Route Origin Authorization
$ rpki-client -vvf rpki-repo.as207960.net/repo/as207960-rpki-ca/7/326131313a663263303a3a2f32392d3438203d3e20323037393630.roa
File: 326131313a663263303a3a2f32392d3438203d3e20323037393630.roa (raw, json)
Hash identifier: oO2BaSJ3x3A3chrIVqj01rIv+4lbSLCzSuvIA0Ua8tY=
Subject key identifier: 01:38:5F:AF:6A:3E:FF:6D:31:5D:3F:45:33:96:AA:43:13:ED:3E:20
Certificate issuer: /CN=99f58610ba131baaddf206f11447164205b23be4
Certificate serial: 0B451235DEA7DC78E06214DBE6FAE43749C9FC89
Authority key identifier: 99:F5:86:10:BA:13:1B:AA:DD:F2:06:F1:14:47:16:42:05:B2:3B:E4
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/mfWGELoTG6rd8gbxFEcWQgWyO-Q.cer
Subject info access: rsync://rpki-repo.as207960.net/repo/as207960-rpki-ca/7/326131313a663263303a3a2f32392d3438203d3e20323037393630.roa
Signing time: Tue 06 Dec 2022 14:47:15 +0000
ROA not before: Tue 06 Dec 2022 14:42:15 +0000
ROA not after: Tue 05 Dec 2023 14:47:15 +0000
asID: 207960
IP address blocks: 2a11:f2c0::/29 maxlen: 48
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
0b:45:12:35:de:a7:dc:78:e0:62:14:db:e6:fa:e4:37:49:c9:fc:89
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=99f58610ba131baaddf206f11447164205b23be4
Validity
Not Before: Dec 6 14:42:15 2022 GMT
Not After : Dec 5 14:47:15 2023 GMT
Subject: CN=01385FAF6A3EFF6D315D3F453396AA4313ED3E20
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bb:67:1d:ad:99:de:f0:a6:e3:02:bc:b2:45:b5:
5b:f2:3e:e9:b2:57:57:76:54:5a:5e:d2:94:c5:c3:
cf:43:42:71:38:7e:51:30:af:21:87:86:92:34:e1:
fa:c0:db:6a:f9:f4:30:e5:a4:b6:db:c9:a3:74:4c:
ce:ba:f9:e8:bb:4c:af:9d:93:c9:39:65:ae:4a:52:
25:3e:ee:ef:c6:87:5a:59:28:f9:a8:15:20:21:aa:
83:16:60:24:15:48:7e:40:27:5b:3a:c7:16:07:03:
17:37:27:71:5f:ed:64:ef:8e:76:b4:f2:9f:d9:3e:
3e:4b:36:6b:8b:c1:c1:0b:c6:04:5d:13:ec:10:58:
8c:65:dd:1d:5f:4e:51:16:11:fd:b9:ef:11:a9:6d:
e6:1f:fd:3e:99:21:67:07:0e:bd:f2:c4:1b:74:b5:
9e:64:92:42:38:78:66:5f:71:7d:eb:33:f7:23:2f:
76:43:f0:8c:d2:46:50:ec:31:96:f6:9b:c5:36:d2:
5c:8c:07:c3:ba:c9:36:f8:b8:69:2d:92:3a:fb:a1:
df:62:07:10:b9:d0:46:7f:06:af:1e:42:7b:c0:e2:
d1:63:e9:f1:ad:6f:f1:50:e2:67:ec:7e:77:a1:41:
bb:ad:e6:d1:00:ab:68:21:d9:f5:2c:02:4b:50:60:
dd:f5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
01:38:5F:AF:6A:3E:FF:6D:31:5D:3F:45:33:96:AA:43:13:ED:3E:20
X509v3 Authority Key Identifier:
keyid:99:F5:86:10:BA:13:1B:AA:DD:F2:06:F1:14:47:16:42:05:B2:3B:E4
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-repo.as207960.net/repo/as207960-rpki-ca/7/99F58610BA131BAADDF206F11447164205B23BE4.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/mfWGELoTG6rd8gbxFEcWQgWyO-Q.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-repo.as207960.net/repo/as207960-rpki-ca/7/326131313a663263303a3a2f32392d3438203d3e20323037393630.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a11:f2c0::/29
Signature Algorithm: sha256WithRSAEncryption
89:d9:a6:8d:15:88:5c:ec:f3:b5:0e:8f:b9:41:8e:ed:d7:3b:
9c:ea:67:c2:1c:fe:01:6f:6c:b5:46:8c:04:76:5a:a7:ac:b7:
c0:78:20:d9:3d:67:05:de:8d:44:52:7d:b9:37:4e:e7:9e:e5:
1a:00:07:73:37:bb:53:c9:2d:3d:e7:5f:f9:dc:65:f9:4d:fd:
75:ac:ea:7d:34:44:0a:a2:2b:42:51:54:72:67:68:9d:79:10:
b6:9d:c5:3b:ef:b1:f8:f6:ce:85:b8:ee:33:df:0a:4d:d5:2c:
db:f0:16:e3:59:8d:89:85:0c:37:4d:c3:b8:ad:62:9f:02:f7:
07:33:e7:1e:30:83:da:86:06:5a:99:3b:34:af:b8:ef:ea:d0:
bb:ca:40:bc:a6:1f:7c:6c:61:8d:51:8f:57:3a:9b:f7:be:99:
d7:47:d4:b6:5e:c1:81:c8:d0:27:4e:bc:9d:39:ee:5a:88:47:
58:63:51:c0:41:2f:e2:7e:c4:03:30:58:fe:14:95:bf:d0:98:
10:63:ab:d0:ce:db:06:21:ac:99:72:9f:05:92:93:31:48:4a:
a7:d4:60:ee:07:be:2e:86:22:2b:d9:9f:fa:fe:86:d4:23:15:
12:a6:57:fd:90:8e:d3:91:6a:ef:b8:50:6a:4c:ef:6b:c8:06:
17:e4:6c:3c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Feb 22 04:00:54 2025 by rpki-client