Route Origin Authorization
$ rpki-client -vvf rpki.co/repo/HYSP/6/AS207731.roa
File: AS207731.roa (raw, json)
Hash identifier: s5xvOL85rUpt03PDiEGpYa2rtG++QvSScjITslKgX0E=
Subject key identifier: BF:9E:9B:56:04:FA:2F:3A:61:55:8E:FF:7D:F1:C1:BA:17:DA:06:20
Certificate issuer: /CN=b57dcba9fc7b0ef1f3cc80a1aee22c00198e767a
Certificate serial: 39E705AA6040E9C30FF3AF8C27E7C0CE36C074D8
Authority key identifier: B5:7D:CB:A9:FC:7B:0E:F1:F3:CC:80:A1:AE:E2:2C:00:19:8E:76:7A
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/tX3Lqfx7DvHzzIChruIsABmOdno.cer
Subject info access: rsync://rpki.co/repo/HYSP/6/AS207731.roa
Signing time: Sat 08 Apr 2023 03:25:46 +0000
ROA not before: Sat 08 Apr 2023 03:20:46 +0000
ROA not after: Sat 06 Apr 2024 03:25:46 +0000
asID: 207731
IP address blocks: 2a12:dd47:816c::/48 maxlen: 48
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
39:e7:05:aa:60:40:e9:c3:0f:f3:af:8c:27:e7:c0:ce:36:c0:74:d8
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=b57dcba9fc7b0ef1f3cc80a1aee22c00198e767a
Validity
Not Before: Apr 8 03:20:46 2023 GMT
Not After : Apr 6 03:25:46 2024 GMT
Subject: CN=BF9E9B5604FA2F3A61558EFF7DF1C1BA17DA0620
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cc:2e:c0:7b:8d:5b:fc:33:ce:ec:b1:d8:c1:c5:
e8:ee:4a:49:f6:b5:8e:24:b5:0f:5b:3e:66:0b:f2:
d5:3b:0b:d8:ff:72:b9:57:b7:55:ef:66:91:1c:26:
79:de:2a:58:cc:9c:6b:b3:88:38:d1:b2:ee:14:92:
54:e3:95:86:9d:a9:fc:cf:34:75:84:1f:a1:1e:e2:
c3:0a:0c:e0:7e:e4:b5:01:64:da:d0:ad:e5:81:5d:
fa:89:f9:d9:7d:cd:10:93:b3:9e:52:09:9d:6b:54:
b0:d1:c0:9d:72:d6:94:3f:84:4e:7d:93:67:f5:a6:
b1:a4:84:7e:2a:28:5c:39:47:df:d1:90:45:c7:c6:
61:bf:ae:19:4f:89:0a:af:aa:07:6c:7b:40:ef:50:
d0:ef:05:ae:75:b2:9c:09:1c:7e:75:17:a5:6d:da:
89:71:7f:d5:22:b1:4b:5c:74:f8:be:05:45:45:38:
51:c3:89:7e:5a:46:69:3d:d7:bb:09:fd:82:f4:79:
90:d8:c7:84:7b:e3:0b:b4:11:f5:8e:d0:1b:1d:7e:
c9:9f:8d:bd:cb:88:73:85:ed:61:fd:28:b4:e3:da:
d7:05:d9:16:3f:3b:8a:07:a3:6b:ec:89:ae:b2:5c:
8f:b6:4b:63:12:58:9c:6c:11:cc:4f:7b:95:2b:3a:
fa:41
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
BF:9E:9B:56:04:FA:2F:3A:61:55:8E:FF:7D:F1:C1:BA:17:DA:06:20
X509v3 Authority Key Identifier:
keyid:B5:7D:CB:A9:FC:7B:0E:F1:F3:CC:80:A1:AE:E2:2C:00:19:8E:76:7A
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.co/repo/HYSP/6/B57DCBA9FC7B0EF1F3CC80A1AEE22C00198E767A.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/tX3Lqfx7DvHzzIChruIsABmOdno.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.co/repo/HYSP/6/AS207731.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a12:dd47:816c::/48
Signature Algorithm: sha256WithRSAEncryption
1b:c7:83:98:4a:da:ef:1e:c5:ee:a4:95:77:08:c6:39:c0:2a:
29:53:99:25:29:a3:a2:dc:93:27:2d:06:ac:e5:6c:d0:5a:e5:
41:b9:09:03:4c:63:65:3a:b3:40:9d:9a:98:d4:2e:ae:c3:43:
32:e8:18:f0:37:38:b0:ce:81:61:50:24:73:a4:83:03:1a:95:
8d:0e:51:40:c4:a1:6d:40:25:16:fa:d7:b5:8d:2c:34:af:88:
5c:e3:c3:10:87:de:8c:f1:8b:9e:dc:5a:5e:f0:0a:8b:5b:5f:
24:bb:97:ec:ae:e3:a3:1c:ee:02:02:a5:1b:4c:b0:9b:40:ee:
1d:b6:73:29:ad:fd:82:b1:e6:e7:57:c7:48:35:0d:11:a5:8a:
82:7c:36:18:10:f2:b0:c9:00:1d:22:4a:35:4c:85:69:11:a2:
ef:09:26:4b:c6:98:a4:d8:47:80:71:17:2c:bc:96:24:04:48:
d3:57:e7:74:26:63:cf:cd:16:4c:25:c0:6a:b6:8c:cf:da:58:
d6:23:7a:0e:f4:e1:43:3a:93:93:03:d9:78:e5:86:eb:e1:43:
89:b3:0f:9d:f3:eb:e3:10:90:f3:e0:38:e6:0b:9a:5c:0c:69:
d4:fd:f3:4c:3b:f3:d5:a5:87:1f:6c:b5:46:ca:a8:91:31:9c:
a6:60:57:29
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Apr 16 13:52:07 2025 by rpki-client