Route Origin Authorization
$ rpki-client -vvf rpki-repo.as207960.net/repo/as207960-rpki-ca/10/323030313a3637383a6233343a3a2f34382d3438203d3e20323038303531.roa
File: 323030313a3637383a6233343a3a2f34382d3438203d3e20323038303531.roa (raw, json)
Hash identifier: Vr9gO++WKkHWk8jTYoNEWIVhWUwmnBGmitg2haOVGRM=
Subject key identifier: E4:31:36:B6:FA:BE:42:7E:5A:E2:D5:CC:85:17:4C:52:BD:F3:A4:6E
Certificate issuer: /CN=bffee0e560e86b1e1ced66ef20f4da963dceee58
Certificate serial: 49AC506BB9BAB0A4A205BEA71670FC56332655B4
Authority key identifier: BF:FE:E0:E5:60:E8:6B:1E:1C:ED:66:EF:20:F4:DA:96:3D:CE:EE:58
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/v_7g5WDoax4c7WbvIPTalj3O7lg.cer
Subject info access: rsync://rpki-repo.as207960.net/repo/as207960-rpki-ca/10/323030313a3637383a6233343a3a2f34382d3438203d3e20323038303531.roa
Signing time: Tue 06 Dec 2022 14:47:15 +0000
ROA not before: Tue 06 Dec 2022 14:42:15 +0000
ROA not after: Tue 05 Dec 2023 14:47:15 +0000
asID: 208051
IP address blocks: 2001:678:b34::/48 maxlen: 48
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
49:ac:50:6b:b9:ba:b0:a4:a2:05:be:a7:16:70:fc:56:33:26:55:b4
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=bffee0e560e86b1e1ced66ef20f4da963dceee58
Validity
Not Before: Dec 6 14:42:15 2022 GMT
Not After : Dec 5 14:47:15 2023 GMT
Subject: CN=E43136B6FABE427E5AE2D5CC85174C52BDF3A46E
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ba:8b:08:c7:54:a0:79:a2:23:c9:6c:9e:b6:21:
89:28:e2:98:e5:36:0c:bb:ab:81:0d:08:87:44:b9:
d1:5c:88:ed:0c:0d:fd:14:78:9c:a6:6e:59:64:47:
f8:77:35:3f:b0:67:6b:0e:64:fa:a8:7c:0e:4d:be:
40:46:47:d3:59:2a:9d:7f:f2:09:17:25:9a:de:25:
76:72:b2:44:03:34:fa:ba:34:96:f0:2a:d3:49:1e:
61:2c:ef:83:9a:6c:d8:4c:80:2e:e6:08:1b:cc:c0:
ba:64:08:c3:23:6a:a1:a7:79:6e:27:39:5d:15:b5:
da:ce:96:29:18:26:c2:1a:b5:48:5b:94:ca:11:51:
fa:32:1b:33:09:64:51:86:06:8e:a6:68:52:ae:46:
3e:19:64:da:04:8e:90:d2:61:8c:af:66:88:12:fb:
be:25:4d:ca:12:52:28:35:36:0f:3c:a1:93:25:37:
b0:3c:12:1a:08:eb:eb:29:1a:b3:cb:b1:47:de:46:
02:86:ce:01:ff:f3:50:4a:d6:3d:e5:8f:c1:d8:ec:
68:c0:6a:28:e5:e0:89:c7:5c:92:e0:44:4e:1b:f3:
3d:0f:4c:44:9b:04:ff:60:a2:d1:17:0b:5c:07:51:
76:05:a8:91:fe:10:41:33:fa:55:06:44:ca:9a:c0:
00:27
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E4:31:36:B6:FA:BE:42:7E:5A:E2:D5:CC:85:17:4C:52:BD:F3:A4:6E
X509v3 Authority Key Identifier:
keyid:BF:FE:E0:E5:60:E8:6B:1E:1C:ED:66:EF:20:F4:DA:96:3D:CE:EE:58
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-repo.as207960.net/repo/as207960-rpki-ca/10/BFFEE0E560E86B1E1CED66EF20F4DA963DCEEE58.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/v_7g5WDoax4c7WbvIPTalj3O7lg.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-repo.as207960.net/repo/as207960-rpki-ca/10/323030313a3637383a6233343a3a2f34382d3438203d3e20323038303531.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2001:678:b34::/48
Signature Algorithm: sha256WithRSAEncryption
2d:1b:1c:78:58:b0:f4:bf:ae:f0:c3:a4:19:aa:62:c9:93:b6:
7e:2e:af:8f:11:81:fb:63:a1:4f:e0:d9:7e:cc:ad:10:06:cb:
8c:f4:7a:26:95:d2:a3:4c:40:98:90:d0:a4:ae:65:d2:08:81:
4b:1b:18:19:ed:bc:3a:2f:65:83:82:7c:b2:c9:07:a6:01:65:
d4:cb:a5:7e:25:70:9b:25:78:b4:9a:e7:09:3a:ad:49:c9:86:
37:13:ca:31:39:71:36:6a:4c:2a:54:bf:f1:2b:f1:5f:7b:c3:
0c:b1:da:3c:68:47:b1:de:e6:55:42:61:55:b3:cb:8c:ff:7e:
74:69:32:43:47:6b:1c:49:c0:0e:f5:a1:94:38:41:ca:bf:6c:
08:29:09:f6:b0:f1:ff:4b:45:b4:70:8c:25:a0:2e:56:0c:e4:
57:ea:1d:14:c9:f6:54:ac:d0:fe:15:94:38:83:0a:52:46:38:
6e:63:76:38:bf:a4:a4:7c:9e:14:cc:ea:bc:b8:ad:49:b9:46:
f6:d4:b3:9d:ec:47:42:0f:ae:ef:e5:bc:8a:7f:47:88:95:f0:
44:5e:14:8f:56:6e:48:49:23:b2:b3:88:57:fd:38:db:ba:c6:
75:6f:ed:6e:76:77:ac:da:f9:5c:da:e0:d7:86:fd:69:23:5d:
63:35:96:76
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 16:38:16 2024 by rpki-client on console-fra.rpki-client.org