Route Origin Authorization
$ rpki-client -vvf rpki.co/repo/HYSP/6/AS211431.roa
File: AS211431.roa (raw, json)
Hash identifier: kOiM8xr8oi1tVSKX0U/B7ZC80DVju+L0esnh0Cb5zds=
Subject key identifier: 69:4E:7E:7A:4C:5D:58:BC:1A:FF:AF:E4:80:CE:31:EF:5E:AF:13:FD
Certificate issuer: /CN=b57dcba9fc7b0ef1f3cc80a1aee22c00198e767a
Certificate serial: 05329E5906AEF82E76B1AE1448D55A2C996F2143
Authority key identifier: B5:7D:CB:A9:FC:7B:0E:F1:F3:CC:80:A1:AE:E2:2C:00:19:8E:76:7A
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/tX3Lqfx7DvHzzIChruIsABmOdno.cer
Subject info access: rsync://rpki.co/repo/HYSP/6/AS211431.roa
Signing time: Sat 08 Apr 2023 03:25:34 +0000
ROA not before: Sat 08 Apr 2023 03:20:34 +0000
ROA not after: Sat 06 Apr 2024 03:25:34 +0000
asID: 211431
IP address blocks: 2a12:dd47:8000::/48 maxlen: 48
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
05:32:9e:59:06:ae:f8:2e:76:b1:ae:14:48:d5:5a:2c:99:6f:21:43
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=b57dcba9fc7b0ef1f3cc80a1aee22c00198e767a
Validity
Not Before: Apr 8 03:20:34 2023 GMT
Not After : Apr 6 03:25:34 2024 GMT
Subject: CN=694E7E7A4C5D58BC1AFFAFE480CE31EF5EAF13FD
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b0:11:af:dc:b8:63:27:dc:91:72:f1:51:01:59:
c7:9d:02:b1:51:0d:45:2d:7c:ce:b2:4a:57:89:2e:
52:b4:10:ff:6d:14:76:aa:27:5c:17:89:dc:6b:00:
f1:3d:cc:62:26:e1:06:9e:b2:c2:c4:45:a4:d4:9e:
53:26:b2:88:72:7a:81:cd:ab:3c:a5:7c:5d:d4:9c:
e4:9f:cd:7b:c9:e6:af:20:96:80:3d:ad:24:83:8c:
0d:cb:f6:79:69:d4:90:91:a8:f0:c3:97:77:b9:87:
d3:1d:79:c2:0c:a8:3d:9c:d3:55:01:c3:f9:c8:f7:
39:ad:07:79:4c:96:e8:7a:f3:52:7d:6d:5d:cf:3c:
6f:d8:fd:59:45:a3:37:f9:f8:96:e7:7d:fe:eb:22:
a3:6f:52:b8:9d:33:70:0c:58:f4:b1:e4:9a:29:32:
46:6e:bf:77:b5:bd:38:92:59:9f:b8:9c:66:bf:a4:
12:25:7f:ba:4e:02:dd:b9:f3:63:32:2f:ca:26:c9:
da:97:6c:05:3c:92:10:cc:94:71:0a:e8:a8:3e:1d:
5a:e0:2b:70:8a:b2:7e:4f:b1:07:64:8e:f4:e9:cb:
1c:88:91:10:a2:75:fc:40:ab:57:8a:4a:a6:c7:0e:
b8:76:06:fa:c6:bb:1c:cf:1a:74:14:06:81:d1:01:
7f:f5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
69:4E:7E:7A:4C:5D:58:BC:1A:FF:AF:E4:80:CE:31:EF:5E:AF:13:FD
X509v3 Authority Key Identifier:
keyid:B5:7D:CB:A9:FC:7B:0E:F1:F3:CC:80:A1:AE:E2:2C:00:19:8E:76:7A
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.co/repo/HYSP/6/B57DCBA9FC7B0EF1F3CC80A1AEE22C00198E767A.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/tX3Lqfx7DvHzzIChruIsABmOdno.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.co/repo/HYSP/6/AS211431.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a12:dd47:8000::/48
Signature Algorithm: sha256WithRSAEncryption
61:95:67:00:7f:74:cb:ff:0b:a1:0c:28:33:48:cf:ff:98:d7:
12:a3:a4:38:74:98:f9:3f:01:fb:6c:e5:b8:9f:3d:05:23:78:
f8:bb:19:37:5a:ed:ae:b6:b3:fd:79:de:ea:e5:fe:33:69:16:
16:dd:51:fe:e7:eb:33:61:8e:4e:31:e6:90:63:ab:a8:86:98:
1a:b8:17:d0:fc:28:bb:8d:0c:bc:31:85:70:27:6a:9c:67:f0:
1b:3b:5d:6c:78:0d:47:ab:eb:4f:c8:06:f3:ba:38:74:69:f6:
60:87:46:a0:a1:b1:f1:e2:33:6a:89:e6:f4:ae:6a:0c:62:ee:
1c:15:b2:c1:e5:dd:c7:55:c4:21:4d:0a:9e:de:bf:53:b0:5a:
0f:82:f3:9a:1a:40:a5:82:54:64:5b:81:2a:e0:2e:a8:e6:fd:
81:eb:e9:64:75:a1:a1:01:24:45:1c:29:cd:ca:77:ab:60:1d:
60:9d:fe:90:4d:9f:be:a9:37:49:10:29:d8:3a:b3:aa:ec:6c:
fd:7f:ca:1e:eb:5b:06:f8:8e:b7:0b:cf:94:f2:35:e6:bc:b6:
3a:61:6c:fe:6b:90:90:22:b7:44:55:67:63:0f:b0:7d:f7:4b:
d9:20:34:55:c7:c0:89:98:4a:e8:62:dd:72:b9:80:9c:bc:f1:
3b:71:04:fd
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Apr 16 13:56:08 2025 by rpki-client