Route Origin Authorization
$ rpki-client -vvf rpki.co/repo/HYSP/6/AS209391.roa
File: AS209391.roa (raw, json)
Hash identifier: 6u0DQ3a3daHgt+MKGPlAGtn8IvusJSt7izDTaXlSrgw=
Subject key identifier: 9C:1A:EF:BC:72:A9:D9:C5:11:70:B6:FF:C7:20:81:07:22:4B:66:74
Certificate issuer: /CN=b57dcba9fc7b0ef1f3cc80a1aee22c00198e767a
Certificate serial: 0C9230516FC8369AADACBD17E53A19136D0F1D62
Authority key identifier: B5:7D:CB:A9:FC:7B:0E:F1:F3:CC:80:A1:AE:E2:2C:00:19:8E:76:7A
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/tX3Lqfx7DvHzzIChruIsABmOdno.cer
Subject info access: rsync://rpki.co/repo/HYSP/6/AS209391.roa
Signing time: Sat 08 Apr 2023 03:25:26 +0000
ROA not before: Sat 08 Apr 2023 03:20:26 +0000
ROA not after: Sat 06 Apr 2024 03:25:26 +0000
asID: 209391
IP address blocks: 2a12:dd47:8e40::/44 maxlen: 48
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
0c:92:30:51:6f:c8:36:9a:ad:ac:bd:17:e5:3a:19:13:6d:0f:1d:62
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=b57dcba9fc7b0ef1f3cc80a1aee22c00198e767a
Validity
Not Before: Apr 8 03:20:26 2023 GMT
Not After : Apr 6 03:25:26 2024 GMT
Subject: CN=9C1AEFBC72A9D9C51170B6FFC7208107224B6674
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cd:63:bb:5e:07:95:3d:a4:0d:37:37:6e:50:dd:
ca:21:e8:d8:0b:af:ef:99:7c:dc:cd:ee:82:55:dd:
bd:b4:96:f0:22:f3:c8:c5:0a:99:c3:75:3f:6d:21:
06:25:e5:d4:78:cd:c3:e6:59:79:c0:48:22:47:dc:
70:5e:cb:f7:74:34:4e:93:d3:d8:fc:2c:d6:6e:d9:
dd:41:62:23:37:50:27:a5:5e:9a:da:9b:31:81:a4:
6e:47:00:ac:29:60:ff:81:5e:6f:66:c0:61:f2:bd:
f3:16:f3:ab:93:9a:19:04:a1:79:f5:30:21:71:39:
b5:dc:13:28:c4:2f:68:fa:fc:7f:3f:8d:9c:b6:68:
d5:69:15:a9:62:a3:3b:2d:28:2d:d3:26:09:9c:9e:
75:6a:8d:48:97:73:91:f4:ce:04:af:e6:e4:b8:8a:
f3:30:02:09:bd:d8:a8:65:88:9c:50:7f:d8:e9:98:
68:e2:78:30:9b:b5:19:94:ac:9c:7f:13:ba:fa:bd:
5d:76:47:ef:4d:0b:bd:51:be:f2:e8:e0:6b:d5:85:
9b:2b:77:66:4f:da:3d:56:18:73:c7:7d:c3:97:4e:
74:bb:40:bd:c9:a9:fc:da:f4:c4:4a:6f:17:18:57:
b1:6d:4a:21:35:dc:05:99:57:43:3e:cf:45:16:6b:
18:1f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
9C:1A:EF:BC:72:A9:D9:C5:11:70:B6:FF:C7:20:81:07:22:4B:66:74
X509v3 Authority Key Identifier:
keyid:B5:7D:CB:A9:FC:7B:0E:F1:F3:CC:80:A1:AE:E2:2C:00:19:8E:76:7A
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.co/repo/HYSP/6/B57DCBA9FC7B0EF1F3CC80A1AEE22C00198E767A.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/tX3Lqfx7DvHzzIChruIsABmOdno.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.co/repo/HYSP/6/AS209391.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a12:dd47:8e40::/44
Signature Algorithm: sha256WithRSAEncryption
a6:fb:21:0e:cb:b5:e6:68:ed:a7:fe:85:7f:f5:e4:fe:7c:f2:
42:2a:98:c7:c3:e6:02:e0:ff:91:3a:73:1a:64:0f:cd:a5:53:
b2:2a:78:70:0a:1f:b9:f3:1e:26:75:6d:d5:9a:b1:86:0a:5a:
81:15:14:80:04:bc:23:1f:17:4f:d8:47:63:72:ad:fc:df:8c:
9c:e0:53:00:b0:99:fc:36:42:8e:8b:6b:94:79:89:1d:ce:d6:
4a:29:72:4f:87:3f:61:39:24:71:14:46:f9:00:1c:22:48:0d:
e2:60:7c:dc:18:6c:65:99:d6:20:f1:9d:53:b0:4d:ad:77:90:
6f:1e:cf:df:55:bc:47:c7:be:cf:59:15:40:89:ec:e9:63:62:
ac:52:86:22:c4:ee:48:c5:e1:32:e3:70:db:82:dc:d7:e5:5f:
35:be:21:d0:3d:f6:1e:b4:57:a2:19:5e:e5:d4:04:23:47:0f:
cc:d4:50:64:17:f1:ab:84:cf:fb:1d:09:42:25:5e:d8:c4:fe:
f6:f7:48:7f:a9:6c:4e:fa:19:c1:f2:ac:23:46:8a:1f:08:d7:
67:ed:58:d9:19:39:1c:e7:9a:7e:f3:8e:1f:c1:6e:34:6c:44:
f6:50:dd:dd:cc:20:0b:6d:10:0b:41:c5:6d:a0:1b:0b:37:de:
aa:66:40:87
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Apr 16 14:00:33 2025 by rpki-client