Route Origin Authorization
$ rpki-client -vvf rpki.co/repo/HYSP/6/AS213036.roa
File: AS213036.roa (raw, json)
Hash identifier: 1085OtbYm5C7gYq343BoTU855CFzhIygo5NuGMSNoz8=
Subject key identifier: F3:FB:10:29:9F:D2:E1:6F:D2:53:BD:85:8E:E4:B2:50:68:22:85:13
Certificate issuer: /CN=b57dcba9fc7b0ef1f3cc80a1aee22c00198e767a
Certificate serial: 30BA11BA27E6FC4D9E5CDD580406C66961A44288
Authority key identifier: B5:7D:CB:A9:FC:7B:0E:F1:F3:CC:80:A1:AE:E2:2C:00:19:8E:76:7A
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/tX3Lqfx7DvHzzIChruIsABmOdno.cer
Subject info access: rsync://rpki.co/repo/HYSP/6/AS213036.roa
Signing time: Sat 08 Apr 2023 03:25:31 +0000
ROA not before: Sat 08 Apr 2023 03:20:31 +0000
ROA not after: Sat 06 Apr 2024 03:25:31 +0000
asID: 213036
IP address blocks: 2a12:dd47:8330::/48 maxlen: 48
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
30:ba:11:ba:27:e6:fc:4d:9e:5c:dd:58:04:06:c6:69:61:a4:42:88
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=b57dcba9fc7b0ef1f3cc80a1aee22c00198e767a
Validity
Not Before: Apr 8 03:20:31 2023 GMT
Not After : Apr 6 03:25:31 2024 GMT
Subject: CN=F3FB10299FD2E16FD253BD858EE4B25068228513
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e4:e1:1d:7c:cf:09:e8:8f:dc:3a:46:b2:eb:e0:
dc:c4:b2:34:64:80:4e:79:32:2b:f7:78:90:e3:66:
4a:26:b7:ed:ab:b2:a8:f9:d5:9b:3b:f0:0b:e1:e5:
c1:88:41:e3:b0:a8:d4:9a:2e:93:cd:07:fb:ac:ee:
1c:bf:d5:a3:e1:ea:9f:0f:13:b0:ee:14:7b:1c:25:
46:0b:aa:54:66:a9:4f:09:73:80:0b:c3:0c:38:14:
18:c3:3c:ce:e7:8e:ec:56:91:2a:19:c2:86:c6:a8:
e4:b3:27:47:1a:04:fb:9d:6e:fc:71:2f:68:7d:ba:
b0:1f:fc:e2:0c:bf:f6:0c:c5:e9:8a:9a:76:a9:6a:
92:f6:cf:2b:68:b4:00:ed:3e:a5:df:f0:27:be:3f:
74:b2:e3:93:c4:5f:a9:a9:08:9f:09:15:0f:de:a5:
ec:75:20:f2:fe:60:f2:5a:d6:f7:4e:78:e0:ff:17:
b2:a1:4e:22:bc:c4:07:ab:c6:21:88:31:96:55:a9:
20:18:c3:5c:53:b0:90:05:89:43:05:2d:76:62:2a:
d4:0d:2f:c9:94:cc:7a:72:17:6b:32:e3:06:d6:bf:
e8:2a:28:b3:e2:b5:fc:30:94:8b:d7:35:c0:e8:eb:
82:48:81:22:d9:a8:44:97:d0:1d:ef:d0:38:82:65:
2b:c7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F3:FB:10:29:9F:D2:E1:6F:D2:53:BD:85:8E:E4:B2:50:68:22:85:13
X509v3 Authority Key Identifier:
keyid:B5:7D:CB:A9:FC:7B:0E:F1:F3:CC:80:A1:AE:E2:2C:00:19:8E:76:7A
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.co/repo/HYSP/6/B57DCBA9FC7B0EF1F3CC80A1AEE22C00198E767A.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/tX3Lqfx7DvHzzIChruIsABmOdno.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.co/repo/HYSP/6/AS213036.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a12:dd47:8330::/48
Signature Algorithm: sha256WithRSAEncryption
99:4a:f0:c8:ed:39:37:6d:46:ab:e5:99:45:d2:45:c5:bc:ad:
4f:71:24:fb:67:01:cf:3f:56:08:6c:5c:d3:fc:0a:58:fa:bf:
21:29:80:9c:62:12:9a:07:d1:4e:06:8b:6c:00:45:bc:bb:f2:
33:87:90:8b:95:e0:8d:13:d0:25:03:4d:05:45:9a:0b:db:99:
e7:37:1a:c8:b9:30:b1:c8:1e:b1:1a:f5:8a:5f:74:41:7b:85:
a4:01:86:6c:e5:e9:73:94:22:e4:bb:66:72:34:9f:9e:01:95:
96:95:42:3d:3e:f6:b6:75:2d:05:0b:80:b4:14:18:71:ed:59:
c4:96:f8:e7:2c:f2:f2:be:2a:aa:fd:a3:d6:95:38:dd:31:27:
1f:ed:a5:54:d0:ee:84:2a:fe:8e:5b:90:e4:cc:f3:85:d6:5b:
d4:78:78:83:a2:4c:47:db:d1:96:72:99:5f:e4:10:2d:4a:c4:
67:49:e8:f6:2f:af:02:ea:4f:b3:10:18:bd:a8:04:7c:09:67:
97:cd:0d:c5:b1:88:14:da:d9:77:f0:70:bc:94:d9:aa:15:e3:
b9:a9:33:77:10:58:ed:bb:89:26:20:55:e2:3d:9c:b8:a4:20:
6d:0c:71:9a:d2:12:75:a0:28:61:e7:92:c6:be:66:70:7e:88:
2d:a8:2c:c3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Apr 16 13:54:26 2025 by rpki-client