Route Origin Authorization
$ rpki-client -vvf rpki.co/repo/HYSP/6/AS205432.roa
File: AS205432.roa (raw, json)
Hash identifier: y0/6BXL8UeQBc7DNq9Ya2CphoL+NlRy82oi47ESFoLA=
Subject key identifier: F6:86:39:B3:DE:60:D5:BB:C5:F0:A6:E2:80:9E:66:6F:5F:72:EF:9B
Certificate issuer: /CN=b57dcba9fc7b0ef1f3cc80a1aee22c00198e767a
Certificate serial: 4EF0C47349C3D29195C30354795E005F5D32ACD1
Authority key identifier: B5:7D:CB:A9:FC:7B:0E:F1:F3:CC:80:A1:AE:E2:2C:00:19:8E:76:7A
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/tX3Lqfx7DvHzzIChruIsABmOdno.cer
Subject info access: rsync://rpki.co/repo/HYSP/6/AS205432.roa
Signing time: Sat 08 Apr 2023 03:25:46 +0000
ROA not before: Sat 08 Apr 2023 03:20:46 +0000
ROA not after: Sat 06 Apr 2024 03:25:46 +0000
asID: 205432
IP address blocks: 2a12:dd47:84fe::/48 maxlen: 48
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
4e:f0:c4:73:49:c3:d2:91:95:c3:03:54:79:5e:00:5f:5d:32:ac:d1
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=b57dcba9fc7b0ef1f3cc80a1aee22c00198e767a
Validity
Not Before: Apr 8 03:20:46 2023 GMT
Not After : Apr 6 03:25:46 2024 GMT
Subject: CN=F68639B3DE60D5BBC5F0A6E2809E666F5F72EF9B
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c1:39:1d:80:f4:82:1c:3c:2f:8e:32:01:05:3c:
ed:6d:d1:f7:a4:d5:f0:43:8f:6b:88:75:83:fd:d7:
46:94:21:d4:1e:76:b2:30:aa:91:05:46:2c:6e:71:
7b:24:9e:a4:b8:c6:b0:12:17:fb:8e:6e:1e:a5:5e:
fd:85:6c:29:7b:28:29:63:a0:7b:a2:bf:d9:3c:45:
76:e3:02:75:88:16:72:38:2d:be:af:7b:1f:64:60:
a3:b4:20:f7:1e:8f:9a:1b:e6:25:47:47:da:75:fb:
66:d9:1e:d4:5c:ce:8f:33:9e:b3:ee:ed:e9:7a:73:
ed:d0:ce:cc:8b:a6:98:31:aa:9f:b5:50:0d:c1:7e:
dd:58:bc:4c:6f:53:7f:d5:c4:57:8c:41:62:2c:4c:
cd:de:92:f1:2e:8a:ba:59:fb:a4:20:01:50:08:10:
dc:ce:e0:74:8e:81:13:4e:6c:bd:33:1a:79:d2:56:
4b:fd:04:36:6f:9f:f0:59:79:52:96:48:14:e2:5e:
9e:30:3f:73:fb:f5:7b:87:8c:68:70:d9:40:66:38:
9e:b5:55:f8:c8:73:71:6f:af:ea:6d:59:0f:a8:33:
4b:7b:36:39:64:40:f4:cf:e2:0c:36:1d:d9:4c:18:
04:5d:24:df:b7:c2:21:3c:2f:6f:a3:70:96:71:69:
c1:4d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F6:86:39:B3:DE:60:D5:BB:C5:F0:A6:E2:80:9E:66:6F:5F:72:EF:9B
X509v3 Authority Key Identifier:
keyid:B5:7D:CB:A9:FC:7B:0E:F1:F3:CC:80:A1:AE:E2:2C:00:19:8E:76:7A
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.co/repo/HYSP/6/B57DCBA9FC7B0EF1F3CC80A1AEE22C00198E767A.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/tX3Lqfx7DvHzzIChruIsABmOdno.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.co/repo/HYSP/6/AS205432.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a12:dd47:84fe::/48
