Route Origin Authorization
$ rpki-client -vvf rpki.co/repo/HYSP/6/AS203737.roa
File: AS203737.roa (raw, json)
Hash identifier: B+f11NAMWtd72dF0wrCt1TiOOqK7Trwbc6uIHtlWorw=
Subject key identifier: 34:69:E9:F2:02:F7:D9:48:28:2E:2F:E7:14:45:09:E3:FF:88:F4:0E
Certificate issuer: /CN=b57dcba9fc7b0ef1f3cc80a1aee22c00198e767a
Certificate serial: 44A0FE5444031E17E426832C16C9B3E97957E9D2
Authority key identifier: B5:7D:CB:A9:FC:7B:0E:F1:F3:CC:80:A1:AE:E2:2C:00:19:8E:76:7A
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/tX3Lqfx7DvHzzIChruIsABmOdno.cer
Subject info access: rsync://rpki.co/repo/HYSP/6/AS203737.roa
Signing time: Sat 08 Apr 2023 03:25:48 +0000
ROA not before: Sat 08 Apr 2023 03:20:48 +0000
ROA not after: Sat 06 Apr 2024 03:25:48 +0000
asID: 203737
IP address blocks: 2a12:dd47:81b0::/44 maxlen: 48
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
44:a0:fe:54:44:03:1e:17:e4:26:83:2c:16:c9:b3:e9:79:57:e9:d2
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=b57dcba9fc7b0ef1f3cc80a1aee22c00198e767a
Validity
Not Before: Apr 8 03:20:48 2023 GMT
Not After : Apr 6 03:25:48 2024 GMT
Subject: CN=3469E9F202F7D948282E2FE7144509E3FF88F40E
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:af:5d:36:17:9f:4d:aa:49:60:07:36:20:a1:a3:
cd:eb:10:10:77:48:70:70:1d:5f:84:67:80:b9:f3:
29:ce:1f:7c:19:61:68:db:38:97:ce:6c:e8:39:fd:
84:dd:02:08:19:6f:d8:05:49:5c:5d:7e:8a:78:19:
44:0f:08:fd:c9:25:fd:0c:a7:0a:98:78:a1:5b:dc:
cb:c8:0d:86:5d:c5:5d:c5:48:3a:e5:19:41:c4:0c:
b0:36:9a:81:29:a0:ac:b5:8f:76:e6:a4:1a:87:f9:
1a:63:11:e1:0b:ab:1f:5b:61:b8:87:15:20:5d:c6:
5d:7c:83:6c:05:a2:62:62:05:8e:bc:b8:14:03:83:
04:c3:96:29:fa:06:73:fa:a5:b1:0f:65:c4:b0:a0:
82:40:ad:7a:6b:a3:59:dd:75:b2:de:dc:8f:83:9c:
9f:2a:f8:6e:7c:20:a2:75:68:47:09:9b:46:75:23:
27:15:f6:35:4c:95:e5:6f:8f:03:a8:72:76:6a:69:
d9:a4:7f:19:42:b8:d3:e1:1a:49:d2:a6:a1:08:01:
78:c4:5e:51:7e:ae:1a:3f:06:92:6a:b2:b6:c0:b8:
32:28:d8:b5:87:fa:07:a7:11:ea:87:ed:81:4b:14:
1f:99:b2:27:6c:c7:9b:a6:d8:95:2a:49:11:d5:dc:
54:85
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
34:69:E9:F2:02:F7:D9:48:28:2E:2F:E7:14:45:09:E3:FF:88:F4:0E
X509v3 Authority Key Identifier:
keyid:B5:7D:CB:A9:FC:7B:0E:F1:F3:CC:80:A1:AE:E2:2C:00:19:8E:76:7A
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.co/repo/HYSP/6/B57DCBA9FC7B0EF1F3CC80A1AEE22C00198E767A.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/tX3Lqfx7DvHzzIChruIsABmOdno.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.co/repo/HYSP/6/AS203737.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a12:dd47:81b0::/44
