Route Origin Authorization
$ rpki-client -vvf rpki.co/repo/HYSP/6/AS203867.roa
File: AS203867.roa (raw, json)
Hash identifier: hIOiVH/boXevKtDLFAtMXnTXe02Ap1vfwA87TlZ20J8=
Subject key identifier: 59:1A:43:B5:E0:20:10:A7:1B:FE:3C:2A:9B:5D:B7:CB:7C:05:F9:1D
Certificate issuer: /CN=b57dcba9fc7b0ef1f3cc80a1aee22c00198e767a
Certificate serial: 1C6320544D9B59F4A6D5A8493C04C007EE7C3EC6
Authority key identifier: B5:7D:CB:A9:FC:7B:0E:F1:F3:CC:80:A1:AE:E2:2C:00:19:8E:76:7A
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/tX3Lqfx7DvHzzIChruIsABmOdno.cer
Subject info access: rsync://rpki.co/repo/HYSP/6/AS203867.roa
Signing time: Sat 08 Apr 2023 03:25:26 +0000
ROA not before: Sat 08 Apr 2023 03:20:26 +0000
ROA not after: Sat 06 Apr 2024 03:25:26 +0000
asID: 203867
IP address blocks: 2a12:dd47:8170::/44 maxlen: 48
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
1c:63:20:54:4d:9b:59:f4:a6:d5:a8:49:3c:04:c0:07:ee:7c:3e:c6
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=b57dcba9fc7b0ef1f3cc80a1aee22c00198e767a
Validity
Not Before: Apr 8 03:20:26 2023 GMT
Not After : Apr 6 03:25:26 2024 GMT
Subject: CN=591A43B5E02010A71BFE3C2A9B5DB7CB7C05F91D
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b4:24:87:13:d8:58:b9:5b:0c:8e:be:72:cf:03:
38:91:2c:b7:5a:64:24:30:53:2e:2e:48:f7:3a:f1:
ed:50:aa:6f:f5:9f:ff:09:23:16:a2:d2:b4:9e:3e:
a3:bb:50:73:d9:96:3f:ec:67:61:14:1b:75:55:5c:
23:b3:90:c6:75:90:51:6b:b5:20:5e:f2:f7:0e:e5:
3e:81:f2:43:d0:dd:e3:77:84:9b:57:47:7a:36:2f:
65:fa:21:04:41:9f:b6:90:f5:09:57:a6:16:b0:34:
f9:59:5b:94:ea:94:7a:be:3e:c6:26:f2:ea:3b:05:
e4:71:c5:99:79:3f:c2:89:fa:f2:6e:b0:94:71:2b:
fa:93:a9:e0:5d:c2:1e:d8:28:0f:ab:22:64:b7:8e:
20:6c:8f:06:9d:d5:72:a1:ed:91:ec:77:c6:86:b3:
f1:7e:fc:6c:a1:1a:6b:a6:ea:32:91:33:27:58:72:
48:cd:ea:54:2c:e7:61:51:38:96:fa:4d:a1:ac:6b:
a8:1b:3b:e3:cf:a0:a2:8d:37:74:d0:66:0a:bc:1f:
b4:81:31:0c:c6:f9:8a:4e:88:9d:99:66:04:ae:fa:
e6:a5:bc:ed:42:f0:43:31:98:d0:be:5c:3f:1b:b3:
50:3d:4c:8f:ba:1f:f6:38:48:cb:ab:55:f9:8e:99:
fb:93
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
59:1A:43:B5:E0:20:10:A7:1B:FE:3C:2A:9B:5D:B7:CB:7C:05:F9:1D
X509v3 Authority Key Identifier:
keyid:B5:7D:CB:A9:FC:7B:0E:F1:F3:CC:80:A1:AE:E2:2C:00:19:8E:76:7A
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.co/repo/HYSP/6/B57DCBA9FC7B0EF1F3CC80A1AEE22C00198E767A.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/tX3Lqfx7DvHzzIChruIsABmOdno.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.co/repo/HYSP/6/AS203867.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a12:dd47:8170::/44
