Route Origin Authorization
$ rpki-client -vvf rpki-repo.as207960.net/repo/as207960-rpki-ca/7/323030313a3637383a6663383a3a2f34382d3438203d3e20323037393630.roa
File: 323030313a3637383a6663383a3a2f34382d3438203d3e20323037393630.roa (raw, json)
Hash identifier: mZNIiIbS6dIpvIiRjfIHprHFQkH0IHRDlMOKLHOJE/E=
Subject key identifier: 3A:7E:7D:7A:5E:E2:80:CC:F1:66:54:BF:73:3C:E2:AC:14:89:8F:59
Certificate issuer: /CN=99f58610ba131baaddf206f11447164205b23be4
Certificate serial: 5BCB60B7BF2C6D92300887228CED58895684A7AF
Authority key identifier: 99:F5:86:10:BA:13:1B:AA:DD:F2:06:F1:14:47:16:42:05:B2:3B:E4
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/mfWGELoTG6rd8gbxFEcWQgWyO-Q.cer
Subject info access: rsync://rpki-repo.as207960.net/repo/as207960-rpki-ca/7/323030313a3637383a6663383a3a2f34382d3438203d3e20323037393630.roa
Signing time: Tue 06 Dec 2022 14:47:15 +0000
ROA not before: Tue 06 Dec 2022 14:42:15 +0000
ROA not after: Tue 05 Dec 2023 14:47:15 +0000
asID: 207960
IP address blocks: 2001:678:fc8::/48 maxlen: 48
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
5b:cb:60:b7:bf:2c:6d:92:30:08:87:22:8c:ed:58:89:56:84:a7:af
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=99f58610ba131baaddf206f11447164205b23be4
Validity
Not Before: Dec 6 14:42:15 2022 GMT
Not After : Dec 5 14:47:15 2023 GMT
Subject: CN=3A7E7D7A5EE280CCF16654BF733CE2AC14898F59
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b5:e6:3c:6d:dd:5d:eb:0d:fa:64:dc:bf:18:b4:
0a:d2:31:8b:ac:fd:b0:4d:7d:71:c8:df:d4:6b:c8:
62:09:c4:3c:fc:e1:1a:09:0f:c6:85:74:18:ea:c7:
16:77:87:78:0e:fc:15:d8:68:f5:83:47:01:17:e0:
44:42:de:f3:c0:82:f6:3c:d5:4a:ed:af:3e:1f:75:
60:80:f0:f4:34:6b:1a:7e:a8:f7:10:c2:fc:89:94:
f7:80:7b:40:db:67:c7:bc:ef:ab:76:5c:f2:8b:91:
3e:d7:a3:6d:88:89:32:b5:6a:dc:2f:11:a8:26:9f:
00:23:11:ad:07:15:c5:b8:d0:cc:31:7c:4d:b7:c6:
6d:26:46:11:30:bd:2c:aa:e8:08:a9:40:aa:d3:cd:
59:8b:02:12:43:c4:9e:49:e3:54:e0:c9:09:f7:27:
4f:af:f6:97:00:7d:f0:35:0d:43:3c:93:5c:05:d5:
22:d7:3f:d0:30:bb:bc:e8:b5:20:5d:c3:44:b8:7f:
68:1d:36:54:0e:59:89:66:d7:59:09:41:a9:3d:5d:
5f:72:ee:2a:82:c4:18:b3:80:0d:33:9c:19:72:0c:
d1:35:53:b6:9b:98:2b:a0:a0:69:01:16:57:c9:5c:
b5:1f:ba:4a:ac:6a:e2:15:d7:aa:d0:57:45:bd:d0:
49:bd
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
3A:7E:7D:7A:5E:E2:80:CC:F1:66:54:BF:73:3C:E2:AC:14:89:8F:59
X509v3 Authority Key Identifier:
keyid:99:F5:86:10:BA:13:1B:AA:DD:F2:06:F1:14:47:16:42:05:B2:3B:E4
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-repo.as207960.net/repo/as207960-rpki-ca/7/99F58610BA131BAADDF206F11447164205B23BE4.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/mfWGELoTG6rd8gbxFEcWQgWyO-Q.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-repo.as207960.net/repo/as207960-rpki-ca/7/323030313a3637383a6663383a3a2f34382d3438203d3e20323037393630.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2001:678:fc8::/48
Signature Algorithm: sha256WithRSAEncryption
09:d8:36:e8:cd:f4:06:ce:42:89:da:43:74:43:3e:9e:ae:64:
dd:32:43:5c:2c:c6:c3:d0:50:c9:07:9e:6a:bb:6e:26:fe:2f:
6d:13:6b:0e:c3:ee:28:4c:9e:e4:30:2c:b6:24:41:5a:e1:17:
c2:0a:0a:d5:bd:df:a8:41:3c:e5:82:b3:7d:50:6d:de:c2:b4:
c5:b3:a3:76:41:a6:7e:68:89:8a:a9:2d:7c:9e:bb:18:05:ec:
eb:d6:e1:90:f9:05:49:b6:d0:b6:f9:32:89:3f:17:c5:41:04:
b6:54:ef:e9:05:6d:64:b8:1b:4f:84:79:5e:7d:a8:ad:05:fe:
d4:98:5e:7d:f7:d6:3f:74:aa:e7:75:74:94:a5:89:4c:1f:bf:
39:d8:6e:3f:dc:d0:fa:27:a0:77:85:4b:7f:f9:67:ff:ad:42:
b7:a2:88:83:51:90:a1:7a:7a:ed:a9:1d:84:d0:c7:d1:23:c3:
71:75:20:3c:0c:89:07:fb:17:38:14:4d:e3:66:96:df:00:fb:
b2:c0:2f:84:84:7e:00:41:21:55:eb:13:f4:59:f6:1d:b1:03:
f8:23:42:89:5f:bc:9d:68:1e:8c:9e:8e:d6:8e:7c:26:32:bb:
7b:7c:c0:cc:9c:8b:3f:3f:cb:36:61:84:12:b3:4e:c1:a9:18:
62:2d:c3:fd
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Feb 22 04:07:54 2025 by rpki-client