Route Origin Authorization
$ rpki-client -vvf rpki.co/repo/HYSP/6/AS212294.roa
File: AS212294.roa (raw, json)
Hash identifier: wC7/xbtJXAhSjANAMrnwLjjU61EoIWgFEXRNUAB7Y1s=
Subject key identifier: BA:E1:A2:86:45:29:1D:C6:EA:6F:F6:83:00:7D:23:45:A8:EB:61:D4
Certificate issuer: /CN=b57dcba9fc7b0ef1f3cc80a1aee22c00198e767a
Certificate serial: 625625349456BA68C01645D82C96E5A02DA0B113
Authority key identifier: B5:7D:CB:A9:FC:7B:0E:F1:F3:CC:80:A1:AE:E2:2C:00:19:8E:76:7A
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/tX3Lqfx7DvHzzIChruIsABmOdno.cer
Subject info access: rsync://rpki.co/repo/HYSP/6/AS212294.roa
Signing time: Sat 08 Apr 2023 03:25:36 +0000
ROA not before: Sat 08 Apr 2023 03:20:36 +0000
ROA not after: Sat 06 Apr 2024 03:25:36 +0000
asID: 212294
IP address blocks: 2a12:dd47:8004::/48 maxlen: 48
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
62:56:25:34:94:56:ba:68:c0:16:45:d8:2c:96:e5:a0:2d:a0:b1:13
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=b57dcba9fc7b0ef1f3cc80a1aee22c00198e767a
Validity
Not Before: Apr 8 03:20:36 2023 GMT
Not After : Apr 6 03:25:36 2024 GMT
Subject: CN=BAE1A28645291DC6EA6FF683007D2345A8EB61D4
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:db:37:bd:29:38:a0:ba:0b:bc:ce:3c:15:7a:a0:
9e:0a:b0:cf:38:94:eb:32:99:02:b9:88:bf:6e:6e:
4c:bc:8f:d9:2b:5f:b0:c3:79:b7:84:a5:76:f6:09:
55:f5:6e:5e:a1:9b:2b:8a:79:28:5b:dc:0b:e2:1a:
fb:61:6f:65:bf:2c:b4:d6:0a:f9:59:91:10:ba:ff:
a6:f9:4e:73:27:a4:bd:c1:48:f0:2d:42:bf:dd:71:
f9:d2:93:86:8a:89:ae:31:88:9a:0c:60:a5:49:b4:
e2:13:5d:f2:4f:f5:c1:12:5f:d8:30:ee:ae:99:bb:
ac:81:3f:54:85:29:e2:7a:8c:17:fb:cd:80:b5:1e:
cf:5a:6f:93:ec:4b:d7:2a:91:8a:19:e8:59:10:38:
2b:22:d9:e5:43:37:1e:56:a9:a7:ce:90:a7:04:a2:
27:6d:a3:f6:e0:87:54:e8:fd:4e:ac:cc:83:69:04:
9d:f6:fb:89:27:8c:be:21:69:89:0b:b5:26:dc:10:
94:d7:65:0a:d8:b4:8c:a2:58:2b:dc:b4:ff:64:00:
8a:2e:b5:41:18:24:5d:95:ee:e9:c9:7b:d7:d0:eb:
dd:4c:c7:cc:aa:07:94:65:61:60:10:5b:23:99:95:
cf:b5:e1:0f:e7:ec:09:54:77:5e:30:e6:24:f4:e2:
48:41
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
BA:E1:A2:86:45:29:1D:C6:EA:6F:F6:83:00:7D:23:45:A8:EB:61:D4
X509v3 Authority Key Identifier:
keyid:B5:7D:CB:A9:FC:7B:0E:F1:F3:CC:80:A1:AE:E2:2C:00:19:8E:76:7A
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.co/repo/HYSP/6/B57DCBA9FC7B0EF1F3CC80A1AEE22C00198E767A.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/tX3Lqfx7DvHzzIChruIsABmOdno.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.co/repo/HYSP/6/AS212294.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a12:dd47:8004::/48
Signature Algorithm: sha256WithRSAEncryption
78:d2:a4:9a:82:37:c1:c8:fe:f5:c6:21:e2:1d:50:df:22:e7:
58:8f:1d:ee:e4:4b:f9:2e:4d:4a:46:f8:bd:b2:00:1d:76:c5:
7b:62:d6:5c:2a:f6:14:b9:03:aa:ea:ba:1b:de:0c:b9:0d:d8:
bd:31:c7:2b:98:f6:b5:af:71:26:cc:04:8f:1c:b8:4b:6e:1f:
74:57:3d:db:99:1a:5f:19:60:e7:18:18:cb:92:a9:5a:df:a6:
f2:cb:e2:87:ae:f2:84:9b:43:fe:d0:6a:52:8e:41:cd:4a:be:
07:0d:b6:7b:d7:73:d8:0b:e8:a5:40:80:e6:fa:96:65:c9:2f:
69:c5:a7:38:96:c7:e5:d7:5f:cf:07:91:0f:44:d3:ee:7a:ad:
75:27:87:eb:34:61:a7:c7:a4:98:5b:81:d8:55:09:f2:43:11:
b8:7c:12:13:6a:91:bb:da:fc:d4:53:eb:ac:65:33:0d:a7:d9:
0b:6b:90:3a:fd:77:01:79:24:46:c9:63:81:14:3c:6c:cc:a7:
5a:fe:cf:5c:79:ca:9a:f8:c4:27:2b:dd:e1:92:b5:9d:3c:05:
07:84:11:54:32:42:55:29:5f:6f:c0:df:2f:9a:69:98:51:c0:
df:f9:4a:78:2d:97:fd:62:66:98:0f:a8:c3:a1:c7:2d:4d:d4:
57:75:fc:41
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Apr 16 14:00:31 2025 by rpki-client