Route Origin Authorization
$ rpki-client -vvf rpki.co/repo/HYSP/6/AS203868.roa
File: AS203868.roa (raw, json)
Hash identifier: wieEyvSrk28VphhLYiJh7kEzzi1AsAFqLfqaNR7qkPY=
Subject key identifier: F0:4D:A1:A1:A0:89:2B:F3:BE:43:77:07:41:BD:D2:BD:3A:0E:80:0A
Certificate issuer: /CN=b57dcba9fc7b0ef1f3cc80a1aee22c00198e767a
Certificate serial: 1BE8D9A594FE7DEA60413417CD53A0ABCD77DCEF
Authority key identifier: B5:7D:CB:A9:FC:7B:0E:F1:F3:CC:80:A1:AE:E2:2C:00:19:8E:76:7A
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/tX3Lqfx7DvHzzIChruIsABmOdno.cer
Subject info access: rsync://rpki.co/repo/HYSP/6/AS203868.roa
Signing time: Sat 08 Apr 2023 03:25:35 +0000
ROA not before: Sat 08 Apr 2023 03:20:35 +0000
ROA not after: Sat 06 Apr 2024 03:25:35 +0000
asID: 203868
IP address blocks: 2a12:dd47:8046::/48 maxlen: 48
2a12:dd47:8700::/40 maxlen: 48
2a12:dd47:d000::/40 maxlen: 48
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
1b:e8:d9:a5:94:fe:7d:ea:60:41:34:17:cd:53:a0:ab:cd:77:dc:ef
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=b57dcba9fc7b0ef1f3cc80a1aee22c00198e767a
Validity
Not Before: Apr 8 03:20:35 2023 GMT
Not After : Apr 6 03:25:35 2024 GMT
Subject: CN=F04DA1A1A0892BF3BE43770741BDD2BD3A0E800A
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:de:a2:50:9c:7d:d1:37:14:48:b8:07:87:e7:3c:
65:8e:b0:a3:66:84:03:74:a0:bf:a2:e8:a8:88:84:
cc:6a:29:0f:e8:00:f4:95:fb:db:fc:6b:85:2a:b4:
c1:a9:14:d8:5d:6b:a8:e0:0e:15:47:bd:11:50:98:
65:19:0f:8f:b4:e7:23:1c:79:4f:e8:c2:d3:29:59:
80:b8:7c:34:e5:45:84:98:ba:8a:26:72:7d:f1:72:
6a:6b:90:7f:36:44:f8:3f:f1:99:ee:38:72:a3:8b:
8b:c7:97:87:cc:2e:6f:a0:c8:62:dc:6d:58:49:5c:
f3:bb:b5:bc:a6:63:57:4f:32:08:74:02:d9:1d:6b:
7c:45:fb:74:4e:ff:07:eb:46:bf:8e:37:e4:d7:bd:
6e:93:57:5c:50:6f:2f:2a:d7:46:83:0b:4e:8f:16:
7b:52:7f:c0:3d:32:2c:b7:4d:0e:57:be:46:66:7a:
0d:5b:69:7a:a4:3e:97:a8:52:92:17:f9:93:57:f0:
fb:18:32:85:cd:17:8e:11:f3:40:8b:3c:21:83:83:
62:ec:9c:a7:a2:28:36:fa:a9:d9:db:e9:3c:54:68:
48:be:92:4c:a6:58:de:31:8b:2c:cd:1d:29:6e:f4:
f8:fa:3f:4d:42:ae:f8:4e:74:de:45:8a:17:f0:1d:
58:57
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F0:4D:A1:A1:A0:89:2B:F3:BE:43:77:07:41:BD:D2:BD:3A:0E:80:0A
X509v3 Authority Key Identifier:
keyid:B5:7D:CB:A9:FC:7B:0E:F1:F3:CC:80:A1:AE:E2:2C:00:19:8E:76:7A
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.co/repo/HYSP/6/B57DCBA9FC7B0EF1F3CC80A1AEE22C00198E767A.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/tX3Lqfx7DvHzzIChruIsABmOdno.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.co/repo/HYSP/6/AS203868.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a12:dd47:8046::/48
2a12:dd47:8700::/40
2a12:dd47:d000::/40
Signature Algorithm: sha256WithRSAEncryption
18:8b:aa:4f:31:d7:68:f1:d9:90:dc:3a:be:cb:c6:e0:e0:0a:
98:37:e2:e3:9d:68:1e:1d:b1:6b:af:a3:23:33:85:c9:8a:1f:
f4:76:8a:b0:32:91:71:11:17:d8:9f:2e:8d:2e:d7:84:e0:9c:
88:1d:4e:d9:c4:56:53:71:01:22:5f:fa:5d:f6:b4:36:92:62:
65:02:0e:26:d4:4a:d7:b0:f0:c3:89:2b:f2:67:0f:68:b3:41:
08:a0:bc:4d:cb:5e:b2:95:ab:0f:4e:db:63:91:67:3d:d9:cc:
a1:de:46:d3:d6:5c:c0:6a:10:32:d9:9a:26:14:9a:10:fc:28:
f3:a8:7d:a0:51:b8:76:97:ca:b6:8a:7d:ca:a9:c6:87:74:24:
fc:52:f9:f6:dc:03:3b:21:80:f3:67:c5:8f:b8:88:d0:dd:ab:
b8:1d:aa:46:e5:2f:18:d9:98:1e:ed:b3:82:d6:d4:96:7f:f9:
52:5b:ca:23:dc:4c:ab:05:8b:d8:94:1f:b7:f0:b4:8e:3a:cc:
f8:80:f9:29:3d:fc:c8:1c:5a:18:90:6d:46:49:03:6f:4d:54:
4c:f9:b8:0f:f3:ef:8a:92:8e:82:47:79:b0:70:35:3c:fd:3a:
c3:89:47:c1:c8:55:08:5f:99:96:9a:5c:fb:e7:79:5d:cf:51:
d7:06:cd:7b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Apr 16 13:58:28 2025 by rpki-client