Route Origin Authorization
$ rpki-client -vvf rpki.co/repo/HYSP/6/AS47924.roa
File: AS47924.roa (raw, json)
Hash identifier: VXAz2JZj9CooXHmaPP4GKkQBgA4tLy6dxUkDARYSSKc=
Subject key identifier: E3:6B:CB:66:91:B4:B1:EC:D8:2C:00:71:C7:15:52:7F:07:B9:FA:28
Certificate issuer: /CN=b57dcba9fc7b0ef1f3cc80a1aee22c00198e767a
Certificate serial: 433E29461B790FEA3BC94DC9DEB7363B2623E6F8
Authority key identifier: B5:7D:CB:A9:FC:7B:0E:F1:F3:CC:80:A1:AE:E2:2C:00:19:8E:76:7A
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/tX3Lqfx7DvHzzIChruIsABmOdno.cer
Subject info access: rsync://rpki.co/repo/HYSP/6/AS47924.roa
Signing time: Sat 08 Apr 2023 03:25:38 +0000
ROA not before: Sat 08 Apr 2023 03:20:38 +0000
ROA not after: Sat 06 Apr 2024 03:25:38 +0000
asID: 47924
IP address blocks: 2a12:dd47:8110::/44 maxlen: 48
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
43:3e:29:46:1b:79:0f:ea:3b:c9:4d:c9:de:b7:36:3b:26:23:e6:f8
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=b57dcba9fc7b0ef1f3cc80a1aee22c00198e767a
Validity
Not Before: Apr 8 03:20:38 2023 GMT
Not After : Apr 6 03:25:38 2024 GMT
Subject: CN=E36BCB6691B4B1ECD82C0071C715527F07B9FA28
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d1:a1:51:5b:11:20:8f:f5:0a:f4:7d:ad:9e:4d:
d6:9e:19:74:2f:1f:75:ab:c2:d2:c3:24:62:8e:c0:
bf:8e:36:2e:3d:d4:e4:f6:c5:b2:ae:5f:a5:12:20:
5c:69:9d:26:68:3b:f3:c2:46:7f:80:5e:89:c6:94:
6b:cb:26:b0:bc:12:2a:fa:83:44:29:48:97:ee:66:
a1:f9:5d:5b:a6:dc:96:2c:a7:4a:f0:a8:65:1e:50:
ab:56:28:8c:c5:ce:55:6c:e3:2a:37:00:a2:d5:91:
e7:81:e2:77:22:10:d8:02:d1:03:13:14:81:60:4e:
2a:a2:c0:ff:6f:58:1c:69:d2:69:26:31:a0:a4:6b:
c7:67:2e:7d:eb:d8:01:43:03:03:d1:43:0b:e0:bd:
17:af:a9:67:ae:66:3f:a0:5b:6c:2f:a1:36:3f:9b:
a8:bd:96:f0:e7:f6:af:a1:0c:fd:13:bc:d0:4b:10:
ea:10:6a:83:86:8c:4b:bf:5b:9e:a2:36:0d:bf:88:
fd:f3:f7:74:15:2a:58:d0:10:a7:cc:55:0f:44:b6:
6c:2f:6e:fa:0a:f7:a1:81:1c:55:f4:84:30:6a:07:
b2:27:be:9d:08:35:09:66:dc:ed:dc:5c:6f:79:9f:
e8:06:e6:fc:01:e2:a5:d1:73:8a:1d:1f:83:f8:ce:
cf:db
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E3:6B:CB:66:91:B4:B1:EC:D8:2C:00:71:C7:15:52:7F:07:B9:FA:28
X509v3 Authority Key Identifier:
keyid:B5:7D:CB:A9:FC:7B:0E:F1:F3:CC:80:A1:AE:E2:2C:00:19:8E:76:7A
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.co/repo/HYSP/6/B57DCBA9FC7B0EF1F3CC80A1AEE22C00198E767A.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/tX3Lqfx7DvHzzIChruIsABmOdno.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.co/repo/HYSP/6/AS47924.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a12:dd47:8110::/44
Signature Algorithm: sha256WithRSAEncryption
bb:d6:c9:2e:42:78:bc:a9:71:b6:24:1e:8f:0f:89:89:65:5e:
6a:ce:ce:1d:b9:8c:07:e1:8a:75:28:cc:2e:b6:53:74:6a:4f:
1d:58:76:89:b9:48:90:92:68:96:64:4d:86:c3:45:df:56:67:
a8:8b:28:08:02:75:7d:9a:3e:15:92:a1:45:96:e1:96:17:70:
d0:1c:50:a3:0b:e4:e7:6a:01:08:ca:95:c2:00:55:57:d5:84:
2a:80:02:e6:b1:31:5f:a2:dc:89:b9:90:d5:2b:58:2d:ca:9a:
07:8d:38:f1:99:1f:65:70:7d:33:88:c8:90:34:00:20:0c:0b:
3f:ac:3a:11:0a:7a:da:f5:cd:a6:d4:73:52:ca:0c:64:47:83:
6b:f3:35:7c:5d:f8:74:81:cc:63:07:d7:d6:12:20:14:23:01:
53:30:f2:ef:48:d3:26:90:61:d1:c1:3e:f0:e5:48:86:2a:d0:
4d:1a:b6:3e:c1:fb:14:c3:70:0d:b7:32:1d:68:33:fc:ae:58:
7d:e0:9f:bd:9d:88:68:e8:4a:73:f5:64:12:f5:1f:4f:35:72:
9a:af:f2:54:9e:d6:33:25:ca:83:a3:e1:a1:3b:bf:c3:85:01:
b4:09:1a:f4:ec:ef:b8:ab:56:eb:52:ec:2a:b4:30:23:2d:be:
ee:32:dc:ed
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Apr 16 13:58:26 2025 by rpki-client