Route Origin Authorization
$ rpki-client -vvf rpki.co/repo/HYSP/6/AS211877.roa
File: AS211877.roa (raw, json)
Hash identifier: 9s0Bo19ilTVZ50I0dusmnIZbjlyFVc/IQh2vZUTtE48=
Subject key identifier: 8F:D1:EE:52:F6:D1:46:D3:CF:47:E0:09:1A:76:4B:3A:F6:0E:24:16
Certificate issuer: /CN=b57dcba9fc7b0ef1f3cc80a1aee22c00198e767a
Certificate serial: 6C07A0597F6061634D23F8BF191EA60921E07CBE
Authority key identifier: B5:7D:CB:A9:FC:7B:0E:F1:F3:CC:80:A1:AE:E2:2C:00:19:8E:76:7A
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/tX3Lqfx7DvHzzIChruIsABmOdno.cer
Subject info access: rsync://rpki.co/repo/HYSP/6/AS211877.roa
Signing time: Sat 08 Apr 2023 03:25:31 +0000
ROA not before: Sat 08 Apr 2023 03:20:31 +0000
ROA not after: Sat 06 Apr 2024 03:25:31 +0000
asID: 211877
IP address blocks: 2a12:dd47:fb00::/40 maxlen: 48
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
6c:07:a0:59:7f:60:61:63:4d:23:f8:bf:19:1e:a6:09:21:e0:7c:be
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=b57dcba9fc7b0ef1f3cc80a1aee22c00198e767a
Validity
Not Before: Apr 8 03:20:31 2023 GMT
Not After : Apr 6 03:25:31 2024 GMT
Subject: CN=8FD1EE52F6D146D3CF47E0091A764B3AF60E2416
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b3:b4:1c:48:9e:54:85:91:de:7f:16:ac:a6:8e:
b7:dc:a6:ce:41:5e:38:ae:7f:b0:7f:b8:d0:02:73:
46:02:a1:43:e0:df:1c:e6:c0:3b:1e:7b:80:1c:70:
1b:bc:41:53:24:21:09:b8:e9:39:ba:f5:85:83:7a:
15:7b:c3:e5:c7:dc:db:dd:2e:ad:12:5d:43:f3:95:
ec:10:31:0c:c5:0a:02:78:2f:bb:2c:fa:1c:e9:78:
a9:24:32:ea:92:3b:19:e2:de:17:f0:9d:0d:25:dd:
72:99:15:a9:89:ad:88:d3:ab:f1:ed:71:30:e0:3f:
19:96:7f:0c:af:44:43:86:b8:5f:7a:17:44:7c:e6:
59:e8:87:6a:2b:11:94:d6:c5:96:ba:2c:31:3a:c0:
63:a7:be:ae:bb:c7:a2:1c:b0:a6:05:27:d1:77:c9:
7e:b7:63:e7:f3:b0:b1:8f:cc:e2:1c:2d:07:4c:b6:
cd:9e:fa:4c:7c:ab:a7:a6:80:ec:8d:66:f8:3d:24:
f4:ef:19:1b:6a:bb:91:e9:a4:01:cc:30:ec:05:b2:
e5:dc:7f:57:82:51:c7:5c:f2:79:ab:54:bb:55:40:
0a:2a:04:91:09:f6:18:f9:13:e8:19:4d:d6:6e:d8:
df:33:97:84:18:91:32:1e:58:81:ac:03:98:8e:4f:
a3:cf
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
8F:D1:EE:52:F6:D1:46:D3:CF:47:E0:09:1A:76:4B:3A:F6:0E:24:16
X509v3 Authority Key Identifier:
keyid:B5:7D:CB:A9:FC:7B:0E:F1:F3:CC:80:A1:AE:E2:2C:00:19:8E:76:7A
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.co/repo/HYSP/6/B57DCBA9FC7B0EF1F3CC80A1AEE22C00198E767A.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/tX3Lqfx7DvHzzIChruIsABmOdno.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.co/repo/HYSP/6/AS211877.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a12:dd47:fb00::/40
