Route Origin Authorization
$ rpki-client -vvf rpki.co/repo/HYSP/6/AS203470.roa
File: AS203470.roa (raw, json)
Hash identifier: r0V70drGuZ4Sqk6yQ7MzvrlfGhDNJNen42GatN5Wasg=
Subject key identifier: 72:5B:E3:0D:92:99:57:7E:CE:36:19:8D:F0:8C:66:0B:D0:69:4A:DA
Certificate issuer: /CN=b57dcba9fc7b0ef1f3cc80a1aee22c00198e767a
Certificate serial: 7D036330CBE390BF9C567AC2C2DC8EE2BE63D056
Authority key identifier: B5:7D:CB:A9:FC:7B:0E:F1:F3:CC:80:A1:AE:E2:2C:00:19:8E:76:7A
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/tX3Lqfx7DvHzzIChruIsABmOdno.cer
Subject info access: rsync://rpki.co/repo/HYSP/6/AS203470.roa
Signing time: Sat 08 Apr 2023 03:25:42 +0000
ROA not before: Sat 08 Apr 2023 03:20:42 +0000
ROA not after: Sat 06 Apr 2024 03:25:42 +0000
asID: 203470
IP address blocks: 2a12:dd47:80e8::/48 maxlen: 48
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
7d:03:63:30:cb:e3:90:bf:9c:56:7a:c2:c2:dc:8e:e2:be:63:d0:56
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=b57dcba9fc7b0ef1f3cc80a1aee22c00198e767a
Validity
Not Before: Apr 8 03:20:42 2023 GMT
Not After : Apr 6 03:25:42 2024 GMT
Subject: CN=725BE30D9299577ECE36198DF08C660BD0694ADA
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d1:00:ef:7d:72:18:b4:a6:85:0f:04:6d:b5:40:
9c:fd:ff:b3:ff:ef:01:0b:ef:d9:9b:cc:f8:fe:63:
83:ef:69:b2:ba:93:d2:bf:2e:72:2f:d9:7c:55:93:
46:fd:67:3c:f9:56:51:db:d1:c3:3f:09:bb:68:e1:
2f:76:bd:f9:12:f6:30:c4:59:f0:b6:6e:37:92:dd:
06:e9:5f:3e:83:70:57:a0:1d:bc:72:6f:85:64:82:
56:93:7a:82:a2:43:5d:3f:30:7a:f2:89:b8:e0:1d:
c8:33:8c:d6:16:81:60:b4:85:d7:9b:11:82:6c:3e:
45:0d:89:88:c8:35:1d:62:04:ce:4b:a5:27:5c:df:
63:2d:3a:df:c1:f1:96:00:2d:f0:6b:25:f2:0d:94:
0b:d7:27:3a:0b:20:dd:a2:d5:6e:29:af:a0:0e:40:
9a:b4:a1:18:4b:60:2f:f9:d3:aa:69:01:0e:b4:d3:
48:b5:e9:1f:f5:9b:28:8f:03:ae:47:f6:3b:f4:0d:
42:f7:98:3a:5d:e0:d5:9d:76:77:8c:eb:8a:e7:13:
de:cf:da:aa:f1:6c:f0:2b:11:67:ae:dd:bf:8b:bd:
30:57:87:cd:d1:8e:d7:1d:00:92:44:75:1c:d4:8d:
8d:2d:78:ed:40:0e:a9:c8:1b:2d:9e:1f:b5:39:b0:
05:97
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
72:5B:E3:0D:92:99:57:7E:CE:36:19:8D:F0:8C:66:0B:D0:69:4A:DA
X509v3 Authority Key Identifier:
keyid:B5:7D:CB:A9:FC:7B:0E:F1:F3:CC:80:A1:AE:E2:2C:00:19:8E:76:7A
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.co/repo/HYSP/6/B57DCBA9FC7B0EF1F3CC80A1AEE22C00198E767A.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/tX3Lqfx7DvHzzIChruIsABmOdno.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.co/repo/HYSP/6/AS203470.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a12:dd47:80e8::/48
Signature Algorithm: sha256WithRSAEncryption
56:55:f9:85:ba:6a:d2:42:d7:ef:7e:9b:72:55:56:77:fc:5f:
be:0f:0c:35:19:71:89:e1:0e:99:50:f9:53:27:e0:c5:44:9b:
ae:c4:03:9d:d0:77:8e:a4:6a:9b:41:be:3b:bc:76:6d:9c:98:
b0:9d:0c:47:06:92:8c:75:80:ca:4f:78:b4:fa:96:0e:ec:08:
48:51:8e:9c:ca:ca:09:29:c9:14:61:ca:b2:75:48:bb:89:63:
aa:e6:68:16:30:6f:0e:b6:7b:00:30:53:85:8e:2b:59:e3:64:
90:1c:a2:2f:ac:71:0e:2b:9f:4b:d7:5d:3d:f2:96:3d:3a:95:
06:41:c0:ca:ce:22:53:bd:3f:74:0a:32:87:39:d7:50:78:fa:
ba:78:7c:80:80:7f:c2:50:f1:45:ef:55:5e:6b:48:e1:1e:12:
0b:01:00:59:e4:75:49:bb:5a:ee:08:44:37:91:ac:f6:ed:58:
8e:c8:f3:3b:80:51:ad:57:6e:16:6f:7e:eb:83:cc:35:db:57:
78:dd:6a:3e:3c:70:50:73:94:f3:a1:41:a6:9a:2f:1a:f8:c3:
09:85:3b:ee:ce:bc:5d:73:25:d6:30:0d:a0:8e:6c:66:6c:db:
8e:55:b4:d0:88:e3:52:4d:26:10:88:07:96:ff:35:fa:40:a6:
0b:41:8c:97
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Apr 16 13:48:31 2025 by rpki-client