Route Origin Authorization
$ rpki-client -vvf rpki.co/repo/HYSP/6/AS210537.roa
File: AS210537.roa (raw, json)
Hash identifier: dvegQWKOE+yAMUFLZepGxV/759PXKbJza8O0ts+3IJw=
Subject key identifier: 38:0B:26:E2:B2:B6:18:AF:97:70:5F:34:2E:B3:78:5D:EE:1D:7D:AB
Certificate issuer: /CN=b57dcba9fc7b0ef1f3cc80a1aee22c00198e767a
Certificate serial: 40696998A1DF890064089BF88F7309DF8813F095
Authority key identifier: B5:7D:CB:A9:FC:7B:0E:F1:F3:CC:80:A1:AE:E2:2C:00:19:8E:76:7A
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/tX3Lqfx7DvHzzIChruIsABmOdno.cer
Subject info access: rsync://rpki.co/repo/HYSP/6/AS210537.roa
Signing time: Sat 08 Apr 2023 03:25:21 +0000
ROA not before: Sat 08 Apr 2023 03:20:21 +0000
ROA not after: Sat 06 Apr 2024 03:25:21 +0000
asID: 210537
IP address blocks: 2a12:dd47:8070::/48 maxlen: 48
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
40:69:69:98:a1:df:89:00:64:08:9b:f8:8f:73:09:df:88:13:f0:95
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=b57dcba9fc7b0ef1f3cc80a1aee22c00198e767a
Validity
Not Before: Apr 8 03:20:21 2023 GMT
Not After : Apr 6 03:25:21 2024 GMT
Subject: CN=380B26E2B2B618AF97705F342EB3785DEE1D7DAB
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b5:4d:98:c4:c1:be:1d:ef:ff:55:bc:7f:09:37:
78:14:52:a0:69:99:e8:77:ab:8d:d8:e6:51:51:30:
64:69:b2:65:13:f3:8c:f4:cd:dd:51:ac:76:bb:95:
e1:ef:38:6b:07:62:04:73:b7:e8:75:dd:3a:9d:70:
86:56:c9:64:d6:86:d8:c5:4d:1c:18:94:79:82:db:
d1:1e:9e:93:1e:99:10:f4:68:4d:5f:4e:d1:70:cd:
3a:66:19:eb:c6:7f:a1:47:5f:5a:a6:20:8b:66:17:
29:33:97:f8:da:3f:7b:11:05:08:17:38:6f:49:80:
ac:a2:fa:80:12:bf:ad:2e:4c:c3:02:99:a7:0f:79:
92:80:b7:7b:41:31:b2:1e:19:3d:af:3d:87:e2:c5:
27:03:9a:c5:d3:7c:9b:14:01:fc:87:f7:6b:0e:40:
02:11:09:db:ac:25:42:42:b2:e7:a9:84:fb:2b:d7:
c9:01:a9:04:92:6c:89:7b:28:ee:a5:8b:0e:3d:d8:
d7:0d:bb:2d:1c:4b:53:90:ce:99:4a:1b:6d:e9:65:
e2:66:81:2a:bf:c5:c7:85:ba:33:a5:1d:7e:26:f4:
87:11:00:d7:d6:ca:f1:c3:18:6b:b6:2c:c8:23:57:
c9:eb:09:bd:86:80:e2:9d:5f:75:96:54:b2:1f:3b:
b3:c3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
38:0B:26:E2:B2:B6:18:AF:97:70:5F:34:2E:B3:78:5D:EE:1D:7D:AB
X509v3 Authority Key Identifier:
keyid:B5:7D:CB:A9:FC:7B:0E:F1:F3:CC:80:A1:AE:E2:2C:00:19:8E:76:7A
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.co/repo/HYSP/6/B57DCBA9FC7B0EF1F3CC80A1AEE22C00198E767A.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/tX3Lqfx7DvHzzIChruIsABmOdno.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.co/repo/HYSP/6/AS210537.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a12:dd47:8070::/48
Signature Algorithm: sha256WithRSAEncryption
30:0c:b5:f5:58:1c:68:e3:a2:95:35:a0:53:b9:e3:04:b7:66:
25:a4:15:8d:66:e3:59:3a:eb:9a:78:dd:53:25:d9:a4:46:e1:
b7:fd:3f:e9:2c:e8:26:d4:66:4f:01:af:ba:59:75:2c:2a:be:
53:5f:4b:1b:c6:3c:af:60:99:62:8b:be:7c:17:a6:db:12:53:
8e:b3:d1:2a:de:1a:31:9c:dc:06:8c:6c:9b:71:82:2d:17:71:
e6:58:50:5b:59:80:d9:c5:c1:32:5a:f1:8b:eb:56:1b:59:f4:
c1:db:59:87:91:29:08:cb:3a:88:63:c8:1a:6e:53:be:9e:90:
0c:08:41:31:db:54:60:a7:36:d2:31:c6:2c:21:c0:e6:50:f8:
7c:4c:2f:a5:b8:23:64:e5:bf:5e:d0:39:ae:55:bf:cd:01:83:
cc:be:ac:6c:ee:6d:30:8b:c7:62:de:d8:a8:06:2c:c9:63:0d:
ba:c6:48:e3:49:cf:65:26:4c:6c:24:f1:4d:4c:f3:fd:15:8b:
ef:15:5b:cb:dc:85:fe:5c:2a:a3:c6:2e:7f:d7:a9:8d:54:2d:
5e:2d:e9:19:ed:9e:43:5c:0a:d4:7c:4f:41:56:cd:2a:12:ff:
85:30:e3:4a:8d:f4:f1:ca:4e:93:a5:09:7f:ee:76:17:20:34:
b8:b8:99:9f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Apr 16 13:48:32 2025 by rpki-client