Signature Algorithm: sha256WithRSAEncryption
38:7c:b7:5c:e6:a8:de:6f:d3:cf:6d:41:07:75:48:e6:d6:cc:
2d:4f:25:f5:f5:f1:1f:75:ab:ba:89:e0:e9:26:94:88:06:30:
21:f7:58:9f:01:49:8b:c7:d6:f5:6b:f8:4b:44:14:74:82:3d:
13:f1:98:ca:31:0c:9a:1f:10:2a:dd:f4:33:06:ee:0b:f7:3c:
a1:0e:c5:70:4d:e5:6a:4a:e7:35:9c:e4:1b:be:e2:a3:3d:5a:
65:ef:dc:ec:28:1e:4c:51:dd:9d:6c:29:5c:90:3d:50:e2:5a:
3d:f1:5f:73:bc:c3:6d:91:fd:5a:ba:46:b8:3a:07:bd:75:aa:
07:e0:d0:d4:04:92:88:8d:98:a5:48:d7:92:6d:f0:9f:16:5a:
b3:83:b8:06:5f:d8:91:a8:71:99:68:0c:aa:d6:c2:f4:5b:6b:
fa:c2:d1:8a:b5:21:f4:06:b3:72:f0:f5:7d:be:65:23:6d:90:
8f:6c:77:a2:47:94:bf:e0:71:ce:2a:71:5f:61:a6:05:47:b8:
51:24:93:74:33:94:e7:26:3d:dc:ea:85:43:1d:a4:5f:80:89:
12:d6:38:b7:10:f0:cb:3a:fd:04:ec:62:50:73:32:d3:ab:9f:
4f:77:cb:ef:28:58:58:7e:38:fd:d1:0f:80:5b:ce:76:1b:6a:
bb:e8:fb:89
-----BEGIN CERTIFICATE-----
MIIEjjCCA3agAwIBAgIUbAegWX9gYWNNI/i/GR6mCSHgfL4wDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoYjU3ZGNiYTlmYzdiMGVmMWYzY2M4MGExYWVlMjJjMDAx
OThlNzY3YTAeFw0yMzA0MDgwMzIwMzFaFw0yNDA0MDYwMzI1MzFaMDMxMTAvBgNV
BAMTKDhGRDFFRTUyRjZEMTQ2RDNDRjQ3RTAwOTFBNzY0QjNBRjYwRTI0MTYwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCztBxInlSFkd5/Fqymjrfcps5B
Xjiuf7B/uNACc0YCoUPg3xzmwDsee4AccBu8QVMkIQm46Tm69YWDehV7w+XH3Nvd
Lq0SXUPzlewQMQzFCgJ4L7ss+hzpeKkkMuqSOxni3hfwnQ0l3XKZFamJrYjTq/Ht
cTDgPxmWfwyvREOGuF96F0R85lnoh2orEZTWxZa6LDE6wGOnvq67x6IcsKYFJ9F3
yX63Y+fzsLGPzOIcLQdMts2e+kx8q6emgOyNZvg9JPTvGRtqu5HppAHMMOwFsuXc
f1eCUcdc8nmrVLtVQAoqBJEJ9hj5E+gZTdZu2N8zl4QYkTIeWIGsA5iOT6PPAgMB
AAGjggGYMIIBlDAdBgNVHQ4EFgQUj9HuUvbRRtPPR+AJGnZLOvYOJBYwHwYDVR0j
BBgwFoAUtX3Lqfx7DvHzzIChruIsABmOdnowDgYDVR0PAQH/BAQDAgeAMFkGA1Ud
HwRSMFAwTqBMoEqGSHJzeW5jOi8vcnBraS5jby9yZXBvL0hZU1AvNi9CNTdEQ0JB
OUZDN0IwRUYxRjNDQzgwQTFBRUUyMkMwMDE5OEU3NjdBLmNybDBkBggrBgEFBQcB
AQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBvc2l0
b3J5L0RFRkFVTFQvdFgzTHFmeDdEdkh6eklDaHJ1SXNBQm1PZG5vLmNlcjBEBggr
BgEFBQcBCwQ4MDYwNAYIKwYBBQUHMAuGKHJzeW5jOi8vcnBraS5jby9yZXBvL0hZ
U1AvNi9BUzIxMTg3Ny5yb2EwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggr
BgEFBQcBBwEB/wQSMBAwDgQCAAIwCAMGACoS3Uf7MA0GCSqGSIb3DQEBCwUAA4IB
AQA4fLdc5qjeb9PPbUEHdUjm1swtTyX19fEfdau6ieDpJpSIBjAh91ifAUmLx9b1
a/hLRBR0gj0T8ZjKMQyaHxAq3fQzBu4L9zyhDsVwTeVqSuc1nOQbvuKjPVpl79zs
KB5MUd2dbClckD1Q4lo98V9zvMNtkf1auka4Oge9daoH4NDUBJKIjZilSNeSbfCf
Flqzg7gGX9iRqHGZaAyq1sL0W2v6wtGKtSH0BrNy8PV9vmUjbZCPbHeiR5S/4HHO
KnFfYaYFR7hRJJN0M5TnJj3c6oVDHaRfgIkS1ji3EPDLOv0E7GJQczLTq59Pd8vv
KFhYfjj90Q+AW852G2q76PuJ
-----END CERTIFICATE-----
Generated at Wed Apr 16 13:56:07 2025 by rpki-client