Route Origin Authorization
$ rpki-client -vvf rpki.co/repo/HYSP/6/AS209652.roa
File: AS209652.roa (raw, json)
Hash identifier: x/CvAvKR3DGerv7YjDplB3q0ft8jAuWWkiEyI9vRikU=
Subject key identifier: 06:71:CD:FE:9B:C8:65:1B:0E:2E:A0:AA:BC:D6:F1:E2:48:FA:34:5A
Certificate issuer: /CN=b57dcba9fc7b0ef1f3cc80a1aee22c00198e767a
Certificate serial: 057DD8515540761A4B992C3210EF64647A8515F0
Authority key identifier: B5:7D:CB:A9:FC:7B:0E:F1:F3:CC:80:A1:AE:E2:2C:00:19:8E:76:7A
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/tX3Lqfx7DvHzzIChruIsABmOdno.cer
Subject info access: rsync://rpki.co/repo/HYSP/6/AS209652.roa
Signing time: Sat 08 Apr 2023 03:25:43 +0000
ROA not before: Sat 08 Apr 2023 03:20:43 +0000
ROA not after: Sat 06 Apr 2024 03:25:43 +0000
asID: 209652
IP address blocks: 2a12:dd47:83c0::/44 maxlen: 48
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
05:7d:d8:51:55:40:76:1a:4b:99:2c:32:10:ef:64:64:7a:85:15:f0
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=b57dcba9fc7b0ef1f3cc80a1aee22c00198e767a
Validity
Not Before: Apr 8 03:20:43 2023 GMT
Not After : Apr 6 03:25:43 2024 GMT
Subject: CN=0671CDFE9BC8651B0E2EA0AABCD6F1E248FA345A
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b0:d0:5c:0e:7a:d8:fa:af:67:57:3a:39:0f:6b:
b8:c6:79:c8:ca:c5:0d:61:b2:7a:60:b4:43:28:d4:
b3:22:69:7d:1e:bf:32:90:b9:8f:de:b0:52:d0:0d:
3d:07:39:06:40:e5:c7:a0:0a:eb:e9:be:d6:47:ce:
d8:3e:80:ff:5f:79:8b:24:6e:ca:0d:02:3c:b1:22:
b5:9f:c6:3f:e7:10:dd:7f:36:18:36:b6:4d:f9:f2:
f3:7c:00:d0:98:f3:bb:d2:1f:a5:1d:68:5c:93:2b:
2b:1d:b0:19:44:d6:3e:f0:e0:23:f9:90:c4:39:51:
6c:6e:96:41:28:12:7b:eb:7b:7e:70:d1:63:79:28:
ed:41:97:46:f4:9e:d7:7f:30:3c:b3:d2:1e:df:f0:
63:7b:0d:05:1c:6c:fc:8a:02:a7:52:21:1a:2b:27:
6a:26:74:ed:fd:97:df:32:53:c7:9e:33:ce:66:e7:
99:77:a8:31:d0:f4:40:12:fe:71:4a:a7:86:42:89:
8c:fa:4d:18:03:5e:99:83:a5:bb:e0:88:ce:b5:b1:
12:cc:e0:f4:11:0f:d8:d9:84:7c:4e:63:c5:bd:c0:
11:12:2c:24:9e:0e:44:b5:e5:8e:a9:14:88:e8:00:
93:a2:82:86:10:4c:39:c0:6f:6e:84:90:df:aa:c5:
01:7d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
06:71:CD:FE:9B:C8:65:1B:0E:2E:A0:AA:BC:D6:F1:E2:48:FA:34:5A
X509v3 Authority Key Identifier:
keyid:B5:7D:CB:A9:FC:7B:0E:F1:F3:CC:80:A1:AE:E2:2C:00:19:8E:76:7A
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.co/repo/HYSP/6/B57DCBA9FC7B0EF1F3CC80A1AEE22C00198E767A.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/tX3Lqfx7DvHzzIChruIsABmOdno.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.co/repo/HYSP/6/AS209652.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a12:dd47:83c0::/44
Signature Algorithm: sha256WithRSAEncryption
96:3c:09:90:a4:04:7f:82:3e:bb:c1:71:17:a9:2e:ae:6e:3f:
08:7e:79:75:c1:5f:bb:d3:b3:a5:6a:a4:67:e3:1c:89:18:74:
25:f2:8b:fe:ff:b7:81:27:0f:15:7d:93:76:24:5a:90:b8:3e:
ff:3d:53:18:cc:cc:a8:ca:7b:35:22:00:23:6d:77:7b:69:55:
26:f3:14:fb:c2:ff:a4:19:5e:37:d6:c4:63:9b:e0:dd:0c:9f:
4f:04:a5:9c:06:9c:4a:3f:be:69:80:5b:a9:eb:24:99:7a:79:
c4:bb:c0:a6:50:46:35:6f:61:77:7f:fb:8c:70:ac:e4:df:fc:
70:05:4a:96:61:a6:5d:c5:00:e1:4a:ac:c5:83:03:df:d8:d3:
a8:90:8d:ca:e7:74:57:00:62:49:be:51:78:8b:21:fc:7d:e1:
d8:89:80:fe:c4:63:52:48:f9:79:c6:c9:24:10:34:d5:57:ec:
44:ac:c8:67:ef:e6:54:59:43:1d:48:7f:8c:f0:fa:d9:ec:b1:
b8:52:a5:e1:10:f9:15:95:b7:e1:85:6d:eb:36:ed:83:fb:fc:
c3:6c:6d:8f:ff:a2:29:de:fd:27:28:80:b8:be:f4:37:84:74:
f7:74:38:63:8b:5b:84:34:50:b6:8f:14:ec:e5:70:ad:d7:cd:
81:11:d2:c9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Apr 16 13:52:04 2025 by rpki-client