Route Origin Authorization
$ rpki-client -vvf rpki.co/repo/HYSP/6/AS56328.roa
File: AS56328.roa (raw, json)
Hash identifier: xeVcpqncTl5fOSw6Q09l6QSDr6vjZ3iYhii+7Vzzy4w=
Subject key identifier: F4:2F:62:F0:93:93:51:4A:8B:A7:C6:72:18:E3:62:0B:1F:5E:36:F2
Certificate issuer: /CN=b57dcba9fc7b0ef1f3cc80a1aee22c00198e767a
Certificate serial: 41183703E5FF922B08FEFFC3298E37A33BF78857
Authority key identifier: B5:7D:CB:A9:FC:7B:0E:F1:F3:CC:80:A1:AE:E2:2C:00:19:8E:76:7A
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/tX3Lqfx7DvHzzIChruIsABmOdno.cer
Subject info access: rsync://rpki.co/repo/HYSP/6/AS56328.roa
Signing time: Sat 08 Apr 2023 03:25:42 +0000
ROA not before: Sat 08 Apr 2023 03:20:42 +0000
ROA not after: Sat 06 Apr 2024 03:25:42 +0000
asID: 56328
IP address blocks: 2a12:dd47:8c00::/39 maxlen: 48
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
41:18:37:03:e5:ff:92:2b:08:fe:ff:c3:29:8e:37:a3:3b:f7:88:57
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=b57dcba9fc7b0ef1f3cc80a1aee22c00198e767a
Validity
Not Before: Apr 8 03:20:42 2023 GMT
Not After : Apr 6 03:25:42 2024 GMT
Subject: CN=F42F62F09393514A8BA7C67218E3620B1F5E36F2
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b2:f4:ee:2c:e9:bd:8e:74:d8:c3:9f:2e:9a:98:
00:3c:33:f3:de:4c:47:15:5c:6b:90:66:1a:4e:1c:
02:e2:6c:f0:c6:d6:da:ae:8f:65:9d:73:93:3e:bc:
06:c6:46:68:94:97:13:28:61:63:6e:22:bd:52:19:
f9:c4:d8:e2:09:ef:5d:f6:cf:ed:e8:17:4b:24:f9:
c7:3c:a3:b2:d7:32:c6:4b:41:b1:35:64:48:be:3e:
a6:df:f3:f8:34:bf:ef:2b:5d:0c:ce:b3:9b:ef:18:
0f:5c:5a:89:c4:e4:7a:c4:a9:ce:2a:9e:ce:b6:13:
f2:05:66:9d:32:eb:5f:c4:4f:88:12:68:ff:12:7b:
54:73:4b:d6:0a:e7:60:39:b8:00:ec:62:a7:30:55:
c9:a6:6d:a9:13:1c:65:d5:22:20:a7:70:38:c4:b7:
e6:68:90:b9:43:da:68:71:d5:8c:7e:0a:c7:11:e2:
7f:61:67:d3:67:06:14:99:4a:5a:1b:ce:eb:7a:20:
1e:0f:0c:95:4f:bf:37:a3:07:6b:44:bb:aa:35:08:
56:b3:59:10:6c:6c:0b:71:1d:93:e3:f9:42:60:3e:
fd:a5:ab:9b:0d:bb:b6:17:75:97:b7:7d:12:cf:22:
da:44:4a:60:8d:4a:e9:2a:77:62:23:f4:0a:90:c5:
e8:25
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F4:2F:62:F0:93:93:51:4A:8B:A7:C6:72:18:E3:62:0B:1F:5E:36:F2
X509v3 Authority Key Identifier:
keyid:B5:7D:CB:A9:FC:7B:0E:F1:F3:CC:80:A1:AE:E2:2C:00:19:8E:76:7A
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.co/repo/HYSP/6/B57DCBA9FC7B0EF1F3CC80A1AEE22C00198E767A.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/tX3Lqfx7DvHzzIChruIsABmOdno.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.co/repo/HYSP/6/AS56328.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a12:dd47:8c00::/39
Signature Algorithm: sha256WithRSAEncryption
81:e6:28:eb:8f:92:61:b1:71:38:22:97:16:e9:16:29:1a:31:
c4:28:f6:d4:be:9d:6f:70:2a:ff:c0:bb:f8:20:5a:7a:26:e5:
43:80:52:48:46:e0:23:cd:c0:0f:24:e9:43:77:af:3c:15:ba:
03:03:8e:38:98:4d:b9:ca:23:4f:a7:4b:53:f8:c9:9c:93:4a:
0e:26:1b:86:d2:38:54:69:96:6f:07:4b:4a:0f:13:a1:50:2b:
c8:1a:2c:fb:94:36:24:38:57:67:f4:32:97:be:e7:fc:20:45:
0b:93:eb:c8:2e:62:cd:d4:d9:27:2b:0b:c3:05:c0:41:de:7d:
5b:5c:08:1d:16:9d:b3:68:ae:0a:45:3a:0f:cb:49:74:91:b0:
45:1b:a3:87:f9:a4:d4:a7:0f:7d:20:d7:05:03:b6:72:f8:ad:
68:1d:b7:bc:4c:c2:43:89:17:8f:bc:a4:a8:6a:cc:53:c5:41:
da:7b:bc:9b:0d:c8:a5:47:69:58:b3:a5:b1:be:68:b7:3d:3f:
47:2f:af:ee:97:f3:b6:f3:a1:66:92:78:e6:d7:37:8f:89:ef:
db:dc:ad:c5:d4:69:49:23:81:af:6c:99:0e:c5:d0:3f:9f:1b:
7c:58:23:44:53:17:ed:a6:43:aa:dd:6b:bf:19:28:86:53:b6:
d8:22:d0:31
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Apr 16 13:54:24 2025 by rpki-client