Route Origin Authorization
$ rpki-client -vvf rpki.co/repo/HYSP/6/AS204844.roa
File: AS204844.roa (raw, json)
Hash identifier: QHCH9R5PjEBIbSRqdkOUGkBZUY56YS2RDULwWKGFpQo=
Subject key identifier: 93:9D:C3:21:0B:63:55:AE:11:D5:DD:F5:5D:F1:43:42:27:CD:5B:8F
Certificate issuer: /CN=b57dcba9fc7b0ef1f3cc80a1aee22c00198e767a
Certificate serial: 3CA1CF43241548A4CC3BECF500062CFF6564EDA5
Authority key identifier: B5:7D:CB:A9:FC:7B:0E:F1:F3:CC:80:A1:AE:E2:2C:00:19:8E:76:7A
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/tX3Lqfx7DvHzzIChruIsABmOdno.cer
Subject info access: rsync://rpki.co/repo/HYSP/6/AS204844.roa
Signing time: Sat 08 Apr 2023 03:25:42 +0000
ROA not before: Sat 08 Apr 2023 03:20:42 +0000
ROA not after: Sat 06 Apr 2024 03:25:42 +0000
asID: 204844
IP address blocks: 2a12:dd47:8003::/48 maxlen: 48
2a12:dd47:8044::/48 maxlen: 48
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
3c:a1:cf:43:24:15:48:a4:cc:3b:ec:f5:00:06:2c:ff:65:64:ed:a5
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=b57dcba9fc7b0ef1f3cc80a1aee22c00198e767a
Validity
Not Before: Apr 8 03:20:42 2023 GMT
Not After : Apr 6 03:25:42 2024 GMT
Subject: CN=939DC3210B6355AE11D5DDF55DF1434227CD5B8F
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c3:d4:cb:61:6c:45:d9:0c:9f:98:9b:51:11:d4:
6a:eb:3f:63:41:27:9d:a0:57:a8:b4:f5:35:24:15:
79:89:1e:1b:31:80:c1:d3:f8:3a:98:fa:27:f3:67:
25:06:f9:38:97:a6:8c:d8:f3:d9:bb:bc:67:b0:37:
75:4b:dd:a4:eb:33:32:0c:32:37:38:05:f4:e1:04:
56:8d:d1:53:d7:4b:a4:2e:4c:95:44:14:2d:4f:83:
01:c4:15:e0:b5:25:1f:ff:29:9b:7b:47:22:8f:05:
af:42:f7:63:6d:f4:d1:37:f4:cd:d5:cf:b0:f4:17:
6c:ac:89:57:fb:37:bc:c2:75:d9:39:22:41:de:a9:
cc:aa:98:ce:f5:be:fd:29:10:65:c5:6c:a6:bd:37:
2f:ba:3e:32:4c:73:a4:24:04:c1:19:dc:1e:48:82:
45:10:4b:de:8c:9b:be:13:30:a1:44:b3:92:69:a0:
76:66:f6:1a:6e:72:5b:84:f0:07:16:6f:3e:0a:a4:
85:57:60:a5:66:e7:b9:e0:e0:2a:33:33:5f:77:16:
be:86:26:cd:42:20:c7:16:6c:11:83:2f:03:45:f5:
df:a7:19:bc:50:4b:6d:d0:e1:07:af:ac:8b:32:c3:
2f:78:e5:6a:fa:0a:58:2f:e6:e5:44:b4:de:35:af:
43:15
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
93:9D:C3:21:0B:63:55:AE:11:D5:DD:F5:5D:F1:43:42:27:CD:5B:8F
X509v3 Authority Key Identifier:
keyid:B5:7D:CB:A9:FC:7B:0E:F1:F3:CC:80:A1:AE:E2:2C:00:19:8E:76:7A
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.co/repo/HYSP/6/B57DCBA9FC7B0EF1F3CC80A1AEE22C00198E767A.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/tX3Lqfx7DvHzzIChruIsABmOdno.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.co/repo/HYSP/6/AS204844.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a12:dd47:8003::/48
