Route Origin Authorization
$ rpki-client -vvf rpki.co/repo/HYSP/6/AS208690.roa
File: AS208690.roa (raw, json)
Hash identifier: mt2zO7GHhsasEgAykdsXj+NA9/LCgCqUtCeqBOPDAmU=
Subject key identifier: 04:A0:36:62:4C:F7:0F:62:0D:7A:0C:FB:E0:DE:E0:49:B6:5B:E1:87
Certificate issuer: /CN=b57dcba9fc7b0ef1f3cc80a1aee22c00198e767a
Certificate serial: 60B901F078ADE8C314D4426CD9C0C29AAB0EE308
Authority key identifier: B5:7D:CB:A9:FC:7B:0E:F1:F3:CC:80:A1:AE:E2:2C:00:19:8E:76:7A
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/tX3Lqfx7DvHzzIChruIsABmOdno.cer
Subject info access: rsync://rpki.co/repo/HYSP/6/AS208690.roa
Signing time: Sat 08 Apr 2023 03:25:44 +0000
ROA not before: Sat 08 Apr 2023 03:20:44 +0000
ROA not after: Sat 06 Apr 2024 03:25:44 +0000
asID: 208690
IP address blocks: 2a12:dd47:fa00::/40 maxlen: 48
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
60:b9:01:f0:78:ad:e8:c3:14:d4:42:6c:d9:c0:c2:9a:ab:0e:e3:08
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=b57dcba9fc7b0ef1f3cc80a1aee22c00198e767a
Validity
Not Before: Apr 8 03:20:44 2023 GMT
Not After : Apr 6 03:25:44 2024 GMT
Subject: CN=04A036624CF70F620D7A0CFBE0DEE049B65BE187
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a8:72:55:b4:b4:1a:d2:b8:d5:b0:93:47:58:0b:
19:5b:64:4d:c6:cf:48:fe:c1:0f:b1:9c:8f:8b:8f:
fd:0e:5b:26:bb:c7:0e:53:d6:e2:b4:ea:0c:18:a8:
90:3e:18:5c:db:0e:31:4f:a2:94:89:73:1f:d6:eb:
87:bd:c8:4f:04:8f:f2:f1:4d:f8:ad:73:86:4d:d6:
5a:79:c0:fe:46:a1:75:14:b9:9d:35:f6:69:ac:95:
fe:20:31:7b:04:e7:62:7e:01:72:fa:d6:1e:3c:bc:
05:07:d9:d4:64:8f:f2:61:4a:34:05:13:d2:78:23:
7b:a6:36:1d:a8:e7:be:e5:94:9e:1b:d2:df:cf:45:
90:eb:c5:68:5f:4a:cf:df:6f:a5:b1:64:e0:25:e8:
66:51:ce:e0:ef:53:41:94:05:b2:c9:fb:7d:5a:21:
dc:f4:26:e9:a4:96:1a:1e:d2:91:01:d6:f2:db:aa:
20:d1:a1:09:e6:86:7c:ac:a2:f5:5f:aa:18:c3:5e:
fb:66:d8:9d:22:b6:a4:9f:8d:bf:c9:83:e7:a1:18:
74:81:82:f6:7e:ba:9f:02:33:04:49:e8:4d:05:49:
58:30:4a:43:5e:b9:46:0e:ec:c3:f7:7c:1b:85:4c:
5d:dd:7c:34:0e:9b:8b:96:c0:61:db:1b:88:7e:b2:
fa:6f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
04:A0:36:62:4C:F7:0F:62:0D:7A:0C:FB:E0:DE:E0:49:B6:5B:E1:87
X509v3 Authority Key Identifier:
keyid:B5:7D:CB:A9:FC:7B:0E:F1:F3:CC:80:A1:AE:E2:2C:00:19:8E:76:7A
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.co/repo/HYSP/6/B57DCBA9FC7B0EF1F3CC80A1AEE22C00198E767A.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/tX3Lqfx7DvHzzIChruIsABmOdno.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.co/repo/HYSP/6/AS208690.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a12:dd47:fa00::/40
Signature Algorithm: sha256WithRSAEncryption
75:ab:5c:b6:d0:20:a9:76:88:5d:d2:4a:8a:ac:20:9c:19:91:
f2:b1:f5:7a:e0:49:0c:c1:19:e1:b6:94:07:ff:f3:41:6e:aa:
ef:67:91:93:02:5e:b3:bf:69:95:fa:39:a4:c7:a5:31:ef:c5:
69:5e:44:9b:cc:20:e0:6c:58:4b:0e:fb:12:84:7e:6d:f8:d0:
c9:43:f3:dd:6e:42:ba:51:e9:35:7b:4c:e3:24:11:47:12:bb:
ee:2c:29:db:eb:04:9b:2c:b4:fa:6e:6f:3b:0d:df:4a:58:d3:
79:53:ba:62:04:b6:61:90:12:a8:97:dc:8f:5c:5b:0d:ad:4d:
c1:18:6a:e8:1a:6c:ac:08:32:a1:3f:7e:46:fd:73:fc:1f:55:
2f:8c:8d:f3:8b:d9:b4:61:45:2a:c8:06:64:29:2a:d7:d5:ed:
a3:20:62:25:ee:0b:65:9a:68:18:8e:4e:70:49:f8:ba:ec:3c:
82:29:a0:4b:18:5b:dd:9d:08:a7:b7:a1:19:d6:d8:11:43:84:
09:1b:2a:dc:1a:ca:5f:a4:5c:5d:20:83:ae:07:08:a6:b7:dc:
f7:56:d7:1e:c1:af:38:30:27:20:8c:b7:84:91:57:bd:13:1b:
e5:87:d9:ba:67:91:61:81:4f:5e:2f:25:cd:c2:26:a5:28:01:
dd:a5:3a:5b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Apr 16 13:59:08 2025 by rpki-client