Route Origin Authorization
$ rpki-client -vvf rpki.co/repo/HYSP/6/AS211233.roa
File: AS211233.roa (raw, json)
Hash identifier: 79xdEyy1Dzdg7H/+dENo6hEgk6NwW+h6ortTLkC1nZg=
Subject key identifier: F4:41:BC:EA:46:3C:C5:4A:85:34:70:7F:0D:53:7B:5F:7F:02:DB:E5
Certificate issuer: /CN=b57dcba9fc7b0ef1f3cc80a1aee22c00198e767a
Certificate serial: 6E4F698E058E447B00BEF22556BAA67EA5149C8B
Authority key identifier: B5:7D:CB:A9:FC:7B:0E:F1:F3:CC:80:A1:AE:E2:2C:00:19:8E:76:7A
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/tX3Lqfx7DvHzzIChruIsABmOdno.cer
Subject info access: rsync://rpki.co/repo/HYSP/6/AS211233.roa
Signing time: Sat 08 Apr 2023 03:25:43 +0000
ROA not before: Sat 08 Apr 2023 03:20:43 +0000
ROA not after: Sat 06 Apr 2024 03:25:43 +0000
asID: 211233
IP address blocks: 2a12:dd47:8050::/44 maxlen: 48
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
6e:4f:69:8e:05:8e:44:7b:00:be:f2:25:56:ba:a6:7e:a5:14:9c:8b
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=b57dcba9fc7b0ef1f3cc80a1aee22c00198e767a
Validity
Not Before: Apr 8 03:20:43 2023 GMT
Not After : Apr 6 03:25:43 2024 GMT
Subject: CN=F441BCEA463CC54A8534707F0D537B5F7F02DBE5
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c8:8a:ee:11:6d:90:ba:9a:18:b8:77:32:de:ee:
5d:07:2e:8d:0d:48:7f:aa:53:56:ff:91:75:85:a0:
66:ed:66:61:96:63:12:ae:9f:0f:61:00:fb:7f:a6:
4e:d7:7b:96:fc:a1:5b:e8:7e:32:f4:7f:8b:fb:ee:
bf:d3:86:e0:70:4c:1e:ff:8d:71:62:07:dc:2e:01:
44:6c:4f:d3:a3:71:f0:38:29:1a:7f:65:17:25:6b:
c8:a3:98:25:75:46:96:a0:17:5c:56:aa:7c:d7:f2:
06:40:e7:90:ef:78:67:2a:85:60:6e:de:79:d8:77:
7a:f2:76:48:de:e6:13:15:fd:4e:26:5a:da:e4:51:
01:81:be:8d:dc:11:c4:25:91:ba:69:8d:a8:05:f8:
2d:94:b6:b3:43:e2:f6:92:9d:c4:6f:e1:4a:63:1a:
9d:3c:36:9d:ee:86:57:3d:8b:c7:16:d4:87:3d:0d:
c5:a7:1d:25:ea:b0:27:f8:b5:88:c1:b6:af:07:f3:
5a:a2:ff:d2:e7:d6:85:a3:f7:25:43:36:6a:5b:cc:
e7:b7:14:48:5b:7f:f2:7c:6a:af:ac:1e:5d:40:c7:
1d:e0:71:41:46:e0:59:c7:9b:55:0b:06:c3:df:ca:
53:98:e9:1e:db:bb:77:29:fe:90:64:cb:e4:56:33:
65:9f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F4:41:BC:EA:46:3C:C5:4A:85:34:70:7F:0D:53:7B:5F:7F:02:DB:E5
X509v3 Authority Key Identifier:
keyid:B5:7D:CB:A9:FC:7B:0E:F1:F3:CC:80:A1:AE:E2:2C:00:19:8E:76:7A
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.co/repo/HYSP/6/B57DCBA9FC7B0EF1F3CC80A1AEE22C00198E767A.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/tX3Lqfx7DvHzzIChruIsABmOdno.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.co/repo/HYSP/6/AS211233.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a12:dd47:8050::/44
