Route Origin Authorization
$ rpki-client -vvf rpki.co/repo/HYSP/6/AS41732.roa
File: AS41732.roa (raw, json)
Hash identifier: tvwLy9qXhjbhy2oo+WsimnW22FePE6QmKMqCeGlDcno=
Subject key identifier: A3:F8:1E:C2:42:53:66:9F:FC:57:81:CB:9C:2C:6A:86:36:0E:FB:5A
Certificate issuer: /CN=b57dcba9fc7b0ef1f3cc80a1aee22c00198e767a
Certificate serial: 0E2ADEEE3BCA5A94692D6FE8812D9258AE1ECD41
Authority key identifier: B5:7D:CB:A9:FC:7B:0E:F1:F3:CC:80:A1:AE:E2:2C:00:19:8E:76:7A
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/tX3Lqfx7DvHzzIChruIsABmOdno.cer
Subject info access: rsync://rpki.co/repo/HYSP/6/AS41732.roa
Signing time: Sat 08 Apr 2023 03:25:43 +0000
ROA not before: Sat 08 Apr 2023 03:20:43 +0000
ROA not after: Sat 06 Apr 2024 03:25:43 +0000
asID: 41732
IP address blocks: 2a12:dd47:5000::/40 maxlen: 48
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
0e:2a:de:ee:3b:ca:5a:94:69:2d:6f:e8:81:2d:92:58:ae:1e:cd:41
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=b57dcba9fc7b0ef1f3cc80a1aee22c00198e767a
Validity
Not Before: Apr 8 03:20:43 2023 GMT
Not After : Apr 6 03:25:43 2024 GMT
Subject: CN=A3F81EC24253669FFC5781CB9C2C6A86360EFB5A
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cf:d6:9d:41:69:5e:37:d5:3e:e4:6a:d6:47:87:
16:87:93:4c:8f:1d:07:1f:1f:39:a5:19:f7:47:ac:
68:69:39:cf:a1:04:85:91:51:af:22:ec:2c:24:fc:
64:ff:f9:3e:44:be:96:dd:9c:35:ea:19:2f:dc:85:
6f:9c:a4:52:5a:a4:5b:5d:c5:e2:9c:3d:09:82:8f:
a7:39:15:06:a4:2b:01:f0:ad:10:48:3d:9e:d0:d3:
5f:f9:be:58:73:bb:a2:4b:ea:1a:77:37:e0:f9:61:
fa:26:35:55:5e:97:f3:b6:45:c5:51:11:3a:d1:fc:
ef:5d:ae:e3:f2:6a:d1:5d:43:64:00:19:0f:1b:2d:
33:9d:5a:19:cd:80:86:63:9e:54:99:00:78:7e:95:
9e:c0:81:4d:64:69:a4:fc:44:5d:ce:c1:ae:28:8b:
82:89:67:a4:10:7a:a2:19:05:7a:9c:91:37:95:61:
6a:5d:65:b3:28:37:2d:7e:e3:16:ac:0a:0b:09:ac:
55:53:84:d5:34:5b:12:53:44:ed:69:c6:fa:99:72:
9d:40:ae:bf:10:45:15:83:df:19:4f:3c:f2:b0:27:
fc:4d:fe:15:91:1c:d6:c3:a3:41:fa:4d:2c:81:bf:
36:b3:8a:d5:b0:58:a7:77:fe:69:71:3c:72:82:26:
1d:95
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A3:F8:1E:C2:42:53:66:9F:FC:57:81:CB:9C:2C:6A:86:36:0E:FB:5A
X509v3 Authority Key Identifier:
keyid:B5:7D:CB:A9:FC:7B:0E:F1:F3:CC:80:A1:AE:E2:2C:00:19:8E:76:7A
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.co/repo/HYSP/6/B57DCBA9FC7B0EF1F3CC80A1AEE22C00198E767A.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/tX3Lqfx7DvHzzIChruIsABmOdno.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.co/repo/HYSP/6/AS41732.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a12:dd47:5000::/40
Signature Algorithm: sha256WithRSAEncryption
67:f4:14:0a:3b:5f:c1:5b:0d:9b:50:e4:70:bb:b7:95:48:fa:
05:81:9a:6e:07:21:fa:12:dc:e2:f2:1f:f4:60:43:54:39:3f:
74:b2:90:de:24:53:ba:06:ff:32:d0:0e:6d:b4:36:ea:68:c9:
e1:99:16:f6:9e:d2:2a:d4:fc:f6:0b:d6:1e:e6:c4:2b:f3:c0:
ae:03:eb:fe:6c:f4:1a:c5:f6:f0:74:db:4a:cd:22:c4:ac:6c:
bd:78:1f:23:cd:91:19:7e:39:10:a1:a9:db:59:77:dd:62:97:
04:d1:87:bc:4b:99:dc:9d:2d:9a:7d:3f:2a:48:aa:a1:e4:55:
b6:2e:2e:f1:0c:f7:4e:5d:26:a4:20:cd:6f:d2:da:2d:3b:39:
18:aa:bf:9d:93:17:a5:e5:be:85:78:02:b0:bc:a2:79:5a:cf:
07:cc:da:7a:fe:03:57:e0:32:17:ed:e1:fa:fd:a6:42:5c:0f:
ec:0b:68:d2:81:69:ee:48:7e:05:6b:5b:b3:ee:ba:d8:7f:bd:
8a:64:c1:df:94:7a:6b:e9:fe:54:9a:22:bb:c8:70:d8:37:7c:
37:72:00:22:92:15:0a:64:f9:e7:ec:c5:aa:6e:a6:78:b9:f2:
84:7e:c5:6a:3b:61:b1:75:b2:64:c2:b5:d5:a4:97:52:9b:48:
cb:f4:09:73
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Apr 16 13:49:33 2025 by rpki-client