Signature Algorithm: sha256WithRSAEncryption
2d:de:d1:62:1c:70:c2:33:bf:be:4c:64:9a:ae:cd:90:50:c2:
6d:14:cb:37:c6:5b:99:b9:df:54:52:50:ec:75:bf:bd:d5:35:
20:9e:7a:6e:59:57:de:ea:42:80:91:a5:6e:bc:5b:7a:64:f8:
a0:68:40:8f:c2:4c:d2:d9:b3:59:0b:c0:93:58:a8:96:f6:21:
91:7c:ba:17:bd:f0:93:ff:59:5f:08:18:b8:17:f1:67:56:95:
e2:05:64:ca:9d:d9:3e:79:7b:6b:e4:92:bd:98:b5:7a:9d:78:
e0:a3:4c:79:2a:b0:70:d0:a6:21:49:d4:96:8c:56:e6:b2:61:
db:67:89:b8:aa:ca:5a:3a:9e:7d:e2:59:d6:6f:51:81:51:31:
c9:b5:27:60:91:42:2e:8d:ba:5d:15:f2:65:a3:57:13:4c:62:
b5:b8:a2:c0:34:32:bf:ab:35:6a:1f:a9:19:35:e0:56:d9:05:
22:e9:34:18:4f:88:49:de:ce:7d:3a:86:2a:36:9c:18:ab:7a:
9b:1b:7b:54:9e:d0:6a:81:ff:b0:b4:e9:d4:0d:4d:41:b2:17:
cb:ca:73:1f:e6:8b:4b:49:20:60:d5:61:fe:ed:bd:a7:40:8e:
cb:66:f6:07:2d:6b:46:ab:d2:7b:a2:79:3e:64:10:83:49:b2:
8b:e5:78:83
-----BEGIN CERTIFICATE-----
MIIEjzCCA3egAwIBAgIURKD+VEQDHhfkJoMsFsmz6XlX6dIwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoYjU3ZGNiYTlmYzdiMGVmMWYzY2M4MGExYWVlMjJjMDAx
OThlNzY3YTAeFw0yMzA0MDgwMzIwNDhaFw0yNDA0MDYwMzI1NDhaMDMxMTAvBgNV
BAMTKDM0NjlFOUYyMDJGN0Q5NDgyODJFMkZFNzE0NDUwOUUzRkY4OEY0MEUwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCvXTYXn02qSWAHNiCho83rEBB3
SHBwHV+EZ4C58ynOH3wZYWjbOJfObOg5/YTdAggZb9gFSVxdfop4GUQPCP3JJf0M
pwqYeKFb3MvIDYZdxV3FSDrlGUHEDLA2moEpoKy1j3bmpBqH+RpjEeELqx9bYbiH
FSBdxl18g2wFomJiBY68uBQDgwTDlin6BnP6pbEPZcSwoIJArXpro1nddbLe3I+D
nJ8q+G58IKJ1aEcJm0Z1IycV9jVMleVvjwOocnZqadmkfxlCuNPhGknSpqEIAXjE
XlF+rho/BpJqsrbAuDIo2LWH+genEeqH7YFLFB+Zsidsx5um2JUqSRHV3FSFAgMB
AAGjggGZMIIBlTAdBgNVHQ4EFgQUNGnp8gL32UgoLi/nFEUJ4/+I9A4wHwYDVR0j
BBgwFoAUtX3Lqfx7DvHzzIChruIsABmOdnowDgYDVR0PAQH/BAQDAgeAMFkGA1Ud
HwRSMFAwTqBMoEqGSHJzeW5jOi8vcnBraS5jby9yZXBvL0hZU1AvNi9CNTdEQ0JB
OUZDN0IwRUYxRjNDQzgwQTFBRUUyMkMwMDE5OEU3NjdBLmNybDBkBggrBgEFBQcB
AQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBvc2l0
b3J5L0RFRkFVTFQvdFgzTHFmeDdEdkh6eklDaHJ1SXNBQm1PZG5vLmNlcjBEBggr
BgEFBQcBCwQ4MDYwNAYIKwYBBQUHMAuGKHJzeW5jOi8vcnBraS5jby9yZXBvL0hZ
U1AvNi9BUzIwMzczNy5yb2EwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAiBggr
BgEFBQcBBwEB/wQTMBEwDwQCAAIwCQMHBCoS3UeBsDANBgkqhkiG9w0BAQsFAAOC
AQEALd7RYhxwwjO/vkxkmq7NkFDCbRTLN8ZbmbnfVFJQ7HW/vdU1IJ56bllX3upC
gJGlbrxbemT4oGhAj8JM0tmzWQvAk1iolvYhkXy6F73wk/9ZXwgYuBfxZ1aV4gVk
yp3ZPnl7a+SSvZi1ep144KNMeSqwcNCmIUnUloxW5rJh22eJuKrKWjqefeJZ1m9R
gVExybUnYJFCLo26XRXyZaNXE0xitbiiwDQyv6s1ah+pGTXgVtkFIuk0GE+ISd7O
fTqGKjacGKt6mxt7VJ7QaoH/sLTp1A1NQbIXy8pzH+aLS0kgYNVh/u29p0COy2b2
By1rRqvSe6J5PmQQg0myi+V4gw==
-----END CERTIFICATE-----
Generated at Wed Apr 16 13:56:05 2025 by rpki-client