Signature Algorithm: sha256WithRSAEncryption
63:d5:08:dc:0e:63:d3:8b:c5:42:ea:1e:83:0d:e1:c2:f7:33:
2b:2d:95:6a:52:e6:34:b4:2d:76:9d:2e:f5:9f:4c:fa:0c:60:
48:47:6a:ed:67:1d:5e:4c:bb:b2:87:73:5e:51:4f:17:52:b7:
73:af:92:86:2d:5d:97:64:c6:d6:04:17:e9:5b:93:2b:bc:ea:
44:7c:90:22:e3:da:cd:66:76:43:d0:9a:00:df:9f:77:53:ec:
cf:39:d3:57:00:ea:c8:13:0a:e2:06:32:7a:86:f3:37:7b:ba:
8e:f7:0e:13:d2:fc:2f:01:90:48:b2:34:ad:cc:0c:6b:6a:f8:
a9:7d:ef:32:47:be:7e:ec:5d:58:a2:4c:5b:53:b6:62:2b:99:
f5:cc:d9:a5:64:2d:ed:f0:55:78:5d:95:2d:7b:87:5b:89:96:
85:80:58:9f:68:af:57:72:2d:92:21:20:66:0a:0c:b6:83:9c:
76:63:08:00:24:90:17:d0:13:2b:a8:4d:a7:b8:6c:32:70:20:
32:1d:42:f3:b8:81:93:df:72:a1:32:3d:f0:d7:c2:55:f2:9e:
b3:10:27:72:21:44:00:41:1d:ba:82:4b:c2:f6:bd:b9:53:03:
6a:a7:4e:b9:7c:b1:03:1d:15:60:fb:2a:54:43:32:b2:50:47:
c9:d0:02:41
-----BEGIN CERTIFICATE-----
MIIEjzCCA3egAwIBAgIUTvDEc0nD0pGVwwNUeV4AX10yrNEwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoYjU3ZGNiYTlmYzdiMGVmMWYzY2M4MGExYWVlMjJjMDAx
OThlNzY3YTAeFw0yMzA0MDgwMzIwNDZaFw0yNDA0MDYwMzI1NDZaMDMxMTAvBgNV
BAMTKEY2ODYzOUIzREU2MEQ1QkJDNUYwQTZFMjgwOUU2NjZGNUY3MkVGOUIwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDBOR2A9IIcPC+OMgEFPO1t0fek
1fBDj2uIdYP910aUIdQedrIwqpEFRixucXsknqS4xrASF/uObh6lXv2FbCl7KClj
oHuiv9k8RXbjAnWIFnI4Lb6vex9kYKO0IPcej5ob5iVHR9p1+2bZHtRczo8znrPu
7el6c+3QzsyLppgxqp+1UA3Bft1YvExvU3/VxFeMQWIsTM3ekvEuirpZ+6QgAVAI
ENzO4HSOgRNObL0zGnnSVkv9BDZvn/BZeVKWSBTiXp4wP3P79XuHjGhw2UBmOJ61
VfjIc3Fvr+ptWQ+oM0t7NjlkQPTP4gw2HdlMGARdJN+3wiE8L2+jcJZxacFNAgMB
AAGjggGZMIIBlTAdBgNVHQ4EFgQU9oY5s95g1bvF8KbigJ5mb19y75swHwYDVR0j
BBgwFoAUtX3Lqfx7DvHzzIChruIsABmOdnowDgYDVR0PAQH/BAQDAgeAMFkGA1Ud
HwRSMFAwTqBMoEqGSHJzeW5jOi8vcnBraS5jby9yZXBvL0hZU1AvNi9CNTdEQ0JB
OUZDN0IwRUYxRjNDQzgwQTFBRUUyMkMwMDE5OEU3NjdBLmNybDBkBggrBgEFBQcB
AQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBvc2l0
b3J5L0RFRkFVTFQvdFgzTHFmeDdEdkh6eklDaHJ1SXNBQm1PZG5vLmNlcjBEBggr
BgEFBQcBCwQ4MDYwNAYIKwYBBQUHMAuGKHJzeW5jOi8vcnBraS5jby9yZXBvL0hZ
U1AvNi9BUzIwNTQzMi5yb2EwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAiBggr
BgEFBQcBBwEB/wQTMBEwDwQCAAIwCQMHACoS3UeE/jANBgkqhkiG9w0BAQsFAAOC
AQEAY9UI3A5j04vFQuoegw3hwvczKy2ValLmNLQtdp0u9Z9M+gxgSEdq7WcdXky7
sodzXlFPF1K3c6+Shi1dl2TG1gQX6VuTK7zqRHyQIuPazWZ2Q9CaAN+fd1PszznT
VwDqyBMK4gYyeobzN3u6jvcOE9L8LwGQSLI0rcwMa2r4qX3vMke+fuxdWKJMW1O2
YiuZ9czZpWQt7fBVeF2VLXuHW4mWhYBYn2ivV3ItkiEgZgoMtoOcdmMIACSQF9AT
K6hNp7hsMnAgMh1C87iBk99yoTI98NfCVfKesxAnciFEAEEduoJLwva9uVMDaqdO
uXyxAx0VYPsqVEMyslBHydACQQ==
-----END CERTIFICATE-----
Generated at Wed Apr 16 14:00:33 2025 by rpki-client