Route Origin Authorization
$ rpki-client -vvf rpki.co/repo/HYSP/6/AS203529.roa
File: AS203529.roa (raw, json)
Hash identifier: kvNWDFrnyIkfC30LzNxmzSuiSsVJcYMahPjkzj8Pcx4=
Subject key identifier: D8:00:BC:E0:03:9D:8B:DC:B9:A3:B6:B9:BF:14:A0:CA:53:A9:6C:6B
Certificate issuer: /CN=b57dcba9fc7b0ef1f3cc80a1aee22c00198e767a
Certificate serial: 663948D91F2B1EEA3C717BDCFFE835E16925F865
Authority key identifier: B5:7D:CB:A9:FC:7B:0E:F1:F3:CC:80:A1:AE:E2:2C:00:19:8E:76:7A
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/tX3Lqfx7DvHzzIChruIsABmOdno.cer
Subject info access: rsync://rpki.co/repo/HYSP/6/AS203529.roa
Signing time: Sat 08 Apr 2023 03:25:34 +0000
ROA not before: Sat 08 Apr 2023 03:20:34 +0000
ROA not after: Sat 06 Apr 2024 03:25:34 +0000
asID: 203529
IP address blocks: 2a12:dd47:5e10::/44 maxlen: 48
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
66:39:48:d9:1f:2b:1e:ea:3c:71:7b:dc:ff:e8:35:e1:69:25:f8:65
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=b57dcba9fc7b0ef1f3cc80a1aee22c00198e767a
Validity
Not Before: Apr 8 03:20:34 2023 GMT
Not After : Apr 6 03:25:34 2024 GMT
Subject: CN=D800BCE0039D8BDCB9A3B6B9BF14A0CA53A96C6B
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e8:12:a7:e6:4f:08:74:fa:42:7e:55:2e:8a:e1:
b7:32:3d:48:f4:5d:3b:5b:7e:c8:f8:22:1f:85:ab:
78:2f:82:e8:51:b5:60:9c:af:67:7f:eb:ad:e8:6b:
77:78:a6:90:78:1c:0a:b6:63:28:54:bb:27:a6:fa:
d3:85:92:3a:e2:d3:66:43:23:81:4f:b9:1b:3d:aa:
7a:28:e9:26:db:e9:6d:68:c1:a0:53:14:d5:6e:55:
13:db:26:05:ea:50:33:26:5e:f1:0a:6a:d2:64:b6:
fa:c5:9b:0a:5c:5f:17:47:0f:07:70:a7:38:7b:d6:
c4:c7:ea:66:0d:38:45:03:a7:b6:c9:4f:b4:91:30:
f7:3f:50:27:3a:32:1a:4d:f2:51:45:bd:b8:bd:e1:
e7:03:eb:1a:d7:6e:62:33:a0:33:a8:e0:fa:f4:5d:
29:d8:65:8a:33:f0:77:17:28:fb:80:bf:c9:7a:2c:
85:5d:08:56:e8:77:45:c7:f6:d2:dd:b1:6b:a2:88:
f3:80:ff:ac:b1:a2:ca:2e:bc:18:76:db:d5:d1:f2:
0b:49:d6:92:37:59:77:e1:93:d7:f3:02:e4:f8:a8:
d2:47:f6:3a:47:89:66:21:ab:06:88:a3:fc:9a:35:
19:2f:2a:76:c8:86:0a:a6:a7:36:3e:13:b3:f8:e6:
f4:77
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D8:00:BC:E0:03:9D:8B:DC:B9:A3:B6:B9:BF:14:A0:CA:53:A9:6C:6B
X509v3 Authority Key Identifier:
keyid:B5:7D:CB:A9:FC:7B:0E:F1:F3:CC:80:A1:AE:E2:2C:00:19:8E:76:7A
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.co/repo/HYSP/6/B57DCBA9FC7B0EF1F3CC80A1AEE22C00198E767A.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/tX3Lqfx7DvHzzIChruIsABmOdno.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.co/repo/HYSP/6/AS203529.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a12:dd47:5e10::/44
Signature Algorithm: sha256WithRSAEncryption
02:49:fd:ae:c0:e4:4c:7d:c3:79:bd:a2:64:97:b2:31:d6:8b:
74:3d:30:04:2a:62:1e:40:bc:0a:07:ff:23:18:e9:a5:be:69:
2a:8d:af:0c:e7:a8:d3:30:7b:c7:bd:a6:ea:c6:83:94:d2:b3:
91:38:c1:e4:2f:cd:7d:df:94:e4:6c:cd:ed:7f:ce:69:d4:c4:
3c:ba:9d:89:f6:b9:d3:8d:5a:e6:4d:57:e5:4c:a5:7e:9b:c6:
90:0b:de:8a:ec:99:78:0e:3e:2e:ff:2f:16:ed:08:fb:6f:a7:
f4:27:6e:a9:28:a2:92:8a:55:17:15:41:44:9b:07:68:0b:39:
eb:71:89:78:6b:38:f0:11:5b:c0:dc:2f:2d:54:ff:26:e5:60:
bd:99:8a:c4:c2:87:c9:84:e0:6a:49:93:23:b2:ad:16:c5:11:
1d:fb:11:f3:d9:bb:3f:70:ee:a7:9e:4d:d0:a9:81:7d:a0:32:
69:6b:71:2a:a8:59:fb:83:08:2f:8d:86:98:6e:d1:14:df:c9:
89:18:f4:44:b1:3a:03:8e:0d:a5:6a:f6:64:a0:21:34:c3:13:
11:0f:60:db:8d:47:12:a2:68:b6:a9:cb:48:2a:32:20:75:2f:
b4:78:32:90:1a:68:67:89:30:19:fe:38:37:43:be:5a:f6:42:
df:da:3a:86
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Apr 16 13:54:26 2025 by rpki-client