Signature Algorithm: sha256WithRSAEncryption
62:28:8f:b3:0f:48:79:1a:45:bc:f7:76:8f:b4:bb:d3:cf:56:
55:8b:4a:4e:3d:ba:5c:57:01:2a:92:6f:62:2d:60:33:4d:1b:
b9:a0:3a:3b:58:88:61:3f:fd:42:93:38:48:f9:e0:77:b2:61:
6f:e8:e7:1e:92:90:fa:45:9a:53:af:86:21:99:51:0f:82:e3:
5e:c1:91:ad:55:32:89:b8:34:7a:13:2f:b9:d8:0e:ce:61:57:
89:c7:f0:8d:71:03:2b:ca:96:03:a5:f8:52:44:ec:c4:31:d5:
e5:85:59:82:1f:e5:0a:a3:4f:bc:20:f2:81:f3:60:ac:34:4a:
ec:fe:05:db:3b:cc:ba:5f:ee:c3:32:b3:18:3e:7e:72:42:ef:
49:0e:e6:1d:d8:25:b5:e4:a7:be:e2:34:c2:eb:7d:f9:5c:31:
f1:b8:d7:51:d5:06:f5:09:fe:a9:73:e6:7f:f7:48:1f:c7:b0:
77:85:c9:fb:bc:39:c9:1d:ea:29:af:fb:77:3a:f0:70:2c:58:
6e:0c:39:50:e0:a6:7a:68:29:61:c1:33:4e:86:73:f4:ce:6e:
46:39:9a:ac:e9:d6:4f:bd:20:64:04:4b:53:a8:37:49:dd:36:
ea:7c:b8:1d:b0:dc:34:d9:d1:fc:1d:e9:95:bf:a2:eb:2e:2f:
94:12:f2:62
-----BEGIN CERTIFICATE-----
MIIEjzCCA3egAwIBAgIUbk9pjgWORHsAvvIlVrqmfqUUnIswDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoYjU3ZGNiYTlmYzdiMGVmMWYzY2M4MGExYWVlMjJjMDAx
OThlNzY3YTAeFw0yMzA0MDgwMzIwNDNaFw0yNDA0MDYwMzI1NDNaMDMxMTAvBgNV
BAMTKEY0NDFCQ0VBNDYzQ0M1NEE4NTM0NzA3RjBENTM3QjVGN0YwMkRCRTUwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDIiu4RbZC6mhi4dzLe7l0HLo0N
SH+qU1b/kXWFoGbtZmGWYxKunw9hAPt/pk7Xe5b8oVvofjL0f4v77r/ThuBwTB7/
jXFiB9wuAURsT9OjcfA4KRp/ZRcla8ijmCV1RpagF1xWqnzX8gZA55DveGcqhWBu
3nnYd3rydkje5hMV/U4mWtrkUQGBvo3cEcQlkbppjagF+C2UtrND4vaSncRv4Upj
Gp08Np3uhlc9i8cW1Ic9DcWnHSXqsCf4tYjBtq8H81qi/9Ln1oWj9yVDNmpbzOe3
FEhbf/J8aq+sHl1Axx3gcUFG4FnHm1ULBsPfylOY6R7bu3cp/pBky+RWM2WfAgMB
AAGjggGZMIIBlTAdBgNVHQ4EFgQU9EG86kY8xUqFNHB/DVN7X38C2+UwHwYDVR0j
BBgwFoAUtX3Lqfx7DvHzzIChruIsABmOdnowDgYDVR0PAQH/BAQDAgeAMFkGA1Ud
HwRSMFAwTqBMoEqGSHJzeW5jOi8vcnBraS5jby9yZXBvL0hZU1AvNi9CNTdEQ0JB
OUZDN0IwRUYxRjNDQzgwQTFBRUUyMkMwMDE5OEU3NjdBLmNybDBkBggrBgEFBQcB
AQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBvc2l0
b3J5L0RFRkFVTFQvdFgzTHFmeDdEdkh6eklDaHJ1SXNBQm1PZG5vLmNlcjBEBggr
BgEFBQcBCwQ4MDYwNAYIKwYBBQUHMAuGKHJzeW5jOi8vcnBraS5jby9yZXBvL0hZ
U1AvNi9BUzIxMTIzMy5yb2EwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAiBggr
BgEFBQcBBwEB/wQTMBEwDwQCAAIwCQMHBCoS3UeAUDANBgkqhkiG9w0BAQsFAAOC
AQEAYiiPsw9IeRpFvPd2j7S7089WVYtKTj26XFcBKpJvYi1gM00buaA6O1iIYT/9
QpM4SPngd7Jhb+jnHpKQ+kWaU6+GIZlRD4LjXsGRrVUyibg0ehMvudgOzmFXicfw
jXEDK8qWA6X4UkTsxDHV5YVZgh/lCqNPvCDygfNgrDRK7P4F2zvMul/uwzKzGD5+
ckLvSQ7mHdglteSnvuI0wut9+Vwx8bjXUdUG9Qn+qXPmf/dIH8ewd4XJ+7w5yR3q
Ka/7dzrwcCxYbgw5UOCmemgpYcEzToZz9M5uRjmarOnWT70gZARLU6g3Sd026ny4
HbDcNNnR/B3plb+i6y4vlBLyYg==
-----END CERTIFICATE-----
Generated at Wed Apr 16 14:13:58 2025 by rpki-client