2a12:dd47:8044::/48
Signature Algorithm: sha256WithRSAEncryption
47:d3:e8:15:96:80:4c:77:6b:f3:d8:e9:94:51:3f:18:1d:f3:
78:d1:c9:6e:90:a1:d4:8f:70:63:32:af:26:34:74:13:a3:4e:
31:e0:28:9a:df:c3:d6:11:3c:68:55:d4:6b:9f:e6:fd:ee:f1:
5c:35:5b:45:db:9d:82:49:aa:c9:ae:2c:91:dc:c0:36:5d:29:
de:1f:3b:3f:90:5d:9a:37:ec:ea:92:5d:67:15:f3:10:f5:fc:
be:ef:65:1f:aa:ce:0a:49:e0:38:65:46:52:fd:75:70:20:32:
fd:dc:b4:a9:04:76:3c:1e:18:c2:e4:1d:0d:97:c0:80:a4:ea:
a8:2e:7c:ec:45:9c:2d:a7:c8:5c:5b:c4:8c:bd:dc:05:9d:a8:
22:84:57:ac:36:a3:82:37:63:51:77:d4:50:67:05:20:5b:d6:
e0:a4:93:b6:92:cc:e4:0b:60:42:4a:b0:a3:c0:bc:81:b9:40:
55:82:c0:4d:a4:e7:15:f6:b4:ba:0c:30:32:f1:32:73:27:4e:
57:56:4e:dd:71:12:05:03:51:24:42:bf:97:e2:26:04:53:4e:
4a:bd:da:c8:34:d1:79:9a:c4:f5:7d:1a:22:b9:13:f2:a2:80:
d2:21:52:1e:e5:b3:ef:48:39:68:4e:eb:c4:7b:33:a4:ec:1e:
25:7e:5a:2f
-----BEGIN CERTIFICATE-----
MIIEmDCCA4CgAwIBAgIUPKHPQyQVSKTMO+z1AAYs/2Vk7aUwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoYjU3ZGNiYTlmYzdiMGVmMWYzY2M4MGExYWVlMjJjMDAx
OThlNzY3YTAeFw0yMzA0MDgwMzIwNDJaFw0yNDA0MDYwMzI1NDJaMDMxMTAvBgNV
BAMTKDkzOURDMzIxMEI2MzU1QUUxMUQ1RERGNTVERjE0MzQyMjdDRDVCOEYwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDD1MthbEXZDJ+Ym1ER1GrrP2NB
J52gV6i09TUkFXmJHhsxgMHT+DqY+ifzZyUG+TiXpozY89m7vGewN3VL3aTrMzIM
Mjc4BfThBFaN0VPXS6QuTJVEFC1PgwHEFeC1JR//KZt7RyKPBa9C92Nt9NE39M3V
z7D0F2ysiVf7N7zCddk5IkHeqcyqmM71vv0pEGXFbKa9Ny+6PjJMc6QkBMEZ3B5I
gkUQS96Mm74TMKFEs5JpoHZm9hpucluE8AcWbz4KpIVXYKVm57ng4CozM193Fr6G
Js1CIMcWbBGDLwNF9d+nGbxQS23Q4QevrIsywy945Wr6Clgv5uVEtN41r0MVAgMB
AAGjggGiMIIBnjAdBgNVHQ4EFgQUk53DIQtjVa4R1d31XfFDQifNW48wHwYDVR0j
BBgwFoAUtX3Lqfx7DvHzzIChruIsABmOdnowDgYDVR0PAQH/BAQDAgeAMFkGA1Ud
HwRSMFAwTqBMoEqGSHJzeW5jOi8vcnBraS5jby9yZXBvL0hZU1AvNi9CNTdEQ0JB
OUZDN0IwRUYxRjNDQzgwQTFBRUUyMkMwMDE5OEU3NjdBLmNybDBkBggrBgEFBQcB
AQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBvc2l0
b3J5L0RFRkFVTFQvdFgzTHFmeDdEdkh6eklDaHJ1SXNBQm1PZG5vLmNlcjBEBggr
BgEFBQcBCwQ4MDYwNAYIKwYBBQUHMAuGKHJzeW5jOi8vcnBraS5jby9yZXBvL0hZ
U1AvNi9BUzIwNDg0NC5yb2EwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjArBggr
BgEFBQcBBwEB/wQcMBowGAQCAAIwEgMHACoS3UeAAwMHACoS3UeARDANBgkqhkiG
9w0BAQsFAAOCAQEAR9PoFZaATHdr89jplFE/GB3zeNHJbpCh1I9wYzKvJjR0E6NO
MeAomt/D1hE8aFXUa5/m/e7xXDVbRdudgkmqya4skdzANl0p3h87P5Bdmjfs6pJd
ZxXzEPX8vu9lH6rOCkngOGVGUv11cCAy/dy0qQR2PB4YwuQdDZfAgKTqqC587EWc
LafIXFvEjL3cBZ2oIoRXrDajgjdjUXfUUGcFIFvW4KSTtpLM5AtgQkqwo8C8gblA
VYLATaTnFfa0ugwwMvEycydOV1ZO3XESBQNRJEK/l+ImBFNOSr3ayDTReZrE9X0a
IrkT8qKA0iFSHuWz70g5aE7rxHszpOweJX5aLw==
-----END CERTIFICATE-----
Generated at Wed Apr 16 13:52:07 2025 by rpki-client