Route Origin Authorization
$ rpki-client -vvf rpki.co/repo/HYSP/6/AS213045.roa
File: AS213045.roa (raw, json)
Hash identifier: 2wj2CN1B+Hk/zMw8mO1NLrcRln9Eq3XlG6XWfa5hvSA=
Subject key identifier: 2B:47:61:1B:26:DF:EA:C2:D3:0B:C6:1B:7B:B0:5B:A7:BA:1D:E7:73
Certificate issuer: /CN=b57dcba9fc7b0ef1f3cc80a1aee22c00198e767a
Certificate serial: 0BC737E413EBEE681C0179F30FA3CEB33637C2B9
Authority key identifier: B5:7D:CB:A9:FC:7B:0E:F1:F3:CC:80:A1:AE:E2:2C:00:19:8E:76:7A
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/tX3Lqfx7DvHzzIChruIsABmOdno.cer
Subject info access: rsync://rpki.co/repo/HYSP/6/AS213045.roa
Signing time: Sat 08 Apr 2023 03:25:48 +0000
ROA not before: Sat 08 Apr 2023 03:20:48 +0000
ROA not after: Sat 06 Apr 2024 03:25:48 +0000
asID: 213045
IP address blocks: 2a12:dd47:8075::/48 maxlen: 48
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
0b:c7:37:e4:13:eb:ee:68:1c:01:79:f3:0f:a3:ce:b3:36:37:c2:b9
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=b57dcba9fc7b0ef1f3cc80a1aee22c00198e767a
Validity
Not Before: Apr 8 03:20:48 2023 GMT
Not After : Apr 6 03:25:48 2024 GMT
Subject: CN=2B47611B26DFEAC2D30BC61B7BB05BA7BA1DE773
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bd:f5:83:d9:d8:78:d2:d4:b2:f4:2f:ed:88:16:
79:09:08:87:08:1a:1b:78:f5:a7:4d:b7:81:0b:8e:
6b:e7:6d:cd:d2:96:8b:f0:fe:1e:50:50:01:5f:ab:
84:60:7d:fa:1c:c9:ea:89:3e:cb:e1:c0:06:64:7a:
96:b0:66:32:ae:e1:7d:67:d7:09:02:a4:4c:e3:53:
5c:26:42:26:f2:55:49:38:79:05:4d:60:75:90:cb:
f6:52:ec:c1:9d:d4:02:45:9a:64:7f:47:c7:4e:0b:
be:27:53:23:bb:ba:a1:53:78:24:3a:61:06:5e:2a:
62:3b:82:f6:46:9c:2d:8f:41:90:67:f2:70:76:3a:
06:86:14:68:31:44:1a:25:2a:83:ca:c1:84:1e:98:
6e:12:2f:7f:18:33:11:0f:ee:22:0c:73:e5:e8:e2:
e3:46:4c:b8:7c:76:64:80:3a:0a:0e:27:12:fd:97:
76:44:0b:e7:79:f9:15:90:fb:9e:80:ca:d9:5c:8b:
87:f6:66:70:c8:0f:bb:68:69:06:4f:3f:af:42:a3:
5e:39:d0:ea:33:51:75:1a:99:ed:10:27:10:1f:68:
2d:1d:c9:0a:d2:79:72:a9:c4:07:1a:6f:ff:22:bb:
9f:cf:ad:5c:f1:30:6d:5a:c4:c1:09:37:5d:8a:c0:
d9:6b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
2B:47:61:1B:26:DF:EA:C2:D3:0B:C6:1B:7B:B0:5B:A7:BA:1D:E7:73
X509v3 Authority Key Identifier:
keyid:B5:7D:CB:A9:FC:7B:0E:F1:F3:CC:80:A1:AE:E2:2C:00:19:8E:76:7A
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.co/repo/HYSP/6/B57DCBA9FC7B0EF1F3CC80A1AEE22C00198E767A.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/tX3Lqfx7DvHzzIChruIsABmOdno.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.co/repo/HYSP/6/AS213045.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a12:dd47:8075::/48
Signature Algorithm: sha256WithRSAEncryption
ac:cf:02:c2:e8:97:0a:09:dd:fc:0c:82:d9:7a:81:75:7d:c3:
37:cb:b6:fb:0d:66:97:4d:74:80:3d:41:2b:b4:db:bc:0c:63:
07:41:ea:d3:ee:d2:83:cf:15:60:e7:bb:0a:d7:ad:65:bf:06:
24:40:cf:26:8a:b3:42:62:79:94:f4:69:cf:d8:91:d0:13:50:
8e:74:02:bf:58:b1:90:8d:86:66:71:02:6e:a8:29:80:34:0d:
ab:bd:15:17:fa:c9:a8:79:b2:ee:7d:5d:0d:00:59:20:4e:d7:
54:9b:3f:27:c7:32:82:c2:90:c9:1c:1a:92:4f:ac:72:b5:ab:
46:d4:d1:d7:b0:9a:9a:fd:2a:b7:a3:1b:f9:d7:5e:2c:05:03:
f7:6b:99:a2:45:e4:bb:07:92:7d:ff:3d:8c:38:63:7b:02:07:
65:52:6f:1e:26:e4:17:97:21:dc:58:d2:98:ae:22:f7:75:01:
fb:07:16:c6:7e:39:fb:21:e0:dc:bb:ac:dd:e6:51:42:6d:9e:
48:87:64:72:5c:9a:e4:55:2a:ad:d2:08:9b:0b:80:47:cd:51:
a9:02:71:d1:4a:9a:b4:28:11:20:63:79:08:e6:24:cc:f3:4e:
29:a1:82:b4:20:b1:02:fd:39:1a:99:72:0c:0f:4a:c0:19:c5:
41:f8:cc:cf
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Apr 16 13:59:07 2025 by rpki-client