:ED:22:7E:46:70:BC
X509v3 Authority Key Identifier:
keyid:B5:7D:CB:A9:FC:7B:0E:F1:F3:CC:80:A1:AE:E2:2C:00:19:8E:76:7A
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.co/repo/HYSP/6/B57DCBA9FC7B0EF1F3CC80A1AEE22C00198E767A.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/tX3Lqfx7DvHzzIChruIsABmOdno.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.co/repo/HYSP/6/AS203323.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a12:dd47:8078::/48
Signature Algorithm: sha256WithRSAEncryption
06:40:fe:46:28:96:3d:22:e8:e2:02:57:c7:6e:7e:c1:36:ed:
8e:c9:b1:ce:4b:c1:ac:a5:79:60:d8:49:dd:e7:c4:dc:ad:8a:
11:72:6b:1a:29:60:a6:7b:4d:48:d9:f8:69:88:b3:b1:b0:1a:
d3:54:6c:3c:b1:38:fa:f5:e1:e9:6e:56:4f:76:68:f2:a2:81:
21:b8:81:a8:7a:7d:ef:35:03:69:72:59:0d:1f:3e:58:42:18:
b5:2c:f3:e3:c1:66:38:de:de:3a:af:0b:7b:d5:d4:10:6b:eb:
ab:2c:b5:ce:df:22:45:97:57:91:cd:1c:e0:9d:b6:3d:04:3e:
d4:97:a8:9b:a5:7d:3a:93:2c:3d:bb:ce:c0:b3:cc:eb:bc:e7:
a5:a7:97:60:36:1e:6a:40:e7:cd:bf:ed:e9:0d:94:99:05:da:
72:34:45:6e:43:92:cd:d8:bd:b8:a8:f7:64:0c:33:05:ee:c1:
b5:95:64:fb:9f:49:cd:ce:48:51:31:af:2a:78:3f:90:68:0e:
a5:89:63:ec:47:bf:09:fb:14:8e:4b:90:32:d3:cd:8e:4e:42:
52:46:62:e9:0b:8e:3d:cd:85:02:b9:5a:65:86:41:d5:98:0c:
d2:4c:fe:16:b4:2c:f8:20:60:86:a0:09:8e:df:5b:83:f7:8e:
5c:eb:75:2c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Apr 16 13:58:28 2025 by rpki-client