Route Origin Authorization
$ rpki-client -vvf rpki.co/repo/HYSP/6/AS208029.roa
File: AS208029.roa (raw, json)
Hash identifier: KxypomzyX8sGNkk/8Ky5CDp+oyfWlz9nS1MAJXF2pfM=
Subject key identifier: F2:0A:41:F0:36:F0:2B:F4:E6:AA:82:CF:A5:A4:3F:E8:87:5F:A4:C9
Certificate issuer: /CN=b57dcba9fc7b0ef1f3cc80a1aee22c00198e767a
Certificate serial: 70AB13EBCB509FAE427B390851B0BD0829247E6C
Authority key identifier: B5:7D:CB:A9:FC:7B:0E:F1:F3:CC:80:A1:AE:E2:2C:00:19:8E:76:7A
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/tX3Lqfx7DvHzzIChruIsABmOdno.cer
Subject info access: rsync://rpki.co/repo/HYSP/6/AS208029.roa
Signing time: Sat 08 Apr 2023 03:25:48 +0000
ROA not before: Sat 08 Apr 2023 03:20:48 +0000
ROA not after: Sat 06 Apr 2024 03:25:48 +0000
asID: 208029
IP address blocks: 2a12:dd47:8041::/48 maxlen: 48
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
70:ab:13:eb:cb:50:9f:ae:42:7b:39:08:51:b0:bd:08:29:24:7e:6c
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=b57dcba9fc7b0ef1f3cc80a1aee22c00198e767a
Validity
Not Before: Apr 8 03:20:48 2023 GMT
Not After : Apr 6 03:25:48 2024 GMT
Subject: CN=F20A41F036F02BF4E6AA82CFA5A43FE8875FA4C9
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d8:33:57:6f:14:88:f1:28:06:43:77:3d:2a:85:
47:4c:b1:6a:c7:6a:27:d1:12:c5:e9:ec:8e:b0:80:
46:0e:1f:93:c3:1e:5c:37:ed:b2:6a:19:ec:5e:6f:
a6:0c:dc:ae:ba:d5:bb:ee:e5:1c:cb:74:fd:ee:a6:
35:88:1b:7b:0a:c9:94:f7:db:ce:4e:43:94:3b:f9:
d5:a3:f7:4f:a7:5e:30:21:cc:32:c7:97:53:5a:59:
b0:7c:46:e6:ed:71:fe:6b:3b:b4:4a:96:05:d4:51:
7b:7d:5e:99:b5:6d:9a:b6:e6:a7:ee:4b:eb:7e:02:
37:f1:15:f1:7f:05:94:c6:ac:ae:7f:66:ca:6d:4a:
c8:e8:71:6a:0f:30:4f:f0:02:e1:ea:9e:91:69:2a:
b8:4d:b9:c8:74:54:fc:53:5f:f0:18:4a:71:a3:3e:
d2:f6:cc:5c:15:a3:3f:b6:40:a3:63:de:bb:eb:fc:
97:b1:ce:2b:19:49:3e:27:38:28:ae:72:30:f0:d5:
a9:d7:ef:f8:8c:4f:71:76:2f:c8:06:3e:09:df:cb:
4e:0c:e9:2f:e4:5d:70:ef:d1:c7:d9:ef:36:01:df:
ac:ba:0d:1e:cd:14:52:a5:5f:b8:ed:12:5e:e7:9a:
45:f2:2f:ea:5e:1f:91:b6:d2:b9:67:9d:f8:50:44:
b1:9d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F2:0A:41:F0:36:F0:2B:F4:E6:AA:82:CF:A5:A4:3F:E8:87:5F:A4:C9
X509v3 Authority Key Identifier:
keyid:B5:7D:CB:A9:FC:7B:0E:F1:F3:CC:80:A1:AE:E2:2C:00:19:8E:76:7A
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.co/repo/HYSP/6/B57DCBA9FC7B0EF1F3CC80A1AEE22C00198E767A.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/tX3Lqfx7DvHzzIChruIsABmOdno.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.co/repo/HYSP/6/AS208029.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a12:dd47:8041::/48
Signature Algorithm: sha256WithRSAEncryption
a8:8a:d9:b9:61:f2:3a:97:09:48:7b:14:7e:48:91:c6:aa:89:
01:12:4a:4a:ff:b1:08:ad:4b:3f:25:e0:34:b0:e9:df:79:49:
c6:82:1f:8e:83:e5:46:1a:b8:23:7d:c6:56:70:a2:5d:20:1d:
49:6e:8f:01:1c:41:82:00:f4:92:6f:b3:f6:47:e7:c7:fa:1b:
02:d2:1d:1f:af:02:3c:f6:ab:ea:fb:b2:7e:75:dd:a1:4a:ea:
02:e7:ce:80:de:1b:d7:f4:86:1b:bf:d8:b4:6d:3e:eb:be:15:
eb:33:3b:a7:f3:6b:cf:6e:79:86:0d:14:3f:51:38:3b:37:37:
bc:f3:2e:5b:44:1a:c7:2f:cf:67:ee:99:45:85:5c:22:e2:1f:
f2:3c:9d:e8:47:7a:49:3d:7e:18:a9:37:42:3a:21:66:74:b0:
fb:3b:0e:7f:a0:79:1e:6a:4c:c9:41:41:5c:83:f9:af:97:c6:
47:2a:b6:b6:64:24:8a:60:dd:00:c2:5e:7e:67:b2:3d:7a:17:
82:46:d9:45:c6:33:3b:f2:22:a1:26:81:a6:37:85:1f:66:70:
ca:62:cb:5b:cd:ba:4b:ee:42:ce:15:61:57:c7:95:5f:ce:ca:
bc:08:93:8d:c3:cd:cc:f8:4c:78:45:4d:bc:7a:6d:1f:fe:46:
58:d0:4e:50
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Apr 16 13:46:11 2025 by rpki-client