Signature Algorithm: sha256WithRSAEncryption
96:d9:b7:25:fb:61:52:b9:cc:e4:64:03:b2:3c:a7:cf:30:2d:
33:33:71:98:45:cd:16:16:8d:67:71:4a:ce:82:da:a4:02:89:
7b:cc:2f:8c:ea:a3:71:80:c0:58:7b:e1:c0:9d:2a:f3:29:d2:
53:28:8b:3d:db:f4:df:a3:5e:ce:ff:13:18:31:78:49:04:8e:
9b:ba:aa:88:4a:0c:eb:11:58:26:82:b6:78:ec:36:53:48:e5:
cc:05:1a:56:f5:4d:9a:fe:83:24:77:44:0a:52:4f:7c:63:eb:
c9:e4:09:57:f9:16:f7:18:cf:be:03:23:eb:e1:a9:55:3c:23:
51:e6:99:1c:22:ff:3c:dd:8f:cd:d3:06:a8:fe:06:59:e4:7f:
f6:c9:2f:9a:af:57:31:d5:3d:b1:48:42:35:e6:fe:86:7c:8d:
67:f2:7b:3a:d9:58:0f:cd:31:29:75:fd:29:5d:4f:24:8a:b6:
c5:31:57:57:ea:e9:18:0f:7e:89:c8:bf:e0:d9:dc:1a:9e:7b:
c3:25:7d:11:1b:d6:6e:81:fb:41:d9:a4:48:12:2d:ee:cb:ee:
24:9a:d9:86:51:b8:63:cf:84:57:2e:ac:8d:e8:d2:2f:6d:37:
16:64:30:ef:c1:f2:98:c8:08:1a:45:b2:04:7a:78:c9:53:4c:
73:80:b6:a0
-----BEGIN CERTIFICATE-----
MIIEjzCCA3egAwIBAgIUHGMgVE2bWfSm1ahJPATAB+58PsYwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoYjU3ZGNiYTlmYzdiMGVmMWYzY2M4MGExYWVlMjJjMDAx
OThlNzY3YTAeFw0yMzA0MDgwMzIwMjZaFw0yNDA0MDYwMzI1MjZaMDMxMTAvBgNV
BAMTKDU5MUE0M0I1RTAyMDEwQTcxQkZFM0MyQTlCNURCN0NCN0MwNUY5MUQwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQC0JIcT2Fi5WwyOvnLPAziRLLda
ZCQwUy4uSPc68e1Qqm/1n/8JIxai0rSePqO7UHPZlj/sZ2EUG3VVXCOzkMZ1kFFr
tSBe8vcO5T6B8kPQ3eN3hJtXR3o2L2X6IQRBn7aQ9QlXphawNPlZW5TqlHq+PsYm
8uo7BeRxxZl5P8KJ+vJusJRxK/qTqeBdwh7YKA+rImS3jiBsjwad1XKh7ZHsd8aG
s/F+/GyhGmum6jKRMydYckjN6lQs52FROJb6TaGsa6gbO+PPoKKNN3TQZgq8H7SB
MQzG+YpOiJ2ZZgSu+ualvO1C8EMxmNC+XD8bs1A9TI+6H/Y4SMurVfmOmfuTAgMB
AAGjggGZMIIBlTAdBgNVHQ4EFgQUWRpDteAgEKcb/jwqm123y3wF+R0wHwYDVR0j
BBgwFoAUtX3Lqfx7DvHzzIChruIsABmOdnowDgYDVR0PAQH/BAQDAgeAMFkGA1Ud
HwRSMFAwTqBMoEqGSHJzeW5jOi8vcnBraS5jby9yZXBvL0hZU1AvNi9CNTdEQ0JB
OUZDN0IwRUYxRjNDQzgwQTFBRUUyMkMwMDE5OEU3NjdBLmNybDBkBggrBgEFBQcB
AQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBvc2l0
b3J5L0RFRkFVTFQvdFgzTHFmeDdEdkh6eklDaHJ1SXNBQm1PZG5vLmNlcjBEBggr
BgEFBQcBCwQ4MDYwNAYIKwYBBQUHMAuGKHJzeW5jOi8vcnBraS5jby9yZXBvL0hZ
U1AvNi9BUzIwMzg2Ny5yb2EwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAiBggr
BgEFBQcBBwEB/wQTMBEwDwQCAAIwCQMHBCoS3UeBcDANBgkqhkiG9w0BAQsFAAOC
AQEAltm3JfthUrnM5GQDsjynzzAtMzNxmEXNFhaNZ3FKzoLapAKJe8wvjOqjcYDA
WHvhwJ0q8ynSUyiLPdv036Nezv8TGDF4SQSOm7qqiEoM6xFYJoK2eOw2U0jlzAUa
VvVNmv6DJHdEClJPfGPryeQJV/kW9xjPvgMj6+GpVTwjUeaZHCL/PN2PzdMGqP4G
WeR/9skvmq9XMdU9sUhCNeb+hnyNZ/J7OtlYD80xKXX9KV1PJIq2xTFXV+rpGA9+
ici/4NncGp57wyV9ERvWboH7QdmkSBIt7svuJJrZhlG4Y8+EVy6sjejSL203FmQw
78HymMgIGkWyBHp4yVNMc4C2oA==
-----END CERTIFICATE-----
Generated at Wed Apr 16 13:59:08 2025 by rpki-client