Route Origin Authorization
$ rpki-client -vvf rpki.co/repo/HYSP/6/AS203888.roa
File: AS203888.roa (raw, json)
Hash identifier: PiLxlQ8BacoZKhvV5RGW3nDo2yaQStqe+bRWxWcQJtI=
Subject key identifier: AE:FE:68:93:79:7D:5B:29:A7:B1:3D:CF:D6:FA:0A:CA:6B:80:7A:AE
Certificate issuer: /CN=b57dcba9fc7b0ef1f3cc80a1aee22c00198e767a
Certificate serial: 72C1974048DBE7170F6FCB84C13A9D85E1F64F58
Authority key identifier: B5:7D:CB:A9:FC:7B:0E:F1:F3:CC:80:A1:AE:E2:2C:00:19:8E:76:7A
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/tX3Lqfx7DvHzzIChruIsABmOdno.cer
Subject info access: rsync://rpki.co/repo/HYSP/6/AS203888.roa
Signing time: Sat 08 Apr 2023 03:25:40 +0000
ROA not before: Sat 08 Apr 2023 03:20:40 +0000
ROA not after: Sat 06 Apr 2024 03:25:40 +0000
asID: 203888
IP address blocks: 2a12:dd47:300::/40 maxlen: 48
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
72:c1:97:40:48:db:e7:17:0f:6f:cb:84:c1:3a:9d:85:e1:f6:4f:58
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=b57dcba9fc7b0ef1f3cc80a1aee22c00198e767a
Validity
Not Before: Apr 8 03:20:40 2023 GMT
Not After : Apr 6 03:25:40 2024 GMT
Subject: CN=AEFE6893797D5B29A7B13DCFD6FA0ACA6B807AAE
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c3:3d:97:b5:e5:ac:8b:15:08:62:06:18:ac:98:
d5:0f:6c:33:5d:2d:80:99:4d:31:be:36:2c:5d:d6:
51:3c:c5:03:57:88:85:08:4a:3f:54:a1:a7:86:67:
36:06:44:bb:90:77:09:b3:fd:f6:d7:2a:61:53:0b:
7a:85:65:2c:5e:f6:e2:39:f7:10:78:0a:7d:22:35:
91:88:4b:6a:d6:38:fe:6e:77:27:38:ee:98:eb:81:
5f:5a:d9:1e:1b:c5:4a:41:4b:2e:d1:9f:4c:b6:a3:
36:bc:7e:52:f7:bf:d4:2f:8d:a8:b4:64:3d:dc:7a:
08:1a:13:0f:0e:0f:56:94:33:21:1f:d5:91:77:27:
fd:4a:7c:6a:d8:ca:de:e0:d5:96:4a:bc:60:a6:3b:
59:5b:6e:76:33:6d:47:6e:11:b8:19:43:68:10:f3:
1e:8a:7f:d3:de:b5:7c:a9:bd:7d:b9:6f:be:95:0b:
22:c6:b5:97:e4:ac:e5:80:3a:58:ca:07:27:7e:3c:
1c:d0:a8:45:79:f5:bd:3c:cd:58:19:2e:ec:b3:f0:
67:6a:e7:a4:b4:03:7a:f3:92:09:f8:46:35:e8:a0:
7f:18:8a:04:99:4a:2f:99:71:b2:45:ba:70:90:d8:
ee:7a:a0:5c:8a:fb:b6:0c:4a:d0:05:21:b7:e6:73:
e4:81
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
AE:FE:68:93:79:7D:5B:29:A7:B1:3D:CF:D6:FA:0A:CA:6B:80:7A:AE
X509v3 Authority Key Identifier:
keyid:B5:7D:CB:A9:FC:7B:0E:F1:F3:CC:80:A1:AE:E2:2C:00:19:8E:76:7A
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.co/repo/HYSP/6/B57DCBA9FC7B0EF1F3CC80A1AEE22C00198E767A.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/tX3Lqfx7DvHzzIChruIsABmOdno.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.co/repo/HYSP/6/AS203888.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a12:dd47:300::/40
Signature Algorithm: sha256WithRSAEncryption
b5:5d:52:83:ca:52:b8:84:68:61:1e:e6:bf:03:e7:5d:78:14:
89:f2:59:dd:22:c9:01:41:4e:f2:1f:ea:4a:4f:f6:84:16:60:
24:4a:4d:e4:b4:78:67:18:3b:8c:05:57:8d:fe:a1:cc:f3:24:
03:5d:ff:d6:37:d3:ab:81:d5:7a:8a:79:46:08:71:a4:61:5c:
55:88:1a:4b:4a:32:b0:8d:60:20:90:df:4d:43:8d:bf:84:ac:
43:94:79:a2:22:13:ea:0a:2a:41:30:af:b6:28:ab:70:10:8c:
24:a9:c5:36:0c:0d:77:d2:77:53:38:b3:04:27:76:3b:54:bc:
1d:4f:b1:69:51:70:46:5f:b4:18:d1:d8:4a:fc:b2:59:9f:07:
d6:74:a7:2e:2d:db:c4:be:1a:1c:d1:2c:f7:fa:d4:df:f2:78:
87:dc:ca:4d:21:00:94:15:27:93:e2:c9:a6:8d:54:a5:3d:db:
27:2c:59:a7:44:cb:19:2e:71:9e:20:61:b1:22:42:56:e8:60:
23:1b:b7:00:db:73:b6:28:ae:2c:0c:7b:f3:10:55:db:38:01:
78:7c:d5:89:4d:53:df:06:48:dc:78:5d:08:93:0a:13:db:f7:
d3:cc:30:d8:d8:e6:27:05:11:61:c1:21:13:44:e0:f2:18:7a:
24:91:4b:74
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Apr 16 14:13:59 2025 by rpki-client